fix(deps): update dependencies (non-major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@fortawesome/react-fontawesome	3.3.0 → 3.3.1
dotenv	17.4.1 → 17.4.2
openid-client	6.8.2 → 6.8.4
react (source)	19.2.4 → 19.2.6
react-dom (source)	19.2.4 → 19.2.6
react-router-dom (source)	7.14.0 → 7.15.1
yaml (source)	2.8.3 → 2.9.0

---

Release Notes

FortAwesome/react-fontawesome (@​fortawesome/react-fontawesome)

v3.3.1

Compare Source

Chores

• deps-dev: bump handlebars from 4.7.8 to 4.7.9 (f1d6d94)
• deps-dev: bump lodash-es from 4.17.23 to 4.18.1 (212496a)
• deps-dev: bump picomatch from 2.3.1 to 2.3.2 (557ceaf)
• deps: bump lodash from 4.17.23 to 4.18.1 (2d06890)
• deps: node 22.22.2, bump all dev dependencies (99ba500)

motdotla/dotenv (dotenv)

v17.4.2

Compare Source

panva/openid-client (openid-client)

v6.8.4

Compare Source

Fixes

• apply optional non-repudiation on generic grant ID Tokens (6202888)
• filter jwe decryption keys by algorithm (34e2ffd)
• preserve poll abort signals on requests (96a2d17)
• retry dpop nonce errors for generic grants (498c4d9)

v6.8.3

Compare Source

Documentation

• note a workaround for redirect_uri with query string or bare origin (e9689de), closes #​868

Fixes

• passport: delete one-time state on callback (1e7dd2e)

facebook/react (react)

v19.2.6: 19.2.6 (May 6th, 2026)

Compare Source

React Server Components

• Type hardening and performance improvements
  (by @​eps1lon and @​unstubbable)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

remix-run/react-router (react-router-dom)

v7.15.1

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.15.1

v7.15.0

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.15.0

v7.14.2

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.14.2

v7.14.1

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@7.14.1

eemeli/yaml (yaml)

v2.9.0

Compare Source

v2.8.4

Compare Source

• Disable alias resolution with maxAliasCount:0 (#​677)
• Handle invalid unicode escapes (e1a1a77)
• Apply minFractionDigits only to decimal strings (#​676)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.