Skip to content

⬆️(dependencies) update js dependencies#1853

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/js-dependencies
Open

⬆️(dependencies) update js dependencies#1853
renovate[bot] wants to merge 1 commit intomainfrom
renovate/js-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 2, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@fontsource-variable/material-symbols-outlined (source) 5.2.31 → 5.2.33 age confidence
@hocuspocus/provider (source) 3.4.3 → 3.4.4 age confidence
@hocuspocus/server (source) 3.4.3 → 3.4.4 age confidence
@mantine/core (source) 8.3.12 → 8.3.13 age confidence
@mantine/hooks (source) 8.3.12 → 8.3.13 age confidence
@playwright/test (source) 1.57.0 → 1.58.0 age confidence
@react-pdf/renderer (source) 4.3.1 → 4.3.2 age confidence
@sentry/nextjs (source) 10.34.0 → 10.36.0 age confidence
@sentry/node (source) 10.34.0 → 10.36.0 age confidence
@sentry/profiling-node (source) 10.34.0 → 10.36.0 age confidence
@tanstack/eslint-plugin-query (source) 5.91.2 → 5.91.3 age confidence
@tanstack/react-query (source) 5.90.18 → 5.90.20 age confidence
@testing-library/react 16.3.1 → 16.3.2 age confidence
@tiptap/extensions (source) 3.14.0 → 3.17.1 age confidence
@types/react (source) 19.2.8 → 19.2.9 age confidence
@typescript-eslint/eslint-plugin (source) 8.53.0 → 8.53.1 age confidence
@typescript-eslint/parser (source) 8.53.0 → 8.53.1 age confidence
axios (source) 1.13.2 → 1.13.3 age confidence
cors 2.8.5 → 2.8.6 age confidence
eslint-plugin-playwright 2.5.0 → 2.5.1 age confidence
i18next (source) 25.7.4 → 25.8.0 age confidence
posthog-js (source) 1.325.0 → 1.335.2 age confidence
prettier (source) 3.8.0 → 3.8.1 age confidence
prosemirror-view 1.41.4 → 1.41.5 age confidence
stylelint (source) 16.26.1 → 17.0.0 age confidence
stylelint-config-standard 39.0.1 → 40.0.0 age confidence
vite-tsconfig-paths 6.0.4 → 6.0.5 age confidence
vitest (source) 4.0.17 → 4.0.18 age confidence

Release Notes

fontsource/font-files (@​fontsource-variable/material-symbols-outlined)

v5.2.33

Compare Source

v5.2.32

Compare Source

ueberdosis/hocuspocus (@​hocuspocus/provider)

v3.4.4

Compare Source

Bug Fixes
mantinedev/mantine (@​mantine/core)

v8.3.13

Compare Source

What's Changed
  • [@mantine/core] Add openOnFocus prop to Combobox based components (#​5893, #​8623)
  • [@mantine/dates] TimePicker: Fix clearing in uncontrolled mode not updating to empty value (#​8622)
  • [@mantine/core] ScrollArea: Fix Shift + wheel scroll not working correctly on Windows (#​8619)
  • [@mantine/core] Add selectFirstOptionOnDropdownOpen to Combobox based components (#​8597)
  • [@mantine/core] ScrollArea: Fix onBottomReached not being called when used in zoomed-in viewports (#​8616)
  • [@mantine/core] Popover: Fix aria-controls attribute being set on the target element when the dropdown is not mounted (#​8595)
  • [@mantine/core] RangeSlider: Fix incorrect Styles API name (#​8601)
  • [@mantine/core] ScrollArea: Fix overscrollBehavior prop not working in ScrollArea.Autosize component (#​8611)
New Contributors

Full Changelog: mantinedev/mantine@8.3.12...8.3.13

microsoft/playwright (@​playwright/test)

v1.58.0

Compare Source

diegomura/react-pdf (@​react-pdf/renderer)

v4.3.2

Compare Source

Patch Changes
getsentry/sentry-javascript (@​sentry/nextjs)

v10.36.0

Compare Source

v10.35.0

Compare Source

Important Changes

  • feat(tanstackstart-react): Add sentryTanstackStart vite plugin to manage automatic source map uploads (#​18712)

    You can now configure source maps upload for TanStack Start using the sentryTanstackStart Vite plugin:

    // vite.config.ts
import { defineConfig } from 'vite';
import { sentryTanstackStart } from '@​sentry/tanstackstart-react';
import { tanstackStart } from '@​tanstack/react-start/plugin/vite';

export default defineConfig({
  plugins: [
    sentryTanstackStart({
      authToken: process.env.SENTRY_AUTH_TOKEN,
      org: 'your-org',
      project: 'your-project',
    }),
    tanstackStart(),
  ],
});
Other Changes
  • feat(browser): Add CDN bundle for tracing.replay.feedback.logs.metrics (#​18785)
  • feat(browser): Add shim package for logs (#​18831)
  • feat(cloudflare): Automatically set the release id when CF_VERSION_METADATA is enabled (#​18855)
  • feat(core): Add ignored client report event drop reason (#​18815)
  • feat(logs): Add Log exports to browser and node packages (#​18857)
  • feat(node-core,bun): Export processSessionIntegration from node-core and add it to bun (#​18852)
  • fix(core): Find the correct IP address regardless their case (#​18880)
  • fix(core): Check for AI operation id to detect a vercelai span (#​18823)
  • fix(ember): Use ES5 syntax in inline vendor scripts (#​18858)
  • fix(fetch): Shallow-clone fetch options to prevent mutation (#​18867)
Internal Changes
  • chore(ci): Use javascript-sdk-gitflow app instead of personal token (#​18829)
  • chore(deps): Bump @sveltejs/kit devDependency to 2.49.5 (#​18848)
  • chore(deps): Bump bundler plugins to ^4.6.2 (#​18822)
  • chore(deps): bump hono from 4.10.3 to 4.11.4 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#​18806)
  • chore(test): Bump svelte dependencies (#​18850)
  • chore(core): Comment out Error tests in langchain (#​18837)
  • meta(changelog): Fix entry for tanstack start vite plugin (#​18883)
  • test(e2e): Add testing app for User Feedback (#​18877)
  • test(fastify): Verify if upstream error is fixed and won't regress (#​18838)

Work in this release was contributed by @​rreckonerr. Thank you for your contribution!

TanStack/query (@​tanstack/eslint-plugin-query)

v5.91.3

Compare Source

Patch Changes
  • exhaustive-deps rule fixed for vue files (#​10011)
TanStack/query (@​tanstack/react-query)

v5.90.20

Compare Source

Patch Changes

v5.90.19

Compare Source

Patch Changes
testing-library/react-testing-library (@​testing-library/react)

v16.3.2

Compare Source

ueberdosis/tiptap (@​tiptap/extensions)

v3.17.1

Compare Source

@​tiptap/extension-paragraph
Patch Changes
  • Fixed markdown serialization doubling newlines and parsing collapsing multiple blank lines
@​tiptap/markdown
Patch Changes
  • Fixed markdown serialization doubling newlines and parsing collapsing multiple blank lines
  • Fixed markdown HTML parsing when window object is unavailable in server-side environments
  • Fixed ordered list numbering when list has a non-default start value
@​tiptap/vue-3
Patch Changes
  • Fixed IME input (Chinese, Japanese, Korean) in Vue 3 mark views by preventing DOM element destruction during composition events
@​tiptap/extension-collaboration-caret
Patch Changes
  • Fixed CollaborationCaret crash with "Cannot read properties of undefined (reading 'doc')" error by updating to @​tiptap/y-tiptap@​3.0.2, which includes a guard against undefined state during editor initialization. This issue affected editors initialized with HTML content, particularly when using tables.
@​tiptap/extension-collaboration
Patch Changes
  • Fixed CollaborationCaret crash with "Cannot read properties of undefined (reading 'doc')" error by updating to @​tiptap/y-tiptap@​3.0.2, which includes a guard against undefined state during editor initialization. This issue affected editors initialized with HTML content, particularly when using tables.
@​tiptap/extension-drag-handle
Patch Changes
  • Fixed CollaborationCaret crash with "Cannot read properties of undefined (reading 'doc')" error by updating to @​tiptap/y-tiptap@​3.0.2, which includes a guard against undefined state during editor initialization. This issue affected editors initialized with HTML content, particularly when using tables.
@​tiptap/html
Patch Changes
  • Fixed server-side HTML parsing crash when content contains link, script, or style tags with resource references.
  • Fixed server exports failing in Node.js test environments with jsdom/happy-dom
@​tiptap/extension-bubble-menu
Patch Changes
  • Fixed bubble and floating menus to properly handle hide middleware data, hiding menus when reference element is scrolled out of view
@​tiptap/extension-floating-menu
Patch Changes
  • Fixed bubble and floating menus to properly handle hide middleware data, hiding menus when reference element is scrolled out of view
@​tiptap/core
Patch Changes
  • Fixed $nodes() method to correctly return inline nodes (like text, mention, etc.) by fixing the children getter in NodePos class
  • Fixed ResizableNodeView contentDOM getter to return null instead of undefined for proper TypeScript compatibility
@​tiptap/extension-list
Patch Changes
  • Fixed ordered list numbering when list has a non-default start value

v3.17.0

Compare Source

@​tiptap/extension-bubble-menu
Patch Changes
  • Added a safeguard to avoid TypeError: Cannot read properties of null (reading 'domFromPos') being thrown when the editor was being destroyed
@​tiptap/extension-drag-handle
Minor Changes
  • Added nested drag handle support, allowing drag handles to appear for nested content like list items and blockquotes with configurable edge detection and custom rules.
Patch Changes
  • Fixed Firefox bug where the text caret becomes invisible after drag and drop.
@​tiptap/core
Patch Changes
  • Added isFirefox utility to core
@​tiptap/extension-drag-handle-react
Minor Changes
  • Added nested drag handle support, allowing drag handles to appear for nested content like list items and blockquotes with configurable edge detection and custom rules.
@​tiptap/extension-drag-handle-vue-2
Minor Changes
  • Added nested drag handle support, allowing drag handles to appear for nested content like list items and blockquotes with configurable edge detection and custom rules.
@​tiptap/extension-drag-handle-vue-3
Minor Changes
  • Added nested drag handle support, allowing drag handles to appear for nested content like list items and blockquotes with configurable edge detection and custom rules.

v3.16.0

Compare Source

@​tiptap/extension-audio
Minor Changes
  • Add a native audio extension with demos and tests.
@​tiptap/markdown
Patch Changes
  • Fix incorrect Markdown output when underline is mixed with bold or italic and their ranges do not fully overlap.
  • Fix overlapping underline/bold/italic serialization and add tests
@​tiptap/extension-link
Patch Changes
  • Fixed an issue where clicking on non-link elements (like images) required multiple clicks to select them. The link click handler now properly returns early when the clicked element is not a link, allowing other node handlers to process the click event.
@​tiptap/extension-floating-menu
Minor Changes
  • Add updateEvent support for FloatingMenu to allow programmatic position updates via setMeta('floatingMenu', 'updatePosition')
@​tiptap/react
Minor Changes
  • Add updateEvent support for FloatingMenu to allow programmatic position updates via setMeta('floatingMenu', 'updatePosition')
@​tiptap/vue-2
Minor Changes
  • Add updateEvent support for FloatingMenu to allow programmatic position updates via setMeta('floatingMenu', 'updatePosition')
@​tiptap/vue-3
Minor Changes
  • Add updateEvent support for FloatingMenu to allow programmatic position updates via setMeta('floatingMenu', 'updatePosition')
@​tiptap/extension-unique-id
Patch Changes
  • Improved findDuplicates helper performance from O(n²) to O(n) by using Set-based lookups instead of Array.indexOf

v3.15.3

Compare Source

@​tiptap/core
Patch Changes
  • Fix Safari scrolling to top when using editor.chain().focus() commands

v3.15.2

Compare Source

@​tiptap/extension-link
Patch Changes
  • Prevent auto-linking of bare hostnames (e.g., localhost) and IP addresses without a protocol prefix
@​tiptap/extension-list
Patch Changes
  • Fix lost HTML attributes in TaskItem node view updates
@​tiptap/vue-2
Patch Changes
  • Fix Vue prop validation warning for appendTo prop in BubbleMenu and FloatingMenu
@​tiptap/vue-3
Patch Changes
  • Fix Vue prop validation warning for appendTo prop in BubbleMenu and FloatingMenu
@​tiptap/extension-youtube
Patch Changes
  • Fix YouTube Shorts embed URLs using incorrect query parameter separator
@​tiptap/react
Patch Changes
  • Fix race conditions in ReactRenderer causing destroyed renderers to be re-added in Strict Mode

v3.15.1

Compare Source

@​tiptap/suggestion
Patch Changes
  • Add a new shouldShow callback to the Suggestion utility. This allows developers to filter when suggestions are displayed, which is especially useful for collaborative environments to prevent suggestions from popping open for remote users.

v3.15.0

Compare Source

@​tiptap/core
Minor Changes
  • Add a new dispatchTransaction hook to extensions, allowing developers to intercept, modify, or block transactions before they are applied to the editor state.
@​tiptap/extension-unique-id
Patch Changes
  • Fix unique ID assignment when handling empty nodes by checking next node's attribute state in the transaction document before modifying it, preventing incorrect ID assignments.
typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.53.1

Compare Source

🩹 Fixes
  • utils: make RuleCreator root defaultOptions optional (#​11956)
  • eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#​11951)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.53.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

axios/axios (axios)

v1.13.3

Compare Source

Bug Fixes
  • http2: Use port 443 for HTTPS connections by default. (#​7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#​6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#​5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#​5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#​7253) (#​7257) (7d19335)
  • turn AxiosError into a native error (#​5394) (#​5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#​5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#​7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#​6314) (6ef867e)
Features
Reverts
Contributors to this release
expressjs/cors (cors)

v2.8.6

Compare Source

==================

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
mskelton/eslint-plugin-playwright (eslint-plugin-playwright)

v2.5.1

Compare Source

Bug Fixes
  • no-conditional-in-test: Fix false positive for || (611657c)
i18next/i18next (i18next)

v25.8.0

Compare Source

  • fix: TFunctionReturn fallback 2360
PostHog/posthog-js (posthog-js)

v1.335.2

Compare Source

1.335.2

Patch Changes

v1.335.1

Compare Source

1.335.1

Patch Changes

v1.335.0

Compare Source

1.335.0

Minor Changes
Patch Changes

v1.334.1

Compare Source

1.334.1

Patch Changes

v1.334.0

Compare Source

1.334.0

Minor Changes
Patch Changes

  • #​2950 8543f0f Thanks @​fuziontech! - fix(web-vitals): reduce memory leak in SPAs

    • Upgrade web-vitals from v4.2.4 to v5.1.0 (includes internal memory fixes from v5.0.3)
    • Remove duplicate observer creation on URL change

    Note: web-vitals has inherent memory accumulation in SPAs due to internal state.
    The v5 upgrade reduces this but doesn't fully eliminate it since web-vitals
    doesn't provide cleanup functions (Issue #​629 was closed as "not planned"). (2026-01-22)

  • Updated dependencies []:

v1.333.0

Compare Source

1.333.0

Minor Changes
Patch Changes

v1.332.0

Compare Source

1.332.0

Minor Changes
  • #​2882 8a5a3d5 Thanks @​adboio! - add support for question prefill in popover surveys, add useThumbSurvey hook
    (2026-01-20)
Patch Changes

v1.331.3

Compare Source

1.331.3

Patch Changes

Configuration

📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added automated Pull request created automatically dependencies Pull requests that update a dependency file noChangeLog labels Feb 2, 2026
@socket-security
Copy link

socket-security bot commented Feb 2, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​typescript-eslint/​parser@​8.53.0 ⏵ 8.53.11001007198100
Updated@​hocuspocus/​provider@​3.4.3 ⏵ 3.4.499 -110074 +198 +4100
Updated@​tanstack/​eslint-plugin-query@​5.91.2 ⏵ 5.91.3100 +110074 +197 +6100
Updated@​tiptap/​extensions@​3.14.0 ⏵ 3.17.110010078100 +2100
Updated@​hocuspocus/​server@​3.4.3 ⏵ 3.4.499 +110079 +198 +4100
Updated@​types/​react@​19.2.8 ⏵ 19.2.9100 +110079 +195100
Updated@​typescript-eslint/​eslint-plugin@​8.53.0 ⏵ 8.53.19910080 +198100
Updated@​mantine/​hooks@​8.3.12 ⏵ 8.3.131001008094 +1100
Updated@​fontsource-variable/​material-symbols-outlined@​5.2.31 ⏵ 5.2.3390 +51008196 +190
Updated@​mantine/​core@​8.3.12 ⏵ 8.3.1399 +110083 +194 +1100
Added@​react-pdf/​renderer@​4.3.29910010086100
Updated@​tanstack/​react-query@​5.90.18 ⏵ 5.90.2099 +110088 +199 +1100
Updated@​sentry/​nextjs@​10.34.0 ⏵ 10.36.09410091 +196 +1100
Updated@​testing-library/​react@​16.3.1 ⏵ 16.3.29910010092 +4100
Updated@​sentry/​node@​10.34.0 ⏵ 10.36.09610095 +196100
Updated@​sentry/​profiling-node@​10.34.0 ⏵ 10.36.010010010096100
Updated@​playwright/​test@​1.57.0 ⏵ 1.58.010010010099100

View full report

@github-actions
Copy link

github-actions bot commented Feb 2, 2026

Size Change: +78.4 kB (+1.87%)

Total Size: 4.28 MB

Filename Size Change
apps/impress/out/_next/static/901a83ad/_buildManifest.js 869 B +869 B (new file) 🆕
apps/impress/out/_next/static/c5d3db91/_buildManifest.js 0 B -831 B (removed) 🏆
apps/impress/out/_next/static/chunks/8d7c1fad.js 29.4 kB +29.4 kB (new file) 🆕
apps/impress/out/_next/static/chunks/37c447ba.js 28.1 kB +28.1 kB (new file) 🆕
apps/impress/out/_next/static/chunks/591.js 803 kB +803 kB (new file) 🆕
apps/impress/out/_next/static/chunks/3642.js 0 B -783 kB (removed) 🏆
apps/impress/out/_next/static/css/6a59910f4653194c.css 0 B -46.2 kB (removed) 🏆
apps/impress/out/_next/static/css/d77e30f55da11087.css 46.2 kB +46.2 kB (new file) 🆕

compressed-size-action

@AntoLC AntoLC self-assigned this Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@AntoLC AntoLC

Labels

automated Pull request created automatically dependencies Pull requests that update a dependency file noChangeLog

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@AntoLC