chore(deps): bump the production-dependencies group across 1 directory with 26 updates

[dependabot]

Bumps the production-dependencies group with 26 updates in the / directory:

Package	From	To
@hookform/resolvers	5.2.2	5.4.0
@radix-ui/react-avatar	1.1.11	1.2.0
@radix-ui/react-dialog	1.1.15	1.1.17
@radix-ui/react-dropdown-menu	2.1.16	2.1.18
@radix-ui/react-label	2.1.8	2.1.10
@radix-ui/react-scroll-area	1.2.10	1.2.12
@radix-ui/react-select	2.2.6	2.3.1
@radix-ui/react-separator	1.1.8	1.1.10
@radix-ui/react-slot	1.2.4	1.3.0
@radix-ui/react-tooltip	1.2.8	1.2.10
@sentry/nextjs	10.51.0	10.59.0
@tanstack/react-query	5.100.9	5.101.0
@xyflow/react	12.10.2	12.11.0
isomorphic-dompurify	3.12.0	3.18.0
jotai	2.19.1	2.20.1
jotai-history	0.5.0	0.5.1
lucide-react	1.14.0	1.21.0
nanoid	5.1.11	5.1.15
next	16.2.4	16.2.9
radix-ui	1.4.3	1.6.0
react	19.2.5	19.2.7
react-colorful	5.6.1	5.7.0
react-dom	19.2.5	19.2.7
react-hook-form	7.75.0	7.80.0
tailwind-merge	3.5.0	3.6.0
zod	4.4.2	4.4.3

Updates @hookform/resolvers from 5.2.2 to 5.4.0

Release notes

Sourced from @​hookform/resolvers's releases.

v5.4.0

5.4.0 (2026-05-21)

Features

• feat: add ata-validator resolver (#845)

Fixes

• fix issue with toNestErrors.ts (#848)

• add guidance on passing context to yupResolver (useForm context) (#835) (3d29924)

Commits

• 3d29924 feat: add guidance on passing context to yupResolver (useForm context) (#835)
• 56b68f3 feat: 5.3.0
• cf8562d update readme on ata-validator
• 5e5b610 fix issue with toNestErrors.ts (#848)
• 72aacf8 Revise supported versions in SECURITY.md
• ad89a20 feat: add ata-validator resolver (#845)
• 02286db ci: updated publish workflow to use node 24 (#838)
• 2e9bc7c Fix(zodResolver): error paths in complex unions #787 (#819)
• See full diff in compare view

Updates @radix-ui/react-avatar from 1.1.11 to 1.2.0

Changelog

Sourced from @​radix-ui/react-avatar's changelog.

1.2.0

• Fixed several edge cases with Avatar's loading state
  • An avatar's fallback would not be displayed again if its image component unmounted. This is now fixed.
  • Rendering multiple Avatar.Image components per Avatar.Root was never supported and results in buggy, unpredictable behavior. We now warn about this in development.
  • Zero-sized images were treated as loading, meaning that onLoadingStatusChange is never called once loaded. A zero-sized image now triggers an error status on load.

Other updates

• Fixed console warnings to show in test environments.
• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.12

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-avatar since your current version.

Updates @radix-ui/react-dialog from 1.1.15 to 1.1.17

Changelog

Sourced from @​radix-ui/react-dialog's changelog.

1.1.17

• Removed dev-only warnings for dialogs when title and/or description is not rendered.
• Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12

1.1.16

• Fixed disabled pointer events in closed dialogs
• Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
• Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-dialog since your current version.

Updates @radix-ui/react-dropdown-menu from 2.1.16 to 2.1.18

Changelog

Sourced from @​radix-ui/react-dropdown-menu's changelog.

2.1.18

• Fixed a bug where menus and submenus remained open after a window loses focus.
• Updated dependencies: @radix-ui/react-menu@2.1.18, @radix-ui/react-primitive@2.1.6

2.1.17

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-menu@2.1.17, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-dropdown-menu since your current version.

Updates @radix-ui/react-label from 2.1.8 to 2.1.10

Changelog

Sourced from @​radix-ui/react-label's changelog.

2.1.10

• Updated dependencies: @radix-ui/react-primitive@2.1.6

2.1.9

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-primitive@2.1.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-label since your current version.

Updates @radix-ui/react-scroll-area from 1.2.10 to 1.2.12

Changelog

Sourced from @​radix-ui/react-scroll-area's changelog.

1.2.12

• Stabilized the viewport style tag unless the nonce changes.
• Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.2.11

• Fixed missing data-state attribute for Scroll Area scrollbars
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-direction@1.1.2, @radix-ui/number@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-scroll-area since your current version.

Updates @radix-ui/react-select from 2.2.6 to 2.3.1

Changelog

Sourced from @​radix-ui/react-select's changelog.

2.3.1

• Allowed a Select.Item with an empty string value to act as a "clear" option. Selecting it resets the selection back to the placeholder, restoring the native <select> behavior for optional selects.
• Fixed a bug where typeahead search resulted in focusing an element that no longer exists.
• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

2.3.0

• Added unstable Provider and BubbleInput parts to Select. Select.unstable_Provider sets up Select's context and state without implicitly rendering the hidden native select, and Select.unstable_BubbleInput exposes that previously internal native select so consumers can recompose it explicitly. Select continues to render both by default.
• Added support for presence-based exit animations in Select
• Fixed Select hidden input so it submits empty string when no value is selected
• Fixed placeholder rendering when a controlled Select is reset to an empty value
• Added missing __selectScope prop to PopperContent component
• Fixed Select closing unexpectedly after touch-scrolling its content when rendered inside an open shadow DOM
• Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
• Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
• Fixed SelectValue logging invalid prop errors when used with both asChild and a placeholder
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/number@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-visually-hidden@1.2.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-select since your current version.

Updates @radix-ui/react-separator from 1.1.8 to 1.1.10

Changelog

Sourced from @​radix-ui/react-separator's changelog.

1.1.10

• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.9

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-primitive@2.1.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-separator since your current version.

Updates @radix-ui/react-slot from 1.2.4 to 1.3.0

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.

const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>("Slot");

1.2.5

• Fixed infinite re-render loop in React 19 caused by Slot creating a new ref callback on every render
• Added support for nested Slottable via a render prop, so a slotted element can be wrapped while still merging Slot props and refs onto it
• Added repository.directory to all package.json files
• Improved error messages for invalid slot children
• Updated dependencies: @radix-ui/react-compose-refs@1.1.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-slot since your current version.

Updates @radix-ui/react-tooltip from 1.2.8 to 1.2.10

Changelog

Sourced from @​radix-ui/react-tooltip's changelog.

1.2.10

• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

1.2.9

• Fixed runtime error when event target is non-Node
• Fixed a Tooltip bug so that skipDelayDuration={0} works as expected. Previously, the open delay could still be skipped when moving between triggers.
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-visually-hidden@1.2.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-tooltip since your current version.

Updates @sentry/nextjs from 10.51.0 to 10.59.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.59.0

Important Changes

• feat(react-router): Add support for React Router v8 (#21633)

  The SDK now supports React Router v8, in both the framework and SPA (@sentry/react) modes.

• feat(react): Add version-agnostic React Router SPA exports (#21633)

  @sentry/react now exports version-agnostic wrappers for React Router v6+ SPA instrumentation. The new exports replace the version-specific V6/V7 variants, which are now deprecated:

  Deprecated	New
  reactRouterV6BrowserTracingIntegration / V7	reactRouterBrowserTracingIntegration
  withSentryReactRouterV6Routing / V7	wrapReactRouterRouting
  wrapCreateBrowserRouterV6 / V7	wrapCreateBrowserRouter
  wrapCreateMemoryRouterV6 / V7	wrapCreateMemoryRouter
  wrapUseRoutesV6 / V7	wrapUseRoutes

  The deprecated exports continue to work and will be removed in the next major version.

Other Changes

• feat(aws-serverless): Instrument aws-sdk clients >= 3.1046.0 (#21548)
• feat(bun): Add orchestrion bun build plugin (#21410)
• feat(cloudflare): Instrument sync KV (#21316)
• feat(core): Disable gen_ai message truncation by default when streamGenAiSpans is enabled (#21603)
• feat(deno): Add orchestrion deno runtime hook (#21451)
• feat(hono): Extend peer dependency range (#21550)
• feat(node): Collapse orchestrion opt-in to a single option (#20900)
• fix: Diagnostics channel Node v18 (#21631)
• fix(browser): Clean up pageload readystatechange listener (#21632)
• fix(core): Capture scopes on span before emitting spanStart event (#21644)
• fix(core): Defer TwP sampling by reading trace state from the scope (#21549)
• fix(core): Prevent outgoing HTTP instrumentation from crashing on // request paths (#21645)
• fix(core): Set production as default sentry.environment attribute value on streamed spans (#21637)
• fix(nextjs): Register safe random ID context at module load (#21573)

• chore: Change deprecation/deprecation to oxlint equivalent (#21604)
• chore: Switch license headers to SPDX format (#21357)
• chore(deps-dev): Bump esbuild from 0.20.0 to 0.28.1 (#21511)
• chore(deps): Bump esbuild from 0.25.0 to 0.28.1 in /dev-packages/e2e-tests/test-applications/node-profiling-esm (#21514)
• chore(deps): Bump react-router-6 to 6.30.4 (#21566)
• ci: Assign server team as codeowner for server-utils package (#21601)
• ci: Dedup flaky test issues across esm/cjs variants (#21595)
• ci: Do not apply Bug label to flaky test issues (#21593)

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.59.0

Important Changes

• feat(react-router): Add support for React Router v8 (#21633)

  The SDK now supports React Router v8, in both the framework and SPA (@sentry/react) modes.

• feat(react): Add version-agnostic React Router SPA exports (#21633)

  @sentry/react now exports version-agnostic wrappers for React Router v6+ SPA instrumentation. The new exports replace the version-specific V6/V7 variants, which are now deprecated:

  Deprecated	New
  reactRouterV6BrowserTracingIntegration / V7	reactRouterBrowserTracingIntegration
  withSentryReactRouterV6Routing / V7	wrapReactRouterRouting
  wrapCreateBrowserRouterV6 / V7	wrapCreateBrowserRouter
  wrapCreateMemoryRouterV6 / V7	wrapCreateMemoryRouter
  wrapUseRoutesV6 / V7	wrapUseRoutes

  The deprecated exports continue to work and will be removed in the next major version.

Other Changes

• feat(aws-serverless): Instrument aws-sdk clients >= 3.1046.0 (#21548)
• feat(bun): Add orchestrion bun build plugin (#21410)
• feat(cloudflare): Instrument sync KV (#21316)
• feat(core): Disable gen_ai message truncation by default when streamGenAiSpans is enabled (#21603)
• feat(deno): Add orchestrion deno runtime hook (#21451)
• feat(hono): Extend peer dependency range (#21550)
• feat(node): Collapse orchestrion opt-in to a single option (#20900)
• fix: Diagnostics channel Node v18 (#21631)
• fix(browser): Clean up pageload readystatechange listener (#21632)
• fix(core): Capture scopes on span before emitting spanStart event (#21644)
• fix(core): Defer TwP sampling by reading trace state from the scope (#21549)
• fix(core): Prevent outgoing HTTP instrumentation from crashing on // request paths (#21645)
• fix(core): Set production as default sentry.environment attribute value on streamed spans (#21637)
• fix(nextjs): Register safe random ID context at module load (#21573)

• chore: Change deprecation/deprecation to oxlint equivalent (#21604)
• chore: Switch license headers to SPDX format (#21357)
• chore(deps-dev): Bump esbuild from 0.20.0 to 0.28.1 (#21511)
• chore(deps): Bump esbuild from 0.25.0 to 0.28.1 in /dev-packages/e2e-tests/test-applications/node-profiling-esm (#21514)
• chore(deps): Bump react-router-6 to 6.30.4 (#21566)
• ci: Assign server team as codeowner for server-utils package (#21601)
• ci: Dedup flaky test issues across esm/cjs variants (#21595)

... (truncated)

Commits

• 2cb0ef6 release: 10.59.0
• f77b265 Merge pull request #21655 from getsentry/prepare-release/10.59.0
• 8e32a8d meta(changelog): Update changelog for 10.59.0
• 50fe5d9 fix: Diagnostics channel Node v18 (#21631)
• 9c765e0 feat(react-router): support react router v8 (#21633)
• 815c1cf feat(deps): Bump @​babel/core from 7.29.0 to 7.29.6 (#21574)
• a520447 ref(tanstackstart-react): Use @sentry/conventions (#21498)
• 38a0485 test(cloudflare): Remove mock in DO tests (#21634)
• cb69761 feat(deno): Add orchestrion deno runtime hook (#21451)
• 1e057ba chore(deps): Bump esbuild from 0.25.0 to 0.28.1 in /dev-packages/e2e-tests/te...
• Additional commits viewable in compare view

Updates @tanstack/react-query from 5.100.9 to 5.101.0

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.0

Patch Changes

• Updated dependencies [3042860, e631dc3]:
  • @​tanstack/query-devtools@​5.101.0
  • @​tanstack/react-query@​5.101.0

@​tanstack/react-query-next-experimental@​5.101.0

Patch Changes

• #10857 7cf5923 - fix(react-query-next-experimental): replace deprecated 'isServer' with 'environmentManager.isServer()'

• Updated dependencies []:

  • @​tanstack/react-query@​5.101.0

@​tanstack/react-query-persist-client@​5.101.0

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.101.0
  • @​tanstack/react-query@​5.101.0

@​tanstack/react-query@​5.101.0

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.101.0

@​tanstack/react-query-devtools@​5.100.14

Patch Changes

• Updated dependencies [ed20b6d]:
  • @​tanstack/react-query@​5.100.14
  • @​tanstack/query-devtools@​5.100.14

@​tanstack/react-query-next-experimental@​5.100.14

Patch Changes

• Updated dependencies [ed20b6d]:
  • @​tanstack/react-query@​5.100.14

@​tanstack/react-query-persist-client@​5.100.14

Patch Changes

• Updated dependencies [ed20b6d]:
  • @​tanstack/react-query@​5.100.14
  • @​tanstack/query-persist-client-core@​5.100.14

@​tanstack/react-query@​5.100.14

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.0

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.101.0

5.100.14

Patch Changes

• fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)

• Updated dependencies []:

  • @​tanstack/query-core@​5.100.14

5.100.13

Patch Changes

• Updated dependencies [d423168]:
  • @​tanstack/query-core@​5.100.13

5.100.12

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.12

5.100.11

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.11

5.100.10

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.10

Commits

• f3d8d2a ci: Version Packages (#10774)
• 532bb29 fix(tests): disable local coverage instrumentation (#10776)
• ba6e7be ci: Version Packages (#10767)
• ed20b6d fix(react): do not go into optimistic fetching state when not subscribed (#10...
• 05cf2bc ci: Version Packages (#10758)
• d423168 fix(query-core): use built-in NoInfer for generic indexed-access types (#10593)
• 5ff4f69 ci: Version Packages (#10755)
• 3e85350 ci: Version Packages (#10706)
• 9d2692c ci: Version Packages (#10695)
• 74fa05e chore(tsconfig.json): narrow 'include' pattern to prevent TS6053 race conditi...
• See full diff in compare view

Updates @xyflow/react from 12.10.2 to 12.11.0

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.0

12.11.0

Minor Changes

• #5677 e6661de - Add autoPanOnSelection to auto-pan when user drags a selection close to the edge of the viewport.

Patch Changes

• #5791 732c8eb - Adds a type error when handleId is used without handleType in useNodeConnections

• #5793 c5c853d - Dev Warnings now use library-specific messaging with the correct documentation links.

• #5776 0441e9f - Export NodeHandle type

• #5755 88737f9 - Add @types/react and @types/react-dom as optional peer dependencies to prevent issues with pnpm strict mode (hoist: false)

• #5105 076ad38 - Fix type for event passed to onNodeDrag

• #5784 7055140 - Fix node resizing possible beyond absolute extents

• #5769 ad4d547 - Use useEffect for StoreUpdater to restore previous behaviour

• Updated dependencies [732c8eb, c5c853d, e6661de, 737194d, 40660cd, 4806e7c, 7055140]:

  • @​xyflow/system@​0.0.77

Changelog

Sourced from @​xyflow/react's changelog.

12.11.0

Minor Changes

• #5677 e6661de - Add autoPanOnSelection to auto-pan when user drags a selection close to the edge of the viewport.

Patch Changes

• #5791 732c8eb - Adds a type error when handleId is used without handleType in useNodeConnections

• #5793 c5c853d - Dev Warnings now use library-specific messaging with the correct documentation links.

• #5776 0441e9f - Export NodeHandle type

• #5755 88737f9 - Add @types/react and @types/react-dom as optional peer dependencies to prevent issues with pnpm strict mode (hoist: false)

• #5105 076ad38 - Fix type for event passed to onNodeDrag

• #5784 7055140 - Fix node resizing possible beyond absolute extents

• #5769 ad4d547 - Use useEffect for StoreUpdater to restore previous behaviour

• Updated dependencies [732c8eb, c5c853d, e6661de, 737194d, 40660cd, 4806e7c, 7055140]:

  • @​xyflow/system@​0.0.77

Commits

• 6970ded chore(packages): bump
• c9db70d Merge branch 'main' of https://github.com/xyflow/xyflow into 5780-svelte-flow...
• af23aef chore: cleanup error messages
• 9d58ab9 fix: make error messages framework-specific
• e52bb55 Merge pull request #5105 from thedanchez/xydrag-type-generics
• 03e3dc0 Merge pull request #5755 from nielskaspers/fix/issue-5738-react-types-peer-dep
• caebfd6 Merge pull request #5784 from xyflow/fix-node-resizer-again
• 9dc7ec9 chore(react): fix util function
• c4e7833 Merge pull request #5785 from xyflow/fix-useless-promises
• 01fb1f1 chore(system): add UseNodeConnectionsParams type
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​xyflow/react since your current version.

Updates isomorphic-dompurify from 3.12.0 to 3.18.0

Release notes

Sourced from isomorphic-dompurify's releases.

3.18.0: Updated dependencies

• dompurify 3.4.10 -> 3.4.11
• vitest 4.1.8 -> 4.1.9
• pnpm/action-setup 6 -> 6.0.8

3.17.0: Updated dependencies

• dompurify 3.4.8 -> 3.4.10
• @​biomejs/biome 2.4.16 -> 2.5.0
• pnpm 11.4.0 -> 11.6.0

3.16.0: Updated dependencies

• dompurify 3.4.7 -> 3.4.8
• vitest 4.1.7 -> 4.1.8
• lefthook 2.1.8 -> 2.1.9

3.15.0: Updated dependencies

• dompurify 3.4.5 -> 3.4.7
• @​biomejs/biome 2.4.15 -> 2.4.16
• vitest 4.1.6 -> 4.1.7
• packageManager pnpm 11.1.3 -> 11.4.0

3.14.0: Updated dependencies

What's Changed

• chore(deps): bump dompurify from 3.4.3 to 3.4.5 by @​dependabot[bot]
• chore: Allowed esbuild and disallowed lefthook for ci.
• chore: Added homepage URL to package.json.

Full Changelog: kkomelin/isomorphic-dompurify@3.13.0...3.14.0

3.13.0: Updated dependencies

What's Changed

• chore(deps-dev): bump vitest from 4.1.5 to 4.1.6 by @​dependabot[bot] in kkomelin/isomorphic-dompurify#435
• chore(deps-dev): bump @​types/jsdom from 28.0.1 to 28.0.3 by @​dependabot[bot] in kkomelin/isomorphic-dompurify#436
• chore(deps-dev): bump @​biomejs/biome from 2.4.14 to 2.4.15 by @​dependabot[bot] in kkomelin/isomorphic-dompurify#434
• chore(deps): bump dompurify from 3.4.2 to 3.4.3 by @​dependabot[bot] in kkomelin/isomorphic-dompurify#437

Full Changelog: kkomelin/isomorphic-dompurify@3.12.0...3.13.0

Commits

• 1d5745c chore: release v3.18.0
• e1202c5 chore(deps): bump dompurify from 3.4.10 to 3.4.11
• ab9cc6b chore(deps-dev): bump vitest from 4.1.8 to 4.1.9
• 60491d6 chore(deps): bump pnpm/action-setup from 6 to 6.0.8
• 4b0f0db chore: Updated dependencies.
• 1e537bd chore(deps): bump dompurify from 3.4.8 to 3.4.9
• bee551b chore: Bump version to 3.16.0 and update dependencies.
• e03b0c0 chore(deps): bump dompurify from 3.4.7 to 3.4.8
• 86abe8b chore(deps-dev): bump lefthook from 2.1.8 to 2.1.9
• 284831c chore(deps-dev): bump vitest from 4.1.7 to 4.1.8
• Additional commits viewable in compare view

Updates jotai from 2.19.1 to 2.20.1

Release notes

Sourced from jotai's releases.

v2.20.1

This release includes a few small fixes.

What's Changed

• fix(vanilla/utils/atomWithStorage): apply reviver when parsing subscription updates by @​chatman-media in pmndrs/jotai#3326
• fix(internals): throw stackoverflow errors synchronously by @​dai-shi in pmndrs/jotai#3330

New Contributors

• @​15MariamS made their first contribution in pmndrs/jotai#3321
• @​sapphi-red made their first contribution in pmndrs/jotai#3327
• @​DucMinhNe made their first contribution in pmndrs/jotai#3331
• @​chatman-media made their first contribution in pmndrs/jotai#3326

Full Changelog: pmndrs/jotai@v2.20.0...v2.20.1

v2.20.0

This release improves performance in high-throughput scenarios. Huge kudos to @​dmaskasky!

What's Changed

• breaking(internals): avoid getInternalBuildingBlock function by @​dai-shi in pmndrs/jotai#3293
• refactor(internals): Rev3 type narrowing for onMount hooks by @​dmaskasky in pmndrs/jotai#3311
• fix(internals): guard atomOnInit hook with hasOnInit by @​dmaskasky in pmndrs/jotai#3312
• refactor(internals): lazy hooks in ensureAtomState for new atom state by @​dmaskasky in pmndrs/jotai#3313

Full Changelog: pmndrs/jotai@v2.19.1...v2.20.0

Commits

• ddd3600 v2.20.1
• 241225c chore(deps): update dev dependencies (#3335)
• 2f233f9 chore(docs): note about stack overflow (#3332)
• 32708c8 fix(internals): throw stackoverflow errors synchronously (#3330)
• 563f059 fix(vanilla/utils/atomWithStorage): apply reviver when parsing subscription u...
• 22ae563 docs(storage): fix unbalanced parenthesis in RESET example (#3331)
• 024ec4f chore(test): add onMount test with sibling deps (#3329)
• 48284a3 feat(website): add jotai-rolldown (#3328)
• 802c27e feat(website): update Vite guide for Vite 8 (#3327)
• d20c2fe docs: update "derive" docs to match the new eager APIs (#3325)
• Additional commits viewable in compare view

Updates jotai-history from 0.5.0 to 0.5.1

Commits

...

Description has been truncated

[dependabot]

Labels

The following labels could not be found: chore. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
jagalchi	Ready	Preview, Comment	Jun 22, 2026 12:18am

[github-actions]

📋 Code Review Guide / 코드 리뷰 가이드

1. 리뷰 기준 / Review Criteria

항목	확인 사항
기능 / Function	요구사항대로 동작하는가?
코드 품질 / Quality	가독성, 네이밍, 구조가 적절한가?
컨벤션 / Convention	프로젝트 컨벤션을 준수하는가?
테스트 / Test	테스트가 충분한가?
성능 / Performance	불필요한 렌더링, 비효율적인 코드가 없는가?
보안 / Security	보안 취약점은 없는가?

2. 코멘트 타입 / Comment Types

타입	설명
Suggestion	개선 제안 (선택적)
Question	의도 확인 질문
Issue	반드시 수정 필요
Praise	좋은 코드 칭찬
Note	참고 사항 공유

3. 승인 조건 / Approval Requirements

• ✅ 최소 1명의 Approve 필수
• ✅ 모든 Issue 코멘트 해결
• ✅ CI 테스트 통과
• ✅ 충돌 해결 완료