chore(deps): bump the npm-prod-minor group with 7 updates by dependabot[bot] · Pull Request #136 · brainstormforce/sureforms-public

dependabot · 2026-09-21T07:58:39Z

Bumps the npm-prod-minor group with 7 updates:

Package	From	To
@tanstack/react-query	`5.90.10`	`5.103.1`
autoprefixer	`10.4.21`	`10.6.1`
date-fns	`4.1.0`	`4.4.0`
dompurify	`3.3.3`	`3.4.15`
react-hot-toast	`2.5.2`	`2.6.1`
tailwind-merge	`3.3.1`	`3.7.0`
use-debounce	`10.0.4`	`10.1.1`

Updates @tanstack/react-query from 5.90.10 to 5.103.1

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.103.1

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.103.1

@tanstack/react-query@5.103.1

@tanstack/react-query-next-experimental@5.103.1

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.103.1

@tanstack/react-query-persist-client@5.103.1

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.103.1

@tanstack/react-query@5.103.1

@tanstack/react-query@5.103.1

Patch Changes

Updated dependencies [8330b2f, 3212966]:

@tanstack/query-core@5.103.1

@tanstack/react-query-devtools@5.103.0

Patch Changes

#11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

Updated dependencies [9567367]:

@tanstack/query-devtools@5.103.0

@tanstack/react-query@5.103.0

@tanstack/react-query-next-experimental@5.103.0

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.103.0

@tanstack/react-query-persist-client@5.103.0

Patch Changes

Updated dependencies [4c7cdbb]:

@tanstack/query-persist-client-core@5.103.0

@tanstack/react-query@5.103.0

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.103.1

Patch Changes

Updated dependencies [8330b2f, 3212966]:

@tanstack/query-core@5.103.1

5.103.0

Patch Changes

Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:

@tanstack/query-core@5.103.0

5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.8

5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.7

5.102.6

Patch Changes

#11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

Updated dependencies []:

@tanstack/query-core@5.102.6

5.102.5

Patch Changes

Updated dependencies [578e5c2]:

@tanstack/query-core@5.102.5

5.102.4

Patch Changes

Updated dependencies [a05df6a]:

@tanstack/query-core@5.102.4

... (truncated)

Commits

c08f576 ci: Version Packages (#11511)
19ccf27 ci: Version Packages (#11339)
2da46cd chore(*): use eslint description syntax for grandfathered 'no-restricted-synt...
58ad3e2 fix: isolate TypeScript test output (#11503)
d63afc7 Simplifed query methods/internal tests new lint (#11347)
23fbdc3 test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...
50680b9 test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...
0b326b6 test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...
a1119e5 ref(hydration): remove outdated dehydratedAt fallback (#11436)
1a51bb8 docs(*): clarify 'Promise.all' only waits for all mutateAsync calls when they...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @tanstack/react-query since your current version.

Updates autoprefixer from 10.4.21 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

10.5.4

Fixed prefixed rule duplication (by @xianjianlf2).

10.5.3

Fixed brackets and gradient parser (@alanturing881).

10.5.2

Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

10.5.0 “Each Endeavouring, All Achieving”

Added mask-position-x and mask-position-y support (by @toporek).

10.4.27

Removed development key from package.json.

10.4.26

Reduced package size.

10.4.25

Fixed broken gradients on CSS Custom Properties (by @serger777).

10.4.24

Made Autoprefixer a little faster (by @Cherry).

10.4.23

Reduced dependencies (by @hyperz111).

10.4.22

Fixed stretch prefixes on new Can I Use database.

Updated fraction.js.

Changelog

Sourced from autoprefixer's changelog.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

10.5.4

Fixed prefixed rule duplication (by @xianjianlf2).

10.5.3

Fixed brackets and gradient parser (@alanturing881).

10.5.2

Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

10.5.0 “Each Endeavouring, All Achieving”

Added mask-position-x and mask-position-y support (by @toporek).

10.4.27

Removed development key from package.json.

10.4.26

Reduced package size.

10.4.25

Fixed broken gradients on CSS Custom Properties (by @serger777).

10.4.24

... (truncated)

Commits

c99614d Release 10.6.1 version
f1d08cb Update dependencies
cf1ebcb Fix grid gap inheritance from row-gap and column-gap longhands (#1557)
e1212dc Release 10.6.0 version
dac3c5f Add support for prefixing initial-letter (#1556)
b031690 Release 10.5.6 version
da65c36 Add warning when Autoprefixer can cover CSS for old Safari
604f8d9 Update dependencies
54608ca Fix old WebKit gradients with color hints (#1554)
7e81fff Release 10.5.5 version
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.

Updates date-fns from 4.1.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @ImRodry and @puneetdixit200 for their contributions.

Fixed

Fixed missing modularized optimization fallback (for Next.js and others). See #4193.

Fixed pt locale first day of week to be Sunday. See #4195 by @ImRodry.

Fixed zh-CN, zh-HK, and zh-TW locale month parsing for October, November, and December. See #4194 by @puneetdixit200.

v4.2.1

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

Commits

cd53d25 Promote to v4.4.0
d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
ee65753 Add root mise :format task
9f5bdf5 Add positional argument to test/smoke.sh script
651ead6 Split CDN bundles into separate @date-fns/cdn package
224c1a2 Deprecate type tests as attw hangs on date-fns package
7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
b6ad5ac Add flags to control package build script
424a783 Fix docs release after moving to monorepo setup
f95bcf1 (docs): Add missing tsx dependency
Additional commits viewable in compare view

Updates dompurify from 3.3.3 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

Added better clobbering hardening when XML content is involved, thanks @gnyselcuk

Added several smaller hardening and edge-case improvements, thanks @leechristensen

Bumped several dependencies where possible

DOMPurify 3.4.14

Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @AlirezaRouhbakhsh

Fixed a couple of edge cases with mixed document contexts, thanks @fishjojo1

Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @Jaybhade

Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation

Updated the documentation in several spots, README, wiki, etc., thanks @Akokonunes

Updated several development dependencies and CI workflow actions

DOMPurify 3.4.13

Fixed an issue with hook removal during IN_PLACE sanitization, thanks @koyokr

Fixed an issue with hooks potentially bypassing the clone guard, thanks @AkshayjainG

Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @AkshayjainG

Bumped several dependencies where possible

DOMPurify 3.4.12

Fixed an issue where a hook would not get called for custom elements, thanks @Rikuxx0

Hardened the handling of hooks removing elements, @mkrause-bee360

Added support for a few new SVG attributes, thanks @cbn-falias & @Develop-KIM

Hardened the handling of declarative partial updates

Updated the documentation is several spots, README, wiki, etc.

Bumped several dependencies where possible

DOMPurify 3.4.11

Fixed an issue with a leaky config for hooks via setConfig, thanks @trace37labs

Bumped vulnerable development dependencies to arrive at plain 0 with npm audit

Updated the osv-scanner suppression list as no vulnerable dependencies are left for now

Updated up the linting tool-chain and removed now-redundant lint directives

Updated the documentation is several spots, README, wiki, etc.

Bumped several dependencies where possible

DOMPurify 3.4.10

Refactored codebase for clarity: extracted the public type declarations into types.ts

Decomposed the three largest sanitizer functions into focused helpers

Removed duplicated defaults and dead branches, consolidated SAFE_FOR_TEMPLATES scrubbing into single shared path

Improved per-node performance by hoisting the mXSS probe regexes and testing textContent before innerHTML

Added a deterministic micro-benchmark harness (npm run bench) with a --compare mode

Reduced CI cost by running the full three-engine browser suite once per PR

Refreshed the demos/ folder so every demo runs again, and added a SVG-via-<img> demo

Documented the bench and test:happydom scripts in the README

Completed the Attack Classes & Bypass History wiki page

Bumped several dependencies where possible

DOMPurify 3.4.9

Further improved the handling of Trusted Types config options, thanks @offset

Further improved the handling of IN_PLACE sanitization, thanks @mozfreddyb

... (truncated)

Commits

1d7460c release: 3.4.15 (#1609)
4e6fe24 release: 3.4.14 (#1587)
3067f77 release: 3.4.13 (#1562)
a9ca1e5 release: 3.4.12 (#1537)
0cae518 release: 3.4.11 (#1494)
6ee5716 release: 3.4.10 (#1478)
5210247 release: 3.4.9 (#1459)
bcdd828 release: 3.4.8 (#1439)
ca30f07 release: 3.4.7 (#1414)
bb7739e release: 3.4.6 (#1394)
Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates react-hot-toast from 2.5.2 to 2.6.1

Release notes

Sourced from react-hot-toast's releases.

v2.6.1

Made toast styles easier to override with Tailwind CSS by using :where() to lower CSS specificity. (f339d71)

Fixed an issue where toasts stopped updating after a component unmounted when multiple hooks shared the same toasterId. Thanks to @matthernet for reporting the issue and suggesting the fix! (#436)

Fixed TypeScript resolution errors in pnpm strict mode by adding @types/react and @types/react-dom as optional peer dependencies. Thanks to @q121212 for the fix and @baraknaveh for the report! (#435)

[[Full changelog: v2.6.0 → v2.6.1](https://github.com/timolins/react-hot-toast/compare/v2.6.0...v2.6.1)](https://github.com/timolins/react-hot-toast/compare/v2.6.0...v2.6.1)

v2.6.0

Adds support for multiple toasters

Adapt build to minify inlined CSS

timolins/react-hot-toast@v2.5.2...v2.6.0

v2.6.0-beta.0

What's new

Adds support for multiple toasters

Add first version of Multi toaster docs

Add dismissAll and removeAll More ergonomic API when working with multiple toasters a1d0b02

Ready to try it out?
npm i react-hot-toast@beta
Other Changes

Update pnpm version f6c867b

Move timeouts inside a useRef cb1fe8e

Use data tag instead of id 1d5d3d3

Fix dispatch to be id specific again fe934fd

Merge branch 'main' into global-settings 0953822

Add first version of multi toaster page 5b1ee55

Merge branch 'main' into global-settings 4d43622

Move toaster settings into state cf9ae4b

Some experimentation with global settings API 2e0a4dd

timolins/react-hot-toast@v2.5.1...v2.6.0-beta.0

Commits

e725d38 2.6.1
114cafd Merge pull request #436 from timolins/codex/fix-use-store-subscriber-cleanup
ce3f199 Fix useStore subscriber cleanup
52613c1 Merge pull request #435 from q121212/fix/missing-peer-dep-types-react
64e1fff fix(build): add missing @types/react and @types/react-dom peer deps for pnpm ...
f339d71 Use :where() for easier Tailwind overrides
3a870ed 2.6.0
85d4b21 Merge pull request #383 from timolins/multi-toaster
15605ee Remove example
2bf1aaa Improve multi toaster docs
Additional commits viewable in compare view

Updates tailwind-merge from 3.3.1 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

Prepare some upcoming changes by @dcastil in dcastil/tailwind-merge#713

Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.

Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Fix arbitrary values using color() or light-dark() being classified as lengths instead of colors by @ddussi in dcastil/tailwind-merge#712

Fix bare bg-conic not merging with other background image classes by @dcastil in dcastil/tailwind-merge#708

Fix columns-auto not conflicting with other columns classes by @dcastil in dcastil/tailwind-merge#707

Fix container sizes like inline-2xl not merging by @dcastil in dcastil/tailwind-merge#706

Fix max-h-none missing in max-h class group by @mutewinter in dcastil/tailwind-merge#704

Fix axis shorthands like px not overriding logical sides like ps by @dcastil in dcastil/tailwind-merge#705

Fix leading-none being removed when the leading theme scale is overridden by @chatman-media in dcastil/tailwind-merge#689

Fix deprecated shadow-inner being classified as shadow color instead of shadow by @dcastil in dcastil/tailwind-merge#703

Documentation

Add Deno to install instructions by @bartlomieju in dcastil/tailwind-merge#687

Add missing text-shadow theme key to configuration docs by @dcastil in dcastil/tailwind-merge@3e6d208

Other

Switch package manager from yarn to pnpm by @dcastil in dcastil/tailwind-merge#680

Harden CI security by @dcastil in dcastil/tailwind-merge#679

Full Changelog: v3.6.0...v3.7.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @openclaw, @sourcegraph, @cesarvcanal, @CasperKristiansson, @jbisasky, @frontendmasters and more via @thnxdev for sponsoring tailwind-merge! ❤️

Commits

511d68a tailwind-merge@3.7.0
2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
9d41508 add changelog for tailwind-merge@3.7.0
c78a80f Configurator: Reuse runtime lookups during pruning
49c317d Monorepo: Fix contributing link and include package coverage
7b565ca Configurator: prune a generated config to a project's used classes (core step)
d83e013 Releases: auto-re-pin tag-pinned links on every version bump
b71fd41 Docs: pin every in-repo file link to a release tag instead of main
ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
9521b10 Releases: per-package pipeline with namespaced tags
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tailwind-merge since your current version.

Updates use-debounce from 10.0.4 to 10.1.1

Release notes

Sourced from use-debounce's releases.

10.0.6

What's Changed

Bump form-data from 4.0.0 to 4.0.4 by @dependabot[bot] in xnimorz/use-debounce#198

Fix/cancel ispending UI update by @elrion018 in xnimorz/use-debounce#199

Full Changelog: xnimorz/use-debounce@10.0.5...10.0.6

10.0.5

What's Changed

Update outdated tsdoc for useDebouncedCallback by @stephan281094 in xnimorz/use-debounce#195

Fix isPending updating bug and add a test case. by @elrion018 in xnimorz/use-debounce#196

Bump esbuild and @size-limit/preset-small-lib by @dependabot[bot] in xnimorz/use-debounce#197

New Contributors

@stephan281094 made their first contribution in xnimorz/use-debounce#195

@elrion018 made their first contribution in xnimorz/use-debounce#196

Full Changelog: xnimorz/use-debounce@10.0.4...10.0.5

Changelog

Sourced from use-debounce's changelog.

10.1.1

replace global with globalThis which is defined in all possible environments (browser, node, workers) to address xnimorz/use-debounce#212

10.1.0

New parameter introduced: flushOnExit. See issue #205 for details. This parameter allows the callback to be executed on component unmount or page exit, enabling specific side-effect such as persistence or other required I/O operations. Thanks to @h for the contribution. PR

10.0.5

Fixed issue xnimorz/use-debounce#192, where isPending remains true with leading: true configuration, thanks to @elrion018

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-prod-minor group with 7 updates: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.10` | `5.103.1` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.21` | `10.6.1` | | [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.3.3` | `3.4.15` | | [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.5.2` | `2.6.1` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.3.1` | `3.7.0` | | [use-debounce](https://github.com/xnimorz/use-debounce) | `10.0.4` | `10.1.1` | Updates `@tanstack/react-query` from 5.90.10 to 5.103.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.1/packages/react-query) Updates `autoprefixer` from 10.4.21 to 10.6.1 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.21...10.6.1) Updates `date-fns` from 4.1.0 to 4.4.0 - [Release notes](https://github.com/date-fns/date-fns/releases) - [Commits](date-fns/date-fns@v4.1.0...v4.4.0) Updates `dompurify` from 3.3.3 to 3.4.15 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.3.3...3.4.15) Updates `react-hot-toast` from 2.5.2 to 2.6.1 - [Release notes](https://github.com/timolins/react-hot-toast/releases) - [Commits](timolins/react-hot-toast@v2.5.2...v2.6.1) Updates `tailwind-merge` from 3.3.1 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `use-debounce` from 10.0.4 to 10.1.1 - [Release notes](https://github.com/xnimorz/use-debounce/releases) - [Changelog](https://github.com/xnimorz/use-debounce/blob/master/CHANGELOG.md) - [Commits](https://github.com/xnimorz/use-debounce/commits) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.103.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: autoprefixer dependency-version: 10.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: date-fns dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: dompurify dependency-version: 3.4.15 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: react-hot-toast dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor - dependency-name: use-debounce dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-prod-minor ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-09-21T07:59:17Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
npm/dompurify@3.3.3 ⏵ 3.4.15	⁺¹	⁺³⁶			^-20
npm/use-debounce@10.0.4 ⏵ 10.1.1	⁺¹		⁺¹
npm/date-fns@4.4.0
npm/tailwind-merge@3.3.1 ⏵ 3.7.0	⁺¹		⁺¹	⁺¹
npm/react-hot-toast@2.5.2 ⏵ 2.6.1				⁺⁶
npm/autoprefixer@10.4.21 ⏵ 10.6.1	⁺¹		^-2	⁺¹
npm/@tanstack/react-query@5.90.10 ⏵ 5.103.1			⁺⁴	⁺²

View full report

dependabot · 2026-09-28T07:55:58Z

Dependabot attempted to update this pull request, but because the branch dependabot/npm_and_yarn/npm-prod-minor-9bfbd92dc6 is protected it was unable to do so.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026

Navigation Menu

chore(deps): bump the npm-prod-minor group with 7 updates - #136

chore(deps): bump the npm-prod-minor group with 7 updates#136
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-prod-minor-9bfbd92dc6

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​tanstack/react-query-devtools@​5.103.1

Patch Changes

@​tanstack/react-query-next-experimental@​5.103.1

Patch Changes

@​tanstack/react-query-persist-client@​5.103.1

Patch Changes

@​tanstack/react-query@​5.103.1

Patch Changes

@​tanstack/react-query-devtools@​5.103.0

Patch Changes

@​tanstack/react-query-next-experimental@​5.103.0

Patch Changes

@​tanstack/react-query-persist-client@​5.103.0

Patch Changes

5.103.1

Patch Changes

5.103.0

Patch Changes

5.102.8

Patch Changes

5.102.7

Patch Changes

5.102.6

Patch Changes

5.102.5

Patch Changes

5.102.4

Patch Changes

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.5.4

10.5.3

10.5.2

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

10.4.27

10.4.26

10.4.25

10.4.24

10.4.23

10.4.22

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.5.4

10.5.3

10.5.2

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

10.4.27

10.4.26

10.4.25

10.4.24

v4.4.0

Changed

v4.3.0

Fixed

v4.2.1

Fixed

v4.2.0

Changed

DOMPurify 3.4.15

DOMPurify 3.4.14

DOMPurify 3.4.13

DOMPurify 3.4.12

DOMPurify 3.4.11

DOMPurify 3.4.10

DOMPurify 3.4.9

v2.6.1

v2.6.0

v2.6.0-beta.0

What's new

Other Changes

tailwind-merge@3.7.0

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

`@tanstack/react-query-devtools@5`.103.1

`@tanstack/react-query-next-experimental@5`.103.1

`@tanstack/react-query-persist-client@5`.103.1

`@tanstack/react-query@5`.103.1

`@tanstack/react-query-devtools@5`.103.0

`@tanstack/react-query-next-experimental@5`.103.0

`@tanstack/react-query-persist-client@5`.103.0