chore(deps): bump the frontend group in /frontend with 10 updates by dependabot[bot] · Pull Request #124 · hyperpolymath/MetaManifold-WebUI

dependabot · 2026-10-15T01:08:26Z

Bumps the frontend group in /frontend with 10 updates:

Package	From	To
plotly.js-dist-min	`2.35.3`	`4.1.2`
react	`18.3.1`	`19.3.0`
@types/react	`18.3.28`	`19.3.0`
react-dom	`18.3.1`	`19.3.0`
@types/react-dom	`18.3.7`	`19.3.0`
react-router-dom	`6.30.3`	`7.18.4`
@types/plotly.js	`2.35.14`	`3.0.15`
@vitejs/plugin-react	`4.7.0`	`6.1.2`
typescript	`5.9.3`	`7.0.2`
vite	`6.4.1`	`8.3.4`

Updates plotly.js-dist-min from 2.35.3 to 4.1.2

Release notes

Sourced from plotly.js-dist-min's releases.

v4.1.2

Changed

Use ResizeObserver for responsive chart resizing instead of listening for window resize events [#8017], with thanks to @Lexachoc for the contribution!

Describe config.toImageButtonOptions in the plot schema [#8066]

Fixed

Fix modebar hover colors not updating after color or activecolor changes [#8024], with thanks to @Lexachoc for the contribution!

Correct the image export types: format now accepts full-json, width and height accept null, and ToImgopts.format, ToImgopts.width, ToImgopts.height and DownloadImgopts.filename are optional because toImage and downloadImage supply them [#8066]

Pick the trace drawn last on a hover tie in scattergl and splom (matching scatter) [#8079]

Allow typed arrays in the types for arrayOk number and color attributes [#8087]

Redraw plots when a font that they use finishes loading [#8094]

v4.1.1

Changed

Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]

maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

v4.1.0

Added

Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @gokul-debugger for the contribution!

Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @rascal-sl for the contribution!

Changed

Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @CAOShurong for the contribution!

Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]

Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]

Include type defs in appropriate partial bundles [#8001]

Add TypeScript declarations for the modular lib/ entry points [#8009]

Handle regex enum values when generating schema types [#8010]

Include trace-contributed layout attributes in generated types [#8020]

Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

v4.0.0

Added

Add minscale, maxscale geo plot attributes [#7371], with thanks to @mojoaxel for the contribution!

Enable TypeScript compatibility within the library and start exporting types [#7680]

Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @degzhaus for the contribution!

Use dashed markers in legend for shape traces with dash configured [#7845]

Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @wf-r for the contribution!

forward keeps sources on the left (horizontal) or top (vertical)

reversed moves them to the right or bottom

Add sort option to Sankey links and nodes [#7873], with thanks to @adamreeve for the contribution!

Add support for MathJax v4 [#7898]

Add top-level xPixel and yPixel keys to hover and click event data, corresponding to the pixel position of the cursor relative to the top-left corner of the graph div [#7966]

... (truncated)

Changelog

Sourced from plotly.js-dist-min's changelog.

[4.1.2] -- 2026-10-05

Changed

Use ResizeObserver for responsive chart resizing instead of listening for window resize events [#8017], with thanks to @Lexachoc for the contribution!

Describe config.toImageButtonOptions in the plot schema [#8066]

Fixed

Fix modebar hover colors not updating after color or activecolor changes [#8024], with thanks to @Lexachoc for the contribution!

Correct the image export types: format now accepts full-json, width and height accept null, and ToImgopts.format, ToImgopts.width, ToImgopts.height and DownloadImgopts.filename are optional because toImage and downloadImage supply them [#8066]

Pick the trace drawn last on a hover tie in scattergl and splom (matching scatter) [#8079]

Allow typed arrays in the types for arrayOk number and color attributes [#8087]

Redraw plots when a font that they use finishes loading [#8094]

[4.1.1] -- 2026-09-14

Changed

Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]

maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

[4.1.0] -- 2026-09-08

Added

Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @gokul-debugger for the contribution!

Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @rascal-sl for the contribution!

Changed

Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @CAOShurong for the contribution!

Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]

Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]

Include type defs in appropriate partial bundles [#8001]

Add TypeScript declarations for the modular lib/ entry points [#8009]

Handle regex enum values when generating schema types [#8010]

Include trace-contributed layout attributes in generated types [#8020]

Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

[4.0.0] -- 2026-08-24

Added

Add minscale, maxscale geo plot attributes [#7371], with thanks to @mojoaxel for the contribution!

Enable TypeScript compatibility within the library and start exporting types [#7680]

Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @degzhaus for the contribution!

... (truncated)

Commits

bea2af3 4.1.2
9a72399 chore: Updates for release v4.1.2
dc94a20 chore: Update maplibre worker
bf76578 chore: Update dependencies, drop extra-iterable
67cc7fa Merge pull request #8094 from plotly/cam/8089/replot-after-font-load
c281d99 Be more general in font check
b2aa6c2 Use promises for tracking font loading because of Safari limitations
aa44890 Add draftlog
dd658b1 Update internal GraphDiv type
351fe89 Add tests
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by camdecoster, a new releaser for plotly.js-dist-min since your current version.

Updates react from 18.3.1 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 18.3.28 to 19.3.0

Commits

See full diff in compare view

Updates react-dom from 18.3.1 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, Description has been truncated

Bumps the frontend group in /frontend with 10 updates: | Package | From | To | | --- | --- | --- | | [plotly.js-dist-min](https://github.com/plotly/plotly.js) | `2.35.3` | `4.1.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.28` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.7` | `19.3.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `6.30.3` | `7.18.4` | | [@types/plotly.js](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/plotly.js) | `2.35.14` | `3.0.15` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.7.0` | `6.1.2` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.1` | `8.3.4` | Updates `plotly.js-dist-min` from 2.35.3 to 4.1.2 - [Release notes](https://github.com/plotly/plotly.js/releases) - [Changelog](https://github.com/plotly/plotly.js/blob/main/CHANGELOG.md) - [Commits](plotly/plotly.js@v2.35.3...v4.1.2) Updates `react` from 18.3.1 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 18.3.28 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 18.3.1 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 18.3.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-router-dom` from 6.30.3 to 7.18.4 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom) Updates `@types/plotly.js` from 2.35.14 to 3.0.15 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/plotly.js) Updates `@types/react` from 18.3.28 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 18.3.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 4.7.0 to 6.1.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) Updates `vite` from 6.4.1 to 8.3.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite) --- updated-dependencies: - dependency-name: plotly.js-dist-min dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: frontend - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: frontend - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: frontend - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend - dependency-name: react-router-dom dependency-version: 7.18.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: frontend - dependency-name: "@types/plotly.js" dependency-version: 3.0.15 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend - dependency-name: vite dependency-version: 8.3.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-15T01:08:36Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: 7886428c-f14d-4ff5-af8a-6209fd469da2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

sonarqubecloud · 2026-10-15T02:06:43Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

…9 types, manualChunks under vite 8 (#140) ## What this changes #124 (Dependabot's frontend group) bumped React 18 -> 19.3, vite 6 -> 8.3, TypeScript 5.7 -> 7, react-router-dom 6 -> 7 and plotly 2 -> 4 in one merge, and -- with no required checks yet -- it landed with `tsc` already failing. Main cannot build its frontend right now; this PR is that repair, two real breaks: 1. **React 19's types dropped the zero-argument `useRef` overload.** `TreeView.tsx`'s two timer refs (`saveTimer`, `scrollTimer`) failed `tsc` with TS2554 twice. They now pass the explicit `undefined` they always had at runtime: `useRef<number | undefined>(undefined)`. 2. **vite 8's rolldown core accepts only the function form of `manualChunks`.** The object form in `vite.config.ts` died at `manualChunks is not a function`. The function keeps the same chunking -- plotly still lands in its own 4.6 MB chunk. ## How to run its tests From `frontend/`: ``` bun install --frozen-lockfile --ignore-scripts bun run build # tsc && vite build -- green in 2.9s, same chunk layout bun run test # 42 pass, 0 fail bun run typecheck # clean ``` Verified locally on this exact tree. ## What this leaves out React 19, react-router 7, TypeScript 7 and plotly 4 are runtime majors that type-check and build clean but deserve their own smoke test of the running app; this PR only restores what the bumps broke mechanically. If the majors prove too hot, the alternative is re-pinning them in `package.json` -- but that is a decision about keeping #124, not about fixing it. ## Versions tested bun 1.4.3 (local mise shim; CI installs the `tool_versions.yml` pin). Julia, R and Agda untouched. Note: the commit is unsigned (the signing key's passphrase is unavailable to the session); amend to sign if required. --------- Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai> Co-authored-by: Mistral Vibe <vibe@mistral.ai>

…PR (#141) ## What this changes #124 grouped every frontend update, and with nothing requiring the checks it merged five framework majors -- React 18->19, vite 6->8, TypeScript 5->7, react-router-dom 6->7, plotly 2->4 -- in one PR, with `tsc` already red until #140 repaired it. A major is a migration, not an update: it must carry its own review and its own CI run. Both update groups (`frontend`, `github-actions` -- checkout v4.4.0 -> v7.0.1 came through #123 the same way) now name `update-types: ["minor", "patch"]` only. A Dependabot update matching no group opens its own PR, so majors arrive one at a time; minor and patch still batch weekly as before, so the noise stays low. A new testset in `test/unit/test_install_pins.jl` pins the shape -- both ecosystems declared, the frontend on `bun`, and no group whose `update-types` admit `major` -- so a future group cannot silently go back to batching majors. This is the same defence-in-depth the file already applies to workflow pins: the config asserts the policy, and the policy is enforced at the door. ## How to run its tests From the repository root: ``` julia --project=. test/unit/test_install_pins.jl ``` All testsets pass locally (223 prior assertions plus the new 9). ## What this leaves out No `open-pull-requests-limit` or other throttles: with majors unbatched the default limit of 5 per ecosystem keeps the queue bounded, and the first runs under this config (#123/#124) showed the volume is small. No change to security updates, which follow their own path. ## Versions tested Julia 1.13.1 locally (CI pins 1.12.5). No other tool touched. Note: the commit is unsigned (the signing key's passphrase is unavailable to the session); amend to sign if required. --------- Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai> Co-authored-by: Mistral Vibe <vibe@mistral.ai>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 15, 2026

hyperpolymath approved these changes Oct 15, 2026

View reviewed changes

Merge branch 'main' into dependabot/bun/frontend/frontend-82301be13e

a1364a4

hyperpolymath merged commit 15a6b5d into main Oct 15, 2026
5 of 7 checks passed

hyperpolymath deleted the dependabot/bun/frontend/frontend-82301be13e branch October 15, 2026 02:06

Navigation Menu

Repository navigation

chore(deps): bump the frontend group in /frontend with 10 updates - #124

chore(deps): bump the frontend group in /frontend with 10 updates#124
hyperpolymath merged 2 commits into
mainfrom
dependabot/bun/frontend/frontend-82301be13e

dependabot Bot commented on behalf of github Oct 15, 2026

Uh oh!

coderabbitai Bot commented Oct 15, 2026 •

edited

Loading

Review skipped

Uh oh!

Uh oh!

sonarqubecloud Bot commented Oct 15, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 15, 2026

v4.1.2

Changed

Fixed

v4.1.1

Changed

Fixed

v4.1.0

Added

Changed

Fixed

v4.0.0

Added

[4.1.2] -- 2026-10-05

Changed

Fixed

[4.1.1] -- 2026-09-14

Changed

Fixed

[4.1.0] -- 2026-09-08

Added

Changed

Fixed

[4.0.0] -- 2026-08-24

Added

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

coderabbitai Bot commented Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Uh oh!

sonarqubecloud Bot commented Oct 15, 2026

Quality Gate passed

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

coderabbitai Bot commented Oct 15, 2026 •

edited

Loading