Skip to content

chore(deps): update javascript#513

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/js
Open

chore(deps): update javascript#513
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/js

Conversation

@renovate

@renovate renovate Bot commented Mar 27, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@hookform/resolvers (source) 5.2.25.4.0 age confidence
@radix-ui/react-accordion (source) 1.2.121.2.15 age confidence
@radix-ui/react-alert-dialog (source) 1.1.151.1.18 age confidence
@radix-ui/react-aspect-ratio (source) 1.1.81.1.11 age confidence
@radix-ui/react-avatar (source) 1.1.111.2.1 age confidence
@radix-ui/react-checkbox (source) 1.3.31.3.6 age confidence
@radix-ui/react-collapsible (source) 1.1.121.1.15 age confidence
@radix-ui/react-context-menu (source) 2.2.162.3.2 age confidence
@radix-ui/react-dialog (source) 1.1.151.1.18 age confidence
@radix-ui/react-dropdown-menu (source) 2.1.162.1.19 age confidence
@radix-ui/react-hover-card (source) 1.1.151.1.18 age confidence
@radix-ui/react-label (source) 2.1.82.1.11 age confidence
@radix-ui/react-menubar (source) 1.1.161.1.19 age confidence
@radix-ui/react-navigation-menu (source) 1.2.141.2.17 age confidence
@radix-ui/react-popover (source) 1.1.151.1.18 age confidence
@radix-ui/react-progress (source) 1.1.81.1.11 age confidence
@radix-ui/react-radio-group (source) 1.3.81.4.2 age confidence
@radix-ui/react-scroll-area (source) 1.2.101.2.13 age confidence
@radix-ui/react-select (source) 2.2.62.3.2 age confidence
@radix-ui/react-separator (source) 1.1.81.1.11 age confidence
@radix-ui/react-slider (source) 1.3.61.4.2 age confidence
@radix-ui/react-slot (source) 1.2.41.3.0 age confidence
@radix-ui/react-switch (source) 1.2.61.3.2 age confidence
@radix-ui/react-tabs (source) 1.1.131.1.16 age confidence
@radix-ui/react-toast (source) 1.2.151.2.18 age confidence
@radix-ui/react-toggle (source) 1.1.101.1.13 age confidence
@radix-ui/react-toggle-group (source) 1.1.111.1.14 age confidence
@radix-ui/react-tooltip (source) 1.2.81.2.11 age confidence
@tailwindcss/postcss (source) 4.2.24.3.2 age confidence
@tanstack/react-query (source) 5.95.25.101.2 age confidence
@types/node (source) 24.12.024.13.2 age confidence
@types/react (source) 19.2.1419.2.17 age confidence
@vitejs/plugin-react-swc (source) 4.3.04.3.1 age confidence
autoprefixer 10.4.2710.5.2 age confidence
date-fns 4.1.04.4.0 age confidence
eslint (source) 10.1.010.6.0 age confidence
eslint-plugin-react-hooks (source) 7.0.17.1.1 age confidence
globals 17.4.017.7.0 age confidence
lovable-tagger 1.1.131.3.1 age confidence
lucide-react (source) 1.6.01.23.0 age confidence
postcss (source) 8.5.88.5.16 age confidence
react (source) 19.2.419.2.7 age confidence
react-dom (source) 19.2.419.2.7 age confidence
react-hook-form (source) 7.72.07.81.0 age confidence
react-resizable-panels (source) 4.7.54.12.1 age confidence
react-router-dom (source) 7.13.27.18.1 age confidence
recharts 3.8.03.9.2 age confidence
tailwind-merge 3.5.03.6.0 age confidence
tailwindcss (source) 4.2.24.3.2 age confidence
typescript (source) 6.0.26.0.3 age confidence
typescript-eslint (source) 8.57.28.62.1 age confidence
vite (source) 8.0.28.1.3 age confidence
zod (source) 4.3.64.4.3 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

react-hook-form/resolvers (@​hookform/resolvers)

v5.4.0

Compare Source

Features
  • feat: add ata-validator resolver (#​845)
Fixes
  • fix issue with toNestErrors.ts (#​848)
  • add guidance on passing context to yupResolver (useForm context) (#​835) (3d29924)
radix-ui/primitives (@​radix-ui/react-accordion)

v1.2.15

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-collapsible@1.1.15, @radix-ui/react-collection@1.1.11

v1.2.14

  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
  • Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-collapsible@1.1.14

v1.2.13

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-collapsible@1.1.13, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3
radix-ui/primitives (@​radix-ui/react-alert-dialog)

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dialog@1.1.18

v1.1.17

  • Removed dev-only warnings for dialogs when title and/or description is not rendered.
  • Updated dependencies: @radix-ui/react-dialog@1.1.17, @radix-ui/react-primitive@2.1.6

v1.1.16

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-dialog@1.1.16, @radix-ui/react-slot@1.2.5, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5
radix-ui/primitives (@​radix-ui/react-aspect-ratio)

v1.1.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.1.10

  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v1.1.9

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-primitive@2.1.5
radix-ui/primitives (@​radix-ui/react-avatar)

v1.2.1

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.2.0

  • Fixed several edge cases with Avatar's loading state
    • An avatar's fallback would not be displayed again if its image component unmounted. This is now fixed.
    • Rendering multiple Avatar.Image components per Avatar.Root was never supported and results in buggy, unpredictable behavior. We now warn about this in development.
    • Zero-sized images were treated as loading, meaning that onLoadingStatusChange is never called once loaded. A zero-sized image now triggers an error status on load.
Other updates
  • Fixed console warnings to show in test environments.
  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v1.1.12

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2
radix-ui/primitives (@​radix-ui/react-checkbox)

v1.3.6

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.3.5

  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v1.3.4

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-use-size@1.1.2
radix-ui/primitives (@​radix-ui/react-collapsible)

v1.1.15

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.1.14

  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v1.1.13

  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2
radix-ui/primitives (@​radix-ui/react-context-menu)

v2.3.2

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-menu@2.1.19

v2.3.1

  • Fixed a bug where menus and submenus remained open after a window loses focus.
  • Updated dependencies: @radix-ui/react-menu@2.1.18, @radix-ui/react-primitive@2.1.6

v2.3.0

  • Added support for a controlled open prop on ContextMenu.Root. This is intended for reading the open state and closing the menu programmatically, though we discourage opening the menu programmatically since opening the menu depends on user interaction to position the menu.
  • Fixed bug in context menu where submenus stayed expanded after re-opening on long-press touch events
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-menu@2.1.17, @radix-ui/primitive@1.1.4, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3
radix-ui/primitives (@​radix-ui/react-dialog)

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-portal@1.1.13

v1.1.17

  • Removed dev-only warnings for dialogs when title and/or description is not rendered.
  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12

v1.1.16

  • Fixed disabled pointer events in closed dialogs
  • Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3
radix-ui/primitives (@​radix-ui/react-dropdown-menu)

v2.1.19

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
Other updates
  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-menu@2.1.19

v2.1.18

  • Fixed a bug where menus and submenus remained open after a window loses focus.
  • Updated dependencies: @radix-ui/react-menu@2.1.18, @radix-ui/react-primitive@2.1.6

v2.1.17

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-menu@2.1.17, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3
radix-ui/primitives (@​radix-ui/react-hover-card)

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13

v1.1.17

  • Updated dependencies: @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-portal@1.1.12

v1.1.16

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3
radix-ui/primitives (@​radix-ui/react-label)

v2.1.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v2.1.10

  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v2.1.9

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-primitive@2.1.5
radix-ui/primitives (@​radix-ui/react-menubar)

v1.1.19

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-menu@2.1.19, @radix-ui/react-collection@1.1.11, @radix-ui/react-roving-focus@1.1.14

v1.1.18

  • Fixed a bug where menus and submenus remained open after a window loses focus.
  • Updated dependencies: @radix-ui/react-menu@2.1.18, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-roving-focus@1.1.13

v1.1.17

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-menu@2.1.17, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-roving-focus@1.1.12, @radix-ui/react-use-controllable-state@1.2.3
radix-ui/primitives (@​radix-ui/react-navigation-menu)

v1.2.17

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
Other updates
  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-collection@1.1.11, @radix-ui/react-visually-hidden@1.2.7

v1.2.16

  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-visually-hidden@1.2.6

v1.2.15

  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-visually-hidden@1.2.5
radix-ui/primitives (@​radix-ui/react-popover)

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13

v1.1.17

  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12

v1.1.16

  • Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3
radix-ui/primitives (@​radix-ui/react-progress)

v1.1.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.1.10

  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v1.1.9

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5
radix-ui/primitives (@​radix-ui/react-radio-group)

v1.4.2

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-roving-focus@1.1.14

v1.4.1

  • Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-roving-focus@1.1.13

v1.4.0

  • Added unstable RadioGroupItemProvider, RadioGroupItemTrigger and RadioGroupItemBubbleInput parts. These expose the previously internal composition of a radio item (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. The RadioGroupItem component continues to render them by default.
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-roving-focus@1.1.12, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-use-size@1.1.2
radix-ui/primitives (@​radix-ui/react-scroll-area)

v1.2.13

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
Other updates
  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.2.12

  • Stabilized the viewport style tag unless the nonce changes.
  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v1.2.11

  • Fixed missing data-state attribute for Scroll Area scrollbars
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-direction@1.1.2, @radix-ui/number@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2
radix-ui/primitives (@​radix-ui/react-select)

v2.3.2

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
Other updates
  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-collection@1.1.11, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

v2.3.1

  • Allowed a Select.Item with an empty string value to act as a "clear" option. Selecting it resets the selection back to the placeholder, restoring the native <select> behavior for optional selects.
  • Fixed a bug where typeahead search resulted in focusing an element that no longer exists.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

v2.3.0

  • Added unstable Provider and BubbleInput parts to Select. Select.unstable_Provider sets up Select's context and state without implicitly rendering the hidden native select, and Select.unstable_BubbleInput exposes that previously internal native select so consumers can recompose it explicitly. Select continues to render both by default.
  • Added support for presence-based exit animations in Select
  • Fixed Select hidden input so it submits empty string when no value is selected
  • Fixed placeholder rendering when a controlled Select is reset to an empty value
  • Added missing __selectScope prop to PopperContent component
  • Fixed Select closing unexpectedly after touch-scrolling its content when rendered inside an open shadow DOM
  • Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Fixed SelectValue logging invalid prop errors when used with both asChild and a placeholder
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/number@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-visually-hidden@1.2.5
radix-ui/primitives (@​radix-ui/react-separator)

v1.1.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.1.10

  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v1.1.9

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-primitive@2.1.5
radix-ui/primitives (@​radix-ui/react-slider)

v1.4.2

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
Other updates
  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-collection@1.1.11

v1.4.1

  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
  • Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10

v1.4.0

  • Added unstable ThumbProvider, ThumbTrigger, and BubbleInput parts to Slider. SliderThumb was previously a single component that implicitly rendered a hidden native input for form submission. It is now composed from these new parts, which are exposed so consumers can decouple the bubble input from the thumb (for example, to render or customize it independently) instead of relying on SliderThumb to render it implicitly. SliderThumb continues to render all three by default, so existing usage is unaffected.
  • Added focusVisible for non-keyboard interactions with slider thumbs for progressively enabling styles using :focus-visible alongside programmatic focus management
  • Fixed Slider focus bugs in scrollable context
  • Fixed a Slider bug where very small step values made the thumbs unresponsive
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/number@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-use-size@1.1.2
radix-ui/primitives (@​radix-ui/react-slot)

v1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.

const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>("Slot");

v1.2.5

  • Fixed infinite re-render loop in React 19 caused by Slot creating a new ref callback on every render
  • Added support for nested Slottable via a render prop, so a slotted element can be wrapped while still merging Slot props and refs onto it
  • Added repository.directory to all package.json files
  • Improved error messages for invalid slot children
  • Updated dependencies: @radix-ui/react-compose-refs@1.1.3
radix-ui/primitives (@​radix-ui/react-switch)

v1.3.2

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.3.1

  • Updated dependencies: @radix-ui/react-primitive@2.1.6

v1.3.0

  • Added unstable Provider, Trigger and BubbleInput parts to Switch. These expose the previously internal composition (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. The Switch component continues to render them by default.
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-use-size@1.1.2
radix-ui/primitives (@​radix-ui/react-tabs)

v1.1.16

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-roving-focus@1.1.14

v1.1.15

  • Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-roving-focus@1.1.13

v1.1.14

  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-roving-focus@1.1.12, @radix-ui/react-use-controllable-state@1.2.3
radix-ui/primitives (@​radix-ui/react-toast)

v1.2.18

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
  • Cleared the close timer on unmount to prevent memory leaks and errors in test environments
  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-collection@1.1.11, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

v1.2.17

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

[v1.2.16](https://redirect.github.c

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/London)

  • Branch creation
    • "before 10am on friday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Renovatebot and dependabot updates frontend javascript Pull requests that update javascript code labels Mar 27, 2026
@renovate renovate Bot enabled auto-merge (squash) March 27, 2026 00:52
@renovate renovate Bot added the frontend label Mar 27, 2026
@github-actions

github-actions Bot commented Mar 27, 2026

Copy link
Copy Markdown

Caution

[High Risk] Simultaneous target group and EC2 replacement can leave both listeners with no healthy backends

The change replaces both load balancer target groups while also replacing the EC2 instances behind them. The public ALB listener for api-207c90ee-alb forwards only to api-207c90ee-tg, and the internal NLB listener for mon-internal-terraform-example forwards only to api-health-terraform-example. There is no phased cutover in the plan: the fleets are being recreated from new AMIs at the same time the target groups are recreated, so target health has to be rebuilt from zero on the replacement resources.

This is especially fragile for api-health-terraform-example, which currently has target_type = ip and receives a new aws_lb_target_group_attachment on port 9090. AWS/Terraform require ip target groups to register an IP address, but the new instance’s private_ip is only known at apply time, so registration and health establishment happen after instance creation rather than being pre-provisioned. During target group replacement, the listeners can temporarily forward to a new target group with no healthy targets, causing failed routing for the public API and the internal mon-internal-terraform-example endpoint. This is a real availability risk and matches the reliability concern about simultaneous fleet-wide cutovers without gradual rollout.
View reasoning tree here.

Caution

[High Risk] Standalone API access instance replacement can leave the 9090 health target group with no healthy backends

The api_access EC2 fleet is being replaced in-place while its boot contract is also being changed to a custom Python health server on port 9090. The new instances, their private IPs, the Elastic IP association, and the ip-type target group attachment are all being recomputed at the same time, but these instances are not behind an Auto Scaling Group or other verified rolling-update controller.

When Terraform cycles these standalone instances, target registration depends on the new instance booting, getting a new IP, starting the 9090 health service, and being attached to the target group before the old capacity disappears. A delay or failure in any step will leave api-health-terraform-example without healthy backends and make the API access path unreachable during the rollout.
View reasoning tree here.

Caution

[High Risk] New EC2 health endpoints are being exposed through a shared broad-access security group

The change creates and replaces module.api_access EC2 instances in subnet-07b5b1fb2ba02f964 and starts a Python HTTP health server bound to 0.0.0.0:9090 on each host. Those instances attach the shared internal-services security group sg-089e5107637083db5, which already allows TCP 9090 from 10.0.0.0/8, so every new instance becomes reachable on its health port from a very large internal address range.

This expands the fleet-wide attack surface of unauthenticated health endpoints and conflicts with the organization's rule that EC2 instances should not be directly reachable and that shared security groups multiply blast radius. The environment already demonstrates the same anti-pattern externally: i-043912a734d139cd6 has a public IP and sg-0437857de45b640ce allows 0.0.0.0/0 to SSH and HTTP. Even though the subnet does not auto-assign public IPs by default, this change still increases exposed EC2-hosted endpoints in a public-facing network segment and broad shared security group, making unauthorized reachability and lateral probing materially easier.
View reasoning tree here.

Warning

[Medium Risk] New SNS email alert subscription will not deliver notifications until manually confirmed

The change adds a new SNS email subscription for alerts@example.com on the production-api-alerts topic at the same time that API compute and target-group resources are being rolled out. Because the subscription uses protocol = email with endpoint_auto_confirms = false, it will stay in PendingConfirmation until someone manually confirms the email, and the current topic has no confirmed subscriptions.

That means CloudWatch alarms can exist and fire while no notification is actually delivered to operators through this new path. If the concurrent API instance and load balancer changes cause failures during rollout, the alerting channel will be effectively dark until the subscription is confirmed, reducing detection exactly when the infrastructure is most volatile.
View reasoning tree here.

Signals

Routine → Multiple compute, networking, and messaging resources showing unusual infrequent updates at 1 event/week for the last 3-5 months, with several resources changing only 1 event/month for the last 3 months, which is rare compared to typical patterns.
Policies → S3 bucket showing unusual policy violations with missing required tags and no server-side encryption configured, while a security group allows SSH port 22 access from anywhere 0.0.0.0/0, which is rare compared to typical patterns.

Additional Change Details: Items 145 Edges 241 model|risks_v6 ✨Encryption Key State Risk ✨KMS Key Creation

View in Overmind

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Auto-blocked: Routine score (-5) is below minimum (-1)


📊 Signals Summary

Routine 🔴 -5


🔥 Risks Summary

High 0 · Medium 0 · Low 0


💥 Blast Radius

Items 97 · Edges 246


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 0 · Medium 0 · Low 0


💥 Blast Radius

Items 27 · Edges 66


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 0 · Medium 0 · Low 0


💥 Blast Radius

Items 8 · Edges 30


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Found 2 high risks requiring review


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 2 · Medium 0 · Low 0


💥 Blast Radius

Items 11 · Edges 25


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 0 · Medium 0 · Low 0


💥 Blast Radius

Items 8 · Edges 30


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 0 · Medium 0 · Low 0


💥 Blast Radius

Items 12 · Edges 38


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 0 · Medium 0 · Low 0


💥 Blast Radius

Items 4 · Edges 20


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Found 1 high risk requiring review


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 1 · Medium 0 · Low 0


💥 Blast Radius

Items 2 · Edges 20


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Found 1 high risk requiring review


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 1 · Medium 0 · Low 0


💥 Blast Radius

Items 16 · Edges 45


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 0 · Medium 0 · Low 0


💥 Blast Radius

Items 21 · Edges 63


View full analysis in Overmind ↗

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overmind

⛔ Auto-Blocked


🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)


📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3


🔥 Risks Summary

High 0 · Medium 0 · Low 0


💥 Blast Radius

Items 49 · Edges 141


View full analysis in Overmind ↗

@renovate renovate Bot force-pushed the renovate/js branch 14 times, most recently from 96efea5 to 2083710 Compare April 30, 2026 11:54
@renovate renovate Bot force-pushed the renovate/js branch 11 times, most recently from c80da9e to 039d139 Compare May 7, 2026 10:36
@renovate renovate Bot force-pushed the renovate/js branch 4 times, most recently from ed23a9e to c5dc7a6 Compare May 11, 2026 10:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Renovatebot and dependabot updates frontend javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants