Skip to content

chore: bump the npm group across 1 directory with 32 updates - #2038

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/npm-e1069e392f
Open

chore: bump the npm group across 1 directory with 32 updates#2038
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/npm-e1069e392f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 32 updates in the / directory:

Package From To
@atlaskit/pragmatic-drag-and-drop-auto-scroll 3.0.1 3.1.0
@lottiefiles/dotlottie-react 0.19.14 0.19.15
@lottiefiles/dotlottie-web 0.79.1 0.79.2
@matrix-org/matrix-sdk-crypto-wasm 18.4.0 18.6.0
@noble/hashes 2.3.0 2.4.0
@sentry/react 10.70.0 10.71.0
@tanstack/react-query 5.101.4 5.102.8
@tanstack/react-query-devtools 5.101.4 5.102.8
@tanstack/react-virtual 3.14.9 3.14.10
dompurify 3.4.13 3.4.14
i18next 26.3.6 26.4.0
immer 11.1.17 11.1.18
jotai 2.20.2 2.20.3
livekit-client 2.22.0 2.22.1
marked 18.0.9 18.0.11
matrix-js-sdk 42.1.0 42.2.0
matrix-widget-api 1.18.0 1.19.0
prosemirror-view 1.42.2 1.42.3
react-i18next 17.0.11 17.0.12
virtua 0.50.1 0.50.6
@testing-library/react 16.3.2 16.3.3
@testing-library/user-event 14.6.4 14.6.6
@types/node 26.2.0 26.4.0
@types/react-dom 19.2.4 19.2.5
@vitejs/plugin-react 6.0.5 6.1.0
@vitest/coverage-v8 4.1.10 4.1.11
@vitest/ui 4.1.10 4.1.11
knip 6.32.2 6.32.3
oxfmt 0.63.0 0.65.0
oxlint 1.78.0 1.80.0
vite 8.2.1 8.2.2
vitest 4.1.10 4.1.11

Updates @atlaskit/pragmatic-drag-and-drop-auto-scroll from 3.0.1 to 3.1.0

Commits

Updates @lottiefiles/dotlottie-react from 0.19.14 to 0.19.15

Release notes

Sourced from @​lottiefiles/dotlottie-react's releases.

@​lottiefiles/dotlottie-react@​0.19.15

Patch Changes

  • Updated dependencies [14aee74]
    • @​lottiefiles/dotlottie-web@​0.79.2
Changelog

Sourced from @​lottiefiles/dotlottie-react's changelog.

0.19.15

Patch Changes

  • Updated dependencies [14aee74]
    • @​lottiefiles/dotlottie-web@​0.79.2
Commits

Updates @lottiefiles/dotlottie-web from 0.79.1 to 0.79.2

Release notes

Sourced from @​lottiefiles/dotlottie-web's releases.

@​lottiefiles/dotlottie-web@​0.79.2

Patch Changes

  • 14aee74: Update dotlottie-rs WASM bindings to 0f16fb8.
Changelog

Sourced from @​lottiefiles/dotlottie-web's changelog.

0.79.2

Patch Changes

  • 14aee74: Update dotlottie-rs WASM bindings to 0f16fb8.
Commits

Updates @matrix-org/matrix-sdk-crypto-wasm from 18.4.0 to 18.6.0

Release notes

Sourced from @​matrix-org/matrix-sdk-crypto-wasm's releases.

v18.6.0

matrix-sdk-crypto-wasm v18.6.0

  • Allow providing rawX509Signer and rawX509Validity to OlmMachine::initialize and OlmMachine::initFromStore, allowing the user's identity to be signed using the supplied JavaScript function. Both the signer and validity function must be supplied, or neither. #341

  • Update matrix-rust-sdk to 64b12e0b80

    • Change the return type of X509Signer::validity_not_after to Duration to make it easier for downstream crates to implement. (#6904)

    • Make X.509 signing an async operation, meaning that the experimental RawX509Signer::sign now returns a Future. (#6867)

  • Fix UserIdentity methods to correctly set up the logging framework while they are running. (#340)

v18.5.0

matrix-sdk-crypto-wasm v18.5.0

  • Add CheckCode.toDigitNoLeadingZero to expose the new method of calculating ECIES check codes from Vodozemac. (#337)

  • Update matrix-rust-sdk to 955837c467:

    • The OlmMachine::receive_sync_changes() method now correctly treats a missing one-time key count to mean that zero one-time keys exist on the homeserver. (#6780)
Changelog

Sourced from @​matrix-org/matrix-sdk-crypto-wasm's changelog.

matrix-sdk-crypto-wasm v18.6.0

  • Allow providing rawX509Signer and rawX509Validity to OlmMachine::initialize and OlmMachine::initFromStore, allowing the user's identity to be signed using the supplied JavaScript function. Both the signer and validity function must be supplied, or neither. #341

  • Update matrix-rust-sdk to 64b12e0b80

    • Change the return type of X509Signer::validity_not_after to Duration to make it easier for downstream crates to implement. (#6904)

    • Make X.509 signing an async operation, meaning that the experimental RawX509Signer::sign now returns a Future. (#6867)

  • Fix UserIdentity methods to correctly set up the logging framework while they are running. (#340)

matrix-sdk-crypto-wasm v18.5.0

  • Add CheckCode.toDigitNoLeadingZero to expose the new method of calculating ECIES check codes from Vodozemac. (#337)

  • Update matrix-rust-sdk to 955837c467:

    • The OlmMachine::receive_sync_changes() method now correctly treats a missing one-time key count to mean that zero one-time keys exist on the homeserver. (#6780)
Commits

Updates @noble/hashes from 2.3.0 to 2.4.0

Release notes

Sourced from @​noble/hashes's releases.

2.4.0

Security and correctness

  • Protect passed options against mutation / pollution
  • keccakprg: fail until entropy is added
  • webcrypto: reject output sizes which crashed engine
  • blake3: fix tree merging for multi-terabyte streams
  • Improve zeroization

Misc

  • Speed-up Argon2 by 20%
  • Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
  • Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
  • nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Full Changelog: paulmillr/noble-hashes@2.3.0...2.4.0

Changelog

Sourced from @​noble/hashes's changelog.

2.4.0 (2026-08-27)

Security and correctness

  • Protect passed options against mutation / pollution
  • keccakprg: fail until entropy is added
  • webcrypto: reject output sizes which crashed engine
  • blake3: fix tree merging for multi-terabyte streams
  • Improve zeroization

Misc

  • Speed-up Argon2 by 20%
  • Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
  • Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
  • nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.
Commits

Updates @sentry/react from 10.70.0 to 10.71.0

Release notes

Sourced from @​sentry/react's releases.

10.71.0

Important Changes

  • feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

  • feat(v10/core): Deprecate scope.clear() method (#23231)
  • fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
  • fix(v10/react): Match TanStack Router pageload against the router location (#23494)
  • test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)

Bundle size 📦

Path Size
@​sentry/browser 27.1 KB
@​sentry/browser - with treeshaking flags 25.58 KB
@​sentry/browser (incl. Tracing) 45.51 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.25 KB
@​sentry/browser (incl. Tracing, Profiling) 50.15 KB
@​sentry/browser (incl. Tracing, Replay) 83.83 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.71 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.45 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.79 KB
@​sentry/browser (incl. Feedback) 43.87 KB
@​sentry/browser (incl. sendFeedback) 31.78 KB
@​sentry/browser (incl. FeedbackAsync) 36.79 KB
@​sentry/browser (incl. Metrics) 28.16 KB
@​sentry/browser (incl. Logs) 28.38 KB
@​sentry/browser (incl. Metrics & Logs) 29.06 KB
@​sentry/react 28.86 KB
@​sentry/react (incl. Tracing) 47.72 KB
@​sentry/vue 32.4 KB
@​sentry/vue (incl. Tracing) 47.43 KB
@​sentry/svelte 27.12 KB
CDN Bundle 29.43 KB
CDN Bundle (incl. Tracing) 47.43 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.71.0

Important Changes

  • feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

  • feat(v10/core): Deprecate scope.clear() method (#23231)
  • fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
  • fix(v10/react): Match TanStack Router pageload against the router location (#23494)
  • test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)
Commits
  • 9fcb063 release: 10.71.0
  • fbc14d8 meta(changelog): Update changelog for 10.71.0 (#23517)
  • 671f4b1 fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • 0211227 fix(v10/react): Match TanStack Router pageload against the router location (#...
  • bbea828 feat(v10/core)!: Enable logs by default (#23311)
  • 7ded310 fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • 245d807 fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundar...
  • 1d439a3 fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • 8f03efe test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)
  • c884ae1 fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.4 to 5.102.8

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-next-experimental@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-persist-client@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.8

@​tanstack/react-query-devtools@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-next-experimental@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-persist-client@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query@​5.102.7

Patch Changes

  • Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.7

5.102.6

Patch Changes

  • #11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

  • Updated dependencies []:

    • @​tanstack/query-core@​5.102.6

5.102.5

Patch Changes

  • Updated dependencies [578e5c2]:
    • @​tanstack/query-core@​5.102.5

5.102.4

Patch Changes

  • Updated dependencies [a05df6a]:
    • @​tanstack/query-core@​5.102.4

5.102.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.3

5.102.2

Patch Changes

  • Updated dependencies [80fbf73]:
    • @​tanstack/query-core@​5.102.2

... (truncated)

Commits

Updates @tanstack/react-query-devtools from 5.101.4 to 5.102.8

Release notes

Sourced from @​tanstack/react-query-devtools's releases.

@​tanstack/react-query-devtools@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-devtools@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-devtools@​5.102.6

Patch Changes

  • Updated dependencies [ac2b612]:
    • @​tanstack/react-query@​5.102.6
    • @​tanstack/query-devtools@​5.102.6

@​tanstack/react-query-devtools@​5.102.5

Patch Changes

  • Updated dependencies [ef1eff1]:
    • @​tanstack/query-devtools@​5.102.5
    • @​tanstack/react-query@​5.102.5
Changelog

Sourced from @​tanstack/react-query-devtools's changelog.

5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.8
    • @​tanstack/react-query@​5.102.8

5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.7
    • @​tanstack/react-query@​5.102.7

5.102.6

Patch Changes

  • Updated dependencies [ac2b612]:
    • @​tanstack/react-query@​5.102.6
    • @​tanstack/query-devtools@​5.102.6

5.102.5

Patch Changes

  • Updated dependencies [ef1eff1]:
    • @​tanstack/query-devtools@​5.102.5
    • @​tanstack/react-query@​5.102.5

5.102.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.4
    • @​tanstack/react-query@​5.102.4

5.102.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.3
    • @​tanstack/react-query@​5.102.3

5.102.2

... (truncated)

Commits

Updates @tanstack/react-virtual from 3.14.9 to 3.14.10

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.10

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.10

Patch Changes

Commits

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates i18next from 26.3.6 to 26.4.0

Release notes

Sourced from i18next's releases.

v26.4.0

  • perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
  • chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.
Changelog

Sourced from i18next's changelog.

26.4.0

  • perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
  • chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.
Commits

Updates immer from 11.1.17 to 11.1.18

Release notes

Sourced from immer's releases.

v11.1.18

11.1.18 (2026-08-19)

Bug Fixes

  • remove global var Iterator declaration conflicting with ESNext lib (#1290) (b00474e), closes #1273
Commits
  • b00474e fix: remove global var Iterator declaration conflicting with ESNext lib (#1...
  • 6c7a3de chore(deps): bump shell-quote from 1.8.4 to 1.10.0 (#1279)
  • 6c5343e chore(deps): bump tar from 7.5.16 to 7.5.22 (#1280)
  • 50e7e73 chore(deps-dev): bump immutable from 3.8.3 to 4.3.9 (#1277)
  • 92ca628 chore(deps): bump ip-address from 10.2.0 to 10.4.0 (#1282)
  • 80392ff chore(deps): bump fast-uri from 3.1.2 to 3.1.5 in /website (#1284)
  • a43091c chore(deps): bump brace-expansion from 1.1.14 to 1.1.18 in /website (#1287)
  • 706d8d8 chore(deps): bump nanoid from 3.3.12 to 3.3.18 in /website (#1288)
  • See full diff in compare view

Updates jotai from 2.20.2 to 2.20.3

Release notes

Sourced from jotai's releases.

v2.20.3

A fix in a util.

What's Changed

New Contributors

Full Changelog: pmndrs/jotai@v2.20.2...v2.20.3

Commits

Updates livekit-client from 2.22.0 to 2.22.1

Release notes

Sourced from livekit-client's releases.

v2.22.1

Patch Changes

  • Forward DisconnectReason to the ParticipantDisconnected event - #2055 (@​seonghunYang)

  • chore: periodically log webrtc stats - #2064 (@​lukasIO)

  • fix: enqueue signal requests until queue has been drained - #2061 (@​lukasIO)

  • Add roomOptions.dataStream.maxPayloadByteLength to control max data stream size - #2060 (@​1egoman)

  • chore: signalling state machine - #2046 (@​lukasIO)

  • fix: catch unhandled ws signal errors - #2065 (@​lukasIO)

  • Fix supportsAdaptiveStream always returning true by comparing typeof against the 'undefined' string. It now returns false in environments without ResizeObserver or IntersectionObserver. - #2059 (@​mrpmohiburrahman)

  • Treat TokenSource JWTs without exp as expired, and still honor exp when nbf is absent - #2057 (@​SashaMIT)

  • Convert internal exports to be external in examples/demo - #2067 (@​1egoman)

Changelog

Sourced from livekit-client's changelog.

2.22.1

Patch Changes

  • Forward DisconnectReason to the ParticipantDisconnected event - #2055 (@​seonghunYang)

  • chore: periodically log webrtc stats - #2064 (@​lukasIO)

  • fix: enqueue signal requests until queue has been drained - #2061 (@​lukasIO)

  • Add roomOptions.dataStream.maxPayloadByteLength to control max data stream size - #2060 (@​1egoman)

  • chore: signalling state machine - #2046 (@​lukasIO)

  • fix: catch unhandled ws signal errors - #2065 (@​lukasIO)

  • Fix supportsAdaptiveStream always returning true by comparing typeof against the 'undefined' string. It now returns false in environments without ResizeObserver or IntersectionObserver. - #2059 (@​mrpmohiburrahman)

  • Treat TokenSource JWTs without exp as expired, and still honor exp when nbf is absent - #2057 (@​SashaMIT)

  • Convert internal exports to be external in examples/demo - #2067 (@​1egoman)

Commits

Updates marked from 18.0.9 to 18.0.11

Release notes

Sourced from marked's releases.

v18.0.11

18.0.11 (2026-08-24)

Bug Fixes

  • do not nest a link inside a link (#4051) (e250e31)
  • inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
  • keep emphasis in the text of a rejected reference link (#4059) (

@dependabot
chore: bump the npm group across 1 directory with 32 updates
100b266 
Bumps the npm group with 32 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@atlaskit/pragmatic-drag-and-drop-auto-scroll](https://github.com/atlassian/pragmatic-drag-and-drop) | `3.0.1` | `3.1.0` |
| [@lottiefiles/dotlottie-react](https://github.com/LottieFiles/dotlottie-web/tree/HEAD/packages/react) | `0.19.14` | `0.19.15` |
| [@lottiefiles/dotlottie-web](https://github.com/LottieFiles/dotlottie-web/tree/HEAD/packages/web) | `0.79.1` | `0.79.2` |
| [@matrix-org/matrix-sdk-crypto-wasm](https://github.com/matrix-org/matrix-sdk-crypto-wasm) | `18.4.0` | `18.6.0` |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.3.0` | `2.4.0` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.70.0` | `10.71.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.4` | `5.102.8` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.101.4` | `5.102.8` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.9` | `3.14.10` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [i18next](https://github.com/i18next/i18next) | `26.3.6` | `26.4.0` |
| [immer](https://github.com/immerjs/immer) | `11.1.17` | `11.1.18` |
| [jotai](https://github.com/pmndrs/jotai) | `2.20.2` | `2.20.3` |
| [livekit-client](https://github.com/livekit/client-sdk-js) | `2.22.0` | `2.22.1` |
| [marked](https://github.com/markedjs/marked) | `18.0.9` | `18.0.11` |
| [matrix-js-sdk](https://github.com/matrix-org/matrix-js-sdk) | `42.1.0` | `42.2.0` |
| [matrix-widget-api](https://github.com/matrix-org/matrix-widget-api) | `1.18.0` | `1.19.0` |
| [prosemirror-view](https://github.com/prosemirror/prosemirror-view) | `1.42.2` | `1.42.3` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.11` | `17.0.12` |
| [virtua](https://github.com/inokawa/virtua) | `0.50.1` | `0.50.6` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.4` | `14.6.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `4.1.11` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.10` | `4.1.11` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.32.3` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.63.0` | `0.65.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.78.0` | `1.80.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |



Updates `@atlaskit/pragmatic-drag-and-drop-auto-scroll` from 3.0.1 to 3.1.0
- [Commits](https://github.com/atlassian/pragmatic-drag-and-drop/commits)

Updates `@lottiefiles/dotlottie-react` from 0.19.14 to 0.19.15
- [Release notes](https://github.com/LottieFiles/dotlottie-web/releases)
- [Changelog](https://github.com/LottieFiles/dotlottie-web/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/LottieFiles/dotlottie-web/commits/@lottiefiles/dotlottie-react@0.19.15/packages/react)

Updates `@lottiefiles/dotlottie-web` from 0.79.1 to 0.79.2
- [Release notes](https://github.com/LottieFiles/dotlottie-web/releases)
- [Changelog](https://github.com/LottieFiles/dotlottie-web/blob/main/packages/web/CHANGELOG.md)
- [Commits](https://github.com/LottieFiles/dotlottie-web/commits/@lottiefiles/dotlottie-web@0.79.2/packages/web)

Updates `@matrix-org/matrix-sdk-crypto-wasm` from 18.4.0 to 18.6.0
- [Release notes](https://github.com/matrix-org/matrix-sdk-crypto-wasm/releases)
- [Changelog](https://github.com/matrix-org/matrix-sdk-crypto-wasm/blob/main/CHANGELOG.md)
- [Commits](matrix-org/matrix-sdk-crypto-wasm@v18.4.0...v18.6.0)

Updates `@noble/hashes` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Changelog](https://github.com/paulmillr/noble-hashes/blob/main/CHANGELOG.md)
- [Commits](paulmillr/noble-hashes@2.3.0...2.4.0)

Updates `@sentry/react` from 10.70.0 to 10.71.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.71.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.70.0...10.71.0)

Updates `@tanstack/react-query` from 5.101.4 to 5.102.8
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.101.4 to 5.102.8
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.102.8/packages/react-query-devtools)

Updates `@tanstack/react-virtual` from 3.14.9 to 3.14.10
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.10/packages/react-virtual)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `i18next` from 26.3.6 to 26.4.0
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.3.6...v26.4.0)

Updates `immer` from 11.1.17 to 11.1.18
- [Release notes](https://github.com/immerjs/immer/releases)
- [Commits](immerjs/immer@v11.1.17...v11.1.18)

Updates `jotai` from 2.20.2 to 2.20.3
- [Release notes](https://github.com/pmndrs/jotai/releases)
- [Commits](pmndrs/jotai@v2.20.2...v2.20.3)

Updates `livekit-client` from 2.22.0 to 2.22.1
- [Release notes](https://github.com/livekit/client-sdk-js/releases)
- [Changelog](https://github.com/livekit/client-sdk-js/blob/main/CHANGELOG.md)
- [Commits](livekit/client-sdk-js@v2.22.0...v2.22.1)

Updates `marked` from 18.0.9 to 18.0.11
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.9...v18.0.11)

Updates `matrix-js-sdk` from 42.1.0 to 42.2.0
- [Release notes](https://github.com/matrix-org/matrix-js-sdk/releases)
- [Changelog](https://github.com/matrix-org/matrix-js-sdk/blob/develop/CHANGELOG.md)
- [Commits](matrix-org/matrix-js-sdk@v42.1.0...v42.2.0)

Updates `matrix-widget-api` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/matrix-org/matrix-widget-api/releases)
- [Changelog](https://github.com/matrix-org/matrix-widget-api/blob/master/docs/releases.md)
- [Commits](matrix-org/matrix-widget-api@v1.18.0...v1.19.0)

Updates `prosemirror-view` from 1.42.2 to 1.42.3
- [Changelog](https://github.com/ProseMirror/prosemirror-view/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-view/commits)

Updates `react-i18next` from 17.0.11 to 17.0.12
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.0.11...v17.0.12)

Updates `virtua` from 0.50.1 to 0.50.6
- [Release notes](https://github.com/inokawa/virtua/releases)
- [Commits](inokawa/virtua@0.50.1...0.50.6)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@testing-library/user-event` from 14.6.4 to 14.6.6
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.4...v14.6.6)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react)

Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8)

Updates `@vitest/ui` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/ui)

Updates `knip` from 6.32.2 to 6.32.3
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.3/packages/knip)

Updates `oxfmt` from 0.63.0 to 0.65.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.65.0/npm/oxfmt)

Updates `oxlint` from 1.78.0 to 1.80.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.80.0/npm/oxlint)

Updates `vite` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: "@atlaskit/pragmatic-drag-and-drop-auto-scroll"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@lottiefiles/dotlottie-react"
  dependency-version: 0.19.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@lottiefiles/dotlottie-web"
  dependency-version: 0.79.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@matrix-org/matrix-sdk-crypto-wasm"
  dependency-version: 18.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@noble/hashes"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@sentry/react"
  dependency-version: 10.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.102.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.102.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: i18next
  dependency-version: 26.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: immer
  dependency-version: 11.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: jotai
  dependency-version: 2.20.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: livekit-client
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: marked
  dependency-version: 18.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: matrix-js-sdk
  dependency-version: 42.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: matrix-widget-api
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: prosemirror-view
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: react-i18next
  dependency-version: 17.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: virtua
  dependency-version: 0.50.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: knip
  dependency-version: 6.32.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: oxfmt
  dependency-version: 0.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: oxlint
  dependency-version: 1.80.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the internal label Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

internal

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants