Skip to content

chore(deps): bump the frontend-dependencies group in /frontend with 10 updates - #152

Merged
mortenoh merged 2 commits into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-dependencies-ef4d38e9aa
Oct 28, 2026
Merged

chore(deps): bump the frontend-dependencies group in /frontend with 10 updates#152
mortenoh merged 2 commits into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-dependencies-ef4d38e9aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-dependencies group in /frontend with 10 updates:

Package From To
@codemirror/autocomplete 6.20.3 6.20.4
@codemirror/view 6.43.14 6.43.15
@tanstack/react-query 5.104.4 5.104.5
lucide-react 1.59.0 1.61.0
maplibre-gl 6.14.0 6.15.0
react-resizable-panels 4.14.5 4.14.8
shadcn 4.22.0 4.22.1
monocart-coverage-reports 2.13.2 3.0.0
oxlint 1.88.0 1.89.0
vite 8.3.4 8.3.5

Updates @codemirror/autocomplete from 6.20.3 to 6.20.4

Commits

Updates @codemirror/view from 6.43.14 to 6.43.15

Commits

Updates @tanstack/react-query from 5.104.4 to 5.104.5

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5
    • @​tanstack/query-devtools@​5.104.5

@​tanstack/react-query-next-experimental@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5

@​tanstack/react-query-persist-client@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5
    • @​tanstack/query-persist-client-core@​5.104.5

@​tanstack/react-query@​5.104.5

Patch Changes

  • #12117 1f8d134 - Recompute useMutationState and useIsMutating results when their filters, selector, or query client change, without waiting for a mutation cache update.
  • Updated dependencies [f608f93]:
    • @​tanstack/query-core@​5.104.5
Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.5

Patch Changes

  • #12117 1f8d134 - Recompute useMutationState and useIsMutating results when their filters, selector, or query client change, without waiting for a mutation cache update.
  • Updated dependencies [f608f93]:
    • @​tanstack/query-core@​5.104.5
Commits

Updates lucide-react from 1.59.0 to 1.61.0

Release notes

Sourced from lucide-react's releases.

Version 1.61.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

Version 1.60.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

Commits
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • See full diff in compare view

Updates maplibre-gl from 6.14.0 to 6.15.0

Release notes

Sourced from maplibre-gl's releases.

v6.15.0

✨ Features and improvements

  • Add dragRotate: {around: 'pointer'} to turn and tilt the map around the point under the pointer, and {around: 'center', movement: 'circular' | 'linear'}, which replaces the deprecated aroundCenter (#8628) (by @​birkskyum)
  • Redraw fewer layers on terrain when a custom layer's terrainTileRevision or a feature state changes (#8782) (by @​birkskyum)
  • Support the hash option in a projection registered with addProjection (#8743) (by @​birkskyum)
  • Add experimental addProjection, removeProjection, a built-in identity projection and a {bbox} tile URL token for maps in a custom planar CRS with its own quad tile grid (#168, #5764)
  • Speed up tile loading by skipping point labels in the tile buffer, which the neighbouring tile draws (#8535) (by @​cherenkov)
  • Project GeoJSON sources on a map in a registered CRS, in the workers, from a definition string and a projection handler (#8736) (by @​johncarmack1984)
  • Support OpenType vert forms in vertical labels rendered with font-faces (#8489) (by @​NEKOYASAN)

🐞 Bug fixes

  • Fix a map in a registered projection going blank when its center crosses 180° (#8802) (by @​birkskyum)
  • Fix world projections like Equal Earth throwing and jumping when the mouse is in the space around the world (#8803) (by @​birkskyum)
  • Work around a regression in Safari 26.6 and later where the map stops loading tiles after the page was in the background (#8780) (by @​birkskyum)
  • Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu mixing fonts or dropping letters when the style has a glyphs URL (#8741) (by @​crackalamoo)
  • Fix setWorkerUrl treating a .cjs fragment or query marker as a module worker URL (#8769) (by @​Anandb71)
  • Fix the terrain not finding a tile's own DEM data when the DEM source's maxzoom is below the terrain tile zoom (#8765) (by @​johncarmack1984)
  • Fix the camera dropping to sea level while the terrain under the center of a jumpTo, easeTo or flyTo loads (#8549) (by @​johncarmack1984)
  • Fix a grid of lines along tile borders in line layers of sliced overzoomed tiles when the source tile extent is larger than 4096, by scaling the clip buffer with the extent (#8705) (by @​tordans)
  • Fix the globe drag rounding its rotation to single precision (#8784) (by @​johncarmack1984)
  • Fix load and idle firing before the other tiles finish loading when one tile fails (#8785) (by @​johncarmack1984)
  • Avoid using .innerHTML = … for the Popup close icon (#8795) (by @​k-yle)
  • Fix a GeoJSON feature without coordinates staying out of the tiles after updateData gives it some, by updating geojson-vt to 6.3.0 (#8797) (by @​johncarmack1984)
Changelog

Sourced from maplibre-gl's changelog.

6.15.0

✨ Features and improvements

  • Add dragRotate: {around: 'pointer'} to turn and tilt the map around the point under the pointer, and {around: 'center', movement: 'circular' | 'linear'}, which replaces the deprecated aroundCenter (#8628) (by @​birkskyum)
  • Redraw fewer layers on terrain when a custom layer's terrainTileRevision or a feature state changes (#8782) (by @​birkskyum)
  • Support the hash option in a projection registered with addProjection (#8743) (by @​birkskyum)
  • Add experimental addProjection, removeProjection, a built-in identity projection and a {bbox} tile URL token for maps in a custom planar CRS with its own quad tile grid (#168, #5764)
  • Speed up tile loading by skipping point labels in the tile buffer, which the neighbouring tile draws (#8535) (by @​cherenkov)
  • Project GeoJSON sources on a map in a registered CRS, in the workers, from a definition string and a projection handler (#8736) (by @​johncarmack1984)
  • Support OpenType vert forms in vertical labels rendered with font-faces (#8489) (by @​NEKOYASAN)

🐞 Bug fixes

  • Fix a map in a registered projection going blank when its center crosses 180° (#8802) (by @​birkskyum)
  • Fix world projections like Equal Earth throwing and jumping when the mouse is in the space around the world (#8803) (by @​birkskyum)
  • Work around a regression in Safari 26.6 and later where the map stops loading tiles after the page was in the background (#8780) (by @​birkskyum)
  • Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu mixing fonts or dropping letters when the style has a glyphs URL (#8741) (by @​crackalamoo)
  • Fix setWorkerUrl treating a .cjs fragment or query marker as a module worker URL (#8769) (by @​Anandb71)
  • Fix the terrain not finding a tile's own DEM data when the DEM source's maxzoom is below the terrain tile zoom (#8765) (by @​johncarmack1984)
  • Fix the camera dropping to sea level while the terrain under the center of a jumpTo, easeTo or flyTo loads (#8549) (by @​johncarmack1984)
  • Fix a grid of lines along tile borders in line layers of sliced overzoomed tiles when the source tile extent is larger than 4096, by scaling the clip buffer with the extent (#8705) (by @​tordans)
  • Fix the globe drag rounding its rotation to single precision (#8784) (by @​johncarmack1984)
  • Fix load and idle firing before the other tiles finish loading when one tile fails (#8785) (by @​johncarmack1984)
  • Avoid using .innerHTML = … for the Popup close icon (#8795) (by @​k-yle)
  • Fix a GeoJSON feature without coordinates staying out of the tiles after updateData gives it some, by updating geojson-vt to 6.3.0 (#8797) (by @​johncarmack1984)
Commits
  • 638b3f9 Bump js version to 6.15.0 (#8812)
  • ddf4cc6 Fix registered projections going blank when the center crosses 180° (#8802)
  • c8e4e34 fix: world projections throwing and wrapping past their edge (#8803)
  • 7ec7535 first step towards supporting trusted-types (#8795)
  • fc1aa1c docs: separate a registered CRS from the tile grid its sources are cut in (#8...
  • 1897306 feat: support dragRotate around pointer (#8628)
  • 17ad56d docs: show how custom layers place positions on a registered CRS (#8806)
  • fe33962 fix: keep GeoJSON at the far pole of a polar projection off the map (#8798)
  • 17eb78b chore: bump @​maplibre/geojson-vt to 6.3.0 and pass its coordinates and wrap o...
  • 6c2784f refactor: rename CRSDefinition to CRS and its wkt to definition (#8787)
  • Additional commits viewable in compare view

Updates react-resizable-panels from 4.14.5 to 4.14.8

Release notes

Sourced from react-resizable-panels's releases.

4.14.8

  • Fix "Stacking order can only be calculated for elements with a common ancestor" error thrown by the document pointermove handler when the event target is removed from the DOM during dispatch. Detached targets are now treated as viable hit targets. - #771
  • Fix Group and Grid setLayout() and Panel resize(), collapse(), and expand() validating against pixel-based constraints for the previous group size when called before the group's ResizeObserver ran (e.g. from an application's own ResizeObserver). - #770

4.14.7

  • Improve mount performance for groups with many panels by skipping redundant constraint recalculations and subscriber notifications when a Panel's disabled prop has not changed. - #768

4.14.6

  • Fix F6 and Shift+F6 keyboard navigation trying to focus disabled separators. Disabled separators are now skipped. - #767
Changelog

Sourced from react-resizable-panels's changelog.

4.14.8

  • Fix "Stacking order can only be calculated for elements with a common ancestor" error thrown by the document pointermove handler when the event target is removed from the DOM during dispatch. Detached targets are now treated as viable hit targets. - #771
  • Fix Group and Grid setLayout() and Panel resize(), collapse(), and expand() validating against pixel-based constraints for the previous group size when called before the group's ResizeObserver ran (e.g. from an application's own ResizeObserver). - #770

4.14.7

  • Improve mount performance for groups with many panels by skipping redundant constraint recalculations and subscriber notifications when a Panel's disabled prop has not changed. - #768

4.14.6

  • Fix F6 and Shift+F6 keyboard navigation trying to focus disabled separators. Disabled separators are now skipped. - #767
Commits
  • c19f0a9 4.14.7 -> 4.14.8
  • 625ef2d Validate imperative layout changes against the group's current size (#772)
  • 64c5be9 Fix "Stacking order can only be calculated for elements with a common ancesto...
  • da1f5c1 4.14.6 -> 4.14.7
  • c843397 perf: skip unchanged panel prop updates (#768)
  • bb08b87 Update react-lib-tools to 0.0.67
  • bbc47aa 4.14.5 -> 4.14.6
  • 90cb7a4 Tidying up
  • c8367d2 Skip disabled separators during F6 keyboard navigation (#767)
  • 4b6332a Update react-lib-tools dev dependency
  • See full diff in compare view

Updates shadcn from 4.22.0 to 4.22.1

Release notes

Sourced from shadcn's releases.

shadcn@4.22.1

Patch Changes

  • #12360 4381eeb Thanks @​shadcn! - Fix shadcn add --all and the component picker to only include components available for the project's style.
Changelog

Sourced from shadcn's changelog.

4.22.1

Patch Changes

  • #12360 4381eeb Thanks @​shadcn! - Fix shadcn add --all and the component picker to only include components available for the project's style.
Commits

Updates monocart-coverage-reports from 2.13.2 to 3.0.0

Release notes

Sourced from monocart-coverage-reports's releases.

3.0.0

What's Changed

  • Migration guide: upgrading from 2.x to 3.x
  • Breaking Changes
    • require Node.js >= 22.15.0
    • migrate to ESM only; replace the callable require('monocart-coverage-reports') entry with default/named imports, or dynamic import() from CommonJS
    • use export default in ESM config files; rename existing CommonJS configs to .cjs (still supported)
    • loadConfig() throws on missing explicit configs or loading errors
    • load external reporters and CLI preloads with native ESM import() only; CJS interoperability is handled by Node without a separate loader; local file extensions are required and --require is a deprecated alias for --import
    • require ./ or ../ prefixes for relative reporter file paths, with explicit file extensions; names such as test/custom-v8-reporter.js are treated as package specifiers instead of falling back to local files; absolute paths and file: URLs remain supported
    • replace foreground-child with execa for CLI command execution, preserving argument boundaries without enabling shell mode; shell command strings, pipes and redirections are no longer interpreted by MCR
    • apply a default 30000ms total deadline to HTTP helper requests; timeout covers both response headers and body transfer, and 0 disables the deadline
  • Features
    • use synchronous module.registerHooks() for source capture, including CommonJS modules loaded through require() and createRequire()
    • add outputFilter to filter final V8 results by sourcePath, including converted Istanbul reports (#132)
    • add mcr test with the native Node.js test runner and automatic coverage reports
    • support config/CLI test targets and Node runner arguments after --
    • add configurable CDP command timeouts (requestTimeout, default 30000ms; 0 disables the deadline)
    • expose CoverageClient as a named export and as MCR.CoverageClient
    • ship an AI agent skill for MCR 3.x with collection, filtering, reporting, and validated CI/shard-merging recipes
  • Bug Fixes
    • generate coverage after failed tests and preserve test/report failure exit codes
    • preserve config error details and original causes, including non-Error throws
    • propagate V8/both custom reporter loading and initialization failures instead of silently skipping the reporter
    • normalize local CLI preload paths and escape paths in NODE_OPTIONS
    • propagate concurrency task failures and drain in-flight work before queue cleanup
    • settle HTTP requests on timeout, cancellation or premature response closure and release their connections
    • retry localhost requests through IPv4 only on connection refusal, not on HTTP errors, JSON parsing failures, timeouts or cancellation
    • reject pending WebSocket commands on disconnect or detach, clean up request timers, and propagate CDP protocol errors
    • terminate stalled CDP WebSocket handshakes and apply the connection timeout to HTTP debugger discovery
  • Performance
    • defer untested source reads until after filtering when source-path callbacks do not need the source
    • avoid intermediate arrays when finding enclosing covered blocks
    • initialize GC only on demand without installing host globals, and skip unnecessary memory sampling
  • Maintenance
    • add Open Graph/Twitter Card metadata and a social preview image to the docs site, with a Playwright-based image generator (#133)
    • remove obsolete Node.js version checks from test builds
    • clarify custom reporter interfaces and the meaning of the both report type in English and Chinese docs
    • align English/Chinese TypeScript transformation and strict threshold examples
    • lint README JavaScript examples with the project ESLint rules via lint:readme, including autofix and paired exclusion markers that preserve highlighting for nonstandard demonstrations

New Contributors

Full Changelog: cenfun/monocart-coverage-reports@v2.13.2...v3.0.0

Changelog

Sourced from monocart-coverage-reports's changelog.

  • 3.0.0
    • Migration guide: upgrading from 2.x to 3.x
    • Breaking Changes
      • require Node.js >= 22.15.0
      • migrate to ESM only; replace the callable require('monocart-coverage-reports') entry with default/named imports, or dynamic import() from CommonJS
      • use export default in ESM config files; rename existing CommonJS configs to .cjs (still supported)
      • loadConfig() throws on missing explicit configs or loading errors
      • load external reporters and CLI preloads with native ESM import() only; CJS interoperability is handled by Node without a separate loader; local file extensions are required and --require is a deprecated alias for --import
      • require ./ or ../ prefixes for relative reporter file paths, with explicit file extensions; names such as test/custom-v8-reporter.js are treated as package specifiers instead of falling back to local files; absolute paths and file: URLs remain supported
      • replace foreground-child with execa for CLI command execution, preserving argument boundaries without enabling shell mode; shell command strings, pipes and redirections are no longer interpreted by MCR
      • apply a default 30000ms total deadline to HTTP helper requests; timeout covers both response headers and body transfer, and 0 disables the deadline
    • Features
      • use synchronous module.registerHooks() for source capture, including CommonJS modules loaded through require() and createRequire()
      • add outputFilter to filter final V8 results by sourcePath, including converted Istanbul reports (#132)
      • add mcr test with the native Node.js test runner and automatic coverage reports
      • support config/CLI test targets and Node runner arguments after --
      • add configurable CDP command timeouts (requestTimeout, default 30000ms; 0 disables the deadline)
      • expose CoverageClient as a named export and as MCR.CoverageClient
      • ship an AI agent skill for MCR 3.x with collection, filtering, reporting, and validated CI/shard-merging recipes
    • Bug Fixes
      • generate coverage after failed tests and preserve test/report failure exit codes
      • preserve config error details and original causes, including non-Error throws
      • propagate V8/both custom reporter loading and initialization failures instead of silently skipping the reporter
      • normalize local CLI preload paths and escape paths in NODE_OPTIONS
      • propagate concurrency task failures and drain in-flight work before queue cleanup
      • settle HTTP requests on timeout, cancellation or premature response closure and release their connections
      • retry localhost requests through IPv4 only on connection refusal, not on HTTP errors, JSON parsing failures, timeouts or cancellation
      • reject pending WebSocket commands on disconnect or detach, clean up request timers, and propagate CDP protocol errors
      • terminate stalled CDP WebSocket handshakes and apply the connection timeout to HTTP debugger discovery
    • Performance
      • defer untested source reads until after filtering when source-path callbacks do not need the source
      • avoid intermediate arrays when finding enclosing covered blocks
      • initialize GC only on demand without installing host globals, and skip unnecessary memory sampling
    • Maintenance
      • add Open Graph/Twitter Card metadata and a social preview image to the docs site, with a Playwright-based image generator (#133)
      • remove obsolete Node.js version checks from test builds
      • clarify custom reporter interfaces and the meaning of the both report type in English and Chinese docs
      • align English/Chinese TypeScript transformation and strict threshold examples
      • lint README JavaScript examples with the project ESLint rules via lint:readme, including autofix and paired exclusion markers that preserve highlighting for nonstandard demonstrations

For 2.x and 1.x changelogs, see GitHub Releases.

Commits

Updates oxlint from 1.88.0 to 1.89.0

Release notes

Sourced from oxlint's releases.

oxlint v1.89.0

💥 BREAKING CHANGES

  • e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)
  • a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

  • 770ada4 linter: Mark vue 3 rules as recommended (#27717) (Cam McHenry)
  • ba38c1d linter: Mark react/react-hooks rules as recommended (#27701) (Cam McHenry)
  • d85a3ba linter: Mark promise rules as recommended (#27693) (Cam McHenry)
  • e71c88a linter: Mark node rule as recommended (#27692) (Cam McHenry)
  • 7213f61 linter: Mark nextjs rules as recommended (#27691) (Cam McHenry)
  • d7c6b26 linter: Mark jsx-a11y rules as recommended (#27690) (Cam McHenry)
  • 199dfdc linter: Mark jsdoc rules as recommended (#27689) (Cam McHenry)
  • 780bff3 linter: Mark jest/vitest rules as recommended (#27672) (Cam McHenry)
  • 6ae6859 linter: Mark import rules as recommended (#27671) (Cam McHenry)
  • b7a1df3 linter: Mark unicorn rules as recommended (#27670) (Cam McHenry)
  • c44a355 linter: Mark typescript rules as recommended from upstream (#27634) (Cam McHenry)
  • 6b49dba linter: Mark eslint rules as recommended from upstream (#27632) (Cam McHenry)

🐛 Bug Fixes

  • 7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)
  • 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
  • 326904f linter/unicorn/no-useless-undefined: Allow undefined in React.useRef (#25027) (Chris Dokurno)
  • f9cf165 linter/unicorn/prefer-spread: Ignore super method calls (#27868) (camc314)
  • 00484e1 linter/eslint/prefer-const: Report destructuring assignments inside blocks (#27856) (camc314)
  • 9c35461 linter/eslint/sort-vars: Report every out-of-order declaration (#27767) (camc314)
  • 01e1c5e linter/unicorn/prefer-string-replace-all: Resolve regex variables (#27769) (camc314)
  • 7f474d5 linter/eslint/no-loop-func: Detect writes after the loop (#27754) (camc314)
  • 4b7fea6 linter/eslint/block-scoped-var: Ignore declarations without writes (#27760) (camc314)
  • 2947917 linter/eslint/no-lonely-if: Check final else blocks in else-if chains (#27759) (camc314)
  • fc039b5 linter/eslint/sort-imports: Check imports after other statements (#27749) (camc314)
  • 1acba97 linter/unicorn/prefer-at: Report slice index reads once (#27762) (camc314)
  • 6190e26 linter/eslint/prefer-arrow-callback: Ignore functions used as conditional tests (#27533) (Anzal Husain Abidi)
  • b3cdaaf linter/eslint/sort-keys: Check computed identifier names (#27748) (camc314)
  • 170e608 linter/unicorn/prefer-native-coercion-functions: Check object methods and function properties (#27750) (camc314)
  • 9261df7 linter/unicorn/prefer-string-raw: Check object property values (#27758) (camc314)
  • ddea86b linter/eslint/prefer-template: Report separate nested concatenations (#27764) (camc314)
  • 2c67197 linter/eslint/no-unused-vars: Count conditional calls in sequences as uses (#27755) (camc314)
  • 7f22fa0 linter/unicorn/prefer-regexp-test: Check logical operands in boolean contexts (#27761) (camc314)
  • 3c44398 linter/eslint/class-methods-use-this: Count this in parameter defaults (#27756) (camc314)
  • d85923f linter/eslint/no-param-reassign: Report rest parameter writes (#27765) (camc314)
  • 8ea47bb linter/unicorn/prefer-type-error: Handle parenthesized type checks (#27766) (camc314)
  • e96856c linter/unicorn/catch-error-name: Check unused underscore-prefixed names (#27751) (camc314)
  • d8ca399 linter/unicorn/no-array-callback-reference: Ignore callback factory calls (#27763) (camc314)
  • 1267ab8 linter/eslint/max-params: Count rest parameters (#27757) (camc314)
  • 9ff25c3 linter/eslint/no-useless-assignment: Report dead stores to function parameters (#27735) (camc314)
  • ee5e730 linter/eslint/no-setter-return: Check setters in property descriptors (#27731) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.89.0] - 2026-10-19

🐛 Bug Fixes

  • 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)
Commits

Updates vite from 8.3.4 to 8.3.5

Release notes

Sourced from vite's releases.

v8.3.5

Bug Fixes

  • build: handle missing chunk import maps (#23777) (8d7623d)
  • build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
  • bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
  • bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
  • bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
  • bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
  • bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
  • bundled-dev: normalize served output files (#23684) (df4e02c)
  • bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
  • css: don't fail on a literal % in url() (#23676) (50b382d)
  • deps: update all non-major dependencies (#23731) (cf80aa5)
  • deps: update all non-major dependencies (#23826) (77d8373)
  • deps: update rolldown-related dependencies (#23733) (43f0d05)
  • deps: update rolldown-related dependencies (#23827) (c2e0418)
  • optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
  • optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
  • optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
  • optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
  • resolve: support subpath imports with multiple # (#23631) (0d86b34)
  • resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
  • server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
  • server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

  • ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

Code Refactoring

  • deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
  • dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
  • dev: separate import resolution from URL conversion (#23791) (6116689)
  • dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
  • dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)
Changelog

Sourced from vite's changelog.

8.3.5 (2026-10-21)

Bug Fixes

  • build: handle missing chunk import maps (#23777) (8d7623d)
  • build: include preload dependencies to chunk import map hashing (

@dependabot
chore(deps): bump the frontend-dependencies group
d462ba3 
Bumps the frontend-dependencies group in /frontend with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.3` | `6.20.4` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.14` | `6.43.15` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.4` | `5.104.5` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.59.0` | `1.61.0` |
| [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) | `6.14.0` | `6.15.0` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.14.5` | `4.14.8` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.22.0` | `4.22.1` |
| [monocart-coverage-reports](https://github.com/cenfun/monocart-coverage-reports) | `2.13.2` | `3.0.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.88.0` | `1.89.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` |


Updates `@codemirror/autocomplete` from 6.20.3 to 6.20.4
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/autocomplete/commits)

Updates `@codemirror/view` from 6.43.14 to 6.43.15
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@tanstack/react-query` from 5.104.4 to 5.104.5
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.5/packages/react-query)

Updates `lucide-react` from 1.59.0 to 1.61.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/lucide-react)

Updates `maplibre-gl` from 6.14.0 to 6.15.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](maplibre/maplibre-gl-js@v6.14.0...v6.15.0)

Updates `react-resizable-panels` from 4.14.5 to 4.14.8
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.14.5...4.14.8)

Updates `shadcn` from 4.22.0 to 4.22.1
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.22.1/packages/shadcn)

Updates `monocart-coverage-reports` from 2.13.2 to 3.0.0
- [Release notes](https://github.com/cenfun/monocart-coverage-reports/releases)
- [Changelog](https://github.com/cenfun/monocart-coverage-reports/blob/main/CHANGELOG.md)
- [Commits](cenfun/monocart-coverage-reports@v2.13.2...v3.0.0)

Updates `oxlint` from 1.88.0 to 1.89.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.89.0/npm/oxlint)

Updates `vite` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-dependencies
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-dependencies
- dependency-name: lucide-react
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: maplibre-gl
  dependency-version: 6.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: react-resizable-panels
  dependency-version: 4.14.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-dependencies
- dependency-name: shadcn
  dependency-version: 4.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-dependencies
- dependency-name: monocart-coverage-reports
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-dependencies
- dependency-name: oxlint
  dependency-version: 1.89.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-dependencies
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2026
mortenoh
mortenoh previously approved these changes Oct 28, 2026
View reviewed changes
@codecov

codecov Bot commented Oct 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@mortenoh
mortenoh merged commit c8d3612 into main Oct 28, 2026
5 checks passed
@mortenoh
mortenoh deleted the dependabot/npm_and_yarn/frontend/frontend-dependencies-ef4d38e9aa branch October 28, 2026 14:04
@mortenoh mortenoh mentioned this pull request Oct 28, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mortenoh mortenoh mortenoh left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mortenoh