Open
Conversation
Contributor
Author
|
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/minor
branch
from
93f7efc to
b920e60
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/minor
branch
2 times, most recently
from
b920e60 to
9af3fbc
Compare
![sentry[bot]](https://avatars.githubusercontent.com/in/12637?s=60&v=4){kind=small}
| datasource | package | from | to | | ---------- | ---------------------- | ------- | ------- | | npm | @base-ui/react | 1.1.0 | 1.2.0 | | npm | dotenv | 17.2.3 | 17.3.1 | | npm | pnpm | 10.28.2 | 10.30.0 | | npm | react-resizable-panels | 4.5.2 | 4.6.4 | | npm | undici | 7.19.2 | 7.22.0 |
renovate
bot
force-pushed
the
renovate/minor
branch
from
9af3fbc to
ca23315
Compare
| "packageManager": "pnpm@10.28.2", | ||
| "engines": { | ||
| "pnpm": "10.28.2", | ||
| "pnpm": "10.30.0", |
There was a problem hiding this comment.
Bug: The PR description claims to update several dependencies, but these changes are missing from package.json. The packageManager version is also not updated, creating an inconsistency.
Severity: MEDIUM
Suggested Fix
Ensure the dependency versions in package.json match the versions specified in the PR description. Update @base-ui/react, dotenv, react-resizable-panels, and undici. Also, update the packageManager field to pnpm@10.30.0 to match the engines.pnpm version. Finally, run pnpm install to regenerate the pnpm-lock.yaml file.
Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.
Location: package.json#L143
Potential issue: The pull request description indicates updates for four dependencies
(`@base-ui/react`, `dotenv`, `react-resizable-panels`, `undici`), but these version
changes are not reflected in the `package.json` file. The application will continue to
use the old, un-updated versions of these packages. Additionally, there is a mismatch
between the `engines.pnpm` version, which was updated to `10.30.0`, and the
`packageManager` field, which remains at `10.28.2`. This inconsistency could lead to
issues for developers. The `pnpm-lock.yaml` file also remains unchanged, confirming the
dependencies were not updated.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.1.0→1.2.017.2.3→17.3.110.28.2→10.30.010.30.2(+1)4.5.2→4.6.44.6.57.19.2→7.22.0Release Notes
mui/base-ui (@base-ui/react)
v1.2.0Compare Source
Feb 12, 2026
General changes
statewhen not needed (#3812) by @flaviendelanglerenderprop (#3856) by @oliviertassinariWeakReffor previously focused elements (#3916) by @atomiksAutocomplete
useMemodependency (#3862) by @ZeeshanTambolimodeislist(#3936) by @ZeeshanTamboliuseFilteredItemshook (#3732) by @guisehnaria-readonlyprop fromClearandPopupcomponents whenreadOnly(#3907) by @markocupic024Avatar
Button
nativeButtonerror message (#3861) by @atomiksCheckbox
<Checkbox.Indicator>whenkeepMounted={false}(#3939) by @atomiksCombobox
Iconpart (#3796) by @flaviendelangleChipRemove(#3980) by @sai6855input-pressfromtrigger-pressinonOpenChangereason (#4015) by @jijiseongChipfrom receiving focus whendisabled(#4044) by @jijiseonguseFilteredItemshook (#3732) by @guisehnaria-readonlyprop fromClearandPopupcomponents whenreadOnly(#3907) by @markocupic024onClickItemtype (#3964) by @atomiksdomReferenceElementsubscriptions (#4017) by @atomiksautoCompleteprop for explicit browser autofill support (#4005) by @mattrothenbergContext Menu
disabledprop not working (#3806) by @arturbiencollisionAvoidancewithside: 'flip'not working (#3877) by @obeattieDrawer
Field
Field.Controlis uncontrolled (#3820) by @atomiks<React.Activity>(#3931) by @atomiksInput
HTMLElement(#3866) by @mj12albertMenu
onClickItemtype (#3964) by @atomiks<Menu.LinkItem>part (#3400) by @mj12albertNavigation Menu
keepMountedprop toContentpart (#3794) by @atomiksNumber Field
event.isTrusted(#3920) by @atomiksallowOutOfRangeprop (#3919) by @atomiksPopover
aria-ownselement (#3959) by @atomiksdomReferenceElementsubscriptions (#4017) by @atomiksPreview Card
Progress
formatValuefunction (#3805) by @sai6855Radio Group
<Radio.Indicator>whenkeepMounted={false}(#3939) by @atomiksValuetyping toRadio(#4033) by @atomiksScroll Area
data-scrollingstate attribute toRootandViewportparts (#3823) by @arturbienSelect
finalFocusprop (#3785) by @markocupic024alignItemWithTriggertransform with CSS animations (#3831) by @atomikshighlightItemOnHovernot being respected (#3868) by @sarthakmalik0810autoCompleteprop for explicit browser autofill support (#4005) by @mattrothenbergSlider
Switch
Tabs
<Tabs.Panel>part (#3880) by @atomiksToast
useToastManagerandcreateToastManagergeneric functions (#3882) by @solastleyToggle
Toggle Group
Home/Endkey navigation (#3971) by @jijiseongTooltip
All contributors of this release in alphabetical order : @antonfrolovsky, @arturbien, @atomiks, @CiscoFran10, @CrawlerCode, @flaviendelangle, @guisehn, @jijiseong, @LukasTy, @markocupic024, @mattrothenberg, @mdm317, @michaelhazan, @michaldudak, @mj12albert, @obeattie, @OliverSpeir, @oliviertassinari, @sai6855, @sarthakmalik0810, @solastley, @ZeeshanTamboli
motdotla/dotenv (dotenv)
v17.3.1Compare Source
Changed
v17.3.0Compare Source
Added
Changed
v17.2.4Compare Source
Changed
DotenvPopulateInputacceptNodeJS.ProcessEnvtype (#915)pnpm/pnpm (pnpm)
v10.30.0: pnpm 10.30Compare Source
Minor Changes
pnpm whynow shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.Patch Changes
pnpm whydependency pruning to prefer correctness over memory consumption. Reverted PR: #7122.pnpm whyandpnpm listperformance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #10596.Platinum Sponsors
Gold Sponsors
v10.29.3Compare Source
v10.29.2Compare Source
v10.29.1: pnpm 10.29.1Compare Source
Minor Changes
pnpm dlx/pnpxcommand now supports thecatalog:protocol. Example:pnpm dlx shx@catalog:.auditLevelin thepnpm-workspace.yamlfile #10540.workspace:protocol without version specifier. It is now treated asworkspace:*and resolves to the concrete version during publish #10436.Patch Changes
Fixed
pnpm list --jsonreturning incorrect paths when using global virtual store #10187.Fix
pnpm store pathandpnpm store statususing workspace root for path resolution whenstoreDiris relative #10290.Fixed
pnpm run -rfailing with "No projects matched the filters" when an emptypnpm-workspace.yamlexists #10497.Fixed a bug where
catalogMode: strictwould write the literal string"catalog:"topnpm-workspace.yamlinstead of the resolved version specifier when re-adding an existing catalog dependency #10176.Fixed the documentation URL shown in
pnpm completion --helpto point to the correct page at https://pnpm.io/completion #10281.Skip local
file:protocol dependencies duringpnpm fetch. This fixes an issue wherepnpm fetchwould fail in Docker builds when local directory dependencies were not available #10460.Fixed
pnpm audit --jsonto respect the--audit-levelsetting for both exit code and output filtering #10540.update tar to version 7.5.7 to fix security issue
Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842
Fix
pnpm audit --fixreplacing reference overrides (e.g.$foo) with concrete versions #10325.Fix
shamefullyHoistset viaupdateConfigin.pnpmfile.cjsnot being converted topublicHoistPattern#10271.pnpm helpshould correctly report if the currently running pnpm CLI is bundled with Node.js #10561.Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for
node_modules/.bin, causing binaries to not be found when running commands likepnpm exec#10457.Platinum Sponsors
Gold Sponsors
bvaughn/react-resizable-panels (react-resizable-panels)
v4.6.4Compare Source
v4.6.3Compare Source
v4.6.2Compare Source
Groupguards against layouts with mis-orderedPanelid keysv4.6.1Compare Source
PanelandGroupAPIs ignoreddisabledstatus when resizing panels; this is an explicit override of the disabled state and is required to support conditionally disabled groups.Separatorcomponent does not set acursor: not-allowedstyle if the parentGrouphas cursors disabled.v4.6.0Compare Source
PanelandSeparatorcomponents to be disabledv4.5.9Compare Source
useForceUpdatewithuseSyncExternalStoreto avoid side effect of swallowing "click" events in certain casesGroupmethodsetLayoutpersists layout to in-memory cachev4.5.8Compare Source
v4.5.7Compare Source
Panelfrom 4.5.3 that was disabled in 4.5.6Separatorhover-state onDocument"pointerout"v4.5.6Compare Source
v4.5.5Compare Source
aria-orientationrole from rootGroupelement as this was invalid according to the ARIA spec; (for more information see the discussion on issue #640)Panelregression introduced in 4.5.3v4.5.4Compare Source
Panelavoids unnecessary re-renders in response to mouse-hover state.v4.5.3Compare Source
max-widthandmax-heightto 100% to fix potential CSS overflow bug.nodejs/undici (undici)
v7.22.0Compare Source
What's Changed
New Contributors
Full Changelog: nodejs/undici@v7.21.0...v7.22.0
v7.21.0Compare Source
What's Changed
closemethod to WebSocketStream interface by @piotr-cz in #4802New Contributors
Full Changelog: nodejs/undici@v7.20.0...v7.21.0
v7.20.0Compare Source
What's Changed
New Contributors
Full Changelog: nodejs/undici@v7.19.2...v7.20.0
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone America/New_York, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.