chore(deps): bump the npm-prod-minor group with 7 updates by dependabot[bot] · Pull Request #154 · brainstormforce/sureforms-public

dependabot · 2026-10-19T07:59:40Z

Bumps the npm-prod-minor group with 7 updates:

Package	From	To
@tanstack/react-query	`5.90.10`	`5.104.3`
autoprefixer	`10.4.21`	`10.6.1`
date-fns	`4.1.0`	`4.4.0`
dompurify	`3.3.3`	`3.4.17`
react-hot-toast	`2.5.2`	`2.6.1`
tailwind-merge	`3.3.1`	`3.7.0`
use-debounce	`10.0.4`	`10.1.1`

Updates @tanstack/react-query from 5.90.10 to 5.104.3

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.104.3

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.104.3

@tanstack/query-devtools@5.104.3

@tanstack/react-query-next-experimental@5.104.3

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.104.3

@tanstack/react-query-persist-client@5.104.3

Patch Changes

Updated dependencies [ed4d849]:

@tanstack/query-persist-client-core@5.104.3

@tanstack/react-query@5.104.3

@tanstack/react-query@5.104.3

Patch Changes

Updated dependencies [0f15bc9]:

@tanstack/query-core@5.104.3

@tanstack/react-query-devtools@5.104.2

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.104.2

@tanstack/react-query@5.104.2

@tanstack/react-query-next-experimental@5.104.2

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.104.2

@tanstack/react-query-persist-client@5.104.2

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.104.2

@tanstack/react-query@5.104.2

@tanstack/react-query@5.104.2

Patch Changes

Updated dependencies [03e8c39]:

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.104.3

Patch Changes

Updated dependencies [0f15bc9]:

@tanstack/query-core@5.104.3

5.104.2

Patch Changes

Updated dependencies [03e8c39]:

@tanstack/query-core@5.104.2

5.104.1

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.104.1

5.104.0

Minor Changes

#11650 5279b05 - Build projects with Vite 8

Patch Changes

Updated dependencies [5279b05]:

@tanstack/query-core@5.104.0

5.103.3

Patch Changes

#11647 1c9693e - fix(codemods): avoid copying unnecessary files from codemods project

Updated dependencies []:

@tanstack/query-core@5.103.3

5.103.2

Patch Changes

Updated dependencies [8a28904]:

@tanstack/query-core@5.103.2

5.103.1

Patch Changes

... (truncated)

Commits

ee47993 ci: Version Packages (#11998)
0f15bc9 fix(query-core): preserve union narrowing in setQueryData updaters (#11935)
b699b52 ci: Version Packages (#11849)
e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
833062c chore: replace prettier with oxfmt (#11939)
d0cfa6a chore: replace eslint with oxlint (#11938)
0012ec1 docs(react-query): add JSDoc to the properties of the exported interfaces and...
b5e8e7b docs(react-query): add JSDoc to the exported classes, methods, and arrow func...
01abab3 docs(*): note that 'throwOnError' makes the hook rethrow the errors of 'mutat...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @tanstack/react-query since your current version.

Updates autoprefixer from 10.4.21 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

10.5.4

Fixed prefixed rule duplication (by @xianjianlf2).

10.5.3

Fixed brackets and gradient parser (@alanturing881).

10.5.2

Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

10.5.0 “Each Endeavouring, All Achieving”

Added mask-position-x and mask-position-y support (by @toporek).

10.4.27

Removed development key from package.json.

10.4.26

Reduced package size.

10.4.25

Fixed broken gradients on CSS Custom Properties (by @serger777).

10.4.24

Made Autoprefixer a little faster (by @Cherry).

10.4.23

Reduced dependencies (by @hyperz111).

10.4.22

Fixed stretch prefixes on new Can I Use database.

Updated fraction.js.

Changelog

Sourced from autoprefixer's changelog.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

10.5.4

Fixed prefixed rule duplication (by @xianjianlf2).

10.5.3

Fixed brackets and gradient parser (@alanturing881).

10.5.2

Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

10.5.0 “Each Endeavouring, All Achieving”

Added mask-position-x and mask-position-y support (by @toporek).

10.4.27

Removed development key from package.json.

10.4.26

Reduced package size.

10.4.25

Fixed broken gradients on CSS Custom Properties (by @serger777).

10.4.24

... (truncated)

Commits

c99614d Release 10.6.1 version
f1d08cb Update dependencies
cf1ebcb Fix grid gap inheritance from row-gap and column-gap longhands (#1557)
e1212dc Release 10.6.0 version
dac3c5f Add support for prefixing initial-letter (#1556)
b031690 Release 10.5.6 version
da65c36 Add warning when Autoprefixer can cover CSS for old Safari
604f8d9 Update dependencies
54608ca Fix old WebKit gradients with color hints (#1554)
7e81fff Release 10.5.5 version
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.

Updates date-fns from 4.1.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @ImRodry and @puneetdixit200 for their contributions.

Fixed

Fixed missing modularized optimization fallback (for Next.js and others). See #4193.

Fixed pt locale first day of week to be Sunday. See #4195 by @ImRodry.

Fixed zh-CN, zh-HK, and zh-TW locale month parsing for October, November, and December. See #4194 by @puneetdixit200.

v4.2.1

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

Commits

cd53d25 Promote to v4.4.0
d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
ee65753 Add root mise :format task
9f5bdf5 Add positional argument to test/smoke.sh script
651ead6 Split CDN bundles into separate @date-fns/cdn package
224c1a2 Deprecate type tests as attw hangs on date-fns package
7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
b6ad5ac Add flags to control package build script
424a783 Fix docs release after moving to monorepo setup
f95bcf1 (docs): Add missing tsx dependency
Additional commits viewable in compare view

Updates dompurify from 3.3.3 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @manus-pi

Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @uttej-badwane

Fixed the SMIL attributeName guard in XHTML mode, thanks @Koukyosyumei

Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @artiphishell

Added a purify-edge test runner as a compatibility check, thanks @anzal1

Clarified the IN_PLACE documentation in the README about possible risks

Updated several dependencies

DOMPurify 3.4.16

Fixed a problem with IN_PLACE node removal when working with hooks, thanks @manus-pi

Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @h-t-m

Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @ssi02014

Migrated from rollup to rolldown because performance, thanks @ssi02014

Bumped several dependencies where possible

DOMPurify 3.4.15

Added better clobbering hardening when XML content is involved, thanks @gnyselcuk

Added several smaller hardening and edge-case improvements, thanks @leechristensen

Bumped several dependencies where possible

DOMPurify 3.4.14

Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @AlirezaRouhbakhsh

Fixed a couple of edge cases with mixed document contexts, thanks @fishjojo1

Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @Jaybhade

Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation

Updated the documentation in several spots, README, wiki, etc., thanks @Akokonunes

Updated several development dependencies and CI workflow actions

DOMPurify 3.4.13

Fixed an issue with hook removal during IN_PLACE sanitization, thanks @koyokr

Fixed an issue with hooks potentially bypassing the clone guard, thanks @AkshayjainG

Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @AkshayjainG

Bumped several dependencies where possible

DOMPurify 3.4.12

Fixed an issue where a hook would not get called for custom elements, thanks @Rikuxx0

Hardened the handling of hooks removing elements, @mkrause-bee360

Added support for a few new SVG attributes, thanks @cbn-falias & @Develop-KIM

Hardened the handling of declarative partial updates

Updated the documentation is several spots, README, wiki, etc.

Bumped several dependencies where possible

DOMPurify 3.4.11

Fixed an issue with a leaky config for hooks via setConfig, thanks @trace37labs

Bumped vulnerable development dependencies to arrive at plain 0 with npm audit

Updated the osv-scanner suppression list as no vulnerable dependencies are left for now

Updated up the linting tool-chain and removed now-redundant lint directives

Updated the documentation is several spots, README, wiki, etc.

Bumped several dependencies where possible

... (truncated)

Commits

a77a3e7 release: 3.4.17 (#1672)
b9b9d80 release: 3.4.16 (#1636)
1d7460c release: 3.4.15 (#1609)
4e6fe24 release: 3.4.14 (#1587)
3067f77 release: 3.4.13 (#1562)
a9ca1e5 release: 3.4.12 (#1537)
0cae518 release: 3.4.11 (#1494)
6ee5716 release: 3.4.10 (#1478)
5210247 release: 3.4.9 (#1459)
bcdd828 release: 3.4.8 (#1439)
Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates react-hot-toast from 2.5.2 to 2.6.1

Release notes

Sourced from react-hot-toast's releases.

v2.6.1

Made toast styles easier to override with Tailwind CSS by using :where() to lower CSS specificity. (f339d71)

Fixed an issue where toasts stopped updating after a component unmounted when multiple hooks shared the same toasterId. Thanks to @matthernet for reporting the issue and suggesting the fix! (#436)

Fixed TypeScript resolution errors in pnpm strict mode by adding @types/react and @types/react-dom as optional peer dependencies. Thanks to @q121212 for the fix and @baraknaveh for the report! (#435)

[[Full changelog: v2.6.0 → v2.6.1](https://github.com/timolins/react-hot-toast/compare/v2.6.0...v2.6.1)](https://github.com/timolins/react-hot-toast/compare/v2.6.0...v2.6.1)

v2.6.0

Adds support for multiple toasters

Adapt build to minify inlined CSS

timolins/react-hot-toast@v2.5.2...v2.6.0

v2.6.0-beta.0

What's new

Adds support for multiple toasters

Add first version of Multi toaster docs

Add dismissAll and removeAll More ergonomic API when working with multiple toasters a1d0b02

Ready to try it out?
npm i react-hot-toast@beta
Other Changes

Update pnpm version f6c867b

Move timeouts inside a useRef cb1fe8e

Use data tag instead of id 1d5d3d3

Fix dispatch to be id specific again fe934fd

Merge branch 'main' into global-settings 0953822

Add first version of multi toaster page 5b1ee55

Merge branch 'main' into global-settings 4d43622

Move toaster settings into state cf9ae4b

Some experimentation with global settings API 2e0a4dd

timolins/react-hot-toast@v2.5.1...v2.6.0-beta.0

Commits

e725d38 2.6.1
114cafd Merge pull request #436 from timolins/codex/fix-use-store-subscriber-cleanup
ce3f199 Fix useStore subscriber cleanup
52613c1 Merge pull request #435 from q121212/fix/missing-peer-dep-types-react
64e1fff fix(build): add missing @types/react and @types/react-dom peer deps for pnpm ...
f339d71 Use :where() for easier Tailwind overrides
3a870ed 2.6.0
85d4b21 Merge pull request #383 from timolins/multi-toaster
15605ee Remove example
2bf1aaa Improve multi toaster docs
Additional commits viewable in compare view

Updates tailwind-merge from 3.3.1 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

Prepare some upcoming changes by @dcastil in dcastil/tailwind-merge#713

Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.

Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Fix arbitrary values using color() or light-dark() being classified as lengths instead of colors by @ddussi in dcastil/tailwind-merge#712

Fix bare bg-conic not merging with other background image classes by @dcastil in dcastil/tailwind-merge#708

Fix columns-auto not conflicting with other columns classes by @dcastil in dcastil/tailwind-merge#707

Fix container sizes like inline-2xl not merging by @dcastil in dcastil/tailwind-merge#706

Fix max-h-none missing in max-h class group by @mutewinter in dcastil/tailwind-merge#704

Fix axis shorthands like px not overriding logical sides like ps by @dcastil in dcastil/tailwind-merge#705

Fix leading-none being removed when the leading theme scale is overridden by @chatman-media in dcastil/tailwind-merge#689

Fix deprecated shadow-inner being classified as shadow color instead of shadow by @dcastil in dcastil/tailwind-merge#703

Documentation

Add Deno to install instructions by @bartlomieju in dcastil/tailwind-merge#687

Add missing text-shadow theme key to configuration docs by @dcastil in dcastil/tailwind-merge@3e6d208

Other

Switch package manager from yarn to pnpm by @dcastil in dcastil/tailwind-merge#680

Harden CI security by @dcastil in dcastil/tailwind-merge#679

Full Changelog: v3.6.0...v3.7.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @openclaw, @sourcegraph, @cesarvcanal, @CasperKristiansson, @jbisasky, @frontendmasters and more via @thnxdev for sponsoring tailwind-merge! ❤️

Commits

511d68a tailwind-merge@3.7.0
2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
9d41508 add changelog for tailwind-merge@3.7.0
c78a80f Configurator: Reuse runtime lookups during pruning
49c317d Monorepo: Fix contributing link and include package coverage
7b565ca Configurator: prune a generated config to a project's used classes (core step)
d83e013 Releases: auto-re-pin tag-pinned links on every version bump
b71fd41 Docs: pin every in-repo file link to a release tag instead of main
ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
9521b10 Releases: per-package pipeline with namespaced tags
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tailwind-merge since your current version.

Updates use-debounce from 10.0.4 to 10.1.1

Release notes

Sourced from use-debounce's releases.

10.0.6

What's Changed

Bump form-data from 4.0.0 to 4.0.4 by @dependabot[bot] in xnimorz/use-debounce#198

Fix/cancel ispending UI update by @elrion018 in xnimorz/use-debounce#199

Full Changelog: xnimorz/use-debounce@10.0.5...10.0.6

10.0.5

What's Changed

Update outdated tsdoc for useDebouncedCallback by @stephan281094 in xnimorz/use-debounce#195

Fix isPending updating bug and add a test case. by @elrion018 in xnimorz/use-debounce#196

Bump esbuild and @size-limit/preset-small-lib by @dependabot[bot] in xnimorz/use-debounce#197

New Contributors

@stephan281094 made their first contribution in xnimorz/use-debounce#195

@elrion018 made their first contribution in xnimorz/use-debounce#196

Full Changelog: xnimorz/use-debounce@10.0.4...10.0.5

Changelog

Sourced from use-debounce's changelog.

10.1.1

replace global with globalThis which is defined in all possible environments (browser, node, workers) to address xnimorz/use-debounce#212

10.1.0

New parameter introduced: flushOnExit. See issue #205 for details. This parameter allows the callback to be executed on component unmount or page exit, enabling specific side-effect such as persistence or other required I/O operations. Thanks to @h for the contribution. PR

10.0.5

Fixed issue xnimorz/use-debounce#192, where isPending remains true with leading: true configuration, thanks to @elrion018

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-prod-minor group with 7 updates: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.10` | `5.104.3` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.21` | `10.6.1` | | [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.3.3` | `3.4.17` | | [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.5.2` | `2.6.1` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.3.1` | `3.7.0` | | [use-debounce](https://github.com/xnimorz/use-debounce) | `10.0.4` | `10.1.1` | Updates `@tanstack/react-query` from 5.90.10 to 5.104.3 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.3/packages/react-query) Updates `autoprefixer` from 10.4.21 to 10.6.1 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.21...10.6.1) Updates `date-fns` from 4.1.0 to 4.4.0 - [Release notes](https://github.com/date-fns/date-fns/releases) - [Commits](date-fns/date-fns@v4.1.0...v4.4.0) Updates `dompurify` from 3.3.3 to 3.4.17 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.3.3...3.4.17) Updates `react-hot-toast` from 2.5.2 to 2.6.1 - [Release notes](https://github.com/timolins/react-hot-toast/releases) - [Commits](timolins/react-hot-toast@v2.5.2...v2.6.1) Updates `tailwind-merge` from 3.3.1 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `use-debounce` from 10.0.4 to 10.1.1 - [Release notes](https://github.com/xnimorz/use-debounce/releases) - [Changelog](https://github.com/xnimorz/use-debounce/blob/master/CHANGELOG.md) - [Commits](https://github.com/xnimorz/use-debounce/commits) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.104.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: autoprefixer dependency-version: 10.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: date-fns dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: dompurify dependency-version: 3.4.17 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: react-hot-toast dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: use-debounce dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-10-19T08:00:29Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
npm/dompurify@3.3.3 ⏵ 3.4.17	⁺¹	⁺³⁶			^-20
npm/use-debounce@10.0.4 ⏵ 10.1.1	⁺¹		⁺¹
npm/date-fns@4.4.0
npm/react-hot-toast@2.5.2 ⏵ 2.6.1				⁺⁵
npm/tailwind-merge@3.3.1 ⏵ 3.7.0	⁺¹		⁺¹
npm/autoprefixer@10.4.21 ⏵ 10.6.1	⁺¹		^-2
npm/@tanstack/react-query@5.90.10 ⏵ 5.104.3			⁺⁴	⁺²

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026

Navigation Menu

Repository navigation

chore(deps): bump the npm-prod-minor group with 7 updates - #154

chore(deps): bump the npm-prod-minor group with 7 updates#154
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-prod-minor-1218d82c9c

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 19, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​tanstack/react-query-devtools@​5.104.3

Patch Changes

@​tanstack/react-query-next-experimental@​5.104.3

Patch Changes

@​tanstack/react-query-persist-client@​5.104.3

Patch Changes

@​tanstack/react-query@​5.104.3

Patch Changes

@​tanstack/react-query-devtools@​5.104.2

Patch Changes

@​tanstack/react-query-next-experimental@​5.104.2

Patch Changes

@​tanstack/react-query-persist-client@​5.104.2

Patch Changes

@​tanstack/react-query@​5.104.2

Patch Changes

5.104.3

Patch Changes

5.104.2

Patch Changes

5.104.1

Patch Changes

5.104.0

Minor Changes

Patch Changes

5.103.3

Patch Changes

5.103.2

Patch Changes

5.103.1

Patch Changes

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.5.4

10.5.3

10.5.2

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

10.4.27

10.4.26

10.4.25

10.4.24

10.4.23

10.4.22

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.5.4

10.5.3

10.5.2

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

10.4.27

10.4.26

10.4.25

10.4.24

v4.4.0

Changed

v4.3.0

Fixed

v4.2.1

Fixed

v4.2.0

Changed

DOMPurify 3.4.17

DOMPurify 3.4.16

DOMPurify 3.4.15

DOMPurify 3.4.14

DOMPurify 3.4.13

DOMPurify 3.4.12

DOMPurify 3.4.11

v2.6.1

v2.6.0

v2.6.0-beta.0

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

`@tanstack/react-query-devtools@5`.104.3

`@tanstack/react-query-next-experimental@5`.104.3

`@tanstack/react-query-persist-client@5`.104.3

`@tanstack/react-query@5`.104.3

`@tanstack/react-query-devtools@5`.104.2

`@tanstack/react-query-next-experimental@5`.104.2

`@tanstack/react-query-persist-client@5`.104.2

`@tanstack/react-query@5`.104.2