Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 13 updates - #116

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-e217586c76
Closed

chore(deps): bump the production-dependencies group across 1 directory with 13 updates#116
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-e217586c76

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 13 updates in the / directory:

Package From To
@capacitor/core 8.5.1 8.5.2
@capacitor/ios 8.5.1 8.5.2
@tanstack/react-router 1.170.18 1.170.36
dexie 4.4.4 4.4.6
lucide-react 1.25.0 1.46.0
papaparse 5.5.4 5.7.0
radix-ui 1.6.4 1.6.7
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
recharts 3.10.0 3.10.1
sonner 2.0.7 2.0.8
tailwind-merge 3.6.0 3.7.0
zod 4.4.3 4.6.5

Updates @capacitor/core from 8.5.1 to 8.5.2

Release notes

Sourced from @​capacitor/core's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Changelog

Sourced from @​capacitor/core's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • See full diff in compare view

Updates @capacitor/ios from 8.5.1 to 8.5.2

Release notes

Sourced from @​capacitor/ios's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Changelog

Sourced from @​capacitor/ios's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • See full diff in compare view

Updates @tanstack/react-router from 1.170.18 to 1.170.36

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.36

Patch Changes

  • #8390 b747fb8 - Keep the Link location cache out of server bundles: buildLocation only creates, reads and writes it when isServer is false. Render React Links on the server without the extra prop copies and the forwarded-ref hook. Link SSR rendering is 20-40% faster in the Link benchmarks and the React Start SSR request loop about 7% faster.

    React activeProps and inactiveProps now follow one precedence rule on every link, including links whose destination is blocked for using a disallowed scheme: state props override element props, ref and event handlers, while href, disabled and target stay controlled by the router. Previously a blocked link ignored a ref or handler from its inactive props.

    React Link and useLinkProps split router options from element props with one key set on the client and the server. Element props pass through as given: external links forward them verbatim, falsy values included, and useLinkProps now returns children for router-controlled links as it already did for external ones.

  • #8324 6387d58 - Reuse hydration snapshot getters to avoid unnecessary store-instance effect updates when Links and other hydration-aware components rerender.

  • #8318 9b2adaf - Allow active and inactive Link props to override base element props in React and Solid while preserving class/style merging. Keep React's href, target, and disabled values controlled by routing options. Preserve Vue object and nested-array class bindings, including reactive updates and server rendering, without mutating cached bindings during VNode normalization.

  • #8327 634da91 - Make pathParamsAllowedCharacters initialization-only. Configure it when creating the router; changing allowed characters requires a new router instance. Remove decoder-update bookkeeping and decoder-change checks from route-owned path caches.

  • #8370 e9396c9 - Stop exporting the internal isPlainObject and isPlainArray helpers.

  • #8324 6387d58 - Avoid a redundant prop copy when rendering native Links while preserving custom-component props and the public hook result.

  • #8252 7e349c3 - Reduce the bundle cost of shared Link pathname interpolation while preserving its rendering performance. Reuse one interpolation pass for pathname and optional metadata, keep the bounded cache on the router, and simplify React Link active-state and prop merging.

  • #8370 e9396c9 - Reuse built locations for Links whose destination does not depend on the current location. buildLocation keeps the result per options object when the build never read the current location, and the React Link passes one stable options object per instance, so navigations resolve unchanged Links with a lookup instead of a full build. The per-route pathname interpolation cache this replaces is removed. Link params, search and activeOptions are compared by value on render, so inline object literals with unchanged contents keep reusing the Link's location. Pass a new object to change a destination; like any other React prop, an object mutated in place is not re-read.

  • Updated dependencies [d76a332, b747fb8, 6cfb1e8, 700a714, 700a714, 8fff7fa, f021f6d, ae68535, 7e349c3, 873c830, 7e349c3, 634da91, e9396c9, 634da91, f151ab0, bc57fa3, 9872d2a, d76a332, 634da91, 634da91, 7e349c3, 9448caa, e9396c9, 700a714, 634da91, 634da91]:

    • @​tanstack/router-core@​1.171.30
    • @​tanstack/history@​1.162.4
Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.36

Patch Changes

  • #8390 b747fb8 - Keep the Link location cache out of server bundles: buildLocation only creates, reads and writes it when isServer is false. Render React Links on the server without the extra prop copies and the forwarded-ref hook. Link SSR rendering is 20-40% faster in the Link benchmarks and the React Start SSR request loop about 7% faster.

    React activeProps and inactiveProps now follow one precedence rule on every link, including links whose destination is blocked for using a disallowed scheme: state props override element props, ref and event handlers, while href, disabled and target stay controlled by the router. Previously a blocked link ignored a ref or handler from its inactive props.

    React Link and useLinkProps split router options from element props with one key set on the client and the server. Element props pass through as given: external links forward them verbatim, falsy values included, and useLinkProps now returns children for router-controlled links as it already did for external ones.

  • #8324 6387d58 - Reuse hydration snapshot getters to avoid unnecessary store-instance effect updates when Links and other hydration-aware components rerender.

  • #8318 9b2adaf - Allow active and inactive Link props to override base element props in React and Solid while preserving class/style merging. Keep React's href, target, and disabled values controlled by routing options. Preserve Vue object and nested-array class bindings, including reactive updates and server rendering, without mutating cached bindings during VNode normalization.

  • #8327 634da91 - Make pathParamsAllowedCharacters initialization-only. Configure it when creating the router; changing allowed characters requires a new router instance. Remove decoder-update bookkeeping and decoder-change checks from route-owned path caches.

  • #8370 e9396c9 - Stop exporting the internal isPlainObject and isPlainArray helpers.

  • #8324 6387d58 - Avoid a redundant prop copy when rendering native Links while preserving custom-component props and the public hook result.

  • #8252 7e349c3 - Reduce the bundle cost of shared Link pathname interpolation while preserving its rendering performance. Reuse one interpolation pass for pathname and optional metadata, keep the bounded cache on the router, and simplify React Link active-state and prop merging.

  • #8370 e9396c9 - Reuse built locations for Links whose destination does not depend on the current location. buildLocation keeps the result per options object when the build never read the current location, and the React Link passes one stable options object per instance, so navigations resolve unchanged Links with a lookup instead of a full build. The per-route pathname interpolation cache this replaces is removed. Link params, search and activeOptions are compared by value on render, so inline object literals with unchanged contents keep reusing the Link's location. Pass a new object to change a destination; like any other React prop, an object mutated in place is not re-read.

  • Updated dependencies [d76a332, b747fb8, 6cfb1e8, 700a714, 700a714, 8fff7fa, f021f6d, ae68535, 7e349c3, 873c830, 7e349c3, 634da91, e9396c9, 634da91, f151ab0, bc57fa3, 9872d2a, d76a332, 634da91, 634da91, 7e349c3, 9448caa, e9396c9, 700a714, 634da91, 634da91]:

    • @​tanstack/router-core@​1.171.30
    • @​tanstack/history@​1.162.4

1.170.35

Patch Changes

  • #7824 8c43c71 - Upgrade TanStack Store to 0.11 and migrate router subscriptions to useSelector, preserving selector comparisons and Vue subscription cleanup.

1.170.34

Patch Changes

  • #8279 aee42c6 - Avoid allocating event-handler arrays and wrapper functions for links without user-supplied event handlers.

  • #8308 9c1871c - Validate navigation and redirect destinations, keep ambiguous relative URLs on the current origin, and constrain prerender requests and output paths. Prevent redirect headers from appearing in serialized server function response bodies.

    Preserve native form HTTP redirects, route error handling and masks for document redirects, and per-navigation destinations for shared loader redirects. Avoid redundant origin parsing and reduce link styling and server-rendering work. Configured origins must already be normalized.

    Keep blocked-link inactive props consistent during React hydration, honor explicit redirect Location headers before checking route options, and refresh Vue link state when destinations become internal. Reuse the protocol-relative URL check while parsing redirect schemes once.

    Reduce React link bundle size by sharing pathname comparisons, state-prop selection, and element creation.

    Share normalized pathname comparisons in Solid and Vue links to reduce bundle size.

... (truncated)

Commits
  • 6954a37 ci: Version Packages (#8355)
  • 92719bd perf(react-router): memoize Link and forward refs without an effect (#8405)
  • d740d8b perf(react-router): fewer hooks per Link (#8404)
  • f2ff324 refactor(react-router): one key set and one assembly path for Link props (#8401)
  • b747fb8 perf(router): keep the location cache client-only and slim Link SSR (#8390)
  • 465c85a fix(react-router): treat Link params and search as immutable inputs (#8380)
  • e9396c9 perf(router): reuse location-independent Link destinations (#8370)
  • 634da91 perf(router-core): streamline route initialization (#8327)
  • 6387d58 perf(react-router): reduce Link runtime allocations (#8324)
  • d76a332 perf(router-core): consolidate interpolation caches (#8321)
  • Additional commits viewable in compare view

Updates dexie from 4.4.4 to 4.4.6

Release notes

Sourced from dexie's releases.

Dexie v4.4.6

This is a maintenance release that improves schema synchronization in dexie-cloud-addon, fixes an issue with updating hooks in the minified production bundle, fixes filtered chunked exports in dexie-export-import, and adds OAuth provider types for Facebook, LinkedIn, and Discord.

Related Package Releases

Package Version
dexie 4.4.6
dexie-cloud-addon 4.4.15
dexie-react-hooks 4.4.0+ (no change)
y-dexie 4.4.0+ (no change)
dexie-export-import 4.4.1

Bug Fixes

dexie@4.4.6

  • fix: keep updating-hook modifications intact in minified production bundles — Multiple updating-hook subscribers now reliably receive the record modifications object when using the minified production build. (#2333, fixes #2330). Contributed by @​Tyagiquamar.

dexie-cloud-addon@4.4.15

  • fix: resync tables added to the schema — Tables that are new to a client are now detected by comparing the declared cloud schema with the schema persisted from earlier syncs. They are marked for an initial synchronization so their current contents are full-loaded, while pending sync state is preserved until completion is acknowledged by the server. (#2332, fixes dexie-cloud#205).

  • feat: include additional social provider types — Added Facebook, LinkedIn, and Discord to OAuthProviderInfo. (#2327).

dexie-export-import@4.4.1

  • fix: avoid trailing commas in filtered chunked exports — exportDB() no longer produces invalid JSON when a later chunk contains no rows matching the active filter. (#2328, fixes #1070). Contributed by @​buildwithakhila.

Thanks to @​Tyagiquamar and @​buildwithakhila for their contributions.

Dexie v4.4.5

This is a maintenance release that fixes an issue with indexes named after inherited Object properties and improves authentication recovery in dexie-cloud-addon.

Related Package Releases

Package Version
dexie 4.4.5
dexie-cloud-addon 4.4.14+
dexie-react-hooks 4.4.0+ (no change)
y-dexie 4.4.0+ (no change)
dexie-export-import 4.4.0+ (no change)

Bug Fixes

dexie@4.4.5

  • fix: don't crash when an index is named constructor — Tables with a primary key or index named constructor could cause db.open() to fail with TypeError: indexList.push is not a function. The internal index lookup now uses an object without a prototype, avoiding collisions with inherited Object.prototype properties such as constructor, toString, and valueOf. (#2325, fixes #1920). Contributed by @​tarann26.

... (truncated)

Commits
  • adc6f50 dexie@4.4.6
  • 22798e9 Remove package-lock files. We're using pnpm!
  • 58d1afe dexie-export-import@4.4.1
  • 0cd6f42 fix(updating hook): keep modifications intact in minified bundle (#2333)
  • 0fa2b84 dexie-cloud-addon@4.4.15
  • 1e01299 fix(dexie-cloud): resync tables added to the schema (#2332)
  • 32ad221 fix(dexie-export-import): don't emit a trailing comma when a chunk is fully f...
  • 51c138b fix(dexie-cloud): include new social provider types (#2327)
  • 4df3823 npm audit fix on samples/dexie-cloud-todo-app
  • 22bdff1 dexie@4.4.5
  • Additional commits viewable in compare view

Updates lucide-react from 1.25.0 to 1.46.0

Release notes

Sourced from lucide-react's releases.

Version 1.46.0

What's Changed

Full Changelog: lucide-icons/lucide@1.45.0...1.46.0

Version 1.45.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Version 1.44.0

What's Changed

... (truncated)

Commits
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates papaparse from 5.5.4 to 5.7.0

Release notes

Sourced from papaparse's releases.

5.7.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

Add the `downloadTimeout` option to abort slow remote requests after a configurable duration (https://github.com/mholt/PapaParse/pull/1138)

Thanks @​Kocayilmaz for contributing it

5.6.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

  • Remove jQuery as dependency (#1137)

Thanks @​Kocayilmaz for contributing it

Changelog

Sourced from papaparse's changelog.

5.7.0

Features

  • Add the downloadTimeout option to abort slow remote requests after a configurable duration (#1138, #786)

5.6.1

Bug Fixes

  • Call transformHeader only once per header in streaming mode (#1130)
  • Prevent header de-duplication from running again after resuming parsing (#1135)

5.6.0

Features

  • Remove the optional jQuery plugin integration (#1137)

5.5.5

Bug Fixes

  • Improve automatic delimiter detection by prioritizing row consistency over field count (#1128, #1077)
  • Serialize dates with Date.toISOString(), preserving expanded years and writing invalid dates as empty fields (#1140)
Commits
  • 555c1c1 Minor version bump
  • a5cc2dc Patch version bump
  • 29e3a09 Add downloadTimeout option to abort slow remote requests (#1138)
  • 2e20001 Use tabs for identation on comment
  • b98bd0e Simplify comments
  • a869cd9 Fix header de-duplication re-running on every resumed row (#1135)
  • b3b6a64 Remove coment describing old behaviour
  • 8dd3318 call transformHeader once per header in streaming mode (#1130)
  • e6c2b7b Update CHANGELOG
  • bc382b7 Minor version bump
  • Additional commits viewable in compare view

Updates radix-ui from 1.6.4 to 1.6.7

Changelog

Sourced from radix-ui's changelog.

1.6.6, 1.6.7

  • Reverted breaking changes that caused compatibility issues with React Server Components.

1.6.5

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
Commits

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

ReactDescription has been truncated

Summary by CodeRabbit

  • Chores
    • Updated the application’s underlying platform components and supporting libraries.
    • Refreshed compatibility support for the latest React ecosystem tooling.
    • No changes to exported features or user-facing functionality.

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
32e42be 
…y with 13 updates

Bumps the production-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@capacitor/core](https://github.com/ionic-team/capacitor) | `8.5.1` | `8.5.2` |
| [@capacitor/ios](https://github.com/ionic-team/capacitor) | `8.5.1` | `8.5.2` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.18` | `1.170.36` |
| [dexie](https://github.com/dexie/Dexie.js) | `4.4.4` | `4.4.6` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.46.0` |
| [papaparse](https://github.com/mholt/PapaParse) | `5.5.4` | `5.7.0` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.4` | `1.6.7` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [recharts](https://github.com/recharts/recharts) | `3.10.0` | `3.10.1` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |



Updates `@capacitor/core` from 8.5.1 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.1...8.5.2)

Updates `@capacitor/ios` from 8.5.1 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.1...8.5.2)

Updates `@tanstack/react-router` from 1.170.18 to 1.170.36
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.36/packages/react-router)

Updates `dexie` from 4.4.4 to 4.4.6
- [Release notes](https://github.com/dexie/Dexie.js/releases)
- [Commits](dexie/Dexie.js@v4.4.4...v4.4.6)

Updates `lucide-react` from 1.25.0 to 1.46.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.46.0/packages/lucide-react)

Updates `papaparse` from 5.5.4 to 5.7.0
- [Release notes](https://github.com/mholt/PapaParse/releases)
- [Changelog](https://github.com/mholt/PapaParse/blob/master/CHANGELOG.md)
- [Commits](mholt/PapaParse@5.5.4...5.7.0)

Updates `radix-ui` from 1.6.4 to 1.6.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `recharts` from 3.10.0 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.10.0...v3.10.1)

Updates `sonner` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](emilkowalski/sonner@v2.0.7...v2.0.8)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

---
updated-dependencies:
- dependency-name: "@capacitor/core"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@capacitor/ios"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dexie
  dependency-version: 4.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: papaparse
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: radix-ui
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 17, 2026
@coderabbitai

coderabbitai Bot commented Sep 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Review Change StackReview Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 86156957-7911-452d-883b-14b190216319

📥 Commits

Reviewing files that changed from the base of the PR and between 99b3d2a and 32e42be.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (1)
  • package.json

Included review availability: Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

Walkthrough

The pull request updates runtime dependency versions in package.json, including Capacitor, routing, React, UI, data, and utility packages. It also updates the React and React DOM type packages to version 19.3.0.

Changes

Dependency Updates

Layer / File(s) Summary
Package version alignment
package.json		 Updated runtime dependencies and React type packages to newer versions, including Capacitor 8.5.2, TanStack React Router 1.170.36, and React type packages 19.3.0.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Suggested reviewers: cbangera2

Merge Risk: ⚪ Minimal · up to 32e42

The dependency updates are aligned with the lockfile and React packages, so the change is ready to merge with normal checks.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately and concisely describes the changes: it identifies a dependency maintenance update, the production-dependencies group, one directory, and 13 updates.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/production-dependencies-e217586c76

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Sep 24, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 24, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-e217586c76 branch September 24, 2026 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants