Skip to content

chore(bot): bump the minor-and-patch group with 14 updates - #293

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-f4e648652d
Open

chore(bot): bump the minor-and-patch group with 14 updates#293
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-f4e648652d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 14 updates:

Package From To
@equationalapplications/schema-software-org 7.9.0 7.11.0
@mantine/core 9.6.3 9.7.1
@mantine/hooks 9.6.3 9.7.1
@tauri-apps/api 2.11.1 2.12.1
@tauri-apps/plugin-dialog 2.7.3 2.8.1
@tauri-apps/plugin-notification 2.4.0 2.5.1
@tauri-apps/plugin-opener 2.5.5 2.7.0
@tauri-apps/plugin-shell 2.3.6 2.4.0
axe-core 4.13.0 4.14.0
@tauri-apps/cli 2.11.5 2.12.1
@vitejs/plugin-react 6.1.1 6.1.2
jsdom 30.1.1 30.1.2
typescript-eslint 8.71.0 8.71.1
vite 8.3.1 8.3.3

Updates @equationalapplications/schema-software-org from 7.9.0 to 7.11.0

Release notes

Sourced from @​equationalapplications/schema-software-org's releases.

v7.11.0

Features

  • core: default keyword index to FTS5 when available (#257) (a1fd152)

Bug Fixes

  • benchmarks: cache prepared statements in the bench adapter (#257) (eed12c6)
  • benchmarks: evict one LRU statement instead of clearing the cache (#257) (e2cef7d)

v7.10.1

Bug Fixes

  • benchmarks: capture fts5-memory dbMiB before close (2a5c817)
  • benchmarks: race-free WAL stat and forced NODE_ENV in fts5-memory (#265) (aac366e)
  • core: compute bm25 once per row; count WAL in fts5-memory benchmark (#265) (d22a887)

v7.10.0

Features

  • core: add FTS5 ledger, drain and rebuild SQL (#257) (7a78c73)
  • core: add FTS5 MATCH query builder (#257) (b1fab9b)
  • core: add Fts5IndexStrategy init, rebuild and ledger drain (#257) (d550f54)
  • core: add Fts5IndexStrategy search and entity-scoped writes (#257) (41fb278)
  • core: add indexStrategy config and resolve it in setup (#257) (42a8ea4)
  • core: resolve keyword-index strategy with FTS5 probe and detach (#257) (c0c37bf)
  • core: route search sync to the strategy ledger drain (#257) (e5fbdb3)

Bug Fixes

  • benchmarks: capture reopen/query RSS peaks; regenerate fts5-memory result (#265) (e7ce001)
  • core: handle FTS5 cross-entity doc and auto init fallback (#265) (cd05393)

v7.9.2

Bug Fixes

  • ci: register all 12 tar alerts as deferred, not fixed-awaiting-scan (25d3861)

v7.9.1

Bug Fixes

  • core: drop implicit 100-result cap in getKeywordScores (2ca2152)
  • core: make keyword-index writes atomic and drop non-finite scores (410eb51)
  • core: make MiniSearchIndexStrategy register tracking and reject cross-entity writes (c459fde), closes #258
  • core: restore raw keyword scores and entity-scoped discard (6d1f9f2)
Changelog

Sourced from @​equationalapplications/schema-software-org's changelog.

7.11.0 (2026-10-07)

Features

  • core: default keyword index to FTS5 when available (#257) (a1fd152)

Bug Fixes

  • benchmarks: cache prepared statements in the bench adapter (#257) (eed12c6)
  • benchmarks: evict one LRU statement instead of clearing the cache (#257) (e2cef7d)

7.10.1 (2026-10-07)

Bug Fixes

  • benchmarks: capture fts5-memory dbMiB before close (2a5c817)
  • benchmarks: race-free WAL stat and forced NODE_ENV in fts5-memory (#265) (aac366e)
  • core: compute bm25 once per row; count WAL in fts5-memory benchmark (#265) (d22a887)

7.10.0 (2026-10-06)

Features

  • core: add FTS5 ledger, drain and rebuild SQL (#257) (7a78c73)
  • core: add FTS5 MATCH query builder (#257) (b1fab9b)
  • core: add Fts5IndexStrategy init, rebuild and ledger drain (#257) (d550f54)
  • core: add Fts5IndexStrategy search and entity-scoped writes (#257) (41fb278)
  • core: add indexStrategy config and resolve it in setup (#257) (42a8ea4)
  • core: resolve keyword-index strategy with FTS5 probe and detach (#257) (c0c37bf)
  • core: route search sync to the strategy ledger drain (#257) (e5fbdb3)

Bug Fixes

  • benchmarks: capture reopen/query RSS peaks; regenerate fts5-memory result (#265) (e7ce001)
  • core: handle FTS5 cross-entity doc and auto init fallback (#265) (cd05393)

7.9.2 (2026-10-06)

Bug Fixes

  • ci: register all 12 tar alerts as deferred, not fixed-awaiting-scan (25d3861)

7.9.1 (2026-10-06)

Bug Fixes

  • core: drop implicit 100-result cap in getKeywordScores (2ca2152)
  • core: make keyword-index writes atomic and drop non-finite scores (410eb51)
  • core: make MiniSearchIndexStrategy register tracking and reject cross-entity writes (c459fde), closes #258
  • core: restore raw keyword scores and entity-scoped discard (6d1f9f2)
Commits

Updates @mantine/core from 9.6.3 to 9.7.1

Release notes

Sourced from @​mantine/core's releases.

9.7.1

  • [@mantine/schedule] Fix startScrollTime scroll position (#9255)
  • [@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional zoom levels (#9251)
  • [@mantine/core] Tree: Add aria-expanded to tree items with children (#9247)
  • [@mantine/core] SegmentedControl: Do not call Math.random during render (#9245)
  • [@mantine/core] Popover: Add capture prop to control events capturing phase (#9243)
  • [@mantine/form] Fix clearing state of unrelated fields (#9242)
  • [@mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#9238)
  • [@mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#9236)
  • [@mantine/form] Fix reorderListItem moving errors of items whose index shares a prefix with the reordered index (#9235)
  • [@mantine/schedule] MonthView: Fix quadratic row assignment for weeks with many events (#9232)
  • [@mantine/hooks] use-pagination: Fix single page being replaced with dots on the right side (#9229)
  • [@mantine/core] ScrollArea: Fix wheel listener on document blocking compositor scrolling for the whole page (#9225)
  • [@mantine/dates] DateTimePicker: Fix time not being limited by minDate and maxDate (#9221)
  • [@mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox aria-labelledby referencing a missing label element (#9219) (#9220)
  • [@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)

9.7.0 😳

View changelog with demos on mantine.dev website

Support Mantine development

You can now sponsor Mantine development with OpenCollective. All funds are used to improve Mantine and create new features and components.

@​mantine/mcp-server documentation coverage

@​mantine/mcp-server now exposes 406 documentation pages instead of 164. Previously only components were indexed – hooks, @​mantine/form, styling, theming, guides and help.mantine.dev FAQ pages are now included as well. Changelog pages are deliberately excluded to keep search results focused on current APIs.

Documentation is now retrieved by section rather than by whole page. get_item_doc returns a page outline (description, import statement and the list of section headings) by default, a single section with the section argument, or the entire page with full: true. Requesting useForm this way returns about 1KB instead of 9KB, and the largest pages drop from roughly 89KB to 4KB.

Other improvements:

  • New get_api tool – resolves a symbol such as useForm or useDisclosure to its TypeScript signature and exported types without knowing which page documents it
  • Ranked search – search_docs results point at the specific section that matched, so a query like "validate a form with zod" resolves to the zod section of the schema validation page
  • Search synonyms – queries now match the search keywords maintained in the documentation, so "command palette" finds Spotlight
  • More filters – list_items accepts group, category and package in addition to kind
  • Hook signatures – get_item_props returns the TypeScript signature for hooks, and points at the relevant section for pages that document their API in prose

The server was also migrated to the official Model Context Protocol SDK, so the protocol version is

... (truncated)

Commits
  • f0e2bc6 [release] Version: 9.7.1
  • 7dc25c4 [@​mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional...
  • de32b23 [@​mantine/core] Tree: Add aria-expanded to tree items with children (#9247)
  • e492200 [@​mantine/core] SegmentedControl: Do not call Math.random during render (#9245)
  • f3cc538 [@​mantine/core] Popover: Add capture prop to control events capturing phase (...
  • 30c1949 [@​mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#9238)
  • 62f2ce8 [@​mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#9236)
  • be0ee1f [@​mantine/core] ScrollArea: Fix wheel listener on document blocking composito...
  • bdf802e [@​mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox ari...
  • dd47810 [refactor] Fix warnings in tests
  • Additional commits viewable in compare view

Updates @mantine/hooks from 9.6.3 to 9.7.1

Release notes

Sourced from @​mantine/hooks's releases.

9.7.1

  • [@mantine/schedule] Fix startScrollTime scroll position (#9255)
  • [@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional zoom levels (#9251)
  • [@mantine/core] Tree: Add aria-expanded to tree items with children (#9247)
  • [@mantine/core] SegmentedControl: Do not call Math.random during render (#9245)
  • [@mantine/core] Popover: Add capture prop to control events capturing phase (#9243)
  • [@mantine/form] Fix clearing state of unrelated fields (#9242)
  • [@mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#9238)
  • [@mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#9236)
  • [@mantine/form] Fix reorderListItem moving errors of items whose index shares a prefix with the reordered index (#9235)
  • [@mantine/schedule] MonthView: Fix quadratic row assignment for weeks with many events (#9232)
  • [@mantine/hooks] use-pagination: Fix single page being replaced with dots on the right side (#9229)
  • [@mantine/core] ScrollArea: Fix wheel listener on document blocking compositor scrolling for the whole page (#9225)
  • [@mantine/dates] DateTimePicker: Fix time not being limited by minDate and maxDate (#9221)
  • [@mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox aria-labelledby referencing a missing label element (#9219) (#9220)
  • [@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)

9.7.0 😳

View changelog with demos on mantine.dev website

Support Mantine development

You can now sponsor Mantine development with OpenCollective. All funds are used to improve Mantine and create new features and components.

@​mantine/mcp-server documentation coverage

@​mantine/mcp-server now exposes 406 documentation pages instead of 164. Previously only components were indexed – hooks, @​mantine/form, styling, theming, guides and help.mantine.dev FAQ pages are now included as well. Changelog pages are deliberately excluded to keep search results focused on current APIs.

Documentation is now retrieved by section rather than by whole page. get_item_doc returns a page outline (description, import statement and the list of section headings) by default, a single section with the section argument, or the entire page with full: true. Requesting useForm this way returns about 1KB instead of 9KB, and the largest pages drop from roughly 89KB to 4KB.

Other improvements:

  • New get_api tool – resolves a symbol such as useForm or useDisclosure to its TypeScript signature and exported types without knowing which page documents it
  • Ranked search – search_docs results point at the specific section that matched, so a query like "validate a form with zod" resolves to the zod section of the schema validation page
  • Search synonyms – queries now match the search keywords maintained in the documentation, so "command palette" finds Spotlight
  • More filters – list_items accepts group, category and package in addition to kind
  • Hook signatures – get_item_props returns the TypeScript signature for hooks, and points at the relevant section for pages that document their API in prose

The server was also migrated to the official Model Context Protocol SDK, so the protocol version is

... (truncated)

Commits
  • f0e2bc6 [release] Version: 9.7.1
  • 6d583b3 [@​mantine/hooks] use-pagination: Fix single page being replaced with dots on ...
  • f61997e [@​mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)
  • 910ba2e [release] Version: 9.7.0
  • See full diff in compare view

Updates @tauri-apps/api from 2.11.1 to 2.12.1

Release notes

Sourced from @​tauri-apps/api's releases.

@​tauri-apps/api v2.12.1

All found vulnerabilities were already reviewed and decided to be ignored
2 ignored: 2 high

[2.12.1]

Bug Fixes

  • c9a3cb892 (#16166 by @​FabianLars) The macos-private-api feature flag / macOSPrivateAPI tauri.conf.json value is no longer required to use transparency or fullscreen on macOS.
$ pnpm build && cd ./dist && pnpm publish --access public --loglevel debug --no-git-checks
$ rollup -c --configPlugin typescript
�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m997ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.5s�[22m�[39m
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=npm%3Aregistry.npmjs.org 200 336ms
📦 @tauri-apps/api@2.12.1 → https://registry.npmjs.org/
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=sigstore 200 107ms
Signed provenance statement with source and build information
✅ Published package @tauri-apps/api@2.12.1

@​tauri-apps/api v2.12.0

All found vulnerabilities were already reviewed and decided to be ignored
2 ignored: 2 high

[2.12.0]

... (truncated)

Commits

Updates @tauri-apps/plugin-dialog from 2.7.3 to 2.8.1

Commits
  • 7eb8246 publish new versions (#3673)
  • 65ce65b fix(ci): Android e2e flakes, shell Terminated sent before output (#3672)
  • cbd691b chore(examples): update Android project for API example
  • 974bbdc publish new versions (#3667)
  • 3113a54 chore(deps): update urlpattern to 0.6 (#3670)
  • b443d6b fix(http): release the request's resources once fetch_send settles (#3669)
  • 2a9c29e fix(updater): restore the current app when a macOS install fails (fix #3505, ...
  • d4835d0 publish new versions (#3660)
  • 569ee82 fix: mobile docs.rs builds
  • 25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
  • Additional commits viewable in compare view

Updates @tauri-apps/plugin-notification from 2.4.0 to 2.5.1

Release notes

Sourced from @​tauri-apps/plugin-notification's releases.

shell-js v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-shell@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 21.8kB dist-js/index.cjs
npm notice 22.0kB dist-js/index.d.ts
npm notice 21.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-shell
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-shell-2.5.0.tgz
npm notice package size: 8.0 kB
npm notice unpacked size: 69.6 kB
npm notice shasum: 16d0b1a1f5b02689777a01dc78b9d591eec3a3b7
npm notice integrity: sha512-FZ6RtcikCxJ35[...]DcLs7JIfuFkWw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189638540
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-shell@2.5.0

shell v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

... (truncated)

Commits
  • 5c7668b publish new versions (#3397)
  • ec05401 chore(deps): update rust crate toml to v1 (#3323)
  • b86e999 chore(deps): update tauri packages to 2.11 (#3407)
  • c463d8a chore(deps): update rustls-webpki in lockfile, ignore core2 in audit (#3405)
  • 1bb7beb chore(deps): bump openssl (#3402)
  • 3412fa2 docs(readme): fix platform support matrix (opener supports mobile)
  • af81fda docs(readme): fix platform support matrix (mobile is supported)
  • c1fd33b fix(opener): allow open network share locations (#3343)
  • 250857b chore(deps): update dependency typescript to v6 (#3363)
  • 964e13f fix(store): dead lock trying to set while exiting (#3395)
  • Additional commits viewable in compare view

Updates @tauri-apps/plugin-opener from 2.5.5 to 2.7.0

Release notes

Sourced from @​tauri-apps/plugin-opener's releases.

fs-js v2.7.0

[2.7.0]

  • a934743b (#3637) Added the scopeDroppedPaths plugin config option (plugins > fs > scopeDroppedPaths in tauri.conf.json). Set it to false to stop adding the paths dropped onto any window to the fs scope, which otherwise gives every webview with an fs permission access to them (directories recursively). Defaults to true, the current behaviour.
  • 085a0283 (#3636) Fixed a panic on Android when a content provider returns no file descriptor for a content:// URI (e.g. virtual files). The fs command now fails with an error instead.
  • f81f0447 (#3635) Fixed reading uncompressed Android assets ($RESOURCE files such as images or audio that are stored uncompressed in the APK) returning the bytes of the APK instead of the asset. Assets are now always read from a copy in the app cache, like compressed ones.
  • e03dca60 (#3628) startAccessingSecurityScopedResource and stopAccessingSecurityScopedResource now accept absolute paths on iOS, as documented, instead of silently doing nothing unless given a file:// URL.
  • 5de7ebfc (#3634) Security: the open command no longer accepts a customFlags option from the webview. It was not part of the JavaScript types and let the webview pass arbitrary open(2) flags (e.g. O_TRUNC) to files it may only read. OpenOptionsExt::custom_flags still works from Rust.
  • 5e6c023a (#3626) FileHandle.read no longer allocates a buffer of the requested size up front: the length is capped to the rest of the file (64 MiB for files of unknown size), an allocation failure is reported as an error instead of aborting the app, and only the bytes that were read are sent back to the webview.
  • 3a900017 (#3627) Security: the fs scope check now resolves symlinks in the ancestors of paths that do not exist yet, and resolves relative symlink targets against the link's directory instead of the process working directory. Previously a new file created below a symlinked directory inside the scope (writeFile, mkdir, create, rename, copyFile, ...) was written outside of the scope. Deny patterns now also apply to the path as given, so they can name a symlink, and a path whose symlinks cannot be resolved (e.g. a loop) is rejected.
  • 77d00a4f (#3633) FileHandle.seek now rejects a negative offset with SeekMode.Start instead of seeking to a huge position.
  • 5c144e74 (#3631) Fixed readTextFileLines with a UTF-16 encoding splitting lines on a 0x0A 0x00 (LE) or 0x00 0x0A (BE) byte sequence that is not aligned on a code unit, e.g. ਗĀ, which garbled every following line.
  • dcc8cb03 (#3629) Fixed writeFile with a ReadableStream leaving the end of the previous contents in place when the new data is shorter. The file is now truncated first unless append is set, like when writing a buffer.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-fs@2.7.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.4kB README.md
npm notice 39.9kB dist-js/index.cjs
npm notice 41.1kB dist-js/index.d.ts
npm notice 39.2kB dist-js/index.js
npm notice 697B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-fs
npm notice version: 2.7.0
npm notice filename: tauri-apps-plugin-fs-2.7.0.tgz
npm notice package size: 25.6 kB
npm notice unpacked size: 124.3 kB
npm notice shasum: e76d4d07b05063de6911fd1c42948ab0264ac20e
npm notice integrity: sha512-8RQbPkuYuLZ2r[...]GdKJVqDokyDgQ==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189606635
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-fs@2.7.0

... (truncated)

Commits
  • 6bbd44d publish new versions (#3675)
  • fc18d05 fix(global-shortcut): release the shortcuts lock before running handlers (#3683)
  • 42ae8b4 fix(ios): make init_plugin_* entry points public so release builds link on ...
  • 818d2e0 fix(single-instance): limit second instance's wait on Windows (#3645)
  • 323fe80 fix(single-instance): forward non-Unicode arguments and cwd (#3644)
  • 6772581 test(e2e): fix __name usage on FS test
  • 46f7c87 chore: fmt
  • a8acd17 feat(shell): add process group spawn option (fix #1332) (#3351)
  • e03dca6 fix(fs): accept absolute paths in the iOS security-scope commands (#3628)
  • 3a90001 fix(fs): resolve symlinks of missing paths before checking the scope (#3627)
  • Additional commits viewable in compare view

Updates @tauri-apps/plugin-shell from 2.3.6 to 2.4.0

Commits

Updates axe-core from 4.13.0 to 4.14.0

Release notes

Sourced from axe-core's releases.

Release 4.14.0

This release enables a new rule, and introduces new violations in some existing rules. These can cause the issue totals to go up from a previous version. Similarly we've included various bug fixes to false positives which may see the issue count go down as well. This release focused on various performance improvements which should speed runs up 20% - 40% on most pages. On especially large pages we've measured a 15x performance improvement.

Features

Bug Fixes

  • aria-allowed-attr: report case-sensitive aria attributes with non-lowercase values (#5418) (1e33c6c), closes #5280, references #5224
  • aria-hidden-focus: suggest removing aria-hidden in the fail messages (#5397) (aa4a0a1), references #4552 #5357 #4552
  • aria-prohibited-attr: quote the element name in no-role messages (#5391) (24736a4), references #3730 #5357 #3730
  • aria-required-children: allow caption in table, grid and treegrid (#5412) (ed987a2), references #5265
  • aria-required-children: explain presentational children that cannot be ignored (#5407) (35a38d8), references #4833 #5357 #4833
  • avoid-inline-spacing: test the text that gets the spacing from the element (#5411) (96e3e06), references #4232 #4232
  • checks: add incomplete messages to checks that can return undefined (#5388) (6f1a6fe), references #5375 #5375
  • checks: make listitem failure messages actionable (#5357) (6dd1be2)
  • color-contrast: handle "none" and exponents in color strings (#5422) (cf5ed89), references #5313 #4136 #4007 #4269
  • color-contrast: treat empty low-contrast text inputs as incomplete (#5359) (47029de), closes #4260, references #2130 #2130
  • commons/dom: treat dialog as non-modal when elementsFromPoint is unsupported (Description has been truncated

@dependabot
chore(bot): bump the minor-and-patch group with 14 updates
65a94e7 
Bumps the minor-and-patch group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [@equationalapplications/schema-software-org](https://github.com/equationalapplications/expo-llm-wiki/tree/HEAD/packages/schema-software-org) | `7.9.0` | `7.11.0` |
| [@mantine/core](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/core) | `9.6.3` | `9.7.1` |
| [@mantine/hooks](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/hooks) | `9.6.3` | `9.7.1` |
| [@tauri-apps/api](https://github.com/tauri-apps/tauri) | `2.11.1` | `2.12.1` |
| [@tauri-apps/plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.3` | `2.8.1` |
| [@tauri-apps/plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.4.0` | `2.5.1` |
| [@tauri-apps/plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.5` | `2.7.0` |
| [@tauri-apps/plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.6` | `2.4.0` |
| [axe-core](https://github.com/dequelabs/axe-core) | `4.13.0` | `4.14.0` |
| [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.11.5` | `2.12.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.1.2` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.1` | `30.1.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.0` | `8.71.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.3` |


Updates `@equationalapplications/schema-software-org` from 7.9.0 to 7.11.0
- [Release notes](https://github.com/equationalapplications/expo-llm-wiki/releases)
- [Changelog](https://github.com/equationalapplications/expo-llm-wiki/blob/main/CHANGELOG.md)
- [Commits](https://github.com/equationalapplications/expo-llm-wiki/commits/v7.11.0/packages/schema-software-org)

Updates `@mantine/core` from 9.6.3 to 9.7.1
- [Release notes](https://github.com/mantinedev/mantine/releases)
- [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mantinedev/mantine/commits/9.7.1/packages/@mantine/core)

Updates `@mantine/hooks` from 9.6.3 to 9.7.1
- [Release notes](https://github.com/mantinedev/mantine/releases)
- [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mantinedev/mantine/commits/9.7.1/packages/@mantine/hooks)

Updates `@tauri-apps/api` from 2.11.1 to 2.12.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.11.1...@tauri-apps/api-v2.12.1)

Updates `@tauri-apps/plugin-dialog` from 2.7.3 to 2.8.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@dialog-v2.7.3...http-v2.8.1)

Updates `@tauri-apps/plugin-notification` from 2.4.0 to 2.5.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@os-v2.4.0...fs-v2.5.1)

Updates `@tauri-apps/plugin-opener` from 2.5.5 to 2.7.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.5.5...fs-v2.7.0)

Updates `@tauri-apps/plugin-shell` from 2.3.6 to 2.4.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@nfc-v2.3.6...os-v2.4.0)

Updates `axe-core` from 4.13.0 to 4.14.0
- [Release notes](https://github.com/dequelabs/axe-core/releases)
- [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core@v4.13.0...v4.14.0)

Updates `@tauri-apps/cli` from 2.11.5 to 2.12.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.11.5...@tauri-apps/cli-v2.12.1)

Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react)

Updates `jsdom` from 30.1.1 to 30.1.2
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.1...v30.1.2)

Updates `typescript-eslint` from 8.71.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint)

Updates `vite` from 8.3.1 to 8.3.3
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.3/packages/vite)

---
updated-dependencies:
- dependency-name: "@equationalapplications/schema-software-org"
  dependency-version: 7.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@mantine/core"
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@mantine/hooks"
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tauri-apps/api"
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tauri-apps/plugin-dialog"
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tauri-apps/plugin-notification"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tauri-apps/plugin-opener"
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tauri-apps/plugin-shell"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: axe-core
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tauri-apps/cli"
  dependency-version: 2.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: jsdom
  dependency-version: 30.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@coderabbitai

coderabbitai Bot commented Oct 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: f42d6e5d-74d9-455b-94ca-ffc4056b7a45

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@aws-cloud-agent-pr-review

aws-cloud-agent-pr-review Bot commented Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ No reviewable code changes in this PR

Last run: 2026-10-21 03:37 UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants