Skip to content

chore(deps): bump the npm-weekly-rollup group in /frontend with 5 updates#120

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-weekly-rollup-799864e2bd
Closed

chore(deps): bump the npm-weekly-rollup group in /frontend with 5 updates#120
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-weekly-rollup-799864e2bd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-weekly-rollup group in /frontend with 5 updates:

Package From To
react-dropzone 15.0.0 17.0.0
@types/node 26.1.0 26.1.1
@vitest/coverage-v8 4.1.9 4.1.10
eslint 9.39.4 9.39.5
vitest 4.1.9 4.1.10

Updates react-dropzone from 15.0.0 to 17.0.0

Release notes

Sourced from react-dropzone's releases.

v17.0.0

17.0.0 (2026-07-12)

  • refactor!: migrate source to TypeScript, drop prop-types & defaultProps (db262aa)

BREAKING CHANGES

  • Requires React >= 18. prop-types and defaultProps are removed in favor of TypeScript types and default parameter values; the hand-written typings are replaced by declarations generated from source.

v16.0.0

16.0.0 (2026-07-12)

  • chore!: adopt oxc toolchain (tsdown/oxlint/oxfmt/vitest) + Vocs docs (ac5c085)

BREAKING CHANGES

  • drops the UMD build and dist/es/; the package is now ESM + CJS (dist/index.js / dist/index.cjs) with "type": "module" and an exports map. CDN/script-tag consumers and deep imports of the old paths must migrate. Requires Node >= 20 to build.
Commits
  • 608ad9f style: format entire repo with oxfmt
  • db262aa refactor!: migrate source to TypeScript, drop prop-types & defaultProps
  • e9a7ab3 ci: add netlify config for docs deploy
  • ac5c085 chore!: adopt oxc toolchain (tsdown/oxlint/oxfmt/vitest) + Vocs docs
  • See full diff in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @types/node from 26.1.0 to 26.1.1

Commits

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates eslint from 9.39.4 to 9.39.5

Release notes

Sourced from eslint's releases.

v9.39.5

Bug Fixes

Documentation

  • 74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
  • eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)
Commits

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-weekly-rollup group in /frontend with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [react-dropzone](https://github.com/react-dropzone/react-dropzone) | `15.0.0` | `17.0.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` |
| [eslint](https://github.com/eslint/eslint) | `9.39.4` | `9.39.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` |


Updates `react-dropzone` from 15.0.0 to 17.0.0
- [Release notes](https://github.com/react-dropzone/react-dropzone/releases)
- [Commits](react-dropzone/react-dropzone@v15.0.0...v17.0.0)

Updates `@types/node` from 26.1.0 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `eslint` from 9.39.4 to 9.39.5
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v9.39.5)

Updates `vitest` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: react-dropzone
  dependency-version: 17.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-weekly-rollup
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly-rollup
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly-rollup
- dependency-name: eslint
  dependency-version: 9.39.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly-rollup
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly-rollup
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from ogulcanaydogan as a code owner July 13, 2026 02:18
@vercel

vercel Bot commented Jul 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
ai-provenance Ready Ready Preview, Comment Jul 13, 2026 2:19am
ai-provenance-tracker Ready Ready Preview, Comment Jul 13, 2026 2:19am
provenance-detect Ready Ready Preview, Comment Jul 13, 2026 2:19am
provenance-tracker Ready Ready Preview, Comment Jul 13, 2026 2:19am

@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 20, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/frontend/npm-weekly-rollup-799864e2bd branch July 20, 2026 02:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants