chore(deps): bump the frontend-compatible group across 1 directory with 13 updates by dependabot[bot] · Pull Request #3195 · Xore/APIARY

dependabot · 2026-09-14T02:39:05Z

Bumps the frontend-compatible group with 13 updates in the /arcane/home/honeypot-dashboard/frontend-next directory:

Package	From	To
@tanstack/react-router	`1.170.32`	`1.170.35`
@tanstack/react-start	`1.168.49`	`1.168.52`
cytoscape	`3.34.2`	`3.34.3`
openid-client	`6.8.7`	`6.8.8`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.5`	`19.3.0`
undici	`8.10.0`	`8.10.2`
@playwright/test	`1.62.1`	`1.63.0`
@tanstack/router-cli	`1.167.33`	`1.167.35`
@types/node	`26.4.0`	`26.5.1`
vite	`8.2.2`	`8.3.0`

Updates @tanstack/react-router from 1.170.32 to 1.170.35

Release notes

Sourced from @tanstack/react-router's releases.

@tanstack/react-router@1.170.35

Patch Changes

#7824 8c43c71 - Upgrade TanStack Store to 0.11 and migrate router subscriptions to useSelector, preserving selector comparisons and Vue subscription cleanup.

@tanstack/react-router@1.170.34

Patch Changes

#8279 aee42c6 - Avoid allocating event-handler arrays and wrapper functions for links without user-supplied event handlers.

#8308 9c1871c - Validate navigation and redirect destinations, keep ambiguous relative URLs on the current origin, and constrain prerender requests and output paths. Prevent redirect headers from appearing in serialized server function response bodies.

Preserve native form HTTP redirects, route error handling and masks for document redirects, and per-navigation destinations for shared loader redirects. Avoid redundant origin parsing and reduce link styling and server-rendering work. Configured origins must already be normalized.

Keep blocked-link inactive props consistent during React hydration, honor explicit redirect Location headers before checking route options, and refresh Vue link state when destinations become internal. Reuse the protocol-relative URL check while parsing redirect schemes once.

Reduce React link bundle size by sharing pathname comparisons, state-prop selection, and element creation.

Share normalized pathname comparisons in Solid and Vue links to reduce bundle size.

#8311 9aec5a7 - React Links resolve state props without temporary class-name arrays or unnecessary style copies.

Updated dependencies [f9836f1, 9c1871c, 9871c06, 0654c0a]:

@tanstack/router-core@1.171.29

@tanstack/history@1.162.3

Changelog

Sourced from @tanstack/react-router's changelog.

1.170.35

Patch Changes

#7824 8c43c71 - Upgrade TanStack Store to 0.11 and migrate router subscriptions to useSelector, preserving selector comparisons and Vue subscription cleanup.

1.170.34

Patch Changes

#8279 aee42c6 - Avoid allocating event-handler arrays and wrapper functions for links without user-supplied event handlers.

#8308 9c1871c - Validate navigation and redirect destinations, keep ambiguous relative URLs on the current origin, and constrain prerender requests and output paths. Prevent redirect headers from appearing in serialized server function response bodies.

Preserve native form HTTP redirects, route error handling and masks for document redirects, and per-navigation destinations for shared loader redirects. Avoid redundant origin parsing and reduce link styling and server-rendering work. Configured origins must already be normalized.

Keep blocked-link inactive props consistent during React hydration, honor explicit redirect Location headers before checking route options, and refresh Vue link state when destinations become internal. Reuse the protocol-relative URL check while parsing redirect schemes once.

Reduce React link bundle size by sharing pathname comparisons, state-prop selection, and element creation.

Share normalized pathname comparisons in Solid and Vue links to reduce bundle size.

#8311 9aec5a7 - React Links resolve state props without temporary class-name arrays or unnecessary style copies.

Updated dependencies [f9836f1, 9c1871c, 9871c06, 0654c0a]:

@tanstack/router-core@1.171.29

@tanstack/history@1.162.3

1.170.33

Patch Changes

#8165 2f20c00 - Exclude structural descendants below error and not-found boundaries from route lifecycle callbacks. Preserve lifecycle membership through invalidation, hydration, background reloads, and superseded navigation publication.

#8209 28a5e45 - Preserve falsy thrown values in React and Vue error boundaries. Type React and Vue boundary error components and onCatch callbacks as unknown. Solid boundary errors remain typed as Error; SSR now wraps non-Error loader errors to match Solid’s native boundary behavior, preserving the original value in cause. Router state and loader onError values are unchanged.

When upgrading React or Vue, narrow boundary errors (for example, with error instanceof Error) before reading message or stack. ErrorComponentProps<TError> remains available for values narrowed to a specific error type. Route onError types are unchanged.

#8161 f0b5eda - Retain successful not-found matches as terminal shared boundaries during client navigation, preserving route context while the destination loads.

#8251 0497cae - Use URL.canParse for absolute URL checks in links, navigation, redirects, and build configuration. Preserve a URL constructor fallback for older browsers.

#8169 0caf6b9 - Fix route-scoped useMatch, useSearch, and useParams APIs to forward the shouldThrow option and preserve optional return types when shouldThrow: false.

#8257 cf166d1 - Fix repeated innerHTML writes for unchanged styles and data scripts during React re-renders. This prevents unnecessary CSS parsing and Trusted Types errors during client navigation.

Updated dependencies [edf0e16, 2f20c00, 28a5e45, 08eff50, 216c0c4, 2f91503, f0b5eda, 50eafca, 0497cae, ee28348, 9035abc, c18e690]:

@tanstack/router-core@1.171.28

@tanstack/history@1.162.2

Commits

6494e75 ci: Version Packages (#8330)
8c43c71 fix: upgrade TanStack Store to latest (#7824)
edeb199 ci: Version Packages (#8281)
9c1871c fix: harden URL handling across Router and Start (#8308)
9aec5a7 perf(react-router): avoid redundant Link state prop allocations (#8311)
49bcd4d chore: refresh Router and Start dependencies (#8300)
0f40695 test: cover existing navigation and redirect behavior (#8286)
aee42c6 perf(react-router): avoid unnecessary composed handlers (#8279)
a58e01c ci: Version Packages (#8182)
08eff50 fix(router-core): fix dangling references in published declarations (#8207)
Additional commits viewable in compare view

Updates @tanstack/react-start from 1.168.49 to 1.168.52

Release notes

Sourced from @tanstack/react-start's releases.

@tanstack/react-start@1.168.52

Patch Changes

Updated dependencies [8c43c71, d914b08]:

@tanstack/react-router@1.170.35

@tanstack/start-server-core@1.169.34

@tanstack/react-start-client@1.168.33

@tanstack/react-start-rsc@0.1.51

@tanstack/react-start-server@1.167.40

@tanstack/start-plugin-core@1.171.42

@tanstack/react-start@1.168.51

Patch Changes

Updated dependencies [aee42c6, 49bcd4d, 9c1871c, 9aec5a7, 919c397]:

@tanstack/react-router@1.170.34

@tanstack/router-utils@1.162.3

@tanstack/start-plugin-core@1.171.41

@tanstack/start-server-core@1.169.33

@tanstack/react-start-client@1.168.32

@tanstack/react-start-rsc@0.1.50

@tanstack/react-start-server@1.167.39

@tanstack/start-client-core@1.170.29

@tanstack/react-start@1.168.50

Patch Changes

Updated dependencies [2f20c00, 28a5e45, f0b5eda, 37877da, 0497cae, 0caf6b9, cf166d1]:

@tanstack/react-router@1.170.33

@tanstack/start-plugin-core@1.171.40

@tanstack/react-start-client@1.168.31

@tanstack/react-start-rsc@0.1.49

@tanstack/react-start-server@1.167.38

@tanstack/start-client-core@1.170.28

@tanstack/start-server-core@1.169.32

Changelog

Sourced from @tanstack/react-start's changelog.

1.168.52

Patch Changes

Updated dependencies [8c43c71, d914b08]:

@tanstack/react-router@1.170.35

@tanstack/start-server-core@1.169.34

@tanstack/react-start-client@1.168.33

@tanstack/react-start-rsc@0.1.51

@tanstack/react-start-server@1.167.40

@tanstack/start-plugin-core@1.171.42

1.168.51

Patch Changes

Updated dependencies [aee42c6, 49bcd4d, 9c1871c, 9aec5a7, 919c397]:

@tanstack/react-router@1.170.34

@tanstack/router-utils@1.162.3

@tanstack/start-plugin-core@1.171.41

@tanstack/start-server-core@1.169.33

@tanstack/react-start-client@1.168.32

@tanstack/react-start-rsc@0.1.50

@tanstack/react-start-server@1.167.39

@tanstack/start-client-core@1.170.29

1.168.50

Patch Changes

Updated dependencies [2f20c00, 28a5e45, f0b5eda, 37877da, 0497cae, 0caf6b9, cf166d1]:

@tanstack/react-router@1.170.33

@tanstack/start-plugin-core@1.171.40

@tanstack/react-start-client@1.168.31

@tanstack/react-start-rsc@0.1.49

@tanstack/react-start-server@1.167.38

@tanstack/start-client-core@1.170.28

@tanstack/start-server-core@1.169.32

Commits

6494e75 ci: Version Packages (#8330)
edeb199 ci: Version Packages (#8281)
49bcd4d chore: refresh Router and Start dependencies (#8300)
a58e01c ci: Version Packages (#8182)
See full diff in compare view

Updates cytoscape from 3.34.2 to 3.34.3

Release notes

Sourced from cytoscape's releases.

v3.34.3

Release version v3.34.3

Commits

716a1cb 3.34.3
367caa6 Build 3.34.3
22d297e Docs: Add 3.34.3 to versions.json
bd81234 Cherry pick to master: Merge pull request #3515 from sera-wi/feat/multiclickd...
See full diff in compare view

Updates openid-client from 6.8.7 to 6.8.8

Release notes

Sourced from openid-client's releases.

v6.8.8

Fixes

apply the default HTTP request timeout (af32783)

calculate token lifetimes using elapsed time (e816bf0)

isolate lazy client authentication handler caches (d687796)

passport: handle rejected async verification callbacks (d730f80)

preserve clock settings across DCR nonce retries (5433d68)

release: separate changelog sections (57fcbc6)

retain polling abort signals through response processing (b26170e)

select a unique decryption key when kid is omitted (10ba026)

Refactor

share grant polling lifecycle and retry handling (b931c40)

Changelog

Sourced from openid-client's changelog.

6.8.8 (2026-09-05)

Fixes

apply the default HTTP request timeout (af32783)

calculate token lifetimes using elapsed time (e816bf0)

isolate lazy client authentication handler caches (d687796)

passport: handle rejected async verification callbacks (d730f80)

preserve clock settings across DCR nonce retries (5433d68)

release: separate changelog sections (57fcbc6)

retain polling abort signals through response processing (b26170e)

select a unique decryption key when kid is omitted (10ba026)

Refactor

share grant polling lifecycle and retry handling (b931c40)

Commits

04c5982 chore(release): 6.8.8
5eccf2e chore: bump packages
d730f80 fix(passport): handle rejected async verification callbacks
b931c40 refactor: share grant polling lifecycle and retry handling
d687796 fix: isolate lazy client authentication handler caches
e816bf0 fix: calculate token lifetimes using elapsed time
10ba026 fix: select a unique decryption key when kid is omitted
b26170e fix: retain polling abort signals through response processing
af32783 fix: apply the default HTTP request timeout
5433d68 fix: preserve clock settings across DCR nonce retries
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDew... Description has been truncated

…th 13 updates Bumps the frontend-compatible group with 13 updates in the /arcane/home/honeypot-dashboard/frontend-next directory: | Package | From | To | | --- | --- | --- | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.32` | `1.170.35` | | [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start) | `1.168.49` | `1.168.52` | | [cytoscape](https://github.com/cytoscape/cytoscape.js) | `3.34.2` | `3.34.3` | | [openid-client](https://github.com/panva/openid-client) | `6.8.7` | `6.8.8` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.3.0` | | [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.10.2` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` | | [@tanstack/router-cli](https://github.com/TanStack/router/tree/HEAD/packages/router-cli) | `1.167.33` | `1.167.35` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.5.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` | Updates `@tanstack/react-router` from 1.170.32 to 1.170.35 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.35/packages/react-router) Updates `@tanstack/react-start` from 1.168.49 to 1.168.52 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-start@1.168.52/packages/react-start) Updates `cytoscape` from 3.34.2 to 3.34.3 - [Release notes](https://github.com/cytoscape/cytoscape.js/releases) - [Commits](cytoscape/cytoscape.js@v3.34.2...v3.34.3) Updates `openid-client` from 6.8.7 to 6.8.8 - [Release notes](https://github.com/panva/openid-client/releases) - [Changelog](https://github.com/panva/openid-client/blob/main/CHANGELOG.md) - [Commits](panva/openid-client@v6.8.7...v6.8.8) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.5 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `undici` from 8.10.0 to 8.10.2 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.10.0...v8.10.2) Updates `@playwright/test` from 1.62.1 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.1...v1.63.0) Updates `@tanstack/router-cli` from 1.167.33 to 1.167.35 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/router-cli/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/router-cli@1.167.35/packages/router-cli) Updates `@types/node` from 26.4.0 to 26.5.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.5 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `vite` from 8.2.2 to 8.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite) --- updated-dependencies: - dependency-name: "@tanstack/react-router" dependency-version: 1.170.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-compatible - dependency-name: "@tanstack/react-start" dependency-version: 1.168.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-compatible - dependency-name: cytoscape dependency-version: 3.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-compatible - dependency-name: openid-client dependency-version: 6.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-compatible - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-compatible - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-compatible - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-compatible - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-compatible - dependency-name: undici dependency-version: 8.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-compatible - dependency-name: "@playwright/test" dependency-version: 1.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-compatible - dependency-name: "@tanstack/router-cli" dependency-version: 1.167.35 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-compatible - dependency-name: "@types/node" dependency-version: 26.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-compatible - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-compatible - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-compatible - dependency-name: vite dependency-version: 8.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-compatible ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-14T02:39:06Z

Labels

The following labels could not be found: frontend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-09-14T02:39:23Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@oxc-project/types

0.149.0

Unknown

npm/@playwright/test

1.63.0

🟢 6.5

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) out of 30 and 6 issue activity out of 30 found in the last 90 days -- score normalized to 10
Code-Review	🟢 9	GitHub code reviews found for 29 commits out of the last 30 -- score normalized to 9
CII-Best-Practices	⚠️ 0	no badge detected
Vulnerabilities	🟢 10	no vulnerabilities detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	no published package detected
Token-Permissions	⚠️ 0	non read-only tokens detected in GitHub workflows
Binary-Artifacts	🟢 6	binaries present in source code
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/@rolldown/binding-android-arm-eabi

1.2.8

Unknown

npm/@rolldown/binding-android-arm64

1.2.8

Unknown

npm/@rolldown/binding-darwin-arm64

1.2.8

Unknown

npm/@rolldown/binding-darwin-x64

1.2.8

Unknown

npm/@rolldown/binding-freebsd-x64

1.2.8

Unknown

npm/@rolldown/binding-linux-arm-gnueabihf

1.2.8

Unknown

npm/@rolldown/binding-linux-arm64-gnu

1.2.8

Unknown

npm/@rolldown/binding-linux-arm64-musl

1.2.8

Unknown

npm/@rolldown/binding-linux-ppc64-gnu

1.2.8

Unknown

npm/@rolldown/binding-linux-s390x-gnu

1.2.8

Unknown

npm/@rolldown/binding-linux-x64-gnu

1.2.8

Unknown

npm/@rolldown/binding-linux-x64-musl

1.2.8

Unknown

npm/@rolldown/binding-openharmony-arm64

1.2.8

Unknown

npm/@rolldown/binding-win32-arm64-msvc

1.2.8

Unknown

npm/@rolldown/binding-win32-x64-msvc

1.2.8

Unknown

npm/@tanstack/history

1.162.3

Unknown

npm/@tanstack/react-router

1.170.35

Unknown

npm/@tanstack/react-start

1.168.52

Unknown

npm/@tanstack/react-start-client

1.168.33

Unknown

npm/@tanstack/react-start-rsc

0.1.51

Unknown

npm/@tanstack/react-start-server

1.167.40

Unknown

npm/@tanstack/react-store

0.11.1

Unknown

npm/@tanstack/router-cli

1.167.35

Unknown

npm/@tanstack/router-core

1.171.29

Unknown

npm/@tanstack/router-generator

1.167.35

Unknown

npm/@tanstack/router-plugin

1.168.37

Unknown

npm/@tanstack/router-utils

1.162.3

Unknown

npm/@tanstack/start-client-core

1.170.29

Unknown

npm/@tanstack/start-plugin-core

1.171.42

Unknown

npm/@tanstack/start-server-core

1.169.34

Unknown

npm/@tanstack/start-storage-context

1.167.31

Unknown

npm/@tanstack/store

0.11.1

Unknown

npm/@types/node

26.5.1

🟢 6.5

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	🟢 8	Found 26/30 approved changesets -- score normalized to 8
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Fuzzing	⚠️ 0	project is not fuzzed

npm/@types/react

19.3.0

🟢 6.5

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	🟢 8	Found 26/30 approved changesets -- score normalized to 8
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Fuzzing	⚠️ 0	project is not fuzzed

npm/@types/react-dom

19.3.0

🟢 6.5

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	🟢 8	Found 26/30 approved changesets -- score normalized to 8
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Fuzzing	⚠️ 0	project is not fuzzed

npm/cytoscape

3.34.3

🟢 5.1

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 9	security policy file detected
Code-Review	🟢 3	Found 2/6 approved changesets -- score normalized to 3
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Fuzzing	⚠️ 0	project is not fuzzed
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/fsevents

2.3.3

🟢 3.1

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 3	Found 7/22 approved changesets -- score normalized to 3
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/jose

6.2.12

🟢 7.5

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/27 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	🟢 10	all dependencies are pinned
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Fuzzing	🟢 10	project is fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
Signed-Releases	🟢 4	2 out of the last 4 releases have a total of 2 signed artifacts.
SAST	🟢 10	SAST tool is run on all commits

npm/nanoid

3.3.19

🟢 6.4

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 2/30 approved changesets -- score normalized to 0
Packaging	⚠️ -1	packaging workflow not detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Security-Policy	🟢 10	security policy file detected
Maintained	🟢 10	30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/oauth4webapi

3.8.8

Unknown

npm/openid-client

6.8.8

Unknown

npm/picomatch

4.0.7

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 5	Found 7/13 approved changesets -- score normalized to 5
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/playwright

1.63.0

🟢 6.5

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) out of 30 and 6 issue activity out of 30 found in the last 90 days -- score normalized to 10
Code-Review	🟢 9	GitHub code reviews found for 29 commits out of the last 30 -- score normalized to 9
CII-Best-Practices	⚠️ 0	no badge detected
Vulnerabilities	🟢 10	no vulnerabilities detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	no published package detected
Token-Permissions	⚠️ 0	non read-only tokens detected in GitHub workflows
Binary-Artifacts	🟢 6	binaries present in source code
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/playwright-core

1.63.0

🟢 6.5

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) out of 30 and 6 issue activity out of 30 found in the last 90 days -- score normalized to 10
Code-Review	🟢 9	GitHub code reviews found for 29 commits out of the last 30 -- score normalized to 9
CII-Best-Practices	⚠️ 0	no badge detected
Vulnerabilities	🟢 10	no vulnerabilities detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	no published package detected
Token-Permissions	⚠️ 0	non read-only tokens detected in GitHub workflows
Binary-Artifacts	🟢 6	binaries present in source code
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/postcss

8.5.28

🟢 7.4

Details

Check	Score	Reason
Code-Review	🟢 3	Found 11/30 approved changesets -- score normalized to 3
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 10	all dependencies are pinned
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/react

19.3.0

Unknown

npm/react-dom

19.3.0

Unknown

npm/rolldown

1.2.8

Unknown

npm/scheduler

0.28.0

Unknown

npm/undici

8.10.2

🟢 7.8

Details

Check	Score	Reason
Code-Review	🟢 5	Found 15/26 approved changesets -- score normalized to 5
Dependency-Update-Tool	🟢 10	update tool detected
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 8	binaries present in source code
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Signed-Releases	⚠️ -1	no releases found
Vulnerabilities	🟢 6	4 existing vulnerabilities detected
SAST	🟢 10	SAST tool is run on all commits
Packaging	🟢 10	packaging workflow detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	🟢 10	project is fuzzed
CI-Tests	🟢 10	19 out of 19 merged PRs checked by a CI test -- score normalized to 10
Contributors	🟢 10	project has 63 contributing companies or organizations

npm/undici-types

8.9.0

🟢 7.8

Details

Check	Score	Reason
Code-Review	🟢 5	Found 15/26 approved changesets -- score normalized to 5
Dependency-Update-Tool	🟢 10	update tool detected
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 8	binaries present in source code
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Signed-Releases	⚠️ -1	no releases found
Vulnerabilities	🟢 6	4 existing vulnerabilities detected
SAST	🟢 10	SAST tool is run on all commits
Packaging	🟢 10	packaging workflow detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	🟢 10	project is fuzzed
CI-Tests	🟢 10	19 out of 19 merged PRs checked by a CI test -- score normalized to 10
Contributors	🟢 10	project has 63 contributing companies or organizations

npm/use-sync-external-store

1.7.0

Unknown

npm/vite

8.3.0

🟢 7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Code-Review	🟢 9	Found 22/24 approved changesets -- score normalized to 9
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	🟢 7	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	⚠️ 1	binaries present in source code
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 10	SAST tool is run on all commits

npm/zod

4.6.2

🟢 5.4

Details

Check	Score	Reason
Security-Policy	🟢 10	security policy file detected
Code-Review	⚠️ 0	Found 1/28 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	🟢 5	dependency not pinned by hash detected -- score normalized to 5
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

arcane/home/honeypot-dashboard/frontend-next/package-lock.json

github-actions · 2026-09-14T02:39:27Z

Not auto-merging: this lockfile does not install under node:22-alpine's npm (the Dockerfile's own image), the recurring #2741 failure mode. Regenerate it under that image before merging -- see #2741's canonical command.

dependabot · 2026-09-21T02:36:42Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 14, 2026

dependabot Bot requested a review from Xore as a code owner September 14, 2026 02:39

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 14, 2026

dependabot Bot closed this Sep 21, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/arcane/home/honeypot-dashboard/frontend-next/frontend-compatible-a24a73e820 branch September 21, 2026 02:36

Navigation Menu

chore(deps): bump the frontend-compatible group across 1 directory with 13 updates - #3195

chore(deps): bump the frontend-compatible group across 1 directory with 13 updates#3195
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/arcane/home/honeypot-dashboard/frontend-next/frontend-compatible-a24a73e820

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​tanstack/react-router@​1.170.35

Patch Changes

@​tanstack/react-router@​1.170.34

Patch Changes

1.170.35

Patch Changes

1.170.34

Patch Changes

1.170.33

Patch Changes

@​tanstack/react-start@​1.168.52

Patch Changes

@​tanstack/react-start@​1.168.51

Patch Changes

@​tanstack/react-start@​1.168.50

Patch Changes

1.168.52

Patch Changes

1.168.51

Patch Changes

1.168.50

Patch Changes

v3.34.3

v6.8.8

Fixes

Refactor

6.8.8 (2026-09-05)

Fixes

Refactor

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Labels

Uh oh!

github-actions Bot commented Sep 14, 2026

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

`@tanstack/react-router@1`.170.35

`@tanstack/react-router@1`.170.34

`@tanstack/react-start@1`.168.52

`@tanstack/react-start@1`.168.51

`@tanstack/react-start@1`.168.50