chore(deps): update javascript#513
Conversation
renovate
Bot
added
dependencies
renovate
Bot
force-pushed
the
renovate/js
branch
from
476d981 to
6b06671
Compare
|
Warning [Medium Risk] New production EC2 server is being launched without an attached IAM instance profile The change creates a new production EC2 instance at When this instance launches, it will not have a least-privilege machine identity for SSM-managed access, agent-based logging, or any future AWS API calls the workload needs. That forces operators toward unmanaged access patterns or later ad hoc permission changes, and it leaves a production server outside the organization’s required EC2 hardening baseline. This is a real medium-severity security/compliance risk even if the HTTP service itself starts successfully. Warning [Medium Risk] New API access instance exposes an HTTP service from a public subnet outside the intended load-balancer boundary This change creates a new production-tagged EC2 instance in Even though SignalsRoutine → Multiple compute and supporting infrastructure resources are showing unusual and infrequent routine changes at 1-2 events/week for the last 3 months, with the API server instance repeatedly appearing at 1 event/week for the last 3 months. Additional Change Details: 
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
renovate
Bot
force-pushed
the
renovate/js
branch
from
6b06671 to
b24b465
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
b24b465 to
0ca9be4
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
0ca9be4 to
b5b9bd9
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
b5b9bd9 to
b39d4fe
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
b39d4fe to
9ece352
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
9ece352 to
a7a8f6e
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
a7a8f6e to
516875a
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
516875a to
be444ed
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
be444ed to
70d47ee
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
from
70d47ee to
ed5a5d9
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
14 times, most recently
from
96efea5 to
2083710
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
11 times, most recently
from
c80da9e to
039d139
Compare
renovate
Bot
force-pushed
the
renovate/js
branch
4 times, most recently
from
ed23a9e to
c5dc7a6
Compare
This PR contains the following updates:
5.2.2→5.4.01.2.12→1.2.131.1.15→1.1.161.1.8→1.1.91.1.11→1.1.121.3.3→1.3.41.1.12→1.1.132.2.16→2.3.01.1.15→1.1.162.1.16→2.1.171.1.15→1.1.162.1.8→2.1.91.1.16→1.1.171.2.14→1.2.151.1.15→1.1.161.1.8→1.1.91.3.8→1.4.01.2.10→1.2.112.2.6→2.3.01.1.8→1.1.91.3.6→1.4.01.2.4→1.2.51.2.6→1.3.01.1.13→1.1.141.2.15→1.2.161.1.10→1.1.111.1.11→1.1.121.2.8→1.2.94.2.2→4.3.05.95.2→5.101.024.12.0→24.13.119.2.14→19.2.174.3.0→4.3.110.4.27→10.5.04.1.0→4.4.010.1.0→10.4.17.0.1→7.1.117.4.0→17.6.01.1.13→1.3.01.6.0→1.17.08.5.8→8.5.1519.2.4→19.2.719.2.4→19.2.77.72.0→7.78.04.7.5→4.11.27.13.2→7.17.03.8.0→3.8.13.5.0→3.6.04.2.2→4.3.06.0.2→6.0.38.57.2→8.61.08.0.2→8.0.164.3.6→4.4.3Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
react-hook-form/resolvers (@hookform/resolvers)
v5.4.0Compare Source
Features
Fixes
yupResolver(useForm context) (#835) (3d29924)radix-ui/primitives (@radix-ui/react-accordion)
v1.2.13@radix-ui/react-collapsible@1.1.13,@radix-ui/react-collection@1.1.9,@radix-ui/react-direction@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-id@1.1.2,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-alert-dialog)
v1.1.16@radix-ui/react-dialog@1.1.16,@radix-ui/react-slot@1.2.5,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5radix-ui/primitives (@radix-ui/react-aspect-ratio)
v1.1.9@radix-ui/react-primitive@2.1.5radix-ui/primitives (@radix-ui/react-avatar)
v1.1.12@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-callback-ref@1.1.2,@radix-ui/react-use-is-hydrated@0.1.1,@radix-ui/react-use-layout-effect@1.1.2radix-ui/primitives (@radix-ui/react-checkbox)
v1.3.4@radix-ui/react-presence@1.1.6,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-use-previous@1.1.2,@radix-ui/react-use-size@1.1.2radix-ui/primitives (@radix-ui/react-collapsible)
v1.1.13aria-controlswhen their content is removed from the DOM (credit to @dodomorandi for the original PR)@radix-ui/react-presence@1.1.6,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-id@1.1.2,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-use-layout-effect@1.1.2radix-ui/primitives (@radix-ui/react-context-menu)
v2.3.0openprop onContextMenu.Root. This is intended for reading the open state and closing the menu programmatically, though we discourage opening the menu programmatically since opening the menu depends on user interaction to position the menu.@radix-ui/react-menu@2.1.17,@radix-ui/primitive@1.1.4,@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-dialog)
v1.1.16react-dialogwere brokenaria-controlswhen their content is removed from the DOM (credit to @dodomorandi for the original PR)@radix-ui/react-presence@1.1.6,@radix-ui/react-slot@1.2.5,@radix-ui/react-focus-guards@1.1.4,@radix-ui/react-dismissable-layer@1.1.12,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-focus-scope@1.1.9,@radix-ui/react-id@1.1.2,@radix-ui/react-portal@1.1.11,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-dropdown-menu)
v2.1.17@radix-ui/react-menu@2.1.17,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-id@1.1.2,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-hover-card)
v1.1.16@radix-ui/react-presence@1.1.6,@radix-ui/react-popper@1.3.0,@radix-ui/react-dismissable-layer@1.1.12,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-portal@1.1.11,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-label)
v2.1.9@radix-ui/react-primitive@2.1.5radix-ui/primitives (@radix-ui/react-menubar)
v1.1.17@radix-ui/react-menu@2.1.17,@radix-ui/react-collection@1.1.9,@radix-ui/react-direction@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-id@1.1.2,@radix-ui/react-primitive@2.1.5,@radix-ui/react-roving-focus@1.1.12,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-navigation-menu)
v1.2.15aria-controlswhen their content is removed from the DOM (credit to @dodomorandi for the original PR)@radix-ui/react-presence@1.1.6,@radix-ui/react-dismissable-layer@1.1.12,@radix-ui/react-collection@1.1.9,@radix-ui/react-direction@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-id@1.1.2,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-callback-ref@1.1.2,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-use-layout-effect@1.1.2,@radix-ui/react-use-previous@1.1.2,@radix-ui/react-visually-hidden@1.2.5radix-ui/primitives (@radix-ui/react-popover)
v1.1.16react-dialogwere brokenaria-controlswhen their content is removed from the DOM (credit to @dodomorandi for the original PR)@radix-ui/react-presence@1.1.6,@radix-ui/react-popper@1.3.0,@radix-ui/react-slot@1.2.5,@radix-ui/react-focus-guards@1.1.4,@radix-ui/react-dismissable-layer@1.1.12,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-focus-scope@1.1.9,@radix-ui/react-id@1.1.2,@radix-ui/react-portal@1.1.11,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-progress)
v1.1.9@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5radix-ui/primitives (@radix-ui/react-radio-group)
v1.4.0RadioGroupItemProvider,RadioGroupItemTriggerandRadioGroupItemBubbleInputparts. These expose the previously internal composition of a radio item (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. TheRadioGroupItemcomponent continues to render them by default.@radix-ui/react-presence@1.1.6,@radix-ui/react-direction@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-roving-focus@1.1.12,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-use-previous@1.1.2,@radix-ui/react-use-size@1.1.2radix-ui/primitives (@radix-ui/react-scroll-area)
v1.2.11data-stateattribute for Scroll Area scrollbars@radix-ui/react-presence@1.1.6,@radix-ui/react-direction@1.1.2,@radix-ui/number@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-callback-ref@1.1.2,@radix-ui/react-use-layout-effect@1.1.2radix-ui/primitives (@radix-ui/react-select)
v2.3.0ProviderandBubbleInputparts to Select.Select.unstable_Providersets up Select's context and state without implicitly rendering the hidden nativeselect, andSelect.unstable_BubbleInputexposes that previously internal nativeselectso consumers can recompose it explicitly.Selectcontinues to render both by default.__selectScopeprop toPopperContentcomponentSelectclosing unexpectedly after touch-scrolling its content when rendered inside an open shadow DOMreact-dialogwere brokenaria-controlswhen their content is removed from the DOM (credit to @dodomorandi for the original PR)SelectValuelogging invalid prop errors when used with bothasChildand a placeholder@radix-ui/react-presence@1.1.6,@radix-ui/react-popper@1.3.0,@radix-ui/react-slot@1.2.5,@radix-ui/react-focus-guards@1.1.4,@radix-ui/react-dismissable-layer@1.1.12,@radix-ui/react-collection@1.1.9,@radix-ui/react-direction@1.1.2,@radix-ui/number@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-focus-scope@1.1.9,@radix-ui/react-id@1.1.2,@radix-ui/react-portal@1.1.11,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-callback-ref@1.1.2,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-use-layout-effect@1.1.2,@radix-ui/react-use-previous@1.1.2,@radix-ui/react-visually-hidden@1.2.5radix-ui/primitives (@radix-ui/react-separator)
v1.1.9@radix-ui/react-primitive@2.1.5radix-ui/primitives (@radix-ui/react-slider)
v1.4.0ThumbProvider,ThumbTrigger, andBubbleInputparts to Slider.SliderThumbwas previously a single component that implicitly rendered a hidden native input for form submission. It is now composed from these new parts, which are exposed so consumers can decouple the bubble input from the thumb (for example, to render or customize it independently) instead of relying onSliderThumbto render it implicitly.SliderThumbcontinues to render all three by default, so existing usage is unaffected.focusVisiblefor non-keyboard interactions with slider thumbs for progressively enabling styles using:focus-visiblealongside programmatic focus managementstepvalues made the thumbs unresponsive@radix-ui/react-collection@1.1.9,@radix-ui/react-direction@1.1.2,@radix-ui/number@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-use-layout-effect@1.1.2,@radix-ui/react-use-previous@1.1.2,@radix-ui/react-use-size@1.1.2radix-ui/primitives (@radix-ui/react-slot)
v1.2.5Slotcreating a new ref callback on every renderSlottablevia a render prop, so a slotted element can be wrapped while still merging Slot props and refs onto it@radix-ui/react-compose-refs@1.1.3radix-ui/primitives (@radix-ui/react-switch)
v1.3.0Provider,TriggerandBubbleInputparts to Switch. These expose the previously internal composition (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. TheSwitchcomponent continues to render them by default.@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-use-previous@1.1.2,@radix-ui/react-use-size@1.1.2radix-ui/primitives (@radix-ui/react-tabs)
v1.1.14aria-controlswhen their content is removed from the DOM (credit to @dodomorandi for the original PR)@radix-ui/react-presence@1.1.6,@radix-ui/react-direction@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-context@1.1.4,@radix-ui/react-id@1.1.2,@radix-ui/react-primitive@2.1.5,@radix-ui/react-roving-focus@1.1.12,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-toast)
v1.2.16@radix-ui/react-presence@1.1.6,@radix-ui/react-dismissable-layer@1.1.12,@radix-ui/react-collection@1.1.9,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-portal@1.1.11,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-callback-ref@1.1.2,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-use-layout-effect@1.1.2,@radix-ui/react-visually-hidden@1.2.5radix-ui/primitives (@radix-ui/react-toggle)
v1.1.11@radix-ui/primitive@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-toggle-group)
v1.1.12@radix-ui/react-direction@1.1.2,@radix-ui/primitive@1.1.4,@radix-ui/react-context@1.1.4,@radix-ui/react-primitive@2.1.5,@radix-ui/react-roving-focus@1.1.12,@radix-ui/react-toggle@1.1.11,@radix-ui/react-use-controllable-state@1.2.3radix-ui/primitives (@radix-ui/react-tooltip)
v1.2.9skipDelayDuration={0}works as expected. Previously, the open delay could still be skipped when moving between triggers.@radix-ui/react-presence@1.1.6,@radix-ui/react-popper@1.3.0,@radix-ui/react-slot@1.2.5,@radix-ui/react-dismissable-layer@1.1.12,@radix-ui/primitive@1.1.4,@radix-ui/react-compose-refs@1.1.3,@radix-ui/react-context@1.1.4,@radix-ui/react-id@1.1.2,@radix-ui/react-portal@1.1.11,@radix-ui/react-primitive@2.1.5,@radix-ui/react-use-controllable-state@1.2.3,@radix-ui/react-visually-hidden@1.2.5tailwindlabs/tailwindcss (@tailwindcss/postcss)
v4.3.0Compare Source
Added
@container-sizeutility (#18901)scrollbar-{auto,thin,none}utilities forscrollbar-width, andscrollbar-thumb-*/scrollbar-track-*color utilities forscrollbar-color(#19981, #20019)scrollbar-gutter-*utilities (#20018)zoom-*utilities (#20020)tab-*utilities (#20022)@variantwith stacked variants (e.g.@variant hover:focus { … }) (#19996)@variantwith compound variants (e.g.@variant hover, focus { … }) (#19996)--default(…)in--value(…)and--modifier(…)for functional@utilitydefinitions (#19989)Fixed
@pluginresolves package JavaScript entries instead of browser CSS entries when using@tailwindcss/vite(#19949)@importand@pluginpaths resolving from the wrong directory when using@tailwindcss/vite(#19965)@variantare processed by@tailwindcss/vite(#19966)basewhenresult.opts.fromis not provided when using@tailwindcss/postcss(#19980)_whitespace in arbitrary values (#19986)w-[calc(100%---spacing(60))]→w-[calc(100%-(--spacing(60)))]) (#19986)-mt-[20in]→mt-[-20in], notmt-[-1920px]) (#19988):has()variants from[&:has(…)]tohas-[…](#19991)styleattributes (e.g.style="flex-grow: 1"→style="flex-grow: 1", notstyle="grow: 1") (#19918)@utilitydefinitions with the same name but different value types (#19777)PluginWithConfigtype fromtailwindcss/pluginto fix errors when inferring plugin config types (#19707)startandendlegacy utilities without values do not generate CSS (#20003)--value(…)is required in functional@utilitydefinitions (#20005)-left-[(var(--a)+var(--b))]) (#20011)v4.2.4Compare Source
Fixed
@importand@pluginstill resolve correctly when using Vite aliases in@tailwindcss/vite(#19947)v4.2.3Compare Source
Fixed
tracking-*utilities by preferring non-negative utilities (e.g.-tracking-tighter→tracking-wider) (#19827)@tailwindcss/webpack(#19723)px-[1.2rem] py-[1.2rem]→p-[1.2rem]) (#19837)border-{t,b}-*intoborder-y-*,border-{l,r}-*intoborder-x-*, andborder-{t,r,b,l}-*intoborder-*(#19842)scroll-m{t,b}-*intoscroll-my-*,scroll-m{l,r}-*intoscroll-mx-*, andscroll-m{t,r,b,l}-*intoscroll-m-*(#19842)scroll-p{t,b}-*intoscroll-py-*,scroll-p{l,r}-*intoscroll-px-*, andscroll-p{t,r,b,l}-*intoscroll-p-*(#19842)overflow-{x,y}-*intooverflow-*(#19842)overscroll-{x,y}-*intooverscroll-*(#19842)--placeholder-colorinstead of--background-colorforplaceholder-*utilities (#19843)config.contentwhen migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846).envand.env.*to default ignored content files (#19846)overflow-ellipsisintotext-ellipsis(#19849)start-full→inset-s-full,start-auto→inset-s-auto,start-px→inset-s-px, andstart-<number>→inset-s-<number>as well as negative versions (#19849)end-full→inset-e-full,end-auto→inset-e-auto,end-px→inset-e-px, andend-<number>→inset-e-<number>as well as negative versions (#19849)-sign inside the arbitrary value-left-[9rem]→left-[-9rem](#19858)-sign outside the arbitrary valueml-[calc(-1*var(--width))]→-ml-(--width)(#19858)NODE_PATHenvironment variable in standalone CLI (#19617)TanStack/query (@tanstack/react-query)
v5.101.0Compare Source
Patch Changes
v5.100.14Compare Source
Patch Changes
fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)
Updated dependencies []:
v5.100.13Compare Source
Patch Changes
d423168]:v5.100.12Compare Source
Patch Changes
v5.100.11Patch Changes
v5.100.10Patch Changes
[
v5.100.9](https://redirect.github.com/TanStack/query/blob/HEAD/packages/react-queryConfiguration
📅 Schedule: (in timezone Europe/London)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.