Skip to content

chore(deps): bump the minor-and-patch group in /frontend with 7 updates - #1412

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-and-patch-8663a63b75
Open

chore(deps): bump the minor-and-patch group in /frontend with 7 updates#1412
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-and-patch-8663a63b75

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /frontend with 7 updates:

Package From To
@microlink/react-json-view 1.31.42 1.31.43
framer-motion 14.6.0 14.7.1
posthog-js 1.438.24 1.441.2
react-redux 9.3.0 9.3.1
react-router-dom 7.18.4 7.18.5
baseline-browser-mapping 2.11.33 2.11.34
oxlint 1.89.0 1.90.0

Updates @microlink/react-json-view from 1.31.42 to 1.31.43

Release notes

Sourced from @​microlink/react-json-view's releases.

v1.31.43

What's Changed

Full Changelog: microlinkhq/react-json-view@v1.31.42...v1.31.43

Changelog

Sourced from @​microlink/react-json-view's changelog.

1.31.43 (2026-10-27)

Commits

Updates framer-motion from 14.6.0 to 14.7.1

Changelog

Sourced from framer-motion's changelog.

[14.7.1] 2026-10-27

Fixed

  • Demote transforms to CPU when interrupted by layout animations.

[14.7.0] 2026-10-27

Added

  • animate: Mutable timeline sequences.
  • animate: Relative label offsets for timeline sequences.
  • useScroll: Returns scrollXLength and scrollYLength.
  • Reorder: Add LazyMotion-compatible import.
  • motion: transition.out prop for transitions when exiting a state.

Fixed

  • Fix one flash when changing playback speed of accelerated independent transform.
  • AnimatePresence: Improved positioning of popped elements.
  • spring: Fix overdamped springs snapping to target.
  • drag: Ref-constraints kept up-to-date after scroll.
  • motion: Animate layoutId elements relative to layoutRoot container.
  • motion: Bundle size reductions.
  • Moving background-color animations back to main thread for improved interpolation.
  • drag: Fix drag inertia stopping dead after a fast flick from a standstill.
  • layout: layoutId elements now animate relative to their closest layoutRoot ancestor, if any.
  • layout: layoutId may be changed after mount.
  • useScroll: Fix tracking in horizontal containers.
  • useSpring: Reduced bundle size by 30%.
Commits
  • 9ba8846 v14.7.1
  • ed82763 Updating changelog
  • da6d6d3 Merge pull request #4023 from motiondivision/claude/project-thread-silaya
  • 4e72d8d Say what demote() returning true means
  • 075a6a7 Test a child measured inside an ancestor rotating on the compositor (#4022)
  • 6c6edff Reset rotations again after moving them off the compositor for measuring (#4022)
  • 11f01c5 Test that layout measurements don't distort a rotation on the compositor (#4022)
  • 734d2f6 Merge pull request #4021 from motiondivision/claude/project-thread-2690wu
  • 320342f Say why holding with pause() leaves WebKit a ready time
  • dc23e95 Hold transform WAAPI animations by clearing startTime, not pause()
  • Additional commits viewable in compare view

Updates posthog-js from 1.438.24 to 1.441.2

Release notes

Sourced from posthog-js's releases.

posthog-js@1.441.2

1.441.2

Patch Changes

  • #5421 34833f2 Thanks @​frostfire575! - Session replay releases a removed shadow DOM host as soon as it leaves the page, instead of keeping it and its detached subtree in memory until the next full snapshot. (2026-10-28)

posthog-js@1.441.1

1.441.1

Patch Changes

  • #5222 6d12d24 Thanks @​posthog! - Fall back to Math.random when crypto.getRandomValues throws, so UUID generation no longer breaks capture. (2026-10-28)
  • Updated dependencies [6d12d24]:
    • @​posthog/browser-common@​0.10.1

posthog-js@1.441.0

1.441.0

Minor Changes

  • #5269 950d034 Thanks @​dustinbyrne! - Add $input_value to autocapture change events for fields marked data-ph-capture-value, or matched by the new autocapture.capture_value_css_selector_allowlist option (CSS selectors or an (element) => boolean predicate). (2026-10-28)

Patch Changes

  • Updated dependencies [950d034]:
    • @​posthog/browser-common@​0.10.0
    • @​posthog/types@​1.418.0

posthog-js@1.440.0

1.440.0

Minor Changes

  • #5406 285d874 Thanks @​marandaneto! - Add a single-tag browser SDK loader with URL or attribute tokens and optional deferred initialization. (2026-10-27)

Patch Changes

  • Updated dependencies [96d7ff2]:
    • @​posthog/core@​1.61.1

posthog-js@1.439.2

1.439.2

Patch Changes

... (truncated)

Commits
  • 4044a5c chore: update versions and lockfile [version bump]
  • 9d3fbe6 fix(browser-next): settle pending captureImmediate when the extension is disp...
  • 34833f2 fix(rrweb): port upstream shadow-root release on host removal (fixes #5419) (...
  • e4df2d5 feat: add next.js and nuxt server span context (#5315)
  • 096131d feat(node): add request context to OpenTelemetry spans (#5314)
  • 8dc2e88 chore: update versions and lockfile [version bump]
  • 68336df feat(mcp): add a sendToolsListEvent option (#5404)
  • a3e9ec3 chore: update versions and lockfile [version bump]
  • 8c136a8 fix(react-native): Capture touch autocapture events on Fabric instances (#5466)
  • fd7d0c9 chore: update versions and lockfile [version bump]
  • Additional commits viewable in compare view

Updates react-redux from 9.3.0 to 9.3.1

Release notes

Sourced from react-redux's releases.

v9.3.1

This bugfix release fixes connect type inference under TS 7, fixes several connect and Provider runtime bugs, adds dev-mode logging for errors thrown in mapStateToProps, and updates our build tooling and TypeScript support matrix.

[!WARNING] While connect is still published and technically supported, we officially deprecated connect in 9.3.0 and strongly recommend migrating to use the hooks APIs instead.

Changelog

connect Types and TS 7

We had reports that connect sometimes inferred the wrong props when mapStateToProps or mapDispatchToProps was a factory function. The connected component's props would collapse to {}, and a required prop would show up as "missing" at the call site.

Turns out the connect overloads typed those arguments as unions of the factory form (() => (state) => props) and the plain form. TS7 changed the ordering of which union member got selected, so this broke.

As Anders suggested in microsoft/typescript-go#977, we've split those unions into separate overloads listed in order of preference, factory form first. Overload matching no longer depends on how the compiler orders a union. We then applied the same fix to the mergeProps overloads, which still failed under TS 7.

Bug Fixes

Provider now uses serverState when it's a falsy value like 0, false, or ''. Previously it checked for truthiness, so a falsy root state fell back to the client store's state during SSR and hydration. null and undefined are still treated as "no server state".

A connected component's context prop is now honored in production. The assignment that picked up the custom context sat inside the development-only validation block. In production, a component with only a custom provider would throw, and one rendered under both providers would read the default provider's store.

connect no longer overrides a ref passed as a regular prop when forwardRef isn't enabled (#2251). With React 19's ref-as-prop, the wrapper was always passing its own ref (undefined without forwardRef), which replaced the one you passed in.

An explicit dependsOnOwnProps = false on a mapStateToProps or mapDispatchToProps function is now respected. We had been ignoring it for functions declared with two parameters, even though the option exists specifically for functions whose length isn't reliable.

Rendering <Provider> in a React Server Component without "use client" now throws a clear dev-mode error that tells you what's wrong, instead of failing with "useIsomorphicLayoutEffect is not a function" (#2082). Setups that resolve the react-server export condition already got a clear error. This covers the setups that don't.

mapStateToProps Error Logging

Since v8, an error thrown in mapStateToProps during a store update has been caught in the subscription callback and then effectively swallowed. The component just kept rendering its previous props (#1942). connect now logs those errors to console.error in development, so they show up in DevTools. Production behavior is unchanged.

TypeScript Support

The internal NoInfer helper type has been replaced with TypeScript's built-in NoInfer, which was added in TS 5.4. That makes TS 5.4 the minimum version for React-Redux's types. Our CI matrix now covers TS 5.6 through 5.9, 6.0, 7.0, and next.

Build Tooling

We've moved the repo to pnpm, Oxlint, and Oxfmt, and switched the library build from tsup to tsdown. The package exports layout is unchanged, but the build output comes from a different bundler. If you see any packaging or import problems with this release, please file an issue.

What's Changed

... (truncated)

Commits
  • 8e54f5b Release 9.3.1
  • 14ef3ca Merge pull request #2331 from JSap0914/fix/getDependsOnOwnProps-explicit-false
  • ff05531 Merge pull request #2252 from PSpSynedra/master
  • b591c94 Merge pull request #2389 from OskarEichler/codex/provider-state-selection
  • 7bb3092 Merge pull request #2342 from veksa/fix/provider-rsc-dev-check
  • 19e1f83 Merge pull request #2408 from reduxjs/ci/release-commit-skip-forks
  • 99b0bc2 Skip Release Commit workflow in forks
  • 0187826 Remove any casts from wrapMapToProps tests
  • d23a336 Merge remote-tracking branch 'origin/master' into pr-2331
  • 8705869 Trim Provider RSC check comments
  • Additional commits viewable in compare view

Updates react-router-dom from 7.18.4 to 7.18.5

Changelog

Sourced from react-router-dom's changelog.

v7.18.5

Patch Changes

Commits

Updates baseline-browser-mapping from 2.11.33 to 2.11.34

Commits
  • 4a311c7 Patch to 2.11.34 because browser or feature data changed
  • cadd64d Browser or feature data changed
  • 7439261 Updating static site
  • See full diff in compare view

Updates oxlint from 1.89.0 to 1.90.0

Release notes

Sourced from oxlint's releases.

oxlint v1.90.0

🚀 Features

  • cf34678 oxlint: Export Oxlintrc type (#28132) (Sysix)
  • 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
  • d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
  • 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)

🐛 Bug Fixes

  • 7f3c908 linter/eslint/array-callback-return: Check callbacks passed with extra arguments (#28133) (sarankumar)
  • 53be530 linter: Filter by type aware rules when looking up tsgolint rule severity (#28138) (NavpreetSSidhu)
  • e0f8937 react-compiler: Compile a try whose catch is unreachable instead of panicking (#28066) (Dunqing)
  • f5b625f linter/eslint/no-useless-concat: See through parenthesized expressions (#27984) (Rahul Kashyap)
  • 4629bb2 linter/jest/no-conditional-expect: Check function expression callbacks (#28055) (camc314)
  • 5c84098 semantic,linter: Report names with lone surrogates in enum and lint checks (#27991) (Dunqing)
  • f3705a9 linter/eslint/prefer-const: Skip fixers if any declarator is reassigned (#28008) (Prince Jain)
  • 4c0fa90 minifier,linter: Keep delete of constant members and later JSX keys (#27990) (Dunqing)
  • 0298062 linter/arrow-body-style: Keep type assertions when adding a block body (#27978) (Yan Almeida)
Changelog

Sourced from oxlint's changelog.

[1.90.0] - 2026-10-27

🚀 Features

  • 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
  • d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
  • 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)
Commits
  • 9b6fff4 release(apps): oxlint v1.90.0 && oxfmt v0.75.0 (#28191)
  • 831cdf1 feat(oxlint): require mininum oxlint-tsgolint version v7.0.2005 (#28118)
  • d1b00f4 feat(linter/typescript): implement no-unsafe-enum-assignment rule (#28117)
  • 165c91f feat(linter/typescript/await-thenable): support allowMixedPromiseArrays opt...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor-and-patch group in /frontend with 7 updates
4ecd50c 
Bumps the minor-and-patch group in /frontend with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@microlink/react-json-view](https://github.com/microlinkhq/react-json-view) | `1.31.42` | `1.31.43` |
| [framer-motion](https://github.com/motiondivision/motion) | `14.6.0` | `14.7.1` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.438.24` | `1.441.2` |
| [react-redux](https://github.com/reduxjs/react-redux) | `9.3.0` | `9.3.1` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.4` | `7.18.5` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.33` | `2.11.34` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.89.0` | `1.90.0` |


Updates `@microlink/react-json-view` from 1.31.42 to 1.31.43
- [Release notes](https://github.com/microlinkhq/react-json-view/releases)
- [Changelog](https://github.com/microlinkhq/react-json-view/blob/master/CHANGELOG.md)
- [Commits](microlinkhq/react-json-view@v1.31.42...v1.31.43)

Updates `framer-motion` from 14.6.0 to 14.7.1
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.6.0...v14.7.1)

Updates `posthog-js` from 1.438.24 to 1.441.2
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.438.24...posthog-js@1.441.2)

Updates `react-redux` from 9.3.0 to 9.3.1
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](reduxjs/react-redux@v9.3.0...v9.3.1)

Updates `react-router-dom` from 7.18.4 to 7.18.5
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.5/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.5/packages/react-router-dom)

Updates `baseline-browser-mapping` from 2.11.33 to 2.11.34
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.11.33...v2.11.34)

Updates `oxlint` from 1.89.0 to 1.90.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.90.0/npm/oxlint)

---
updated-dependencies:
- dependency-name: "@microlink/react-json-view"
  dependency-version: 1.31.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: framer-motion
  dependency-version: 14.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: posthog-js
  dependency-version: 1.441.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-redux
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-router-dom
  dependency-version: 7.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: baseline-browser-mapping
  dependency-version: 2.11.34
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: oxlint
  dependency-version: 1.90.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 4, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants