Skip to content

Bump the react-and-ui group across 1 directory with 4 updates - #31

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/react-and-ui-b510d897cc
Open

Bump the react-and-ui group across 1 directory with 4 updates#31
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/react-and-ui-b510d897cc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the react-and-ui group with 4 updates in the / directory: @cloudflare/kumo, @types/react-dom, @tanstack/react-router and @tanstack/router-plugin.

Updates @cloudflare/kumo from 2.9.2 to 2.12.0

Release notes

Sourced from @​cloudflare/kumo's releases.

@​cloudflare/kumo@​2.12.0

Minor Changes

  • 716e5b8: Add the Text heading variant with a 16px semibold default and a 20px size="lg" option. The variant defaults to a span, so callers choose heading semantics explicitly with as. Deprecate the numbered heading1, heading2, and heading3 variants.

Patch Changes

  • d7a7a35: Collapsible.DefaultTrigger now uses text-kumo-default (neutral) with font-medium instead of the blue text-kumo-link color.

  • 0db4f66: deprecate MenuBar in favor of segmented Tabs

    • mark the MenuBar component (and its exports) as @deprecated; it will be removed in a future release
    • new usage should prefer Tabs with variant="segmented" (the default Tabs variant)
    • the runtime behaviour of MenuBar is unchanged for existing consumers
    • remove the MenuBar documentation page and demos from the docs site

  • c64183b: Fix Toast background clipping the ring outline at the corners — the inner background layer's radius (11px) was smaller than the root's rounded-xl (12px), painting over the ring at the corners. Matched them up.

  • ef13cb4: Restore disabled and loading state handling for Toolbar.Button so disabled controls expose the correct semantics and cannot be activated.

  • 51d0f03: Normalize shadows and outlines on tip-style overlays (Popover, Tooltip, ClipboardText, Chart tooltip).

    • Drop the shadow-kumo-tip-shadow color override so shadows use Tailwind's default translucent black instead of an opaque light-gray in light mode.
    • Tune shadow sizes: Popover, Tooltip, ClipboardText tooltip, and Chart tooltip use shadow-md; ClipboardText's "Copied" toast keeps shadow-lg to match the Toast component.
    • Switch these overlays from outline-kumo-fill to outline-kumo-line, matching every other floating surface (Dropdown, Select, Combobox, Dialog, etc.).
    • Rename kumo-tip-shadow → kumo-arrow-edge and kumo-tip-stroke → kumo-arrow-stroke. The tokens draw the border on Popover/Tooltip arrow SVGs, not a box shadow. Both now resolve to kumo-line, so the arrow border aligns with the popup outline in both modes.

  • d586bf3: Add scrollToItem(id, options?) to useSidebar() for imperatively scrolling a nav item into the sidebar viewport. Tag items with the new itemId prop on Sidebar.MenuButton or Sidebar.MenuItem.

    Options:

    • align: "start" | "center" | "end" | "auto" (default "auto" — no-op if the item is already visible; otherwise scroll the minimum distance).
    • behavior: "auto" | "smooth" (default "auto" — instant, best for cross-app landings so users don't watch the sidebar animate on entry). prefers-reduced-motion forces "auto".

    Scrolls only the sidebar viewport (never the document) and works with Sidebar.SlidingViews: items register with the provider via an internal map, so scrollToItem walks up from the target to find its owning viewport rather than querying the DOM.

@​cloudflare/kumo@​2.11.0

Minor Changes

... (truncated)

Changelog

Sourced from @​cloudflare/kumo's changelog.

2.12.0

Minor Changes

  • 716e5b8: Add the Text heading variant with a 16px semibold default and a 20px size="lg" option. The variant defaults to a span, so callers choose heading semantics explicitly with as. Deprecate the numbered heading1, heading2, and heading3 variants.

Patch Changes

  • d7a7a35: Collapsible.DefaultTrigger now uses text-kumo-default (neutral) with font-medium instead of the blue text-kumo-link color.

  • 0db4f66: deprecate MenuBar in favor of segmented Tabs

    • mark the MenuBar component (and its exports) as @deprecated; it will be removed in a future release
    • new usage should prefer Tabs with variant="segmented" (the default Tabs variant)
    • the runtime behaviour of MenuBar is unchanged for existing consumers
    • remove the MenuBar documentation page and demos from the docs site

  • c64183b: Fix Toast background clipping the ring outline at the corners — the inner background layer's radius (11px) was smaller than the root's rounded-xl (12px), painting over the ring at the corners. Matched them up.

  • ef13cb4: Restore disabled and loading state handling for Toolbar.Button so disabled controls expose the correct semantics and cannot be activated.

  • 51d0f03: Normalize shadows and outlines on tip-style overlays (Popover, Tooltip, ClipboardText, Chart tooltip).

    • Drop the shadow-kumo-tip-shadow color override so shadows use Tailwind's default translucent black instead of an opaque light-gray in light mode.
    • Tune shadow sizes: Popover, Tooltip, ClipboardText tooltip, and Chart tooltip use shadow-md; ClipboardText's "Copied" toast keeps shadow-lg to match the Toast component.
    • Switch these overlays from outline-kumo-fill to outline-kumo-line, matching every other floating surface (Dropdown, Select, Combobox, Dialog, etc.).
    • Rename kumo-tip-shadow → kumo-arrow-edge and kumo-tip-stroke → kumo-arrow-stroke. The tokens draw the border on Popover/Tooltip arrow SVGs, not a box shadow. Both now resolve to kumo-line, so the arrow border aligns with the popup outline in both modes.

  • d586bf3: Add scrollToItem(id, options?) to useSidebar() for imperatively scrolling a nav item into the sidebar viewport. Tag items with the new itemId prop on Sidebar.MenuButton or Sidebar.MenuItem.

    Options:

    • align: "start" | "center" | "end" | "auto" (default "auto" — no-op if the item is already visible; otherwise scroll the minimum distance).
    • behavior: "auto" | "smooth" (default "auto" — instant, best for cross-app landings so users don't watch the sidebar animate on entry). prefers-reduced-motion forces "auto".

    Scrolls only the sidebar viewport (never the document) and works with Sidebar.SlidingViews: items register with the provider via an internal map, so scrollToItem walks up from the target to find its owning viewport rather than querying the DOM.

2.11.0

Minor Changes

... (truncated)

Commits
  • e16b8cc Version Packages (#737)
  • 716e5b8 feat(text): add heading variant (#739)
  • 51d0f03 fix(overlays): normalize shadows and outlines on tip-style overlays (#705)
  • c64183b fix(toast): match background radius to root to stop ring clip (#706)
  • 0db4f66 chore(menubar): deprecate MenuBar in favor of segmented Tabs (#704)
  • d7a7a35 fix(collapsible): neutralize DefaultTrigger color and bump weight (#703)
  • ef13cb4 fix(toolbar): add back disabled support to toolbar buttons (#740)
  • d586bf3 feat(sidebar): add scrollToItem for imperative scroll to a tagged nav item (#...
  • d38c927 Version Packages (#728)
  • aa6edff feat(badge): add href and icon props (#734)
  • Additional commits viewable in compare view

Updates @types/react-dom from 19.2.4 to 19.2.5

Commits

Updates @tanstack/react-router from 1.170.23 to 1.170.32

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.32

Patch Changes

@​tanstack/react-router@​1.170.31

Patch Changes

  • Updated dependencies [3e016ac]:
    • @​tanstack/router-core@​1.171.26
Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.32

Patch Changes

1.170.31

Patch Changes

  • Updated dependencies [3e016ac]:
    • @​tanstack/router-core@​1.171.26

1.170.30

Patch Changes

  • #8084 5d3785d - preserve pending UI across retained routes

  • #8068 f75cada - direct export of CatchBoundary class component, remove function wrapper

  • Updated dependencies [5d3785d, 63d2cc9]:

    • @​tanstack/router-core@​1.171.25

1.170.29

Patch Changes

1.170.28

Patch Changes

  • #8055 0c25a7b - Avoid wrapping root components that may render the HTML document in a Suspense boundary during SSR and hydration.

  • #8054 31882c7 - Reuse resolved lazy route components when revisiting code-split routes, preventing unnecessary pending UI.

  • Updated dependencies [31882c7]:

    • @​tanstack/router-core@​1.171.23

1.170.27

Patch Changes

... (truncated)

Commits

Updates @tanstack/router-plugin from 1.168.27 to 1.168.35

Release notes

Sourced from @​tanstack/router-plugin's releases.

@​tanstack/router-plugin@​1.168.35

Patch Changes

  • Updated dependencies [fa65287, cb281d7]:
    • @​tanstack/router-core@​1.171.27
    • @​tanstack/react-router@​1.170.32
    • @​tanstack/router-generator@​1.167.33

@​tanstack/router-plugin@​1.168.34

Patch Changes

  • Updated dependencies [3e016ac]:
    • @​tanstack/router-core@​1.171.26
    • @​tanstack/react-router@​1.170.31
    • @​tanstack/router-generator@​1.167.32

@​tanstack/router-plugin@​1.168.33

Patch Changes

Changelog

Sourced from @​tanstack/router-plugin's changelog.

1.168.35

Patch Changes

  • Updated dependencies [fa65287, cb281d7]:
    • @​tanstack/router-core@​1.171.27
    • @​tanstack/react-router@​1.170.32
    • @​tanstack/router-generator@​1.167.33

1.168.34

Patch Changes

  • Updated dependencies [3e016ac]:
    • @​tanstack/router-core@​1.171.26
    • @​tanstack/react-router@​1.170.31
    • @​tanstack/router-generator@​1.167.32

1.168.33

Patch Changes

1.168.32

Patch Changes

1.168.31

Patch Changes

  • Updated dependencies [0c25a7b, 31882c7]:
    • @​tanstack/react-router@​1.170.28
    • @​tanstack/router-core@​1.171.23
    • @​tanstack/router-generator@​1.167.29

1.168.30

Patch Changes

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the react-and-ui group across 1 directory with 4 updates
9f591ad 
Bumps the react-and-ui group with 4 updates in the / directory: [@cloudflare/kumo](https://github.com/cloudflare/kumo/tree/HEAD/packages/kumo), [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom), [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) and [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin).


Updates `@cloudflare/kumo` from 2.9.2 to 2.12.0
- [Release notes](https://github.com/cloudflare/kumo/releases)
- [Changelog](https://github.com/cloudflare/kumo/blob/main/packages/kumo/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/kumo/commits/@cloudflare/kumo@2.12.0/packages/kumo)

Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@tanstack/react-router` from 1.170.23 to 1.170.32
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.32/packages/react-router)

Updates `@tanstack/router-plugin` from 1.168.27 to 1.168.35
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/router-plugin@1.168.35/packages/router-plugin)

---
updated-dependencies:
- dependency-name: "@cloudflare/kumo"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: react-and-ui
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: react-and-ui
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react-and-ui
- dependency-name: "@tanstack/router-plugin"
  dependency-version: 1.168.35
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: react-and-ui
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@socket-security

socket-security Bot commented Sep 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​types/​react-dom@​19.2.51001007591100
Added@​tanstack/​router-plugin@​1.168.35991007898100
Added@​tanstack/​react-router@​1.170.32921008797100
Added@​cloudflare/​kumo@​2.12.09910010097100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file gatekeeper javascript Pull requests that update javascript code workshop/frontend

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants