Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 8 updates#369

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/production-dependencies-5d00073696
Open

chore(deps): bump the production-dependencies group across 1 directory with 8 updates#369
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/production-dependencies-5d00073696

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Feb 27, 2026 •
edited
Loading

Bumps the production-dependencies group with 8 updates in the /frontend directory:

Package From To
bootstrap 5.3.7 5.3.8
phoenix 1.7.21 1.8.7
qr-code-styling 1.9.1 1.9.2
react 18.3.1 19.2.6
react-dom 18.3.1 19.2.6
react-intl 6.6.8 10.1.7
react-responsive-pagination 2.10.1 2.13.0
react-router-dom 7.13.0 7.15.1

Updates bootstrap from 5.3.7 to 5.3.8

Release notes

Sourced from bootstrap's releases.

v5.3.8

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/bootstrap@v5.3.7...v5.3.8

Commits

Updates phoenix from 1.7.21 to 1.8.7

Changelog

Sourced from phoenix's changelog.

1.8.7 (2026-05-06)

Bug fixes

  • Fix invalid status when longpoll request times out

Enhancements

  • Mask token parameter in logs by default (in addition to "password")

JavaScript Client Bug Fixes

  • Fix encoding of non-ASCII metadata in binary channel messages

1.8.6 (2026-05-05)

Security fixes

  • CVE-2026-32689: Fix Phoenix.Socket Longpoll transport memory exhaustion in nd-JSON body splitting

Enhancements

  • [phoenix] Raise if use Phoenix.VerifiedRoutes is called multiple times in the same module
  • [phoenix] Fix more deprecation and type checker warnings on Elixir 1.20
  • [phoenix] Raise when interpolating a list in Phoenix.VerifiedRoutes (#6632)
  • [phoenix] Gracefully handle non-binary vsn socket parameter (#6662)
  • [phx.gen.*] Use .eex filename suffix in generator files
  • [phx.new] Add interactive mode: mix phx.new --interactive (#6630)
  • [phx.new] Add phx-no-format to generated <.live_title> tag (#6667)

Bug fixes

  • [phx.gen.*] Fix generated migrations for myxql when using scopes (#6635)
  • [phx.new] Fix crash when parent directory contains a colon (#6633)

1.8.5 (2026-03-05)

JavaScript Client Bug Fixes

  • Fix socket connecting on visibility change when never established

Enhancements

  • Fix warnings on Elixir 1.20

1.8.4 (2026-02-23)

JavaScript Client Bug Fixes

  • Fix bug reconnecting connections when close was gracefully initiated by server
  • Fix LongPoll transport name in sessionStorage and logs

Enhancements

  • Adds guards support in assert_push, assert_broadcast, and assert_reply
  • Enable purging in Phoenix code server for Elixir 1.20

1.8.3 (2025-12-08)

Enhancements

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for phoenix since your current version.


Updates qr-code-styling from 1.9.1 to 1.9.2

Release notes

Sourced from qr-code-styling's releases.

v1.9.2

What's Changed

Other Changes

New Contributors

Full Changelog: kozakdenys/qr-code-styling@v1.9.1...v1.9.2

Commits

Updates react from 18.3.1 to 19.2.6

Release notes

Sourced from react's releases.

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:

... (truncated)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

... (truncated)

Commits

Updates react-dom from 18.3.1 to 19.2.6

Release notes

Sourced from react-dom's releases.

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

... (truncated)

Commits

Updates react-intl from 6.6.8 to 10.1.7

Release notes

Sourced from react-intl's releases.

react-intl@10.1.2

10.1.2 (2026-04-13)

Bug Fixes

Reverts

react-intl@10.1.1

10.1.1 (2026-03-27)

Bug Fixes

Commits
  • 470f98a build: publish
  • ec70b36 fix(@​formatjs/intl-listformat): add generated tok locale data (#6572)
  • 6449d23 feat(@​formatjs/cli-native-linux-arm64): add native package (#6571)
  • 5b87ecb build: bump gazelle_ts to 0.4.18 (#6570)
  • 2ec2cad build: upgrade gazelle_ts (#6567)
  • 472a50f docs(@​formatjs/intl-collator): document collator polyfill (#6565)
  • 4937e52 ci: move Rust CLI Linux compatibility check to BuildBuddy (#6566)
  • a1d24d0 build: publish
  • acc6c04 test(@​formatjs/intl-collator): add collator conformance tests (#6564)
  • cb39d35 feat(@​formatjs/intl-collator): implement tailored locale comparison (#6560)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-intl since your current version.


Updates react-responsive-pagination from 2.10.1 to 2.13.0

Release notes

Sourced from react-responsive-pagination's releases.

v2.13.0

2.13.0 (2026-02-11)

Tailwind support 🎉

Features

  • css gap support (cd00429)
  • New classMerge prop to allow override of class string merging (d6d5272)
  • New props: containerClassName & inactiveItemClassName (fd18b25)

Bug Fixes

v2.13.0-beta.1

2.13.0-beta.1 (2026-02-10)

Bug Fixes

Features

  • css gap support (cd00429)
  • New classMerge prop to allow override of class string merging (d6d5272)
  • New props: containerClassName & inactiveItemClassName (fd18b25)

v2.12.0

2.12.0 (2025-12-09)

Bug Fixes

Features

  • New ariaPageLabel prop to add aria labels for links (d477579)

v2.11.4-beta.1

2.11.4-beta.1 (2025-12-05)

Bug Fixes

... (truncated)

Changelog

Sourced from react-responsive-pagination's changelog.

2.13.0 (2026-02-11)

Bug Fixes

Features

  • css gap support (cd00429)
  • New classMerge prop to allow override of class string merging (d6d5272)
  • New props: containerClassName & inactiveItemClassName (fd18b25)

2.12.0 (2025-12-09)

Bug Fixes

Features

  • New ariaPageLabel prop to add aria labels for links (d477579)

2.11.3 (2025-10-06)

Bug Fixes

2.11.2 (2025-10-04)

Bug Fixes

  • Component package updates (f001cb1)

2.11.1 (2025-06-01)

Bug Fixes

2.11.0 (2025-04-27)

... (truncated)

Commits
  • 2bcf968 chore(release): 2.13.0 [skip ci]
  • 74d9ad4 docs(readme): main branch for images
  • ecb413f docs(readme): edits & fixes
  • 9409299 docs(readme): edits for tailwind
  • 9de1055 fix: Package updates
  • d6d5272 feat: New classMerge prop to allow override of class string merging
  • fd18b25 feat: New props: containerClassName & inactiveItemClassName
  • cd00429 feat: css gap support
  • f994685 chore(release): 2.12.0 [skip ci]
  • d477579 feat: New ariaPageLabel prop to add aria labels for links
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-responsive-pagination since your current version.


Updates react-router-dom from 7.13.0 to 7.15.1

Changelog

Sourced from react-router-dom's changelog.

v7.15.1

Patch Changes

v7.15.0

Patch Changes

v7.14.2

Patch Changes

v7.14.1

Patch Changes

7.14.0

Patch Changes

  • Updated dependencies:
    • react-router@7.14.0

7.13.2

Patch Changes

  • Updated dependencies:
    • react-router@7.13.2

7.13.1

Patch Changes

  • Updated dependencies:
    • react-router@7.13.1
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 27, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/production-dependencies-5d00073696 branch from f83a5b4 to 9d4edfd Compare March 27, 2026 07:20
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/production-dependencies-5d00073696 branch from 9d4edfd to 3323469 Compare May 21, 2026 12:19
@dependabot
chore(deps): bump the production-dependencies group across 1 director…
4ebd149 
…y with 8 updates

Bumps the production-dependencies group with 8 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [bootstrap](https://github.com/twbs/bootstrap) | `5.3.7` | `5.3.8` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.7.21` | `1.8.7` |
| [qr-code-styling](https://github.com/kozakdenys/qr-code-styling) | `1.9.1` | `1.9.2` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.6` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.6` |
| [react-intl](https://github.com/formatjs/formatjs) | `6.6.8` | `10.1.7` |
| [react-responsive-pagination](https://github.com/jonelantha/react-responsive-pagination/tree/HEAD/packages/react-responsive-pagination) | `2.10.1` | `2.13.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.0` | `7.15.1` |



Updates `bootstrap` from 5.3.7 to 5.3.8
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v5.3.7...v5.3.8)

Updates `phoenix` from 1.7.21 to 1.8.7
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.7.21...v1.8.7)

Updates `qr-code-styling` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/kozakdenys/qr-code-styling/releases)
- [Commits](kozakdenys/qr-code-styling@v1.9.1...v1.9.2)

Updates `react` from 18.3.1 to 19.2.6
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react)

Updates `react-dom` from 18.3.1 to 19.2.6
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom)

Updates `react-intl` from 6.6.8 to 10.1.7
- [Release notes](https://github.com/formatjs/formatjs/releases)
- [Commits](https://github.com/formatjs/formatjs/compare/react-intl@6.6.8...react-intl@10.1.7)

Updates `react-responsive-pagination` from 2.10.1 to 2.13.0
- [Release notes](https://github.com/jonelantha/react-responsive-pagination/releases)
- [Changelog](https://github.com/jonelantha/react-responsive-pagination/blob/main/packages/react-responsive-pagination/CHANGELOG.md)
- [Commits](https://github.com/jonelantha/react-responsive-pagination/commits/v2.13.0/packages/react-responsive-pagination)

Updates `react-router-dom` from 7.13.0 to 7.15.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.15.1/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: bootstrap
  dependency-version: 5.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: phoenix
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: qr-code-styling
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-intl
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-responsive-pagination
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/production-dependencies-5d00073696 branch from 3323469 to 4ebd149 Compare May 22, 2026 09:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants