deps(engine): bump the frontend-libs group with 2 updates by dependabot[bot] · Pull Request #205 · underpostnet/engine

dependabot · 2026-10-19T08:08:21Z

Bumps the frontend-libs group with 2 updates: @fullcalendar/rrule and fullcalendar.

Updates @fullcalendar/rrule from 7.1.1 to 7.1.3

Release notes

Sourced from @fullcalendar/rrule's releases.

v7.1.3

Bugfixes

FIX: Unable to drag events in DayGrid views when using React 18 Strict Mode (#8119)

FIX: event.setProp('resourceEditable', ...) was ignored with a warning (#5166)

FIX: React "Maximum update depth exceeded" when validRange, visibleRange or hiddenDays is given as a new-but-equal value each render and datesSet sets state (#7069)

FIX: When slotMaxTime is beyond 24h, the now-indicator disappears after midnight in Timeline views, and its arrow disappears in TimeGrid views (#6394)

FIX: eventDrop reports oldResource/newResource when an event that isn't resource-editable is dragged over another resource, even though its resource doesn't change (#4943)

Locales

FEATURE: Tajik locale, available as tg (#8066)

FEATURE: Belarusian locale, available as be (#7839)

FIX: Bulgarian accessibility hints for navigation, more-links, and closing popovers (#7494)

FIX: German and Austrian German list-view hint read "Terminübersichtesansicht" (#7788)

FIX: Czech today button said "now" instead of "today" (#7674)

FIX: Korean navigation, year, list-view, and more-link translations (#8037)

FIX: Farsi empty-calendar and more-link text, year navigation, and accessibility hints (#8033, #7546)

FIX: Norwegian Nynorsk empty-calendar text and accessibility hints (#8083, #6050)

v7.1.2

Accessibility Fixes

FIX: Events in DayGrid cells, TimeGrid columns, Timeline lanes and +more popovers are enclosed in a list (role="list", each event in a role="listitem" wrapper), so screen readers can step through them one at a time instead of reading a day or lane as one block

FIX: List view, events with a url lost their link semantics, because the listitem role was on the event itself. Events are now wrapped in list items (#7567)

FIX: Day headers (without navLinks), TimeGrid's week-number header and "Timed" row header were read as empty and flagged by axe, because their text was only an aria-label. The text is now visually-hidden content (#7566, #6641)

FIX: DayGrid day cells' aria-label was ignored or read as blank. The full date is now visually-hidden content, only in cells showing a day number (otherwise the column header already reads the date) (#7566, #6637, #6641, #7502)

FIX: Column-header nav links were labeled "Go to …", which was repeated as the column name for every cell. They're now labeled with just the date (navLinkHint is still used for other nav links)

FIX: JAWS switched to forms mode when Tab landed on an event, so the arrow keys did nothing. DayGrid, TimeGrid, MultiMonth and Resource Timeline are now a table (cells role="cell") rather than a grid. Resource Timeline with nested resources or row groups remains a treegrid (#6641)

FIX: Screen readers announced empty "group"s within day cells. Empty wrappers are now role="presentation", and background events, non-business hours and selection highlights are aria-hidden

FIX: Resource TimeGrid/DayGrid with filterResourcesWithEvents and datesAboveResources, the blank resource header was an empty columnheader, flagged by axe. It's now an empty cell

FIX: Hidden elements used for measurement (+more link, Resource Timeline expander and column divider) use visibility: hidden instead of inert, so none can be focused or read by screen readers

Changelog

Sourced from @fullcalendar/rrule's changelog.

v7.1.3

Bugfixes

FIX: Unable to drag events in DayGrid views when using React 18 Strict Mode (#8119)

FIX: event.setProp('resourceEditable', ...) was ignored with a warning (#5166)

FIX: React "Maximum update depth exceeded" when validRange, visibleRange or hiddenDays is given as a new-but-equal value each render and datesSet sets state (#7069)

FIX: When slotMaxTime is beyond 24h, the now-indicator disappears after midnight in Timeline views, and its arrow disappears in TimeGrid views (#6394)

FIX: eventDrop reports oldResource/newResource when an event that isn't resource-editable is dragged over another resource, even though its resource doesn't change (#4943)

Locales

FEATURE: Tajik locale, available as tg (#8066)

FEATURE: Belarusian locale, available as be (#7839)

FIX: Bulgarian accessibility hints for navigation, more-links, and closing popovers (#7494)

FIX: German and Austrian German list-view hint read "Terminübersichtesansicht" (#7788)

FIX: Czech today button said "now" instead of "today" (#7674)

FIX: Korean navigation, year, list-view, and more-link translations (#8037)

FIX: Farsi empty-calendar and more-link text, year navigation, and accessibility hints (#8033, #7546)

FIX: Norwegian Nynorsk empty-calendar text and accessibility hints (#8083, #6050)

v7.1.2

Accessibility Fixes

FIX: Events in DayGrid cells, TimeGrid columns, Timeline lanes and +more popovers are enclosed in a list (role="list", each event in a role="listitem" wrapper), so screen readers can step through them one at a time instead of reading a day or lane as one block

FIX: List view, events with a url lost their link semantics, because the listitem role was on the event itself. Events are now wrapped in list items (#7567)

FIX: Day headers (without navLinks), TimeGrid's week-number header and "Timed" row header were read as empty and flagged by axe, because their text was only an aria-label. The text is now visually-hidden content (#7566, #6641)

FIX: DayGrid day cells' aria-label was ignored or read as blank. The full date is now visually-hidden content, only in cells showing a day number (otherwise the column header already reads the date) (#7566, #6637, #6641, #7502)

FIX: Column-header nav links were labeled "Go to …", which was repeated as the column name for every cell. They're now labeled with just the date (navLinkHint is still used for other nav links)

FIX: JAWS switched to forms mode when Tab landed on an event, so the arrow keys did nothing. DayGrid, TimeGrid, MultiMonth and Resource Timeline are now a table (cells role="cell") rather than a grid. Resource Timeline with nested resources or row groups remains a treegrid (#6641)

FIX: Screen readers announced empty "group"s within day cells. Empty wrappers are now role="presentation", and background events, non-business hours and selection highlights are aria-hidden

FIX: Resource TimeGrid/DayGrid with filterResourcesWithEvents and datesAboveResources, the blank resource header was an empty columnheader, flagged by axe. It's now an empty cell

FIX: Hidden elements used for measurement (+more link, Resource Timeline expander and column divider) use visibility: hidden instead of inert, so none can be focused or read by screen readers

Commits

5cb81e9 Bump fullcalendar versions
2642b59 Bump
See full diff in compare view

Updates fullcalendar from 7.1.1 to 7.1.3

Release notes

Sourced from fullcalendar's releases.

v7.1.3

Bugfixes

FIX: Unable to drag events in DayGrid views when using React 18 Strict Mode (#8119)

FIX: event.setProp('resourceEditable', ...) was ignored with a warning (#5166)

FIX: React "Maximum update depth exceeded" when validRange, visibleRange or hiddenDays is given as a new-but-equal value each render and datesSet sets state (#7069)

FIX: When slotMaxTime is beyond 24h, the now-indicator disappears after midnight in Timeline views, and its arrow disappears in TimeGrid views (#6394)

FIX: eventDrop reports oldResource/newResource when an event that isn't resource-editable is dragged over another resource, even though its resource doesn't change (#4943)

Locales

FEATURE: Tajik locale, available as tg (#8066)

FEATURE: Belarusian locale, available as be (#7839)

FIX: Bulgarian accessibility hints for navigation, more-links, and closing popovers (#7494)

FIX: German and Austrian German list-view hint read "Terminübersichtesansicht" (#7788)

FIX: Czech today button said "now" instead of "today" (#7674)

FIX: Korean navigation, year, list-view, and more-link translations (#8037)

FIX: Farsi empty-calendar and more-link text, year navigation, and accessibility hints (#8033, #7546)

FIX: Norwegian Nynorsk empty-calendar text and accessibility hints (#8083, #6050)

v7.1.2

Accessibility Fixes

FIX: Events in DayGrid cells, TimeGrid columns, Timeline lanes and +more popovers are enclosed in a list (role="list", each event in a role="listitem" wrapper), so screen readers can step through them one at a time instead of reading a day or lane as one block

FIX: List view, events with a url lost their link semantics, because the listitem role was on the event itself. Events are now wrapped in list items (#7567)

FIX: Day headers (without navLinks), TimeGrid's week-number header and "Timed" row header were read as empty and flagged by axe, because their text was only an aria-label. The text is now visually-hidden content (#7566, #6641)

FIX: DayGrid day cells' aria-label was ignored or read as blank. The full date is now visually-hidden content, only in cells showing a day number (otherwise the column header already reads the date) (#7566, #6637, #6641, #7502)

FIX: Column-header nav links were labeled "Go to …", which was repeated as the column name for every cell. They're now labeled with just the date (navLinkHint is still used for other nav links)

FIX: JAWS switched to forms mode when Tab landed on an event, so the arrow keys did nothing. DayGrid, TimeGrid, MultiMonth and Resource Timeline are now a table (cells role="cell") rather than a grid. Resource Timeline with nested resources or row groups remains a treegrid (#6641)

FIX: Screen readers announced empty "group"s within day cells. Empty wrappers are now role="presentation", and background events, non-business hours and selection highlights are aria-hidden

FIX: Resource TimeGrid/DayGrid with filterResourcesWithEvents and datesAboveResources, the blank resource header was an empty columnheader, flagged by axe. It's now an empty cell

FIX: Hidden elements used for measurement (+more link, Resource Timeline expander and column divider) use visibility: hidden instead of inert, so none can be focused or read by screen readers

Changelog

Sourced from fullcalendar's changelog.

v7.1.3

Bugfixes

FIX: Unable to drag events in DayGrid views when using React 18 Strict Mode (#8119)

FIX: event.setProp('resourceEditable', ...) was ignored with a warning (#5166)

FIX: React "Maximum update depth exceeded" when validRange, visibleRange or hiddenDays is given as a new-but-equal value each render and datesSet sets state (#7069)

FIX: When slotMaxTime is beyond 24h, the now-indicator disappears after midnight in Timeline views, and its arrow disappears in TimeGrid views (#6394)

FIX: eventDrop reports oldResource/newResource when an event that isn't resource-editable is dragged over another resource, even though its resource doesn't change (#4943)

Locales

FEATURE: Tajik locale, available as tg (#8066)

FEATURE: Belarusian locale, available as be (#7839)

FIX: Bulgarian accessibility hints for navigation, more-links, and closing popovers (#7494)

FIX: German and Austrian German list-view hint read "Terminübersichtesansicht" (#7788)

FIX: Czech today button said "now" instead of "today" (#7674)

FIX: Korean navigation, year, list-view, and more-link translations (#8037)

FIX: Farsi empty-calendar and more-link text, year navigation, and accessibility hints (#8033, #7546)

FIX: Norwegian Nynorsk empty-calendar text and accessibility hints (#8083, #6050)

v7.1.2

Accessibility Fixes

FIX: Events in DayGrid cells, TimeGrid columns, Timeline lanes and +more popovers are enclosed in a list (role="list", each event in a role="listitem" wrapper), so screen readers can step through them one at a time instead of reading a day or lane as one block

FIX: List view, events with a url lost their link semantics, because the listitem role was on the event itself. Events are now wrapped in list items (#7567)

FIX: Day headers (without navLinks), TimeGrid's week-number header and "Timed" row header were read as empty and flagged by axe, because their text was only an aria-label. The text is now visually-hidden content (#7566, #6641)

FIX: DayGrid day cells' aria-label was ignored or read as blank. The full date is now visually-hidden content, only in cells showing a day number (otherwise the column header already reads the date) (#7566, #6637, #6641, #7502)

FIX: Column-header nav links were labeled "Go to …", which was repeated as the column name for every cell. They're now labeled with just the date (navLinkHint is still used for other nav links)

FIX: JAWS switched to forms mode when Tab landed on an event, so the arrow keys did nothing. DayGrid, TimeGrid, MultiMonth and Resource Timeline are now a table (cells role="cell") rather than a grid. Resource Timeline with nested resources or row groups remains a treegrid (#6641)

FIX: Screen readers announced empty "group"s within day cells. Empty wrappers are now role="presentation", and background events, non-business hours and selection highlights are aria-hidden

FIX: Resource TimeGrid/DayGrid with filterResourcesWithEvents and datesAboveResources, the blank resource header was an empty columnheader, flagged by axe. It's now an empty cell

FIX: Hidden elements used for measurement (+more link, Resource Timeline expander and column divider) use visibility: hidden instead of inert, so none can be focused or read by screen readers

Commits

5cb81e9 Bump fullcalendar versions
b4a903b v6 notice in v7 readmes
8b78a24 Update Options Reference link
2642b59 Bump
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the frontend-libs group with 2 updates: [@fullcalendar/rrule](https://github.com/fullcalendar/fullcalendar/tree/HEAD/packages/rrule) and [fullcalendar](https://github.com/fullcalendar/fullcalendar/tree/HEAD/packages/vanilla). Updates `@fullcalendar/rrule` from 7.1.1 to 7.1.3 - [Release notes](https://github.com/fullcalendar/fullcalendar/releases) - [Changelog](https://github.com/fullcalendar/fullcalendar/blob/main/CHANGELOG.md) - [Commits](https://github.com/fullcalendar/fullcalendar/commits/v7.1.3/packages/rrule) Updates `fullcalendar` from 7.1.1 to 7.1.3 - [Release notes](https://github.com/fullcalendar/fullcalendar/releases) - [Changelog](https://github.com/fullcalendar/fullcalendar/blob/main/CHANGELOG.md) - [Commits](https://github.com/fullcalendar/fullcalendar/commits/v7.1.3/packages/vanilla) --- updated-dependencies: - dependency-name: "@fullcalendar/rrule" dependency-version: 7.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-libs - dependency-name: fullcalendar dependency-version: 7.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-libs ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-19T08:08:24Z

Labels

The following labels could not be found: dependencies, engine. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

socket-security · 2026-10-19T08:08:45Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@fullcalendar/rrule@7.1.1 ⏵ 7.1.3				⁺³
	fullcalendar@7.1.1 ⏵ 7.1.3			⁺¹	⁺³

View full report

underpostnet merged commit 34a3170 into master Oct 22, 2026
14 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/frontend-libs-5f70088a0a branch October 22, 2026 15:14

Navigation Menu

Repository navigation

deps(engine): bump the frontend-libs group with 2 updates - #205

deps(engine): bump the frontend-libs group with 2 updates#205
underpostnet merged 1 commit into
masterfrom
dependabot/npm_and_yarn/frontend-libs-5f70088a0a

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

socket-security Bot commented Oct 19, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

v7.1.3

Bugfixes

Locales

v7.1.2

Accessibility Fixes

v7.1.3

Bugfixes

Locales

v7.1.2

Accessibility Fixes

v7.1.3

Bugfixes

Locales

v7.1.2

Accessibility Fixes

v7.1.3

Bugfixes

Locales

v7.1.2

Accessibility Fixes

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Labels

Uh oh!

socket-security Bot commented Oct 19, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant