Skip to content

chore(deps): bump the web group in /web with 12 updates - #18

Merged
RobbsLuo merged 4 commits into
mainfrom
dependabot/npm_and_yarn/web/web-b008844d92
Oct 22, 2026
Merged

chore(deps): bump the web group in /web with 12 updates#18
RobbsLuo merged 4 commits into
mainfrom
dependabot/npm_and_yarn/web/web-b008844d92

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the web group in /web with 12 updates:

Package From To
@lobehub/icons 5.23.0 6.0.0
@tanstack/react-query 5.104.1 5.104.3
cn 0.4.0 0.5.0
lucide-react 1.55.0 1.58.0
radix-ui 1.7.0 1.8.1
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
@testing-library/user-event 14.6.7 14.6.8
@vitest/coverage-v8 5.0.3 5.0.5
jsdom 30.1.2 30.1.3
shadcn 4.21.4 4.22.0
vitest 5.0.3 5.0.5

Updates @lobehub/icons from 5.23.0 to 6.0.0

Changelog

Sourced from @​lobehub/icons's changelog.

Version 6.0.0

Released on 2026-10-15

✨ Features

  • auto: Auto build static icons.
  • misc: Adopt lobe-ui 6 and drop antd [force major].

What's improved

  • auto: Auto build static icons (559e761)
  • misc: Adopt lobe-ui 6 and drop antd [force major], closes #432 (a83b922)

Version 5.23.1

Released on 2026-10-13

🐛 Bug Fixes

  • misc: Use Meta icon for Muse Wonder models, use Node 22 in release CI so tsdown can load its config.

What's fixed

  • misc: Use Meta icon for Muse Wonder models (6f2c20d)
  • misc: Use Node 22 in release CI so tsdown can load its config (5f19aab)

... (truncated)

Commits
  • 8a1b282 🔖 chore(release): v6.0.0 [skip ci]
  • a83b922 ✨ feat: adopt lobe-ui 6 and drop antd [force major] (#432)
  • 559e761 ✨ feat(auto): Auto build static icons
  • bb666a6 fix: README 图片链接（npmmirror 图床、失效资产、生成脚本） (#438)
  • 05a9b8c 🔖 chore(release): v5.23.1 [skip ci]
  • 5f19aab 🐛 fix: use Node 22 in release CI so tsdown can load its config
  • 67c9555 Merge pull request #436 from lobehub/fix/muse-wonder-icon
  • 6f2c20d 🐛 fix: use Meta icon for Muse Wonder models
  • bcdb7c8 🔨 build: generate per-module exports map at CI build time (#435)
  • 913b01b 🔨 build: replace father with tsdown to emit Node-ESM-resolvable output (#434)
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.104.1 to 5.104.3

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.104.3
    • @​tanstack/query-devtools@​5.104.3

@​tanstack/react-query-next-experimental@​5.104.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.104.3

@​tanstack/react-query-persist-client@​5.104.3

Patch Changes

  • Updated dependencies [ed4d849]:
    • @​tanstack/query-persist-client-core@​5.104.3
    • @​tanstack/react-query@​5.104.3

@​tanstack/react-query@​5.104.3

Patch Changes

  • Updated dependencies [0f15bc9]:
    • @​tanstack/query-core@​5.104.3
Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.3

Patch Changes

  • Updated dependencies [0f15bc9]:
    • @​tanstack/query-core@​5.104.3

5.104.2

Patch Changes

  • Updated dependencies [03e8c39]:
    • @​tanstack/query-core@​5.104.2
Commits
  • ee47993 ci: Version Packages (#11998)
  • 0f15bc9 fix(query-core): preserve union narrowing in setQueryData updaters (#11935)
  • b699b52 ci: Version Packages (#11849)
  • e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
  • df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
  • 833062c chore: replace prettier with oxfmt (#11939)
  • d0cfa6a chore: replace eslint with oxlint (#11938)
  • 0012ec1 docs(react-query): add JSDoc to the properties of the exported interfaces and...
  • b5e8e7b docs(react-query): add JSDoc to the exported classes, methods, and arrow func...
  • 01abab3 docs(*): note that 'throwOnError' makes the hook rethrow the errors of 'mutat...
  • Additional commits viewable in compare view

Updates cn from 0.4.0 to 0.5.0

Release notes

Sourced from cn's releases.

cn@0.5.0

Minor Changes

  • #157 663adea Thanks @​shadcn! - Drop Node 20, which reached end of life, and require Node 22 or later.

  • #164 64aa1d0 Thanks @​shadcn! - cn build now follows package @imports, reads @theme declarations after nested blocks such as @keyframes, and drops names declared before a --*: initial reset.

Changelog

Sourced from cn's changelog.

0.5.0

Minor Changes

  • #157 663adea Thanks @​shadcn! - Drop Node 20, which reached end of life, and require Node 22 or later.

  • #164 64aa1d0 Thanks @​shadcn! - cn build now follows package @imports, reads @theme declarations after nested blocks such as @keyframes, and drops names declared before a --*: initial reset.

Commits

Updates lucide-react from 1.55.0 to 1.58.0

Release notes

Sourced from lucide-react's releases.

Version 1.58.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.57.0...1.58.0

Version 1.57.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.56.0...1.57.0

Version 1.56.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.55.0...1.56.0

Commits

Updates radix-ui from 1.7.0 to 1.8.1

Changelog

Sourced from radix-ui's changelog.

1.8.1

  • Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.
  • Updated dependencies: @radix-ui/react-accordion@1.3.1, @radix-ui/react-avatar@1.3.1, @radix-ui/react-checkbox@1.4.1, @radix-ui/react-collapsible@1.2.1, @radix-ui/react-context-menu@2.4.1, @radix-ui/react-dialog@1.3.1, @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-dropdown-menu@2.2.1, @radix-ui/react-focus-scope@1.3.1, @radix-ui/react-hover-card@1.2.1, @radix-ui/react-menu@2.2.1, @radix-ui/react-menubar@1.2.1, @radix-ui/react-navigation-menu@1.4.1, @radix-ui/react-one-time-password-field@0.2.1, @radix-ui/react-password-toggle-field@0.2.1, @radix-ui/react-popover@1.3.1, @radix-ui/react-progress@1.2.1, @radix-ui/react-roving-focus@1.2.1, @radix-ui/react-select@2.4.1, @radix-ui/react-slider@1.6.1, @radix-ui/react-switch@1.4.1, @radix-ui/react-tabs@1.2.1, @radix-ui/react-toast@1.3.1, @radix-ui/react-toggle@1.2.1, @radix-ui/react-toggle-group@1.2.1, @radix-ui/react-tooltip@1.4.1, @radix-ui/react-alert-dialog@1.2.1, @radix-ui/react-radio-group@1.5.1, @radix-ui/react-toolbar@1.2.1

1.8.0

Context Menu

  • Allowed side, sideOffset, and align props to be overridden on ContextMenu.Content.

Navigation Menu

  • Added data-state attribute to the content element when using NavigationMenu.Viewport for consistency.

Popover

  • Fixed aria-controls being set on Popover.Trigger while the popover is closed.

Select

  • Fixed content alignment when all items are disabled.
  • Fixed a bug where updating a Select value programmatically while inside a <form> would dispatch a click event from the hidden bubble select that propagated to ancestor onClick handlers.

Slider

  • Fixed a bug where updating a Slider value programmatically while inside a <form> would dispatch an input event that propagated to ancestor onInput handlers.

Slot

  • Fixed Slot throwing when an asChild child is a lazy reference whose resolved value is itself a lazy reference.

Toast

  • Fixed Toast.Viewport forcing a still-hydrating Suspense boundary to client-render.

Tooltip

  • Fixed a bug where tabbing away from a focusable tooltip trigger nested in a modal popover moved focus to the popover's root instead of the next element in the popover.

Other updates

  • Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.
  • Fixed bugs in form-nested control components where a user-driven change was treated as programmatic in some cases, preventing bubbled event handlers from being called.
  • Fixed timing bugs in useCallbackRef.
  • Fixed FocusScope throwing a TypeError in test environments after teardown.
  • Fixed a bug resulting from incorrect tree-shaking in SWC-minified code.
  • Some small and breaking changes in unstable collection APIs. This package is an internal utility, undocumented, and unstable APIs may change without a major version bump. Capturing those changes here just in case you did a naughty and used them.
    • Renamed unstable_CollectionProps to unstable_CollectionSlotProps and unstable_CollectionItemMap to unstable_CollectionDict.
    • Added useGetCollection to the functions returned from unstable_createCollection.

... (truncated)

Commits

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates @testing-library/user-event from 14.6.7 to 14.6.8

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

  • treat programmatic null input values as empty string (#1329) (1951eb7)
Commits

Updates @vitest/coverage-v8 from 5.0.3 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates jsdom from 30.1.2 to 30.1.3

Release notes

Sourced from jsdom's releases.

v30.1.3

  • Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@​scttcper, @​asamuzaK)
  • Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@​scttcper)
  • Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
  • Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
  • Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@​rnavarro)
  • Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
  • Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
  • Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
  • Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
  • Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
  • Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
  • Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
  • Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
  • Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@​asamuzaK)
Commits
  • 058c0f5 30.1.3
  • fcd1fd1 Cascade parsed longhands independently
  • a3ee786 Cascade computed style properties on demand
  • f42dc15 Resolve colors before caching or using currentcolor
  • 074b1fb Compute background-position lengths against the final font size
  • d19598c Apply style rules nested in multiple @​media rules
  • 45d626c Rule out attribute selector subjects before matching
  • 3ff0a5b Upgrade Undici and remove abort workarounds
  • 8813bb1 Ignore CSS declarations with unparseable math functions
  • 63712d8 Fix XHR credentials across redirects
  • Additional commits viewable in compare view

Updates shadcn from 4.21.4 to 4.22.0

Release notes

Sourced from shadcn's releases.

shadcn@4.22.0

Minor Changes

  • #12298 954ce95 Thanks @​shadcn! - Upgrade to Zod 4. shadcn/schema and @shadcn/registry/schema now export Zod 4 schemas, so passing them to Zod 3's z no longer typechecks. On Zod 3, use the exported types (RegistryItem, RegistryItemFile, Config) and the schema's own methods (registryItemSchema.array()) instead of z.infer and z.array. Zod errors expose issues, not errors. Validation messages now use Zod 4's wording.

Patch Changes

  • Updated dependencies [954ce95]:
    • @​shadcn/registry@​0.2.0

shadcn@4.21.5

Patch Changes

Changelog

Sourced from shadcn's changelog.

4.22.0

Minor Changes

  • #12298 954ce95 Thanks @​shadcn! - Upgrade to Zod 4. shadcn/schema and @shadcn/registry/schema now export Zod 4 schemas, so passing them to Zod 3's z no longer typechecks. On Zod 3, use the exported types (RegistryItem, RegistryItemFile, Config) and the schema's own methods (registryItemSchema.array()) instead of z.infer and z.array. Zod errors expose issues, not errors. Validation messages now use Zod 4's wording.

Patch Changes

  • Updated dependencies [954ce95]:
    • @​shadcn/registry@​0.2.0

4.21.5

Patch Changes

Commits

Updates vitest from 5.0.3 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

@dependabot
chore(deps): bump the web group in /web with 12 updates
275109d 
Bumps the web group in /web with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@lobehub/icons](https://github.com/lobehub/lobe-icons) | `5.23.0` | `6.0.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.1` | `5.104.3` |
| [cn](https://github.com/shadcn-ui/cn/tree/HEAD/packages/cn) | `0.4.0` | `0.5.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.58.0` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.7.0` | `1.8.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.7` | `14.6.8` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.5` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.4` | `4.22.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |


Updates `@lobehub/icons` from 5.23.0 to 6.0.0
- [Release notes](https://github.com/lobehub/lobe-icons/releases)
- [Changelog](https://github.com/lobehub/lobe-icons/blob/master/CHANGELOG.md)
- [Commits](lobehub/lobe-icons@v5.23.0...v6.0.0)

Updates `@tanstack/react-query` from 5.104.1 to 5.104.3
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.3/packages/react-query)

Updates `cn` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/shadcn-ui/cn/releases)
- [Changelog](https://github.com/shadcn-ui/cn/blob/main/packages/cn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/cn/commits/cn@0.5.0/packages/cn)

Updates `lucide-react` from 1.55.0 to 1.58.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.58.0/packages/lucide-react)

Updates `radix-ui` from 1.7.0 to 1.8.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@testing-library/user-event` from 14.6.7 to 14.6.8
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.7...v14.6.8)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.2...v30.1.3)

Updates `shadcn` from 4.21.4 to 4.22.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.22.0/packages/shadcn)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@lobehub/icons"
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: cn
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: lucide-react
  dependency-version: 1.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: radix-ui
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: shadcn
  dependency-version: 4.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@RobbsLuo
Merge remote-tracking branch 'origin/main' into HEAD
bad65c3
@RobbsLuo
fix(web): 关掉 auto-install-peers，去掉用不到的 antd 全家桶
c53ba4b 
`@lobehub/icons` 把 `@lobehub/ui` / `antd` 声明为 peer，pnpm 自动安装时
会拖进 400+ 个包（antd、@ant-design/*、rc-*、@emotion/*、motion 等），
而我们只 import 它的静态图标组件（`es/<Name>/components/{Color,Mono}`），
那些文件不引用 `@lobehub/ui`，也从未进过产物（dist 里搜不到 antd）。

同时 icons 6.x 声明 peer `@lobehub/ui: ^6.0.0`，自动装的却是 5.42.6，
lockfile 长期带着一个不满足的 peer。

- `.npmrc` 加 `auto-install-peers=false`：lock 从 1023 个包降到 601 个
- 真正需要的 peer 显式声明：`@testing-library/dom` 补进 devDependencies
  （`@testing-library/react` 的 peer，之前靠自动安装才在）
- 副产品：`pnpm audit --prod` 从 1 条 low（katex ← @lobehub/ui → remark-math）
  变成 0 漏洞，整棵子树已移除

纯删除，无版本漂移：修复后每个 (包, 版本) 都存在于修复前。
验证：`--strict-peer-dependencies` 安装通过、tsc、643 测试、build 全绿。
@RobbsLuo
fix(docker): COPY web/.npmrc，避免 frozen-lockfile 配置不一致
9c641ae 
auto-install-peers=false 写在 .npmrc 里，镜像构建只 COPY 了 package.json /
pnpm-lock.yaml / pnpm-workspace.yaml，容器内 pnpm 退回默认 autoInstallPeers=true，
与 lockfile 的 settings.autoInstallPeers: false 不匹配，直接报
ERR_PNPM_LOCKFILE_CONFIG_MISMATCH。
@RobbsLuo
RobbsLuo merged commit b03cfd1 into main Oct 22, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/web/web-b008844d92 branch October 22, 2026 02:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@RobbsLuo