Skip to content

fix(deps): update dependencies (non-major) - #1023

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/dependencies
Jul 20, 2026
Merged

fix(deps): update dependencies (non-major)#1023
renovate[bot] merged 1 commit into
mainfrom
renovate/dependencies

Conversation

@renovate

@renovate renovate Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@ant-design/icons (source) ^6.2.5 → ^6.3.2 age confidence dependencies minor
@radix-ui/react-alert-dialog (source) ^1.1.17 → ^1.1.20 age confidence dependencies patch
@radix-ui/react-avatar (source) ^1.2.0 → ^1.2.3 age confidence dependencies patch
@radix-ui/react-dialog (source) ^1.1.17 → ^1.1.20 age confidence dependencies patch
@radix-ui/react-popover (source) ^1.1.17 → ^1.1.20 age confidence dependencies patch
@radix-ui/react-select (source) ^2.3.1 → ^2.3.4 age confidence dependencies patch
@radix-ui/react-separator (source) ^1.1.10 → ^1.1.12 age confidence dependencies patch
@radix-ui/react-toggle (source) ^1.1.12 → ^1.1.15 age confidence dependencies patch
@radix-ui/react-toggle-group (source) ^1.1.13 → ^1.1.16 age confidence dependencies patch
@radix-ui/react-tooltip (source) ^1.2.10 → ^1.2.13 age confidence dependencies patch
@react-router/dev (source) ^8.0.1 → ^8.2.0 age confidence devDependencies minor
@react-router/node (source) ^8.0.1 → ^8.2.0 age confidence dependencies minor
@react-router/serve (source) ^8.0.1 → ^8.2.0 age confidence dependencies minor
@tailwindcss/vite (source) ^4.3.1 → ^4.3.3 age confidence devDependencies patch
@tailwindcss/vite (source) ^4.3.1 → ^4.3.3 age confidence dependencies patch
@tiptap/extensions (source) ^3.27.1 → ^3.28.0 age confidence dependencies minor
@tiptap/pm (source) ^3.27.1 → ^3.28.0 age confidence dependencies minor
@tiptap/react (source) ^3.27.1 → ^3.28.0 age confidence dependencies minor
@tiptap/starter-kit (source) ^3.27.1 → ^3.28.0 age confidence dependencies minor
@types/node (source) ^24.13.2 → ^24.13.3 age confidence devDependencies patch
@types/node (source) ^24.13.2 → ^24.13.3 age confidence dependencies patch
@unhead/vue (source) ^3.1.4 → ^3.2.1 age confidence dependencies minor
@vitejs/plugin-react (source) ^6.0.2 → ^6.0.3 age confidence devDependencies patch
@vitejs/plugin-vue (source) ^6.0.7 → ^6.0.8 age confidence devDependencies patch
@vitest/coverage-v8 (source) ^4.1.9 → ^4.1.10 age confidence devDependencies patch
antd (source) ^6.4.4 → ^6.5.1 age confidence dependencies minor
astral-sh/setup-uv v8.2.0 → v8.3.2 age confidence action minor
axios (source) ^1.18.0 → ^1.18.1 age confidence devDependencies patch
console 0.16.3 → 0.16.4 age confidence dependencies patch
dompurify ^3.4.11 → ^3.4.12 age confidence dependencies patch
element-plus (source) ^2.14.2 → ^2.14.3 age confidence dependencies patch
eslint (source) ^10.5.0 → ^10.7.0 age confidence devDependencies minor
indicatif 0.18.4 → 0.18.6 age confidence dependencies patch
isbot (source) ^5.1.43 → ^5.2.1 age confidence dependencies minor
lucide-react (source) ^1.21.0 → ^1.25.0 age confidence dependencies minor
motion ^12.40.0 → ^12.42.2 age confidence dependencies minor
nanoid ^5.1.14 → ^5.1.16 age confidence dependencies patch
node 24.17.0-alpine → 24.18.0-alpine age confidence final minor
node 24.17.0-alpine → 24.18.0-alpine age confidence stage minor
pnpm (source) 11.8.0 → 11.15.1 age confidence packageManager minor
prettier (source) ^3.8.4 → ^3.9.5 age confidence devDependencies minor
prettier-plugin-tailwindcss ^0.8.0 → ^0.8.1 age confidence devDependencies patch
react-router (source) ^8.0.1 → ^8.2.0 age confidence dependencies minor
regex 1.12.4 → 1.13.1 age confidence dependencies minor
serde (source) 1.0.228 → 1.0.229 age confidence dependencies patch
shadcn (source) ^4.11.0 → ^4.13.1 age confidence devDependencies minor
stylelint (source) ^17.13.0 → ^17.14.1 age confidence devDependencies minor
tailwindcss (source) ^4.3.1 → ^4.3.3 age confidence devDependencies patch
tailwindcss (source) ^4.3.1 → ^4.3.3 age confidence dependencies patch
toml 1.1.2 → 1.1.3 age confidence dependencies patch
vite (source) ^8.0.16 → ^8.1.5 age confidence devDependencies minor
vitest (source) ^4.1.9 → ^4.1.10 age confidence devDependencies patch
vue (source) ^3.5.38 → ^3.5.40 age confidence dependencies patch
vue (source) ^3.5.38 → ^3.5.40 age confidence devDependencies patch
vue-router (source) ^5.1.0 → ^5.2.0 age confidence dependencies minor
vue-tsc (source) ^3.3.5 → ^3.3.7 age confidence devDependencies patch

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

ant-design/ant-design-icons (@​ant-design/icons)

v6.3.2

Compare Source

v6.3.1

Compare Source

v6.3.0

Compare Source

radix-ui/primitives (@​radix-ui/react-alert-dialog)

v1.1.20

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-dialog@1.1.20, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7

v1.1.19

  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-dialog@1.1.19

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dialog@1.1.18
radix-ui/primitives (@​radix-ui/react-avatar)

v1.2.3

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Fix dev-only checks with conditional exports to drop dev-warnings from production builds.
  • Updated dependencies: @radix-ui/primitive@1.1.6, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2

v1.2.2

  • Updated dependencies: @radix-ui/react-context@1.2.0

v1.2.1

  • Updated dependencies: @radix-ui/react-primitive@2.1.7
radix-ui/primitives (@​radix-ui/react-dialog)

v1.1.20

  • Fixed broken ARIA references in Dialogs where a title or description elements are not rendered.
  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

v1.1.19

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-portal@1.1.13
radix-ui/primitives (@​radix-ui/react-popover)

v1.1.20

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-popper@1.3.4, @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0

v1.1.19

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3

v1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13
radix-ui/primitives (@​radix-ui/react-select)

v2.3.4

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-popper@1.3.4, @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-visually-hidden@1.2.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/number@1.1.2, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2

v2.3.3

  • Fixed a bug in form control components to ensure their values are updated when their associated form's is reset. This affects RadioGroup, Slider, Select, and Switch.
  • Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7, @radix-ui/react-collection@1.1.12, @radix-ui/react-popper@1.3.3

v2.3.2

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.
Other updates
  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-collection@1.1.11, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7
radix-ui/primitives (@​radix-ui/react-separator)

v1.1.12

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-primitive@2.1.7

v1.1.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7
radix-ui/primitives (@​radix-ui/react-toggle)

v1.1.15

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-primitive@2.1.7

v1.1.14

  • Updated dependencies: @radix-ui/primitive@1.1.5

v1.1.13

  • Updated dependencies: @radix-ui/react-primitive@2.1.7
radix-ui/primitives (@​radix-ui/react-toggle-group)

v1.1.16

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-roving-focus@1.1.16, @radix-ui/react-toggle@1.1.15, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-primitive@2.1.7

v1.1.15

  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-roving-focus@1.1.15, @radix-ui/react-toggle@1.1.14

v1.1.14

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-roving-focus@1.1.14, @radix-ui/react-toggle@1.1.13
radix-ui/primitives (@​radix-ui/react-tooltip)

v1.2.13

  • Fixed a bug where Tooltip.Content children were mounted to the DOM twice.
  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @​__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-popper@1.3.4, @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-visually-hidden@1.2.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

v1.2.12

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3

v1.2.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7
remix-run/react-router (@​react-router/dev)

v8.2.0

Compare Source

Minor Changes
  • Add a Web Streams default server entry for non-Node Framework mode apps (#​15290)
    • Apps using @react-router/node, @react-router/express, or @react-router/serve continue to use the renderToPipeableStream default server entry
    • Apps without those Node server adapter dependencies use a renderToReadableStream default server entry
    • Non-Node apps with their own entry.server.tsx may be able to remove it in favor of the default if it is not doing anything custom
  • Detect nub as a supported package manager when installing framework dependencies (#​15276)
Patch Changes
  • Detect user rolldownOptions config in Vite 8+ (#​15278)
Unstable Changes

⚠️ Unstable features are not recommended for production use

v8.1.0

Compare Source

Patch Changes
  • Fix a regression with the new prerendering plugin where the react-router.config.ts buildEnd hook would run before prerendering was completed (#​15211)
  • Fixed react-router typegen crashes under the Bun runtime when Babel default imports are already unwrapped (#​15214)
  • Replace the deprecated envFile:false Vite config with envDir:false to eliminate a deprecation warning when using vite@​8.1.0+ (#​15230)
  • Only add the "node" Vite server condition for Framework mode apps that declare a Node server adapter dependency (#​15242)
    • This prevents non-Node SSR runtimes from resolving Node-specific package exports by default
  • Updated dependencies:
remix-run/react-router (@​react-router/node)

v8.2.0

Compare Source

Patch Changes

v8.1.0

Compare Source

Patch Changes
remix-run/react-router (@​react-router/serve)

v8.2.0

Compare Source

Patch Changes

v8.1.0

Compare Source

Patch Changes
tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.3.3

Compare Source

Fixed
  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

v4.3.2

Compare Source

Fixed
  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#​20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#​20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#​20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#​20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#​20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#​20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#​20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#​20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#​20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#​20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#​20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#​20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#​20289)
ueberdosis/tiptap (@​tiptap/extensions)

v3.28.0

Compare Source

@​tiptap/extension-details
Patch Changes
@​tiptap/extension-list
Patch Changes
  • 8614730: Fix markdown parsing a line like (216) 555-1234 as an ordered list. A number followed by ) mid-line is no longer treated as a list marker.
  • @​tiptap/core@​3.28.0
@​tiptap/react
Patch Changes
  • 8614730: Batch React node view portal store notifications that happen in the same microtask to avoid nested update depth warnings when many node views mount together.
  • 8614730: Bind onMount and onUnmount event handlers when initializing an Editor with useEditor hook.
  • @​tiptap/core@​3.28.0
@​tiptap/extension-collaboration-caret
Patch Changes
@​tiptap/extension-collaboration
Patch Changes
@​tiptap/extension-drag-handle
Patch Changes
@​tiptap/extension-youtube
Minor Changes
  • 8614730: Allow string width and height values like '100%' or '20rem' in the YouTube extension. Non-numeric values in parsed HTML are now preserved instead of being converted to numbers.
Patch Changes
@​tiptap/extension-list-item
Patch Changes
@​tiptap/extension-list-keymap
Patch Changes
@​tiptap/extension-task-item
Patch Changes
@​tiptap/extension-task-list
Patch Changes
@​tiptap/extension-bullet-list
Patch Changes
@​tiptap/extension-ordered-list
Patch Changes
@​tiptap/extension-drag-handle-react
Patch Changes

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

  • Branch creation
    • On day 20 of the month (* * 20 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jul 19, 2026
@vercel

vercel Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
lab Ready Ready Preview, Comment Jul 20, 2026 3:36am

@socket-security

socket-security Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​@​radix-ui/​react-separator@​1.1.121001006699100
Addednpm/​@​radix-ui/​react-toggle@​1.1.15991006799100
Addednpm/​@​react-router/​serve@​8.2.0991006796100
Addednpm/​@​radix-ui/​react-avatar@​1.2.3991006999100
Addednpm/​@​radix-ui/​react-toggle-group@​1.1.16991007099100
Addednpm/​@​react-router/​node@​8.2.01001007096100
Addednpm/​@​radix-ui/​react-alert-dialog@​1.1.201001007099100
Addednpm/​dompurify@​3.4.121001001009570
Addednpm/​@​radix-ui/​react-popover@​1.1.20991007199100
Addednpm/​@​radix-ui/​react-tooltip@​1.2.13991007299100
Addednpm/​@​tiptap/​pm@​3.28.09910073100100
Addednpm/​react-router@​8.2.0731007996100
Addednpm/​@​radix-ui/​react-select@​2.3.4981007399100
Addednpm/​@​tiptap/​starter-kit@​3.28.09910075100100
Addednpm/​@​react-router/​dev@​8.2.0981007696100
Addednpm/​nanoid@​5.1.161001007995100
Addednpm/​vitest@​4.1.10981007998100
Addednpm/​@​tiptap/​extensions@​3.28.010010079100100
Addednpm/​@​vitest/​coverage-v8@​4.1.10991007999100
Addednpm/​@​tiptap/​react@​3.28.09910079100100
Addednpm/​lucide-react@​1.25.0100100989680
Addednpm/​tailwindcss@​4.3.31001008198100
Addednpm/​@​types/​node@​24.13.31001008195100
Updatedcargo/​serde@​1.0.228 ⏵ 1.0.2298110093100100
Addednpm/​vite@​8.1.5981008298100
Addednpm/​antd@​6.5.18710010098100
Addednpm/​@​ant-design/​icons@​6.3.2891008797100
Addednpm/​@​tailwindcss/​vite@​4.3.31001008998100
Addednpm/​vue-router@​5.2.0911009790100
Addednpm/​shadcn@​4.13.1981009197100
Addednpm/​vue@​3.5.401001009197100
Addednpm/​@​vitejs/​plugin-react@​6.0.310010010092100
See 16 more rows in the dashboard

View full report

@socket-security

socket-security Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/unplugin-vue-components@32.1.0 → npm/vue-router@5.2.0 → npm/vite@8.1.5 → npm/@unhead/vue@3.2.1 → npm/@emnapi/runtime@1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@codecov

codecov Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.25%. Comparing base (d75f3a5) to head (2db1d0b).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #1023   +/-   ##
=======================================
  Coverage   91.25%   91.25%           
=======================================
  Files           7        7           
  Lines         286      286           
  Branches       59       59           
=======================================
  Hits          261      261           
  Misses          4        4           
  Partials       21       21

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
renovate Bot force-pushed the renovate/dependencies branch from a116c14 to f05d39a Compare July 19, 2026 23:35
@renovate
renovate Bot force-pushed the renovate/dependencies branch from f05d39a to dbb513e Compare July 19, 2026 23:38
@renovate
renovate Bot force-pushed the renovate/dependencies branch from dbb513e to c67fce4 Compare July 19, 2026 23:45
@renovate
renovate Bot force-pushed the renovate/dependencies branch from c67fce4 to fb68945 Compare July 19, 2026 23:48
@renovate
renovate Bot force-pushed the renovate/dependencies branch from fb68945 to 6032bcc Compare July 20, 2026 03:32
@renovate
renovate Bot force-pushed the renovate/dependencies branch from 6032bcc to 2db1d0b Compare July 20, 2026 03:35
@renovate
renovate Bot merged commit 299e6b6 into main Jul 20, 2026
19 checks passed
@renovate
renovate Bot deleted the renovate/dependencies branch July 20, 2026 03:39
github-actions Bot added a commit that referenced this pull request Jul 20, 2026
@github-actions
fix(deps): update dependencies (non-major) (#1023)
6274ddf 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> 299e6b6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants