Skip to content

chore(deps): bump the web-minor-patch group across 1 directory with 12 updates - #78

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-minor-patch-fe1de59386
Open

chore(deps): bump the web-minor-patch group across 1 directory with 12 updates#78
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-minor-patch-fe1de59386

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-minor-patch group with 11 updates in the /web directory:

Package From To
@xyflow/react 12.11.1 12.11.3
dompurify 3.4.11 3.4.14
mermaid 11.15.0 11.17.0
pixi.js 8.19.0 8.20.0
react 19.2.7 19.2.8
@types/react 19.2.17 19.2.18
react-dom 19.2.7 19.2.8
@types/react-dom 19.2.3 19.2.4
react-virtuoso 4.18.7 4.18.12
zustand 5.0.14 5.0.15
@tailwindcss/vite 4.3.1 4.3.3

Updates @xyflow/react from 12.11.1 to 12.11.3

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

  • #5943 d1def59 - Invoke an error if handle can not be found

  • #5947 2ba040f - Use correct nodeExtent for internal setNodes.

  • #5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

  • #5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

  • #5929 4c5d7d2 - Allow key combinations of three or more keys (e.g. 'Meta+Shift+s') for useKeyPress.

  • #5938 91a052f - Fix <Background /> pattern offset miscalculation.

  • Updated dependencies [393d951, ff126a0, e5d86bd, 392da00]:

    • @​xyflow/system@​0.0.80

@​xyflow/react@​12.11.2

Patch Changes

Changelog

Sourced from @​xyflow/react's changelog.

12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

  • #5943 d1def59 - Invoke an error if handle can not be found

  • #5947 2ba040f - Use correct nodeExtent for internal setNodes.

  • #5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

  • #5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

  • #5929 4c5d7d2 - Allow key combinations of three or more keys (e.g. 'Meta+Shift+s') for useKeyPress.

  • #5938 91a052f - Fix <Background /> pattern offset miscalculation.

  • Updated dependencies [393d951, ff126a0, e5d86bd, 392da00]:

    • @​xyflow/system@​0.0.80

12.11.2

Patch Changes

  • #5825 5072914 - Only create an XYDrag instance for draggable nodes.

  • #5847 742860c - Stop the MiniMap from re-rendering on every store update.

... (truncated)

Commits
  • 359f70c chore(packages): bump
  • e90a1b6 Merge pull request #5938 from Feyyus/fix/background-offset-precedence
  • 2ba040f fix(react): use the current nodeExtent in setNodes
  • 42f367e Merge pull request #5922 from Skyline-23/fix/control-pan-activation
  • d7dbd57 Merge pull request #5929 from Jian-Zhang08/fix/usekeypress-multi-key-combination
  • bdcf89a fix(edge-wrapper): pass onError prop closes #5936, closes #5932
  • 91a052f fix(react): correct offset math in Background pattern
  • 4c5d7d2 fix(react): make useKeyPress work with combinations of three or more keys
  • 392da00 fix(system): allow Control key to activate pane panning
  • c5d7442 fix(pane): prefer touch panning over drag selection
  • Additional commits viewable in compare view

Updates dompurify from 3.4.11 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions

DOMPurify 3.4.13

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible

DOMPurify 3.4.12

  • Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
  • Hardened the handling of hooks removing elements, @​mkrause-bee360
  • Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
  • Hardened the handling of declarative partial updates
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible
Commits

Updates mermaid from 11.15.0 to 11.17.0

Release notes

Sourced from mermaid's releases.

mermaid@11.17.0

Minor Changes

Patch Changes

  • #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

  • #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

  • #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

  • #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

  • #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

  • #7850 a34cbf0 Thanks @​aloisklink! - fix(block): allow classdefs to update text color

  • #7937 f9cbe1e Thanks @​filipsajdak! - fix(dagre): let a diagram's own nodeSpacing/rankSpacing take effect in the unified dagre layout

  • #8005 90eeece Thanks @​pbrolin47! - fix(flowchart): reverts the behavior change from #7672 (fix/4648-directions), since arrows between subgraphs are broken

  • #7951 afa2f80 Thanks @​aloisklink! - perf: use fastdom to batch DOM measurements (up to 25% speedup)

  • Updated dependencies [e848423]:

    • @​mermaid-js/parser@​1.2.1

mermaid@11.16.1

Patch Changes

... (truncated)

Commits
  • 293b1c1 Merge pull request #8074 from mermaid-js/changeset-release/master
  • f484a36 Version Packages
  • 0a07bf6 Bump layout-elk version (#8078)
  • 1127c5f Merge pull request #8071 from mermaid-js/release/11.17.0
  • 8628ef1 docs: remove C4 typescript conversion changeset
  • 349ebd3 docs: remove non-user visible changeset
  • b5a744a docs: scope to all v11.17.0 changeset messages
  • 4150c73 Make changesets less verbose
  • 7ba4b6f [autofix.ci] apply automated fixes
  • b3d1f63 Fixed block rendering due to failing SS in applitools
  • Additional commits viewable in compare view

Updates pixi.js from 8.19.0 to 8.20.0

Release notes

Sourced from pixi.js's releases.

v8.20.0

💾 Download

Installation:

npm install pixi.js@8.20.0

Development Build:

Production Build:

Documentation:

Changed

pixijs/pixijs@v8.19.0...v8.20.0

🚨 Behavior Change

  • feat: WGSL shader overrides, depth-stencil formats, partial buffer updates & view caching by @​Zyie in pixijs/pixijs#12089
    • StructsAndGroups.isUniform is replaced by accessMode, which also describes storage buffers. This one fails quietly; the old property reads undefined rather than throwing.
    // before
if (group.isUniform) { /* ... */ }
// after
if (group.accessMode === 'uniform') { /* ... */ }

  • fix: apply render group world color and alpha to ParticleContainer by @​TheOnlyJason in pixijs/pixijs#12132
    • ParticleContainer ignored the tint and alpha of any ancestor render group, staying fully opaque while everything else faded. Particles now inherit both, so scenes with a ParticleContainer under a tinted or faded render group will look different. Remove any manual compensation you added.
  • fix: WebGPU ignores clockwiseFrontFace by @​koteelok in pixijs/pixijs#12139
    • State.clockwiseFrontFace reached the WebGPU pipeline as a cull mode rather than a winding, so @builtin(front_facing) in WGSL reported the opposite of gl_FrontFacing in GLSL. Which triangles survive culling is unchanged, but WGSL shaders branching on front_facing with clockwiseFrontFace: true now take the other branch; revert any workaround that inverted it.
  • fix: align Polygon.strokeContains with the drawn stroke by @​Jaybhade in pixijs/pixijs#12137
    • strokeContains split the stroke width on the squared width and ignored winding order, so at the default alignment: 0.5 the hit area was ~41% wider than the drawn line, and at alignment 0 or 1 it sat on the opposite side of the edge. Hit testing now matches what's drawn.
    const graphics = new Graphics()
    .poly([0, 0, 100, 0, 100, 100, 0, 100], true)
    .stroke({ width: 20, alignment: 0 });
graphics.containsPoint({ x: -10, y: 50 }); // now true, inside the drawn stroke
graphics.containsPoint({ x: 10, y: 50 });  // now false, nothing is drawn there

  • fix: Rectangle containsRect edge containment by @​cyphercodes in pixijs/pixijs#12083
    • containsRect tested the right and bottom edges with a strict <, so identical rectangles reported false. Identical rects, and any rect flush against the container's right or bottom edge, now return true. Code using it as a strict-interior test, or branching on false to mean "partially outside", now takes the other branch.

🎁 Added

... (truncated)

Commits
  • e4228ce v8.20.0
  • 9ce96be Apply render group world color and alpha to ParticleContainer (#12132)
  • a58fe50 fix: WebGPU ignores clockwiseFrontFace (#12139)
  • bdf53b5 fix: WebGPU sibling sprite masks rendering with each other's mask matrix (#12...
  • 42810dc feat(rendering): export GPU shader layout helpers for advanced users (#12143)
  • 3d67c7c fix: stop Geometry.destroy from double-freeing the index buffer (#12144)
  • b42dbc1 fix: rebuild cached bind groups when the GC unloads uniform buffers (#12147)
  • 48abeb5 fix: substitute Texture.EMPTY when a mask texture is destroyed while still in...
  • aa7f1d6 fix: release mask bindings when pooled AlphaMaskEffect returns to the pool (#...
  • 0955bb8 fix: stop publish-branch job from poisoning the node_modules cache (#12152)
  • Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @types/react from 19.2.17 to 19.2.18

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

Updates react-virtuoso from 4.18.7 to 4.18.12

Release notes

Sourced from react-virtuoso's releases.

react-virtuoso@4.18.12

Patch Changes

  • #1487 d975e6c Thanks @​petyosi! - Measure window-scrolling lists before they enter the viewport so their estimated height is included in the document layout.

react-virtuoso@4.18.10

Patch Changes

  • fca20fa Thanks @​petyosi! - Fix explicit undefined initial top-most item index values crashing when empty data updates to an object-form initial index.

react-virtuoso@4.18.9

Patch Changes

  • #1444 0c68e81 Thanks @​Luccas-carvalho! - Harden scroll-target and initial-index handling:
    • Clamp the initial top-most item index to the available range, so an out-of-range initialTopMostItemIndex (for example after the data set shrinks) no longer starts the list at a blank or mid-list position.
    • Stop mutating the location object passed to scrollToIndex; normalizeIndexLocation now applies its defaults to a shallow copy.
    • Treat a default-positioned initialTopMostItemIndex of { index: 0 } the same as 0, avoiding a redundant initial scroll and a delayed followOutput.

react-virtuoso@4.18.8

Patch Changes

Changelog

Sourced from react-virtuoso's changelog.

4.18.12

Patch Changes

  • #1487 d975e6c Thanks @​petyosi! - Measure window-scrolling lists before they enter the viewport so their estimated height is included in the document layout.

4.18.11

Patch Changes

  • #1458 0d5214a Thanks @​wanxiankai! - Handle horizontal list direction changes between LTR and RTL without remounting the list.

4.18.10

Patch Changes

  • fca20fa Thanks @​petyosi! - Fix explicit undefined initial top-most item index values crashing when empty data updates to an object-form initial index.

4.18.9

Patch Changes

  • #1444 0c68e81 Thanks @​Luccas-carvalho! - Harden scroll-target and initial-index handling:
    • Clamp the initial top-most item index to the available range, so an out-of-range initialTopMostItemIndex (for example after the data set shrinks) no longer starts the list at a blank or mid-list position.
    • Stop mutating the location object passed to scrollToIndex; normalizeIndexLocation now applies its defaults to a shallow copy.
    • Treat a default-positioned initialTopMostItemIndex of { index: 0 } the same as 0, avoiding a redundant initial scroll and a delayed followOutput.

4.18.8

Patch Changes

Commits

Updates zustand from 5.0.14 to 5.0.15

Release notes

Sourced from zustand's releases.

v5.0.15

Fix some issues in devtools and persist middleware.

What's Changed

Full Changelog: pmndrs/zustand@v5.0.14...v5.0.15

Commits
  • 2115efb v5.0.15
  • 1f531ba chore(deps): update dev dependencies (#3560)
  • aa6d2a1 docs: add zustand-devtools-bridge (#3559)
  • 3febf8c fix(persist): clearStorage() should invalidate concurrent async rehydration (...
  • f44cecc fix(devtools): correct V8 stack regex when source path contains spaces (#3531)
  • beca84e fix: update broken README links from docs/guides/ to docs/learn/guides/ (#3542)
  • 038f496 docs(persist): clarify createJSONStorage behavior and warn about production u...
  • a1f685c docs: fix missing code highlights in tic-tac-toe tutorial (#3527)
  • 07cee61 docs: fix missing highlight on setXIsNext line in tic-tac-toe tutorial (#3524)
  • 566b5bf Fix dead link in README.md: update immer guide path (#3519)
  • Additional commits viewable in compare view

Updates @tailwindcss/vite from 4.3.1 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

v4.3.2

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)
Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.3] - 2026-07-16

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

[4.3.2] - 2026-06-26

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)
Commits

Updates @types/react from 19.2.17 to 19.2.18

Commits

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

Updates tailwindcss from 4.3.1 to 4.3.3

Release notes

Sourced from tailwindcss's releases.

v4.3.3

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)<...

    Description has been truncated

@dependabot
chore(deps): bump the web-minor-patch group across 1 directory with 1…
4529ccd 
…2 updates

Bumps the web-minor-patch group with 11 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.1` | `12.11.3` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.11` | `3.4.14` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.15.0` | `11.17.0` |
| [pixi.js](https://github.com/pixijs/pixijs) | `8.19.0` | `8.20.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.7` | `4.18.12` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.1` | `4.3.3` |



Updates `@xyflow/react` from 12.11.1 to 12.11.3
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.3/packages/react)

Updates `dompurify` from 3.4.11 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.11...3.4.14)

Updates `mermaid` from 11.15.0 to 11.17.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.15.0...mermaid@11.17.0)

Updates `pixi.js` from 8.19.0 to 8.20.0
- [Release notes](https://github.com/pixijs/pixijs/releases)
- [Commits](pixijs/pixijs@v8.19.0...v8.20.0)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-virtuoso` from 4.18.7 to 4.18.12
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.12/packages/react-virtuoso)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

Updates `@tailwindcss/vite` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `tailwindcss` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

---
updated-dependencies:
- dependency-name: "@xyflow/react"
  dependency-version: 12.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: mermaid
  dependency-version: 11.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-minor-patch
- dependency-name: pixi.js
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-minor-patch
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Aug 25, 2026

Copy link
Copy Markdown

GLM 审查信息

结论

未发现需要阻塞的明显问题。本次 PR 为常规依赖版本升级，但包含 mermaid 和 pixi.js 的 minor 版本更新，引入了若干行为变更，需重点回归测试。

发现

暂无。

建议测试

  1. Mermaid 图表渲染：mermaid 从 11.15.0 升级至 11.17.0，classDiagram 默认切换到了 v2 渲染器。需验证项目中现有的类图、流程图等是否能正常渲染，若出现样式错乱或解析错误，可通过配置 class: { defaultRenderer: 'dagre-d3' } 回退。
  2. Pixi.js 渲染行为：pixi.js 从 8.19.0 升级至 8.20.0，修复了 ParticleContainer 的 tint/alpha 继承问题以及 Polygon.strokeContains 的命中区域计算。需重点测试涉及粒子动画、多边形点击碰撞检测的页面，确认视觉效果和交互区域未发生非预期改变。
  3. 长列表滚动：react-virtuoso 升级修复了 initialTopMostItemIndex 越界等问题。需测试动态数据更新、跳转指定索引以及数据缩减时的列表滚动表现，确保无白屏或位置错乱。
  4. HTML 安全过滤：dompurify 升级修复了若干绕过漏洞。需验证 Markdown 或富文本渲染功能是否正常，确认未因更严格的过滤规则导致合法内容被意外移除。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants