Skip to content

chore: bump the npm group across 1 directory with 28 updates - #2020

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/npm-1786b5eed7
Closed

chore: bump the npm group across 1 directory with 28 updates#2020
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/npm-1786b5eed7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm group with 28 updates in the / directory:

Package From To
@atlaskit/pragmatic-drag-and-drop-auto-scroll 3.0.1 3.1.0
@lottiefiles/dotlottie-react 0.19.14 0.19.15
@lottiefiles/dotlottie-web 0.79.1 0.79.2
@matrix-org/matrix-sdk-crypto-wasm 18.4.0 18.6.0
@sentry/react 10.70.0 10.71.0
@tanstack/react-query 5.101.4 5.102.4
@tanstack/react-query-devtools 5.101.4 5.102.4
@tanstack/react-virtual 3.14.9 3.14.10
dompurify 3.4.13 3.4.14
i18next 26.3.6 26.4.0
immer 11.1.17 11.1.18
jotai 2.20.2 2.20.3
marked 18.0.9 18.0.11
matrix-js-sdk 42.1.0 42.2.0
matrix-widget-api 1.18.0 1.19.0
prosemirror-view 1.42.2 1.42.3
react-i18next 17.0.11 17.0.12
virtua 0.50.1 0.50.5
@testing-library/user-event 14.6.4 14.6.6
@types/node 26.2.0 26.3.0
@types/react-dom 19.2.4 19.2.5
@vitejs/plugin-react 6.0.5 6.1.0
@vitest/coverage-v8 4.1.10 4.1.11
@vitest/ui 4.1.10 4.1.11
oxfmt 0.63.0 0.65.0
oxlint 1.78.0 1.80.0
vite 8.2.1 8.2.2
vitest 4.1.10 4.1.11

Updates @atlaskit/pragmatic-drag-and-drop-auto-scroll from 3.0.1 to 3.1.0

Commits

Updates @lottiefiles/dotlottie-react from 0.19.14 to 0.19.15

Release notes

Sourced from @​lottiefiles/dotlottie-react's releases.

@​lottiefiles/dotlottie-react@​0.19.15

Patch Changes

  • Updated dependencies [14aee74]
    • @​lottiefiles/dotlottie-web@​0.79.2
Changelog

Sourced from @​lottiefiles/dotlottie-react's changelog.

0.19.15

Patch Changes

  • Updated dependencies [14aee74]
    • @​lottiefiles/dotlottie-web@​0.79.2
Commits

Updates @lottiefiles/dotlottie-web from 0.79.1 to 0.79.2

Release notes

Sourced from @​lottiefiles/dotlottie-web's releases.

@​lottiefiles/dotlottie-web@​0.79.2

Patch Changes

  • 14aee74: Update dotlottie-rs WASM bindings to 0f16fb8.
Changelog

Sourced from @​lottiefiles/dotlottie-web's changelog.

0.79.2

Patch Changes

  • 14aee74: Update dotlottie-rs WASM bindings to 0f16fb8.
Commits

Updates @matrix-org/matrix-sdk-crypto-wasm from 18.4.0 to 18.6.0

Release notes

Sourced from @​matrix-org/matrix-sdk-crypto-wasm's releases.

v18.6.0

matrix-sdk-crypto-wasm v18.6.0

  • Allow providing rawX509Signer and rawX509Validity to OlmMachine::initialize and OlmMachine::initFromStore, allowing the user's identity to be signed using the supplied JavaScript function. Both the signer and validity function must be supplied, or neither. #341

  • Update matrix-rust-sdk to 64b12e0b80

    • Change the return type of X509Signer::validity_not_after to Duration to make it easier for downstream crates to implement. (#6904)

    • Make X.509 signing an async operation, meaning that the experimental RawX509Signer::sign now returns a Future. (#6867)

  • Fix UserIdentity methods to correctly set up the logging framework while they are running. (#340)

v18.5.0

matrix-sdk-crypto-wasm v18.5.0

  • Add CheckCode.toDigitNoLeadingZero to expose the new method of calculating ECIES check codes from Vodozemac. (#337)

  • Update matrix-rust-sdk to 955837c467:

    • The OlmMachine::receive_sync_changes() method now correctly treats a missing one-time key count to mean that zero one-time keys exist on the homeserver. (#6780)
Changelog

Sourced from @​matrix-org/matrix-sdk-crypto-wasm's changelog.

matrix-sdk-crypto-wasm v18.6.0

  • Allow providing rawX509Signer and rawX509Validity to OlmMachine::initialize and OlmMachine::initFromStore, allowing the user's identity to be signed using the supplied JavaScript function. Both the signer and validity function must be supplied, or neither. #341

  • Update matrix-rust-sdk to 64b12e0b80

    • Change the return type of X509Signer::validity_not_after to Duration to make it easier for downstream crates to implement. (#6904)

    • Make X.509 signing an async operation, meaning that the experimental RawX509Signer::sign now returns a Future. (#6867)

  • Fix UserIdentity methods to correctly set up the logging framework while they are running. (#340)

matrix-sdk-crypto-wasm v18.5.0

  • Add CheckCode.toDigitNoLeadingZero to expose the new method of calculating ECIES check codes from Vodozemac. (#337)

  • Update matrix-rust-sdk to 955837c467:

    • The OlmMachine::receive_sync_changes() method now correctly treats a missing one-time key count to mean that zero one-time keys exist on the homeserver. (#6780)
Commits

Updates @sentry/react from 10.70.0 to 10.71.0

Release notes

Sourced from @​sentry/react's releases.

10.71.0

Important Changes

  • feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

  • feat(v10/core): Deprecate scope.clear() method (#23231)
  • fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
  • fix(v10/react): Match TanStack Router pageload against the router location (#23494)
  • test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)

Bundle size 📦

Path Size
@​sentry/browser 27.1 KB
@​sentry/browser - with treeshaking flags 25.58 KB
@​sentry/browser (incl. Tracing) 45.51 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.25 KB
@​sentry/browser (incl. Tracing, Profiling) 50.15 KB
@​sentry/browser (incl. Tracing, Replay) 83.83 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.71 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.45 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.79 KB
@​sentry/browser (incl. Feedback) 43.87 KB
@​sentry/browser (incl. sendFeedback) 31.78 KB
@​sentry/browser (incl. FeedbackAsync) 36.79 KB
@​sentry/browser (incl. Metrics) 28.16 KB
@​sentry/browser (incl. Logs) 28.38 KB
@​sentry/browser (incl. Metrics & Logs) 29.06 KB
@​sentry/react 28.86 KB
@​sentry/react (incl. Tracing) 47.72 KB
@​sentry/vue 32.4 KB
@​sentry/vue (incl. Tracing) 47.43 KB
@​sentry/svelte 27.12 KB
CDN Bundle 29.43 KB
CDN Bundle (incl. Tracing) 47.43 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.71.0

Important Changes

  • feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

  • feat(v10/core): Deprecate scope.clear() method (#23231)
  • fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
  • fix(v10/react): Match TanStack Router pageload against the router location (#23494)
  • test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)
Commits
  • 9fcb063 release: 10.71.0
  • fbc14d8 meta(changelog): Update changelog for 10.71.0 (#23517)
  • 671f4b1 fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • 0211227 fix(v10/react): Match TanStack Router pageload against the router location (#...
  • bbea828 feat(v10/core)!: Enable logs by default (#23311)
  • 7ded310 fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • 245d807 fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundar...
  • 1d439a3 fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • 8f03efe test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)
  • c884ae1 fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.4 to 5.102.4

Changelog

Sourced from @​tanstack/react-query's changelog.

5.102.4

Patch Changes

  • Updated dependencies [a05df6a]:
    • @​tanstack/query-core@​5.102.4

5.102.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.3

5.102.2

Patch Changes

  • Updated dependencies [80fbf73]:
    • @​tanstack/query-core@​5.102.2

5.102.1

Patch Changes

  • Updated dependencies [134890d]:
    • @​tanstack/query-core@​5.102.1

5.102.0

Minor Changes

  • #10668 e674826 - react-query: update usePrefetchQuery and usePrefetchInfiniteQuery to use queryClient.query and queryClient.infiniteQuery

Patch Changes

  • #11245 37127db - revert: remove NoInfer from useQuery return types

  • #10373 6e3d521 - fix(types): propagate generic type parameters to useMutationState select callback

  • #11224 294d4e6 - Fix queryOptions and infiniteQueryOptions return types so exported inferred options can be emitted in declaration files without leaking internal data tag symbols.

  • #11147 cb6c9d3 - Default TData of UseInfiniteQueryOptions and UseSuspenseInfiniteQueryOptions to InfiniteData<TQueryFnData> so it matches the hook generics.

  • #8737 2215bb0 - fix: make mutation variables optional when undefined extends TVariables

  • #11221 1ef4208 - Remove experimental render-time prefetching and the promise property from query results.

  • #11228 fb6c3fa - Avoid emitting a runtime import for React Query's type-only exports.

... (truncated)

Commits

Updates @tanstack/react-query-devtools from 5.101.4 to 5.102.4

Changelog

Sourced from @​tanstack/react-query-devtools's changelog.

5.102.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.4
    • @​tanstack/react-query@​5.102.4

5.102.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.3
    • @​tanstack/react-query@​5.102.3

5.102.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.2
    • @​tanstack/react-query@​5.102.2

5.102.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.1
    • @​tanstack/react-query@​5.102.1

5.102.0

Patch Changes

Commits

Updates @tanstack/react-virtual from 3.14.9 to 3.14.10

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.10

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.10

Patch Changes

Commits

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates i18next from 26.3.6 to 26.4.0

Release notes

Sourced from i18next's releases.

v26.4.0

  • perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
  • chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.
Changelog

Sourced from i18next's changelog.

26.4.0

  • perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
  • chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.
Commits

Updates immer from 11.1.17 to 11.1.18

Release notes

Sourced from immer's releases.

v11.1.18

11.1.18 (2026-08-19)

Bug Fixes

  • remove global var Iterator declaration conflicting with ESNext lib (#1290) (b00474e), closes #1273
Commits
  • b00474e fix: remove global var Iterator declaration conflicting with ESNext lib (#1...
  • 6c7a3de chore(deps): bump shell-quote from 1.8.4 to 1.10.0 (#1279)
  • 6c5343e chore(deps): bump tar from 7.5.16 to 7.5.22 (#1280)
  • 50e7e73 chore(deps-dev): bump immutable from 3.8.3 to 4.3.9 (#1277)
  • 92ca628 chore(deps): bump ip-address from 10.2.0 to 10.4.0 (#1282)
  • 80392ff chore(deps): bump fast-uri from 3.1.2 to 3.1.5 in /website (#1284)
  • a43091c chore(deps): bump brace-expansion from 1.1.14 to 1.1.18 in /website (#1287)
  • 706d8d8 chore(deps): bump nanoid from 3.3.12 to 3.3.18 in /website (#1288)
  • See full diff in compare view

Updates jotai from 2.20.2 to 2.20.3

Release notes

Sourced from jotai's releases.

v2.20.3

A fix in a util.

What's Changed

New Contributors

Full Changelog: pmndrs/jotai@v2.20.2...v2.20.3

Commits

Updates marked from 18.0.9 to 18.0.11

Release notes

Sourced from marked's releases.

v18.0.11

18.0.11 (2026-08-24)

Bug Fixes

  • do not nest a link inside a link (#4051) (e250e31)
  • inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
  • keep emphasis in the text of a rejected reference link (#4059) (b699db3)

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

  • keep the em/strong mask the same length as the source (#4044) (681373c)
  • parse EOF backtick fences after paragraphs (#4039) (81bd750)
  • place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045
Commits
  • 53cb13f chore(release): 18.0.11 [skip ci]
  • 0c6b2a6 docs: add adaptable bullet point (#4058)
  • c430a64 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#4069)
  • b699db3 fix: keep emphasis in the text of a rejected reference link (#4059)
  • 0653c24 fix: inlineTokens rebuilds the reflink-mask preamble per call (#4040)
  • e250e31 fix: do not nest a link inside a link (#4051)
  • 8698d35 chore(release): 18.0.10 [skip ci]
  • 58367a5 chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 (#4055)
  • a426c4d chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#4056)
  • a5cf277 chore(deps-dev): bump highlight.js from 11.11.1 to 11.12.0 (#4057)
  • Additional commits viewable in compare view

Updates matrix-js-sdk from 42.1.0 to 42.2.0

Release notes

Sourced from matrix-js-sdk's releases.

v42.2.0

🐛 Bug Fixes

  • Fix pre-initialization thread edits when target is known (#5440). Contributed by @​basnijholt.
  • Fix package failing to load in Node ESM due to directory import (#5460). Contributed by @​syphernl.

v42.2.0-rc.2

🐛 Bug Fixes

  • Fix pre-initialization thread edits when target is known (#5440). Contributed by @​basnijholt.
  • Fix package failing to load in Node ESM due to directory import (#5460). Contributed by @​syphernl.

v42.2.0-rc.1

🐛 Bug Fixes

  • Fix pre-initialization thread edits when target is known (#5440). Contributed by @​basnijholt.
  • Fix package failing to load in Node ESM due to directory import (#5460). Contributed by @​syphernl.

v42.2.0-rc.0

🐛 Bug Fixes

  • Fix pre-initialization thread edits when target is known (#5440). Contributed by @​basnijholt.
  • Fix package failing to load in Node ESM due to directory import (#5460). Contributed by @​syphernl.
Changelog

Sourced from matrix-js-sdk's changelog.

Changes in 42.2.0 (2026-08-18)

🐛 Bug Fixes

  • Fix pre-initialization thread edits when target is known (#5440). Contributed by @​basnijholt.
  • Fix package failing to load in Node ESM due to directory import (#5460). Contributed by @​syphernl.
Commits

Updates matrix-widget-api from 1.18.0 to 1.19.0

Release notes

Sourced from matrix-widget-api's releases.

v1.19.0

1.19.0 Release

Commits

Updates prosemirror-view from 1.42.2 to 1.42.3

Commits

Updates react-i18next from 17.0.11 to 17.0.12

Changelog

Sourced from react-i18next's changelog.

17.0.12

  • fix(IcuTrans): key-less icu.macro nodes (<Trans>Welcome, {name}!</Trans>, <Select>, <Plural> without i18nKey) rendered an empty string since 17.0.0. The macro now emits <IcuTrans defaultTranslation="…"> without a key and IcuTrans passed undefined to t(), which returns ''. Like Trans, IcuTrans now uses defaultTranslation as the key when i18nKey is not provided.
Commits
  • ea721fb 17.0.12
  • 6c2a71e fix(IcuTrans): use defaultTranslation as key when no i18nKey is given
  • 258c96d chore(examples): upgrade all example apps off unmaintained toolchains
  • b8677c8 chore: update dependencies to close dependabot alerts
  • aa9c92b docs: point Trans component links at the current docs (#1929)
  • See full diff in compare view

Updates virtua from 0.50.1 to 0.50.5

Release notes

Sourced from virtua's releases.

0.50.5

What's Changed

Full Changelog: inokawa/virtua@0.50.4...0.50.5

0.50.4

What's Changed

Full Changelog: inokawa/virtua@0.50.3...0.50.4

0.50.3

What's Changed

Full Changelog: inokawa/virtua@0.50.2...0.50.3

0.50.2

What's Changed

Full Changelog: inokawa/virtua@0.50.1...0.50.2

Commits

@dependabot
chore: bump the npm group across 1 directory with 28 updates
0a70912 
Bumps the npm group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@atlaskit/pragmatic-drag-and-drop-auto-scroll](https://github.com/atlassian/pragmatic-drag-and-drop) | `3.0.1` | `3.1.0` |
| [@lottiefiles/dotlottie-react](https://github.com/LottieFiles/dotlottie-web/tree/HEAD/packages/react) | `0.19.14` | `0.19.15` |
| [@lottiefiles/dotlottie-web](https://github.com/LottieFiles/dotlottie-web/tree/HEAD/packages/web) | `0.79.1` | `0.79.2` |
| [@matrix-org/matrix-sdk-crypto-wasm](https://github.com/matrix-org/matrix-sdk-crypto-wasm) | `18.4.0` | `18.6.0` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.70.0` | `10.71.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.4` | `5.102.4` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.101.4` | `5.102.4` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.9` | `3.14.10` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [i18next](https://github.com/i18next/i18next) | `26.3.6` | `26.4.0` |
| [immer](https://github.com/immerjs/immer) | `11.1.17` | `11.1.18` |
| [jotai](https://github.com/pmndrs/jotai) | `2.20.2` | `2.20.3` |
| [marked](https://github.com/markedjs/marked) | `18.0.9` | `18.0.11` |
| [matrix-js-sdk](https://github.com/matrix-org/matrix-js-sdk) | `42.1.0` | `42.2.0` |
| [matrix-widget-api](https://github.com/matrix-org/matrix-widget-api) | `1.18.0` | `1.19.0` |
| [prosemirror-view](https://github.com/prosemirror/prosemirror-view) | `1.42.2` | `1.42.3` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.11` | `17.0.12` |
| [virtua](https://github.com/inokawa/virtua) | `0.50.1` | `0.50.5` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.4` | `14.6.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `4.1.11` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.10` | `4.1.11` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.63.0` | `0.65.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.78.0` | `1.80.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |



Updates `@atlaskit/pragmatic-drag-and-drop-auto-scroll` from 3.0.1 to 3.1.0
- [Commits](https://github.com/atlassian/pragmatic-drag-and-drop/commits)

Updates `@lottiefiles/dotlottie-react` from 0.19.14 to 0.19.15
- [Release notes](https://github.com/LottieFiles/dotlottie-web/releases)
- [Changelog](https://github.com/LottieFiles/dotlottie-web/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/LottieFiles/dotlottie-web/commits/@lottiefiles/dotlottie-react@0.19.15/packages/react)

Updates `@lottiefiles/dotlottie-web` from 0.79.1 to 0.79.2
- [Release notes](https://github.com/LottieFiles/dotlottie-web/releases)
- [Changelog](https://github.com/LottieFiles/dotlottie-web/blob/main/packages/web/CHANGELOG.md)
- [Commits](https://github.com/LottieFiles/dotlottie-web/commits/@lottiefiles/dotlottie-web@0.79.2/packages/web)

Updates `@matrix-org/matrix-sdk-crypto-wasm` from 18.4.0 to 18.6.0
- [Release notes](https://github.com/matrix-org/matrix-sdk-crypto-wasm/releases)
- [Changelog](https://github.com/matrix-org/matrix-sdk-crypto-wasm/blob/main/CHANGELOG.md)
- [Commits](matrix-org/matrix-sdk-crypto-wasm@v18.4.0...v18.6.0)

Updates `@sentry/react` from 10.70.0 to 10.71.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.71.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.70.0...10.71.0)

Updates `@tanstack/react-query` from 5.101.4 to 5.102.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.4/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.101.4 to 5.102.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.102.4/packages/react-query-devtools)

Updates `@tanstack/react-virtual` from 3.14.9 to 3.14.10
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.10/packages/react-virtual)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `i18next` from 26.3.6 to 26.4.0
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.3.6...v26.4.0)

Updates `immer` from 11.1.17 to 11.1.18
- [Release notes](https://github.com/immerjs/immer/releases)
- [Commits](immerjs/immer@v11.1.17...v11.1.18)

Updates `jotai` from 2.20.2 to 2.20.3
- [Release notes](https://github.com/pmndrs/jotai/releases)
- [Commits](pmndrs/jotai@v2.20.2...v2.20.3)

Updates `marked` from 18.0.9 to 18.0.11
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.9...v18.0.11)

Updates `matrix-js-sdk` from 42.1.0 to 42.2.0
- [Release notes](https://github.com/matrix-org/matrix-js-sdk/releases)
- [Changelog](https://github.com/matrix-org/matrix-js-sdk/blob/develop/CHANGELOG.md)
- [Commits](matrix-org/matrix-js-sdk@v42.1.0...v42.2.0)

Updates `matrix-widget-api` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/matrix-org/matrix-widget-api/releases)
- [Changelog](https://github.com/matrix-org/matrix-widget-api/blob/master/docs/releases.md)
- [Commits](matrix-org/matrix-widget-api@v1.18.0...v1.19.0)

Updates `prosemirror-view` from 1.42.2 to 1.42.3
- [Changelog](https://github.com/ProseMirror/prosemirror-view/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-view/commits)

Updates `react-i18next` from 17.0.11 to 17.0.12
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.0.11...v17.0.12)

Updates `virtua` from 0.50.1 to 0.50.5
- [Release notes](https://github.com/inokawa/virtua/releases)
- [Commits](inokawa/virtua@0.50.1...0.50.5)

Updates `@testing-library/user-event` from 14.6.4 to 14.6.6
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.4...v14.6.6)

Updates `@types/node` from 26.2.0 to 26.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react)

Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8)

Updates `@vitest/ui` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/ui)

Updates `oxfmt` from 0.63.0 to 0.65.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.65.0/npm/oxfmt)

Updates `oxlint` from 1.78.0 to 1.80.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.80.0/npm/oxlint)

Updates `vite` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: "@atlaskit/pragmatic-drag-and-drop-auto-scroll"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@lottiefiles/dotlottie-react"
  dependency-version: 0.19.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@lottiefiles/dotlottie-web"
  dependency-version: 0.79.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@matrix-org/matrix-sdk-crypto-wasm"
  dependency-version: 18.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@sentry/react"
  dependency-version: 10.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.102.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.102.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: i18next
  dependency-version: 26.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: immer
  dependency-version: 11.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: jotai
  dependency-version: 2.20.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: marked
  dependency-version: 18.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: matrix-js-sdk
  dependency-version: 42.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: matrix-widget-api
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: prosemirror-view
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: react-i18next
  dependency-version: 17.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: virtua
  dependency-version: 0.50.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: oxfmt
  dependency-version: 0.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: oxlint
  dependency-version: 1.80.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the internal label Sep 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 3, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-1786b5eed7 branch September 3, 2026 01:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

internal

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants