Skip to content

deps: bump the dependency-updates group across 1 directory with 11 updates#1931

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/dependency-updates-231440e8e0
Open

deps: bump the dependency-updates group across 1 directory with 11 updates#1931
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/dependency-updates-231440e8e0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps the dependency-updates group with 11 updates in the / directory:

Package From To
@primer/octicons-react 19.22.0 19.23.1
@primer/react 38.15.0 38.18.0
framer-motion 12.36.0 12.38.0
fuse.js 7.1.0 7.3.0
@npmcli/template-oss 4.29.0 4.30.0
eslint-import-resolver-webpack 0.13.10 0.13.11
eslint-plugin-primer-react 8.5.2 8.6.0
minimatch 10.2.4 10.2.5
tar 7.5.11 7.5.13
yaml 2.8.2 2.8.3
tap 21.6.2 21.6.3

Updates @primer/octicons-react from 19.22.0 to 19.23.1

Release notes

Sourced from @​primer/octicons-react's releases.

v19.23.1

Patch Changes

v19.23.0

Minor Changes

v19.22.1

Patch Changes

Changelog

Sourced from @​primer/octicons-react's changelog.

19.23.1

Patch Changes

19.23.0

Minor Changes

19.22.1

Patch Changes

Commits

Updates @primer/react from 38.15.0 to 38.18.0

Release notes

Sourced from @​primer/react's releases.

@​primer/react@​38.18.0

Minor Changes

  • #7700 91bf343 Thanks @​francinelucca! - ActionMenu: Graduate primer_react_action_menu_display_in_viewport_inside_dialog feature flag. ActionMenu now automatically uses displayInViewport when rendered inside a Dialog, without requiring the feature flag.

  • #7699 1505d9b Thanks @​francinelucca! - SelectPanel: Add displayInViewport prop

  • #7662 39c8cf3 Thanks @​HiroAgustin! - Timeline: Update clipSidebar prop to accept 'start', 'end', or 'both' in addition to boolean. Use 'start' to only clip the top, 'end' to only clip the bottom, or 'both'/true to clip both ends.

  • #7686 6cd13c0 Thanks @​JelloBagel! - StateLabel: Add new type: archived

Patch Changes

  • #7690 b492cc8 Thanks @​HiroAgustin! - fix(Button): Apply inline-flex display to loading wrapper for link variant buttons

  • #7696 1acb7d3 Thanks @​francinelucca! - Fix item dividers not visible in SelectPanel and FilteredActionList when showItemDividers is enabled, caused by content-visibility: auto clipping the absolutely-positioned divider pseudo-elements.

  • #7683 f05fcac Thanks @​liuliu-dev! - Dialog: dynamically switch footer button layout based on available height.

  • #7676 35ca056 Thanks @​HiroAgustin! - Remove link underline effect on hover for both Link (inline) and Button with variant link (no visuals)

  • #7631 0ecaf6f Thanks @​mattcosta7! - Add test to validate that the muted prop is not leaked as a bare DOM attribute on Link

@​primer/react@​38.17.0

Minor Changes

  • #7658 259fdff Thanks @​hussam-i-am! - fix(polymorphic): Improve prop passthrough for ActionList.LinkItem and Breadcrumbs.Item

  • #7672 77735f9 Thanks @​iansan5653! - - New: Exposes new useMergedRefs hook that can merge two refs into a single combined ref

    • Deprecates useRefObjectAsForwardedRef; see doc comment for migration instructions
    • Deprecates useProvidedRefOrCreate; see doc comment for migration instructions

  • #7623 42847d1 Thanks @​copilot-swe-agent! - IconButton: keybindingHint now accepts string[] in addition to string. Multiple hints are rendered joined with "or".

Patch Changes

@​primer/react@​38.16.0

Minor Changes

  • #7661 dceb79c Thanks @​TylerJDev! - AnchoredOverlay: Add CSS Anchor Positioning to AnchoredOverlay (under a feature flag)

@​primer/react@​38.15.1

Patch Changes

... (truncated)

Commits
  • 1625489 Release tracking (#7701)
  • 6cd13c0 Add 'Archived' to StateLabel (#7686)
  • f441841 lock-release.yml: Use legacy branch protection instead of rulesets (#7705)
  • 0ecaf6f fix(Link): destructure muted prop to prevent unintentional DOM attribute le...
  • 91bf343 chore: graduate primer_react_action_menu_display_in_viewport_inside_dialog (#...
  • 1505d9b feat: add displayInViewport option to SelectPanel (#7699)
  • 1c7c598 Remove Avatar component from @​primer/styled-react (#7685)
  • 1acb7d3 fix(FilteredActionList): prevent content-visibility from clipping item divide...
  • 39c8cf3 Timeline: extend clipSidebar to accept 'start' | 'end' | 'both' (#7662)
  • b492cc8 fix(Button): Apply inline-flex display to loading wrapper for link variant (#...
  • Additional commits viewable in compare view
Attestation changes

This version has no provenance attestation, while the previous version (38.15.0) was attested. Review the package versions before updating.


Updates framer-motion from 12.36.0 to 12.38.0

Changelog

Sourced from framer-motion's changelog.

[12.38.0] 2026-03-16

Added

  • Added layoutAnchor prop to configure custom anchor point for resolving relative projection boxes.

Fixed

  • Reorder: Fix axis switching after window resize.
  • Reorder: Fix with virtualised lists.
  • AnimatePresence: Ensure children are removed when exit animation matches current values.

[12.37.0] 2026-03-16

Added

  • Support for hardware accelerating "start" and "end" offsets in scroll and useScroll.
  • Support for oklch, oklab, lab, lch, color, color-mix, light-dark color types.

Fixed

  • Fix whileInView with client-side navigation.
  • Fix draggable elements when layout updates due to surrounding element re-renders.
  • Improved memory pressure of layout animations.
  • Ensure motion value returned from useSpring reports correct isAnimating().
Commits
  • 0bfc9fe v12.38.0
  • 343cb0c Updating layoutAnchor
  • ee99ad2 Updating changelog
  • 062660b Updating changgelog
  • 303da7d Updating readme
  • b075adc Merge pull request #3647 from motiondivision/feat/layout-anchor
  • f0991d6 Add missing layoutAnchor !== false guard in attemptToResolveRelativeTarget
  • b5798e9 Merge pull request #3642 from motiondivision/worktree-fix-issue-3078
  • 7686c19 Merge pull request #3636 from motiondivision/worktree-fix-issue-3061
  • a95c487 Fix auto-scroll in reorder-virtualized test page
  • Additional commits viewable in compare view

Updates fuse.js from 7.1.0 to 7.3.0

Release notes

Sourced from fuse.js's releases.

v7.3.0

Features

  • Token search — per-term fuzzy matching with IDF scoring (68c1dcf)
  • Fuse.match() — static method for single string matching (460eb5b)
  • BigInt support for indexing and search (0ae662c)
  • removeAt() now returns the removed item (8cec7e2)
  • Support keyless string entries in logical queries (8695556)
  • getFn null return, escaped pipe in extended search, empty query returns all (d33b735)

Bug Fixes

  • Merge overlapping match indices in extended search (06c5e97)
  • Inverse patterns now work correctly across multiple keys (9351882)
  • Handle quoted tokens with inner spaces and quotes in extended search (c226523)
  • Handle non-decomposable diacritics in stripDiacritics (5a01f29)
  • Coerce non-string array values to strings during indexing (db0e181)
  • Strip getFn from keys in toJSON() for safe serialization (0f2a69b)

Internal

  • Full TypeScript rewrite of source code
  • Dropped UMD builds and babel preset-env
  • Upgraded to Rollup 4, Vitest 2, TypeScript 6, ESLint 9
  • Frozen default config to prevent mutation across instances
  • Rewrote documentation as standalone markdown files

v7.2.0

Features

  • Add Fuse.use() for runtime plugin registration

Performance

  • Inline Bitap score computation to reduce object allocation in hot loops
  • Batch removeAll for O(n) bulk removes instead of O(n*k)
  • Heap-based top-k selection when limit is set
  • Cache compiled searcher for repeated queries

Benchmarked on 10k records: 9-14% faster core search, 49x faster bulk remove.

Bug Fixes

  • search: Deduplicate and merge overlapping match indices (#735)
  • search: Preserve original array indices in nested path traversal (#786)
  • types: Correct key type in FuseSortFunctionMatch (#811)
  • types: Correct keys type in parseIndex parameter (#794)

Full Changelog: krisk/Fuse@v7.1.0...v7.2.0

Changelog

Sourced from fuse.js's changelog.

7.3.0 (2026-04-04)

Features

  • add BigInt support for indexing and search (0ae662c), closes #814
  • add static Fuse.match() for single string matching (460eb5b)
  • add token search — per-term fuzzy matching with IDF scoring (68c1dcf)
  • getFn null return, escaped pipe in extended search, empty query returns all (d33b735), closes #800 #765 #728
  • removeAt() now returns the removed item (8cec7e2), closes #675
  • search: support keyless string entries in logical queries (8695556), closes #736

Bug Fixes

  • index: coerce non-string array values to strings during indexing (db0e181), closes #738
  • index: strip getFn from keys in toJSON() for safe serialization (0f2a69b), closes #798
  • lint: suppress unused var in toJSON destructure (d63c0e8)
  • merge overlapping match indices in extended search (06c5e97)
  • search: handle non-decomposable diacritics in stripDiacritics (5a01f29), closes home-assistant/frontend#30399 #816
  • search: handle quoted tokens with inner spaces and quotes in extended search (c226523), closes #810
  • search: inverse patterns now work correctly across multiple keys (9351882), closes #712

7.2.0 (2026-04-02)

Features

  • add Fuse.use() for runtime plugin registration (8546a9b)

Performance

  • inline Bitap score computation to reduce object allocation in hot loops (8546a9b)
  • batch removeAll for O(n) bulk removes instead of O(n*k) (8546a9b)
  • heap-based top-k selection when limit is set (8546a9b)
  • cache compiled searcher for repeated queries (8546a9b)

Bug Fixes

  • search: deduplicate and merge overlapping match indices (60c393a), closes #735
  • search: preserve original array indices in nested path traversal (a1451be), closes #786
  • types: correct key type in FuseSortFunctionMatch (fecee16), closes #811
  • types: correct keys type in parseIndex parameter (58c7c73), closes #794
Commits
  • aae48f5 chore(release): 7.3.0
  • d63c0e8 fix(lint): suppress unused var in toJSON destructure
  • 44dfdb4 chore: add funding field to package.json
  • 65dadf5 docs: add performance guide with benchmark script
  • 0ae662c feat: add BigInt support for indexing and search
  • 8153c9d docs: fix tsconfig to resolve "no inputs found" error
  • 6afb2ed docs: add "When to Use It" section to token search page
  • 0e74a9c docs: simplify Getting Started page title
  • 80330ed docs: fix sidebar titles and restore subheading expansion
  • 6cd0cee docs: remove unused TwitterFollow and Version components
  • Additional commits viewable in compare view

Updates @npmcli/template-oss from 4.29.0 to 4.30.0

Release notes

Sourced from @​npmcli/template-oss's releases.

v4.30.0

4.30.0 (2026-03-19)

Features

Changelog

Sourced from @​npmcli/template-oss's changelog.

4.30.0 (2026-03-19)

Features

Commits

Updates eslint-import-resolver-webpack from 0.13.10 to 0.13.11

Changelog

Sourced from eslint-import-resolver-webpack's changelog.

0.13.11 - 2026-04-01

  • [deps] update is-core-module, is-regex, lodash, resolve
Commits
  • 364c941 [resolvers/webpack] v0.13.11
  • 17bd6a9 [resolvers] [webpack] [meta] only apps should have lockfiles
  • a440156 [resolvers] [webpack] [deps] update is-core-module, is-regex, lodash, `...
  • See full diff in compare view

Updates eslint-plugin-primer-react from 8.5.2 to 8.6.0

Release notes

Sourced from eslint-plugin-primer-react's releases.

v8.6.0

Minor Changes

Changelog

Sourced from eslint-plugin-primer-react's changelog.

8.6.0

Minor Changes

Commits
  • 09a3407 Version Packages (#518)
  • 4f0e5b5 Add ESLint rule to replace deprecated Octicon component with specific icons (...
  • df853d1 Bump actions/create-github-app-token from 2 to 3 (#515)
  • 98c6ff3 Bump flatted from 3.3.3 to 3.4.1 (#514)
  • 88e5510 Bump lodash from 4.17.21 to 4.17.23 (#487)
  • e53a8e8 Bump globals from 17.3.0 to 17.4.0 (#516)
  • de1419f Bump @​typescript-eslint/rule-tester from 8.56.1 to 8.57.0 (#517)
  • 0d9487d Bump @​changesets/changelog-github from 0.5.2 to 0.6.0 (#512)
  • c0337b0 Bump markdownlint-cli2-formatter-pretty from 0.0.9 to 0.0.10 (#510)
  • db79b7f Bump minimatch from 3.1.2 to 3.1.5 (#508)
  • Additional commits viewable in compare view

Updates minimatch from 10.2.4 to 10.2.5

Commits

Updates tar from 7.5.11 to 7.5.13

Commits

Updates yaml from 2.8.2 to 2.8.3

Release notes

Sourced from yaml's releases.

v2.8.3

  • Add trailingComma ToString option for multiline flow formatting (#670)
  • Catch stack overflow during node composition (1e84ebb)
Commits
  • ce14587 2.8.3
  • 1e84ebb fix: Catch stack overflow during node composition
  • 6b24090 ci: Include Prettier check in lint action
  • 9424dee chore: Refresh lockfile
  • d1aca82 Add trailingComma ToString option for multiline flow formatting (#670)
  • 4321509 ci: Drop the branch filter from GitHub PR actions
  • 47207d0 chore: Update docs-slate
  • 5212fae chore: Update docs-slate
  • See full diff in compare view

Updates tap from 21.6.2 to 21.6.3

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
tap [>= 18.a, < 19]
tap [>= 19.a, < 20]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the dependency-updates group across 1 directory with 11 up…
6b4ff5a 
…dates

Bumps the dependency-updates group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@primer/octicons-react](https://github.com/primer/octicons) | `19.22.0` | `19.23.1` |
| [@primer/react](https://github.com/primer/react) | `38.15.0` | `38.18.0` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.36.0` | `12.38.0` |
| [fuse.js](https://github.com/krisk/Fuse) | `7.1.0` | `7.3.0` |
| [@npmcli/template-oss](https://github.com/npm/template-oss) | `4.29.0` | `4.30.0` |
| [eslint-import-resolver-webpack](https://github.com/import-js/eslint-plugin-import/tree/HEAD/resolvers/webpack) | `0.13.10` | `0.13.11` |
| [eslint-plugin-primer-react](https://github.com/primer/eslint-plugin-primer-react) | `8.5.2` | `8.6.0` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.2.4` | `10.2.5` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.11` | `7.5.13` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.2` | `2.8.3` |
| [tap](https://github.com/tapjs/tapjs) | `21.6.2` | `21.6.3` |



Updates `@primer/octicons-react` from 19.22.0 to 19.23.1
- [Release notes](https://github.com/primer/octicons/releases)
- [Changelog](https://github.com/primer/octicons/blob/main/CHANGELOG.md)
- [Commits](primer/octicons@v19.22.0...v19.23.1)

Updates `@primer/react` from 38.15.0 to 38.18.0
- [Release notes](https://github.com/primer/react/releases)
- [Commits](https://github.com/primer/react/compare/@primer/react@38.15.0...@primer/react@38.18.0)

Updates `framer-motion` from 12.36.0 to 12.38.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.36.0...v12.38.0)

Updates `fuse.js` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/krisk/Fuse/releases)
- [Changelog](https://github.com/krisk/Fuse/blob/main/CHANGELOG.md)
- [Commits](krisk/Fuse@v7.1.0...v7.3.0)

Updates `@npmcli/template-oss` from 4.29.0 to 4.30.0
- [Release notes](https://github.com/npm/template-oss/releases)
- [Changelog](https://github.com/npm/template-oss/blob/main/CHANGELOG.md)
- [Commits](npm/template-oss@v4.29.0...v4.30.0)

Updates `eslint-import-resolver-webpack` from 0.13.10 to 0.13.11
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/resolvers/webpack/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-plugin-import/commits/resolvers/webpack/v0.13.11/resolvers/webpack)

Updates `eslint-plugin-primer-react` from 8.5.2 to 8.6.0
- [Release notes](https://github.com/primer/eslint-plugin-primer-react/releases)
- [Changelog](https://github.com/primer/eslint-plugin-primer-react/blob/main/CHANGELOG.md)
- [Commits](primer/eslint-plugin-primer-react@v8.5.2...v8.6.0)

Updates `minimatch` from 10.2.4 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.4...v10.2.5)

Updates `tar` from 7.5.11 to 7.5.13
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.11...v7.5.13)

Updates `yaml` from 2.8.2 to 2.8.3
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.2...v2.8.3)

Updates `tap` from 21.6.2 to 21.6.3
- [Release notes](https://github.com/tapjs/tapjs/releases)
- [Commits](https://github.com/tapjs/tapjs/compare/tap@21.6.2...tap@21.6.3)

---
updated-dependencies:
- dependency-name: "@primer/octicons-react"
  dependency-version: 19.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: "@primer/react"
  dependency-version: 38.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: framer-motion
  dependency-version: 12.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: fuse.js
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: "@npmcli/template-oss"
  dependency-version: 4.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: eslint-import-resolver-webpack
  dependency-version: 0.13.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: eslint-plugin-primer-react
  dependency-version: 8.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: tar
  dependency-version: 7.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: yaml
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: tap
  dependency-version: 21.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the Dependencies Pull requests that update a dependency file label Apr 6, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 6, 2026 05:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants