⬆️(dependencies) update js dependencies by renovate[bot] · Pull Request #1853 · suitenumerique/docs

renovate · 2026-02-02T06:51:52Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@fontsource-variable/material-symbols-outlined (source)	`5.2.31` → `5.2.35`
@gouvfr-lasuite/cunningham-react	`4.1.0` → `4.2.0`
@gouvfr-lasuite/ui-kit	`0.18.7` → `0.19.6`
@hocuspocus/provider (source)	`3.4.3` → `3.4.4`
@hocuspocus/server (source)	`3.4.3` → `3.4.4`
@mantine/core (source)	`8.3.12` → `8.3.14`
@mantine/hooks (source)	`8.3.12` → `8.3.14`
@playwright/test (source)	`1.57.0` → `1.58.2`
@react-pdf/renderer (source)	`4.3.1` → `4.3.2`
@sentry/nextjs (source)	`10.34.0` → `10.38.0`
@sentry/node (source)	`10.34.0` → `10.38.0`
@sentry/profiling-node (source)	`10.34.0` → `10.38.0`
@tanstack/eslint-plugin-query (source)	`5.91.2` → `5.91.4`
@tanstack/react-query (source)	`5.90.18` → `5.90.21`
@tanstack/react-query-devtools (source)	`5.91.2` → `5.91.3`
@testing-library/react	`16.3.1` → `16.3.2`
@tiptap/extensions (source)	`3.14.0` → `3.19.0`
@types/node (source)	`24.10.9` → `24.10.13`
@types/react (source)	`19.2.8` → `19.2.14`
@typescript-eslint/eslint-plugin (source)	`8.53.0` → `8.55.0`
@typescript-eslint/parser (source)	`8.53.0` → `8.55.0`
@vitejs/plugin-react (source)	`5.1.2` → `5.1.4`
@vitest/eslint-plugin	`1.6.6` → `1.6.9`
cors	`2.8.5` → `2.8.6`
dotenv	`17.2.3` → `17.3.1`
eslint (source)	`9.39.2` → `10.0.0`
eslint-plugin-jest	`29.12.1` → `29.15.0`
eslint-plugin-playwright	`2.5.0` → `2.5.1`
i18next (source)	`25.7.4` → `25.8.8`
i18next-browser-languagedetector	`8.2.0` → `8.2.1`
jsdom	`27.4.0` → `28.1.0`
posthog-js (source)	`1.325.0` → `1.347.2`
prettier (source)	`3.8.0` → `3.8.1`
prosemirror-view	`1.41.4` → `1.41.6`
react (source)	`19.2.3` → `19.2.4`
react-aria-components	`1.14.0` → `1.15.1`
react-dom (source)	`19.2.3` → `19.2.4`
react-dropzone	`14.3.8` → `15.0.0`
react-i18next	`16.5.3` → `16.5.4`
styled-components (source)	`6.3.8` → `6.3.9`
stylelint (source)	`16.26.1` → `17.3.0`
stylelint-config-standard	`39.0.1` → `40.0.0`
vite-tsconfig-paths	`6.0.4` → `6.1.1`
vitest (source)	`4.0.17` → `4.0.18`
webpack	`5.104.1` → `5.105.2`
zustand	`5.0.10` → `5.0.11`

Release Notes

fontsource/font-files (@fontsource-variable/material-symbols-outlined)

ueberdosis/hocuspocus (@hocuspocus/provider)

`v3.4.4`

Compare Source

Bug Fixes

fixes #1041: websocket URL ending with / wont work (#1046) (0df9b09)
fixes hono types in playground (#1045) (163fbed)
fixes provider.forwardClose type error (5438500)
fixes typings for onTokenSync (b2ac132)
strict types for authorizedScope (#1029) (44e1b5d)

mantinedev/mantine (@mantine/core)

`v8.3.14`

Compare Source

What's Changed

[@mantine/core] Switch: Fix checkbox not being recognized by Playwright (#8370, #8645)
[@mantine/core] MultiSelect: Fix click on chevron not opening dropdown when clearable is enabled (#8641)
[@mantine/modals] Fix types of context modals inferred incorrectly (#8625)
[@mantine/core] MultiSelect: Fix clear button overlapping with pills (#8634)

New Contributors

@ckhe1215 made their first contribution in #8634
@RaphalRiad made their first contribution in #8625

Full Changelog: mantinedev/mantine@8.3.13...8.3.14

`v8.3.13`

Compare Source

What's Changed

[@mantine/core] Add openOnFocus prop to Combobox based components (#5893, #8623)
[@mantine/dates] TimePicker: Fix clearing in uncontrolled mode not updating to empty value (#8622)
[@mantine/core] ScrollArea: Fix Shift + wheel scroll not working correctly on Windows (#8619)
[@mantine/core] Add selectFirstOptionOnDropdownOpen to Combobox based components (#8597)
[@mantine/core] ScrollArea: Fix onBottomReached not being called when used in zoomed-in viewports (#8616)
[@mantine/core] Popover: Fix aria-controls attribute being set on the target element when the dropdown is not mounted (#8595)
[@mantine/core] RangeSlider: Fix incorrect Styles API name (#8601)
[@mantine/core] ScrollArea: Fix overscrollBehavior prop not working in ScrollArea.Autosize component (#8611)

New Contributors

@AgentRBY made their first contribution in #8601
@jonathanhuynh70 made their first contribution in #8595
@robert-j-webb made their first contribution in #8616
@Alan-Gomes made their first contribution in #8597
@pggggggggh made their first contribution in #8622
@harry-ignite made their first contribution in #8623

Full Changelog: mantinedev/mantine@8.3.12...8.3.13

microsoft/playwright (@playwright/test)

`v1.58.2`

Compare Source

`v1.58.1`

Compare Source

Highlights

#39036 fix(msedge): fix local network permissions
#39037 chore: update cft download location
#38995 chore(webkit): disable frame sessions on fronzen builds

Browser Versions

Chromium 145.0.7632.6
Mozilla Firefox 146.0.1
WebKit 26.0

`v1.58.0`

Compare Source

diegomura/react-pdf (@react-pdf/renderer)

`v4.3.2`

Compare Source

Patch Changes

Updated dependencies [f034491b, 2eba70bd, fafbcb12, cc1aff24]:
- @react-pdf/pdfkit@4.1.0
- @react-pdf/reconciler@2.0.0
- @react-pdf/layout@4.4.2
- @react-pdf/font@4.0.4
- @react-pdf/render@4.3.2
- @react-pdf/types@2.9.2

getsentry/sentry-javascript (@sentry/nextjs)

`v10.38.0`

Compare Source

Important Changes

feat(tanstackstart-react): Auto-instrument request middleware (#18989)

The sentryTanstackStart Vite plugin now automatically instruments middleware arrays in createFileRoute(). This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

Other Changes

feat: Use v4.8.0 bundler plugins (#18993)
feat(browser): Add logs.metrics bundle (#19020)
feat(browser): Add replay.logs.metrics bundle (#19021)
feat(browser): Add tracing.replay.logs.metrics bundle (#19039)
feat(deps): bump import-in-the-middle from 2.0.1 to 2.0.6 (#19042)
feat(node): Add AI manual instrumentation exports to Node (#19063)
feat(wasm): initialised sentryWasmImages for webworkers (#18812)
fix(core): Classify custom AggregateErrors as exception groups (#19053)
fix(nextjs): Turn off debugID injection if sourcemaps are explicitly disabled (#19010)
fix(react): Avoid String(key) to fix Symbol conversion error (#18982)
fix(react): Prevent lazy route handlers from updating wrong navigation span (#18898)

Internal Changes

- feat(deps-dev): bump @types/rsvp from 4.0.4 to 4.0.9 ([#19038](https://redirect.github.com/getsentry/sentry-javascript/pull/19038)) - ci(build): Run full test suite on new bundle with logs+metrics ([#19065](https://redirect.github.com/getsentry/sentry-javascript/pull/19065)) - ci(deps): bump actions/create-github-app-token from 1 to 2 ([#19028](https://redirect.github.com/getsentry/sentry-javascript/pull/19028)) - ci(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ([#19029](https://redirect.github.com/getsentry/sentry-javascript/pull/19029)) - chore: Add external contributor to CHANGELOG.md ([#19005](https://redirect.github.com/getsentry/sentry-javascript/pull/19005)) - chore(aws-serverless): Fix local cache issues ([#19081](https://redirect.github.com/getsentry/sentry-javascript/pull/19081)) - chore(dependabot): Allow all packages to update ([#19024](https://redirect.github.com/getsentry/sentry-javascript/pull/19024)) - chore(dependabot): Update ignore patterns and add more groups ([#19037](https://redirect.github.com/getsentry/sentry-javascript/pull/19037)) - chore(dependabot): Update ignore patterns and add more groups ([#19043](https://redirect.github.com/getsentry/sentry-javascript/pull/19043)) - chore(deps-dev): bump @edge-runtime/types from 3.0.1 to 4.0.0 ([#19032](https://redirect.github.com/getsentry/sentry-javascript/pull/19032)) - chore(deps-dev): bump @vercel/nft from 0.29.4 to 1.3.0 ([#19030](https://redirect.github.com/getsentry/sentry-javascript/pull/19030)) - chore(deps): bump @actions/artifact from 2.1.11 to 5.0.3 ([#19031](https://redirect.github.com/getsentry/sentry-javascript/pull/19031)) - chore(deps): bump hono from 4.11.4 to 4.11.7 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#19009](https://redirect.github.com/getsentry/sentry-javascript/pull/19009)) - chore(deps): bump next from 16.0.9 to 16.1.5 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents ([#19012](https://redirect.github.com/getsentry/sentry-javascript/pull/19012)) - chore(deps): Bump trpc v11 dependency in e2e test ([#19061](https://redirect.github.com/getsentry/sentry-javascript/pull/19061)) - chore(deps): Bump wrangler to 4.61.0 ([#19023](https://redirect.github.com/getsentry/sentry-javascript/pull/19023)) - chore(deps): Upgrade @remix-run deps to 2.17.4 ([#19040](https://redirect.github.com/getsentry/sentry-javascript/pull/19040)) - chore(deps): Upgrade `next` versions 15 and 16 ([#19057](https://redirect.github.com/getsentry/sentry-javascript/pull/19057)) - chore(deps): Upgrade Lerna to v8 ([#19050](https://redirect.github.com/getsentry/sentry-javascript/pull/19050)) - chore(deps): Upgrade next to 14.2.35 ([#19055](https://redirect.github.com/getsentry/sentry-javascript/pull/19055)) - chore(deps): Upgrade react-router, @react-router/node, @react-router/serve, @react-router/dev to 7.13.0 ([#19026](https://redirect.github.com/getsentry/sentry-javascript/pull/19026)) - chore(llm): Add claude skill + cursor command for adding new cdn bundles ([#19048](https://redirect.github.com/getsentry/sentry-javascript/pull/19048)) - chore(llm): Ignore local Claude settings ([#18893](https://redirect.github.com/getsentry/sentry-javascript/pull/18893)) - chore(react): Update react-router-5 dev dependency to another than 5.0.0 ([#19047](https://redirect.github.com/getsentry/sentry-javascript/pull/19047)) - chore(release): Add generate-changelog script ([#18999](https://redirect.github.com/getsentry/sentry-javascript/pull/18999)) - chore(remix): Upgrade @remix-run/router to ^1.23.2 ([#19045](https://redirect.github.com/getsentry/sentry-javascript/pull/19045)) - chore(solidstart): Bump peer dependencies of @solidjs/start ([#19051](https://redirect.github.com/getsentry/sentry-javascript/pull/19051)) - chore(solidstart): Upgrade Vinxi to update h3 peer dependency ([#19018](https://redirect.github.com/getsentry/sentry-javascript/pull/19018)) - chore(tests): Reject messages from unknown origins in integration tests ([#19016](https://redirect.github.com/getsentry/sentry-javascript/pull/19016))

Work in this release was contributed by @harshit078. Thank you for your contribution!

`v10.37.0`

Compare Source

Important Changes

feat(core): Introduces a new Sentry.setConversationId() API to track multi turn AI conversations across API calls. (#18909)

You can now set a conversation ID that will be automatically applied to spans within that scope. This allows you to link traces from the same conversation together.
```
import * as Sentry from '@&#8203;sentry/node';

// Set conversation ID for all subsequent spans
Sentry.setConversationId('conv_abc123');

// All AI spans will now include the gen_ai.conversation.id attribute
await openai.chat.completions.create({...});
```
This is particularly useful for tracking multiple AI API calls that are part of the same conversation, allowing you to analyze entire conversation flows in Sentry.
The conversation ID is stored on the isolation scope and automatically applied to spans via the new conversationIdIntegration.
feat(tanstackstart-react): Auto-instrument global middleware in sentryTanstackStart Vite plugin (#18844)

The sentryTanstackStart Vite plugin now automatically instruments requestMiddleware and functionMiddleware arrays in createStart(). This captures performance data without requiring manual wrapping.

Auto-instrumentation is enabled by default. To disable it:
```
// vite.config.ts
sentryTanstackStart({
  authToken: process.env.SENTRY_AUTH_TOKEN,
  org: 'your-org',
  project: 'your-project',
  autoInstrumentMiddleware: false,
});
```

Other Changes

feat(core): simplify truncation logic to only keep the newest message (#18906)
feat(core): Support new client discard reason invalid (#18901)
feat(deps): Bump OpenTelemetry instrumentations (#18934)
feat(nextjs): Update default ignore list for sourcemaps (#18938)
feat(node): pass prisma instrumentation options through (#18900)
feat(nuxt): Don't run source maps related code on Nuxt "prepare" (#18936)
feat(replay): Update client report discard reason for invalid sessions (#18796)
feat(winston): Add customLevelMap for winston transport (#18922)
feat(react-router): Add support for React Router instrumentation API (#18580)
fix(astro): Do not show warnings for valid options (#18947)
fix(core): Report well known values in gen_ai.operation.name attribute (#18925)
fix(node-core): ignore vercel AbortError by default on unhandled rejection (#18973)
fix(nuxt): include sentry.config.server.ts in nuxt app types (#18971)
fix(profiling): Add platform to envelope item header (#18954)
fix(react): Defer React Router span finalization until lazy routes load (#18881)
ref(core): rename gen_ai.input.messages.original_length to sentry.sdk_meta.gen_ai.input.messages.original_length (#18970)
ref(core): rename gen_ai.request.messages to gen_ai.input.messages (#18944)
ref(core): Set system message as separate attribute (#18978)
deps: Bump version of sentry-bundler-plugins (#18972)

Internal Changes

chore(e2e): Add e2e claude skill (#18957)
chore(e2e): Add Makefile to make running specific e2e test apps easier (#18953)
chore(e2e): Modify e2e skill to also account for untracked files (#18959)
ref(tests): use constants in ai integration tests and add missing ones (#18945)
test(nextjs): Added nextjs CF workers test app (#18928)
test(prisma): Move to yarn prisma (#18975)

Work in this release was contributed by @sebws, @harshit078, and @fedetorre. Thank you for your contributions!

`v10.36.0`

Compare Source

`v10.35.0`

Compare Source

Important Changes

feat(tanstackstart-react): Add sentryTanstackStart vite plugin to manage automatic source map uploads (#18712)

You can now configure source maps upload for TanStack Start using the sentryTanstackStart Vite plugin:

// vite.config.ts
import { defineConfig } from 'vite';
import { sentryTanstackStart } from '@&#8203;sentry/tanstackstart-react';
import { tanstackStart } from '@&#8203;tanstack/react-start/plugin/vite';

export default defineConfig({
  plugins: [
    sentryTanstackStart({
      authToken: process.env.SENTRY_AUTH_TOKEN,
      org: 'your-org',
      project: 'your-project',
    }),
    tanstackStart(),
  ],
});

Other Changes

feat(browser): Add CDN bundle for tracing.replay.feedback.logs.metrics (#18785)
feat(browser): Add shim package for logs (#18831)
feat(cloudflare): Automatically set the release id when CF_VERSION_METADATA is enabled (#18855)
feat(core): Add ignored client report event drop reason (#18815)
feat(logs): Add Log exports to browser and node packages (#18857)
feat(node-core,bun): Export processSessionIntegration from node-core and add it to bun (#18852)
fix(core): Find the correct IP address regardless their case (#18880)
fix(core): Check for AI operation id to detect a vercelai span (#18823)
fix(ember): Use ES5 syntax in inline vendor scripts (#18858)
fix(fetch): Shallow-clone fetch options to prevent mutation (#18867)

Internal Changes

chore(ci): Use javascript-sdk-gitflow app instead of personal token (#18829)
chore(deps): Bump @sveltejs/kit devDependency to 2.49.5 (#18848)
chore(deps): Bump bundler plugins to ^4.6.2 (#18822)
chore(deps): bump hono from 4.10.3 to 4.11.4 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#18806)
chore(test): Bump svelte dependencies (#18850)
chore(core): Comment out Error tests in langchain (#18837)
meta(changelog): Fix entry for tanstack start vite plugin (#18883)
test(e2e): Add testing app for User Feedback (#18877)
test(fastify): Verify if upstream error is fixed and won't regress (#18838)

Work in this release was contributed by @rreckonerr. Thank you for your contribution!

TanStack/query (@tanstack/eslint-plugin-query)

`v5.91.4`

Compare Source

Patch Changes

fix(eslint-plugin-query): declare typescript as optional peer dependency (#10007)

`v5.91.3`

Compare Source

Patch Changes

exhaustive-deps rule fixed for vue files (#10011)

TanStack/query (@tanstack/react-query)

`v5.90.21`

Compare Source

Patch Changes

refactor(react-query/useQueries): remove unreachable 'willFetch' branch in suspense promise collection (#10082)

`v5.90.20`

Compare Source

Patch Changes

Updated dependencies [e7258c5]:
- @tanstack/query-core@5.90.20

`v5.90.19`

Compare Source

Patch Changes

Updated dependencies [53fc74e]:
- @tanstack/query-core@5.90.19

TanStack/query (@tanstack/react-query-devtools)

`v5.91.3`

Compare Source

Patch Changes

Updated dependencies [83366c4]:
- @tanstack/query-devtools@5.93.0

testing-library/react-testing-library (@testing-library/react)

`v16.3.2`

Compare Source

ueberdosis/tiptap (@tiptap/extensions)

`v3.19.0`

Compare Source

@tiptap/extension-link

Patch Changes

Add title attribute to Link extension. The title can now be set via setLink and toggleLink commands and is rendered as an HTML title attribute.
Add title attribute support for markdown rendering. Links with titles are now serialized to markdown format [text](url "title").

@tiptap/react

Minor Changes

Moved BubbleMenu and FloatingMenu to separate @tiptap/react/menus entrypoint to keep floating-ui optional
Simplified Tiptap component API with guaranteed non-null editor instance from useTiptap hook

`v3.18.0`

Compare Source

@tiptap/extension-bubble-menu

Patch Changes

Fix BubbleMenu and FloatingMenu props not updating after initialization

@tiptap/extension-floating-menu

Patch Changes

Fix BubbleMenu and FloatingMenu props not updating after initialization

@tiptap/react

Minor Changes

Introduce a new, optional React integration that provides a declarative <Tiptap /> component for setting up editors in React apps.

Summary
- Add a new, ergonomic way to initialize and use Tiptap editors in React via <Tiptap /> components. This is an additive change and does not remove or change existing APIs.
Why this change
- Improves ergonomics for React users by offering a component-first API that pairs well with React patterns (hooks, JSX composition and props-driven configuration).
Migration and usage
- The old programmatic setup remains supported for this major version — nothing breaks. We encourage consumers to try the new <Tiptap /> component and migrate when convenient.
Example
```
import { Tiptap, useEditor } from '@&#8203;tiptap/react'

function MyEditor() {
  const editor = useEditor({ extensions: [StarterKit], content: '<h1>Hello from Tiptap</h1>' })

  return (
    <Tiptap instance={editor}>
      <Tiptap.Content />
      <Tiptap.BubbleMenu>My Bubble Menu</Tiptap.BubbleMenu>
      <Tiptap.FloatingMenu>My Floating Menu</Tiptap.FloatingMenu>
      <MenuBar /> {/* MenuBar can use the new `useTiptap` hook to read the editor instance from context */}
    </Tiptap>
  )
}
```
Deprecation plan
- The old imperative setup will remain fully backward-compatible for this major release. We plan to deprecate (and remove) the legacy setup in the next major version — a deprecation notice and migration guide will be published ahead of that change.

Patch Changes

Fix BubbleMenu and FloatingMenu props not updating after initialization
Fixed extension storage not updating in React and Vue node views

@tiptap/vue-3

Patch Changes

Fixed extension storage not updating in React and Vue node views

@tiptap/markdown

Patch Changes

Upgrade marked.js from v15.0.12 to v17.0.1. Note that **)** requires whitespace when adjacent to alphanumeric text per CommonMark specification.

@tiptap/extensions

Patch Changes

Added a new dataAttribute to the extension option to control which attribute name will be used for the placeholder label.

`v3.17.1`

Compare Source

@tiptap/extension-paragraph

Patch Changes

Fixed markdown serialization doubling newlines and parsing collapsing multiple blank lines

@tiptap/markdown

Patch Changes

Fixed markdown serialization doubling newlines and parsing collapsing multiple blank lines
Fixed markdown HTML parsing when window object is unavailable in server-side environments
Fixed ordered list numbering when list has a non-default start value

@tiptap/vue-3

Patch Changes

Fixed IME input (Chinese, Japanese, Korean) in Vue 3 mark views by preventing DOM element destruction during composition events

@tiptap/extension-collaboration-caret

Patch Changes

Fixed CollaborationCaret crash with "Cannot read properties of undefined (reading 'doc')" error by updating to @tiptap/y-tiptap@3.0.2, which includes a guard against undefined state during editor initialization. This issue affected editors initialized with HTML content, particularly when using tables.

@tiptap/extension-collaboration

Patch Changes

Fixed CollaborationCaret crash with "Cannot read properties of undefined (reading 'doc')" error by updating to @tiptap/y-tiptap@3.0.2, which includes a guard against undefined state during editor initialization. This issue affected editors initialized with HTML content, particularly when using tables.

@tiptap/extension-drag-handle

Patch Changes

Fixed CollaborationCaret crash with "Cannot read properties of undefined (reading 'doc')" error by updating to @tiptap/y-tiptap@3.0.2, which includes a guard against undefined state during editor initialization. This issue affected editors initialized with HTML content, particularly when using tables.

@tiptap/html

Patch Changes

Fixed server-side HTML parsing crash when content contains link, script, or style tags with resource references.
Fixed server exports failing in Node.js test environments with jsdom/happy-dom

@tiptap/extension-bubble-menu

Patch Changes

Fixed bubble and floating menus to properly handle hide middleware data, hiding menus when reference element is scrolled out of view

@tiptap/extension-floating-menu

Patch Changes

Fixed bubble and floating menus to properly handle hide middleware data, hiding menus when reference element is scrolled out of view

@tiptap/core

Patch Changes

Fixed $nodes() method to correctly return inline nodes (like text, mention, etc.) by fixing the children getter

Configuration

📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-02-02T06:52:43Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Quality
	eslint-config-next@15.5.10
	next@15.5.10
	@gouvfr-lasuite/cunningham-react@4.2.0
	@blocknote/code-block@0.47.0
	convert-stream@1.0.2
	@blocknote/server-util@0.47.0
	@types/pngjs@6.0.5
	@types/express@5.0.6
	@tanstack/react-query-devtools@5.91.3
	@typescript-eslint/parser@8.56.0
	@blocknote/xl-pdf-exporter@0.47.0
	@types/supertest@6.0.3
	@emoji-mart/react@1.1.1
	@blocknote/xl-multi-column@0.47.0
	@blocknote/mantine@0.47.0
	workbox-webpack-plugin@7.1.0
	@blocknote/xl-docx-exporter@0.47.0
	@gouvfr-lasuite/ui-kit@0.19.6
	@next/eslint-plugin-next@15.5.10
	@types/pdf-parse@1.1.5
	@blocknote/xl-odt-exporter@0.47.0
	@emoji-mart/data@1.2.1
	@hocuspocus/provider@3.4.4
	@tanstack/eslint-plugin-query@5.91.4
	@types/react-dom@19.2.3
	lodash@4.17.23
	@typescript-eslint/utils@8.53.0 ⏵ 8.56.0	⁺¹	⁺¹
	@types/luxon@3.7.1
	@tiptap/extensions@3.19.0
	crisp-sdk-web@1.0.27
	@hocuspocus/server@3.4.4
	vitest@4.0.18
	@types/react@19.2.14
See 68 more rows in the dashboard

View full report

github-actions · 2026-02-02T07:00:57Z

Size Change: +12.8 kB (+0.3%)

Total Size: 4.22 MB

Filename	Size	Change
`apps/impress/out/_next/static/9127b955/_buildManifest.js`	892 B	+892 B (new file)	🆕
`apps/impress/out/_next/static/a9ecb037/_buildManifest.js`	0 B	-893 B (removed)	🏆
`apps/impress/out/_next/static/chunks/6605.js`	781 kB	+1.43 kB (+0.18%)
`apps/impress/out/_next/static/chunks/06873998.js`	10.4 kB	+3.01 kB (+40.84%)	🚨
`apps/impress/out/_next/static/chunks/9246647c.js`	38.9 kB	+3.82 kB (+10.91%)	⚠️
`apps/impress/out/_next/static/chunks/pages/_app.js`	603 kB	+2.33 kB (+0.39%)
`apps/impress/out/_next/static/css/baacd4c537066d47.css`	0 B	-34.1 kB (removed)	🏆
`apps/impress/out/_next/static/css/c5a0e34a699c5638.css`	0 B	-45.6 kB (removed)	🏆
`apps/impress/out/_next/static/css/e6cd5fe945d3ea32.css`	34.1 kB	+34.1 kB (new file)	🆕
`apps/impress/out/_next/static/css/fc6cbe9d4c1d812b.css`	47.4 kB	+47.4 kB (new file)	🆕

_{compressed-size-action}

socket-security · 2026-02-16T01:53:38Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

renovate · 2026-02-23T10:46:34Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Update dependencies and code to fit eslint v10.

We get a warning about a vulnerability with "glob". We upgrade to 10.5.0 to fix the issue.

We get a warning about a vulnerability with "markdown-it". We upgrade to 14.1.1 to fix the issue.

We get a warning about a vulnerability in minimatch 3.1.2. We ugrade to 10.2.2 to fix the issue.

renovate bot added automated Pull request created automatically dependencies Pull requests that update a dependency file noChangeLog labels Feb 2, 2026

AntoLC self-assigned this Feb 3, 2026

renovate bot force-pushed the renovate/js-dependencies branch from e96bfe5 to 5d85f3a Compare February 9, 2026 01:07

renovate bot force-pushed the renovate/js-dependencies branch from 5d85f3a to 1a9e2d4 Compare February 16, 2026 01:52

renovate bot force-pushed the renovate/js-dependencies branch 2 times, most recently from 9b5e03d to 1d105c4 Compare February 23, 2026 01:14

AntoLC force-pushed the renovate/js-dependencies branch from 1d105c4 to abc4073 Compare February 23, 2026 10:45

AntoLC mentioned this pull request Feb 23, 2026

🔒️(secu) fix CVE-2026-26996 with minimatch #1900

Closed

AntoLC added the security label Feb 23, 2026

AntoLC self-requested a review February 23, 2026 10:55

AntoLC approved these changes Feb 23, 2026

View reviewed changes

AntoLC force-pushed the renovate/js-dependencies branch 6 times, most recently from 650a279 to b62e076 Compare February 23, 2026 16:23

renovate bot and others added 5 commits February 23, 2026 17:42

⬆️(dependencies) update js dependencies

d766175

⬆️(frontend) update dependencies to fit eslint v10

239d595

Update dependencies and code to fit eslint v10.

🔒️(secu) fix CVE-2025-64756 with glob

b0f131c

We get a warning about a vulnerability with "glob". We upgrade to 10.5.0 to fix the issue.

🔒️(secu) fix CVE-2026-2327 with markdown-it

feb669a

We get a warning about a vulnerability with "markdown-it". We upgrade to 14.1.1 to fix the issue.

🔒️(secu) fix CVE-2026-26996 with minimatch

2f6afe9

We get a warning about a vulnerability in minimatch 3.1.2. We ugrade to 10.2.2 to fix the issue.

AntoLC force-pushed the renovate/js-dependencies branch from b62e076 to 2f6afe9 Compare February 23, 2026 16:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

⬆️(dependencies) update js dependencies#1853

⬆️(dependencies) update js dependencies#1853
renovate[bot] wants to merge 5 commits intomainfrom
renovate/js-dependencies

renovate bot commented Feb 2, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Feb 2, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 2, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Feb 16, 2026 •

edited

Loading

Uh oh!

renovate bot commented Feb 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

renovate bot commented Feb 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

What's Changed

New Contributors

What's Changed

New Contributors

Highlights

Browser Versions

Patch Changes

Important Changes

Other Changes

Important Changes

Other Changes

Important Changes

Other Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Configuration

Uh oh!

socket-security bot commented Feb 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate bot commented Feb 23, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Feb 2, 2026 •

edited

Loading

socket-security bot commented Feb 2, 2026 •

edited

Loading

github-actions bot commented Feb 2, 2026 •

edited

Loading

socket-security bot commented Feb 16, 2026 •

edited

Loading