Skip to content

Repository navigation

Bump the production-minor-and-patch group with 8 updates - #4959

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/production-minor-and-patch-0b6ba91094
Open

Bump the production-minor-and-patch group with 8 updates#4959
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/production-minor-and-patch-0b6ba91094

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-and-patch group with 8 updates:

Package From To
@auth0/auth0-spa-js 2.29.0 2.30.0
@blueprintjs/core 6.21.0 6.22.0
filesize 11.0.29 11.0.30
mobx 7.1.3 7.1.4
qs 6.17.0 6.17.1
react-grid-layout 2.2.4 2.3.0
react-window 2.5.1 2.5.3
swiper 14.3.0 14.4.0

Updates @auth0/auth0-spa-js from 2.29.0 to 2.30.0

Release notes

Sourced from @​auth0/auth0-spa-js's releases.

v2.30.0

Added

Fixed

Changelog

Sourced from @​auth0/auth0-spa-js's changelog.

v2.30.0 (2026-10-29)

Full Changelog

Added

Fixed

Commits
  • f266317 chore(release): v2.30.0 (#1820)
  • 681684b fix(docs): file unknown auth-js @​category tags under Other (#1818)
  • bd2f04e fix: getTokenSilently concurrent calls failing with Timeout (#1817)
  • 16deaee feat(myaccount): add getUserProfile and updateUserProfile methods (#1799)
  • 7c8342d build(deps-dev): Bump fast-uri from 3.1.7 to 3.1.9 (#1815)
  • 3756ea7 build(deps): Bump @​auth0/auth0-auth-js from 1.17.0 to 1.18.0 (#1812)
  • 7dc5273 build(deps): Bump cypress-io/github-action from 7.4.6 to 7.4.7 (#1814)
  • 7636374 build(deps): Bump the codeql group with 4 updates (#1813)
  • 277b096 build(deps-dev): Bump oidc-provider from 9.12.2 to 9.13.0 (#1811)
  • 7b8b3ac docs(passkey): drop retry cap from examples (#1810)
  • Additional commits viewable in compare view

Updates @blueprintjs/core from 6.21.0 to 6.22.0

Release notes

Sourced from @​blueprintjs/core's releases.

@​blueprintjs/core@​6.22.0

🐛 Fixes

  • [core] Don't throw from overlays when document.body is null (#8331)
  • Preserve design token references in generated CSS (#8288)

💡 Improvements

  • Migrate control components to CSS variables (#8318)
  • [core] Make checkbox mark colors customizable (#8319)

Full Changelog: @​blueprintjs/core@6.21.0...@​blueprintjs/core@6.22.0

Commits

Updates filesize from 11.0.29 to 11.0.30

Changelog

Sourced from filesize's changelog.

11.0.30

Commits
  • cda3b83 chore: release v11.0.30 (#396)
  • 732a28b fix: reject invalid rounding methods (#395)
  • 14acb87 chore(deps-dev): bump rollup from 4.66.0 to 4.67.2 (#394)
  • fecf477 chore(deps-dev): bump oxfmt from 0.74.0 to 0.75.0 (#393)
  • ee6bf0f chore(deps-dev): bump rollup from 4.65.1 to 4.66.0 (#392)
  • 25e2382 chore(deps-dev): bump oxlint from 1.89.0 to 1.90.0 (#391)
  • f7bc9f6 chore(deps-dev): bump rollup from 4.65.0 to 4.65.1 (#389)
  • 8c513d1 docs: correct the supported BigInt input range ref:0 (#386)
  • ee9a661 chore(deps-dev): bump rollup from 4.64.10 to 4.65.0 (#388)
  • 81e6906 chore(deps-dev): bump @​rollup/plugin-terser from 1.0.0 to 1.0.2 (#387)
  • Additional commits viewable in compare view

Updates mobx from 7.1.3 to 7.1.4

Release notes

Sourced from mobx's releases.

mobx@7.1.4

Patch Changes

  • 850b7123cb987d5d9d6c06b65f0494a11768bbb1 #4761 Thanks @​Enesuygurs! - Include observableKind and debugObjectName in the change events that observe reports for boxed observables, observable object properties and observable map entries, as the IValueDidChange type and the docs describe.

  • 95d5a28adfac4e8851c85a388b1c4a39695627c6 #4762 Thanks @​kubk! - Error messages now name annotations by their MobX 7 exports (actionBound, autoActionBound, flowBound, observableRef, observableShallow, observableStruct, computedStruct) instead of the removed action.bound-style names.

Commits
  • 22fc7d2 Version Packages (#4763)
  • 91f2bb2 eslint-plugin-mobx: drop MobX 6 decorator handling from exhaustive-make-obser...
  • 850b712 fix(mobx): include observableKind and debugObjectName in observe events of bo...
  • 95d5a28 Name annotations by their MobX 7 exports and recognize them in eslint-plugin-...
  • b05f0de docs: use the MobX 7 annotation exports instead of the removed namespaced one...
  • See full diff in compare view

Updates qs from 6.17.0 to 6.17.1

Changelog

Sourced from qs's changelog.

6.17.1

  • [Fix] parse: interpretNumericEntities: decode code points above U+FFFF as surrogate pairs (#640)
  • [Fix] parse: respect plainObjects for [] with parseArrays: false (#639)
  • [Fix] utils: merge: count the elements of a sparse array against arrayLimit, not its holes
  • [Fix] parse: guard bracket-wrapped prototype keys at depth 0 (#638)
  • [Refactor] parse: extract wrapping-bracket stripping helper
  • [readme] document that depth: 0 and depth: false keep keys flat
  • [Tests] parse: pin depth-0 bracket stripping and prototype keys kept by allowPrototypes/plainObjects
Commits
  • 43baea4 v6.17.1
  • 54623b6 [Fix] parse: interpretNumericEntities: decode code points above U+FFFF as...
  • 7924b65 [Fix] parse: respect plainObjects for [] with parseArrays: false
  • 7d4b440 [readme] document that depth: 0 and depth: false keep keys flat
  • 101492a [Fix] utils: merge: count the elements of a sparse array against `arrayLi...
  • 42eccf0 [Fix] parse: guard bracket-wrapped prototype keys at depth 0
  • ae0b5c7 [Refactor] parse: extract wrapping-bracket stripping helper
  • 6459f9f [Tests] parse: pin depth-0 bracket stripping and prototype keys kept by `al...
  • cb6855c Merge backport release tags v6.12.6–v6.16.2 into main
  • 136912a v6.16.2
  • Additional commits viewable in compare view

Updates react-grid-layout from 2.2.4 to 2.3.0

Release notes

Sourced from react-grid-layout's releases.

2.3.0

📚 Documentation

🧪 Tests

🔧 Internal Changes

Changelog

Sourced from react-grid-layout's changelog.

2.3.0 (Oct 5, 2026)

New Features

  • useContainerWidth: New optional debounceTimeout (ms). While the container keeps resizing, the reported width holds. Once it has been steady for debounceTimeout ms, the latest width commits once per burst. Leave it unset or 0 to keep the immediate behavior. #2254, #2290
  • DropConfig: Drop-from-outside now works on touch devices (iOS Safari, Android Chrome), where dragover and drop never fire. Mark a source element with data-rgl-draggable and touch events drive the same drop pipeline as the mouse. New options: dropConfig.touchEnabled (default true) and dropConfig.touchDragSource (default [data-rgl-draggable]). #2281
  • DragConfig: New dragConfig.allowMobileScroll. react-draggable calls preventDefault on touchstart unless this is set, which suppressed child onClick on touch devices. The v1 flat allowMobileScroll prop works too, and ResponsiveReactGridLayout now forwards it. It used to drop the prop silently. #1793, #2289
  • Edge auto-scroll: Dragging near the edge of a scrollable ancestor, or of the grid itself, now scrolls it from a requestAnimationFrame loop. Desktop browsers already scrolled near the edge on their own since 2.1.0. This covers fixed-height grids and touch. The scroll container is found by walking up from the dragged node, so an unpositioned overflow: auto wrapper works. #2232

Performance

  • GridItem: Now wrapped in React.memo with a shallow comparison of geometry and config, so a drag or resize no longer re-renders every item. You need to memoize the children you pass to the grid. #2240

Bug Fixes

  • Drag: Fix a drag that never ended when you released the mouse before the drag-start render committed. onDragStop now fires and the placeholder is removed. It checked the activeDrag state, which was still null at that point. It now checks the drag item saved at drag start. #2291, #2292
  • onLayoutChange: No longer fires during external drags (HTML5 or touch). The dropping placeholder entered and left the layout on every drag-enter and drag-leave without setting activeDrag, so the layout-change effect fired each time. #2219
  • isBounded: Resizing an item in a bounded grid could push its bottom or right edge past the container. GridItem passed a container height of 0 to the constraint context, so containerBounds never clamped. It now measures the container, and containerBounds gains a constrainSize. #1779
  • Responsive: An item added at a smaller breakpoint through data-grid kept its small width when the container grew to a larger breakpoint. The generated layout cloned the smaller one and never re-read the size. The size now re-seeds from data-grid for generated layouts. Stored layouts and x/y positions are untouched. #2110
  • Legacy API: Responsive and ResponsiveGridLayout forward refs again. v1's Responsive was a class that accepted a ref, and the v2 function component dropped it. The ref goes to innerRef. #2244
  • Collisions: In free-form (no compaction) grids, a swap on a partial overlap pushed the lower item a full item height. It now sits at the dragged item's bottom. #1982. In wrap mode, dragging left onto an occupied cell left items overlapping. Wrap now resolves collisions like horizontal (push right), and the final wrap compactor reflows to reading order. #2252
  • Drop position: A scrolled grid placed an external drop above the cursor by scrollTop. The drop position now adds the grid's scrollLeft and scrollTop. #2143
  • correctBounds: A new item with y: Infinity was only clamped under the vertical compactor. Horizontal and no compaction let it into the render math, and it overlapped the top-left. It now clamps to the layout bottom. #2161
  • Resize: Bump react-resizable to ^3.2.0, which fixes resize handle drift under load (stale props between renders). The API is unchanged. #2233

Internal Changes

  • Deterministic Playwright e2e harness, with expanded CI.
  • The mouse and touch drop paths share one position calculation (dropMath.ts).
  • Architecture docs moved to codemaps/, which Prettier now ignores. #2293
  • Lockfile bumps: follow-redirects 1.16.1 (#2261) and flatted 3.4.4 (#2257).
Commits
  • 9b01a61 release 2.3.0
  • 24533b1 chore(deps): bump flatted from 3.3.3 to 3.4.4 (#2257)
  • e87a821 chore(deps): bump follow-redirects from 1.15.11 to 1.16.1 (#2261)
  • eb35b82 fix: end drag when mouseup arrives before the drag start renders (#2291) (#2292)
  • b5fbb95 style: ignore codemaps in prettier so fmt:check passes (#2293)
  • cbac265 docs: note #2289 allowMobileScroll forwarding and #2254 debounceTimeout in co...
  • a44fb5f docs: commit codemaps, add AGENTS.md, graphify ignore
  • 234fe13 Merge pull request #2290 from react-grid-layout/feat/2254-usecontainerwidth-d...
  • 2bcd964 feat: add debounceTimeout option to useContainerWidth (#2254)
  • 44eb5dd Merge pull request #2289 from react-grid-layout/fix/1793-responsive-allow-mob...
  • Additional commits viewable in compare view

Updates react-window from 2.5.1 to 2.5.3

Release notes

Sourced from react-window's releases.

2.5.3

  • List identifies rows by ariaAttributes (specifically aria-posinset) so that additional children (e.g. sticky rows or overlays) aren't measured as rows, and rows that render nothing don't shift the indices of the rows after them. Rows that don't spread ariaAttributes, or that override aria-posinset or aria-setsize, are still matched by their position. If only some rows spread ariaAttributes (e.g. loaded rows but not loading placeholders), the rows that don't are not measured; spread ariaAttributes onto every row (or none). - #930, #931

2.5.2

  • Add displayName to List and Grid (e.g. for React DevTools and error messages in minified builds). The names are set in a way that does not prevent bundlers from tree shaking unused components.
Changelog

Sourced from react-window's changelog.

2.5.3

  • List identifies rows by ariaAttributes (specifically aria-posinset) so that additional children (e.g. sticky rows or overlays) aren't measured as rows, and rows that render nothing don't shift the indices of the rows after them. Rows that don't spread ariaAttributes, or that override aria-posinset or aria-setsize, are still matched by their position. If only some rows spread ariaAttributes (e.g. loaded rows but not loading placeholders), the rows that don't are not measured; spread ariaAttributes onto every row (or none). - #930, #931

2.5.2

  • Add displayName to List and Grid (e.g. for React DevTools and error messages in minified builds). The names are set in a way that does not prevent bundlers from tree shaking unused components.
Commits
  • a6b77b3 2.5.2 -> 2.5.3
  • b775322 Identify List rows by aria-posinset instead of position (#931)
  • 4bea19a Don't measure List children as rows while hydrated rows are in flow layout (#...
  • ec92685 Update react-lib-tools to 0.0.74
  • 20b156b Update react-lib-tools dev dependency
  • 92f0f9b Declare package as side effect free ("sideEffects": false)
  • 0204c12 2.5.1 -> 2.5.2
  • 1c0a258 Add displayName to components (#929)
  • 18f1892 Declare @​types/react as an optional peer dependency (#927)
  • See full diff in compare view

Updates swiper from 14.3.0 to 14.4.0

Release notes

Sourced from swiper's releases.

v14.4.0

Bug Fixes

  • autoplay: ignore start() and stop() on a destroyed instance (#8251) (ef055a6), closes #8036
  • core: defer layout updates until a hidden container has a size (#8243) (58b4c85), closes #8240
  • core: keep cssMode sliders on their slide when a resize moves the scroll (#8250) (e7d7bdc), closes #8246 #8246 #8254 #8246 #8254
  • core: loop forward navigation with few slides (cards effect, loopAdditionalSlides) (e17098c), closes #8008
  • core: mount elements from another window (iframe) (947ed58), closes #8245
  • core: slidePrev overshoot with slidesPerView auto + slidesPerGroupAuto (602988e), closes #8235
  • core: slideToLoop leaves part of the view empty in centered loop with few slides (f5f9adc), closes #8253
  • navigation: prevent navigation button icon clipping and vertical disalignment (8e1723c), closes #8161
  • react: reset forwarded ref on unmount (c458f3d), closes #8255
  • scrollbar: reposition the drag when the scrollbar size is updated (#8252) (fd71137), closes #8248
  • thumbs: scroll thumbs the right way when the main swiper loops (#8249) (88560f8), closes #8238
Changelog

Sourced from swiper's changelog.

14.4.0 (2026-10-30)

Bug Fixes

  • autoplay: ignore start() and stop() on a destroyed instance (#8251) (ef055a6), closes #8036
  • core: defer layout updates until a hidden container has a size (#8243) (58b4c85), closes #8240
  • core: keep cssMode sliders on their slide when a resize moves the scroll (#8250) (e7d7bdc), closes #8246 #8246 #8254 #8246 #8254
  • core: loop forward navigation with few slides (cards effect, loopAdditionalSlides) (e17098c), closes #8008
  • core: mount elements from another window (iframe) (947ed58), closes #8245
  • core: slidePrev overshoot with slidesPerView auto + slidesPerGroupAuto (602988e), closes #8235
  • core: slideToLoop leaves part of the view empty in centered loop with few slides (f5f9adc), closes #8253
  • navigation: prevent navigation button icon clipping and vertical disalignment (8e1723c), closes #8161
  • react: reset forwarded ref on unmount (c458f3d), closes #8255
  • scrollbar: reposition the drag when the scrollbar size is updated (#8252) (fd71137), closes #8248
  • thumbs: scroll thumbs the right way when the main swiper loops (#8249) (88560f8), closes #8238
Commits
  • 82cb393 14.4.0
  • 88560f8 fix(thumbs): scroll thumbs the right way when the main swiper loops (#8249)
  • fd71137 fix(scrollbar): reposition the drag when the scrollbar size is updated (#8252)
  • e7d7bdc fix(core): keep cssMode sliders on their slide when a resize moves the scroll...
  • 796f1eb chore: sponsors
  • 1a1ae64 chore(sponsors): keep generated sponsor lists formatted
  • c458f3d fix(react): reset forwarded ref on unmount
  • f5f9adc fix(core): slideToLoop leaves part of the view empty in centered loop with fe...
  • 58b4c85 fix(core): defer layout updates until a hidden container has a size (#8243)
  • ef055a6 fix(autoplay): ignore start() and stop() on a destroyed instance (#8251)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-minor-and-patch group with 8 updates
74cacab 
Bumps the production-minor-and-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@auth0/auth0-spa-js](https://github.com/auth0/auth0-spa-js) | `2.29.0` | `2.30.0` |
| [@blueprintjs/core](https://github.com/palantir/blueprint/tree/HEAD/packages/core) | `6.21.0` | `6.22.0` |
| [filesize](https://github.com/avoidwork/filesize.js) | `11.0.29` | `11.0.30` |
| [mobx](https://github.com/mobxjs/mobx) | `7.1.3` | `7.1.4` |
| [qs](https://github.com/ljharb/qs) | `6.17.0` | `6.17.1` |
| [react-grid-layout](https://github.com/STRML/react-grid-layout) | `2.2.4` | `2.3.0` |
| [react-window](https://github.com/bvaughn/react-window) | `2.5.1` | `2.5.3` |
| [swiper](https://github.com/nolimits4web/Swiper) | `14.3.0` | `14.4.0` |


Updates `@auth0/auth0-spa-js` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/auth0/auth0-spa-js/releases)
- [Changelog](https://github.com/auth0/auth0-spa-js/blob/main/CHANGELOG.md)
- [Commits](auth0/auth0-spa-js@v2.29.0...v2.30.0)

Updates `@blueprintjs/core` from 6.21.0 to 6.22.0
- [Release notes](https://github.com/palantir/blueprint/releases)
- [Changelog](https://github.com/palantir/blueprint/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/palantir/blueprint/commits/@blueprintjs/core@6.22.0/packages/core)

Updates `filesize` from 11.0.29 to 11.0.30
- [Changelog](https://github.com/avoidwork/filesize.js/blob/master/CHANGELOG.md)
- [Commits](avoidwork/filesize.js@11.0.29...11.0.30)

Updates `mobx` from 7.1.3 to 7.1.4
- [Release notes](https://github.com/mobxjs/mobx/releases)
- [Commits](https://github.com/mobxjs/mobx/compare/mobx@7.1.3...mobx@7.1.4)

Updates `qs` from 6.17.0 to 6.17.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.17.0...v6.17.1)

Updates `react-grid-layout` from 2.2.4 to 2.3.0
- [Release notes](https://github.com/STRML/react-grid-layout/releases)
- [Changelog](https://github.com/react-grid-layout/react-grid-layout/blob/master/CHANGELOG.md)
- [Commits](react-grid-layout/react-grid-layout@v2.2.4...2.3.0)

Updates `react-window` from 2.5.1 to 2.5.3
- [Release notes](https://github.com/bvaughn/react-window/releases)
- [Changelog](https://github.com/bvaughn/react-window/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-window@2.5.1...2.5.3)

Updates `swiper` from 14.3.0 to 14.4.0
- [Release notes](https://github.com/nolimits4web/Swiper/releases)
- [Changelog](https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md)
- [Commits](nolimits4web/swiper@v14.3.0...v14.4.0)

---
updated-dependencies:
- dependency-name: "@auth0/auth0-spa-js"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: "@blueprintjs/core"
  dependency-version: 6.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: filesize
  dependency-version: 11.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: mobx
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: qs
  dependency-version: 6.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: react-grid-layout
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: react-window
  dependency-version: 2.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: swiper
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Nov 7, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants