Skip to content

Update npm dependencies - #878

Merged
renovate[bot] merged 1 commit into
react-rewritefrom
renovate/npm-dependencies
Sep 6, 2026
Merged

renovate[bot] merged 1 commit into
react-rewritefrom
renovate/npm-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@base-ui/react (source) 1.7.01.8.0 age confidence
@types/node (source) 26.4.026.4.1 age confidence
@types/react-dom (source) 19.2.519.2.7 age confidence
eslint (source) 10.9.110.10.0 age confidence
eslint-plugin-oxlint 1.80.01.81.0 age confidence
eslint-plugin-perfectionist (source) 5.10.15.11.0 age confidence
eslint-plugin-react-dom (source) 5.18.65.18.7 age confidence
eslint-plugin-react-jsx (source) 5.18.65.18.7 age confidence
eslint-plugin-react-naming-convention (source) 5.18.65.18.7 age confidence
eslint-plugin-react-x (source) 5.18.65.18.7 age confidence
globals 17.11.017.12.0 age confidence
lucide-react (source) 1.37.01.41.0 age confidence
oxc-transform-react (source) ^0.147.0^0.148.0 age confidence
oxfmt (source) ^0.65.0^0.66.0 age confidence
oxlint (source) 1.80.01.81.0 age confidence
oxlint-plugin-react-doctor (source) 0.9.120.9.13 age confidence
pnpm (source) 12.3.212.3.4 age confidence
shadcn (source) 4.19.04.21.0 age confidence
typescript-eslint (source) 8.68.08.69.0 age confidence

Release Notes

mui/base-ui (@​base-ui/react)

v1.8.0

Compare Source

Sep 4, 2026

General changes
Alert Dialog
Autocomplete
Avatar
Checkbox
Checkbox Group
Combobox
Dialog
Drawer
Field
Form
  • Fix clearErrors dropping updates when multiple fields change at once (#​5446) by @​sai6855
Menu
Menubar
Navigation Menu
Number Field
Popover
Scroll Area
Select
Slider
Switch
Tabs
Toast
Tooltip

All contributors of this release in alphabetical order: @​alex-js-ltd, @​atomiks, @​azeng4499, @​chuganzy, @​edwardhorsey, @​flaviendelangle, @​gilsmt, @​gonzoblasco, @​jjenzz, @​marwenilo, @​michaldudak, @​radist2s, @​sai6855, @​vikuscz, @​wanxiankai, @​XionWCFM

eslint/eslint (eslint)

v10.10.0

Compare Source

oxc-project/eslint-plugin-oxlint (eslint-plugin-oxlint)

v1.81.0

Compare Source

What's Changed

Full Changelog: oxc-project/eslint-plugin-oxlint@v1.80.0...v1.81.0

azat-io/eslint-plugin-perfectionist (eslint-plugin-perfectionist)

v5.11.0

Compare Source

compare changes

🚀 Features
  • sort-modules: Support custom module block nodes
    (077f5d4)
🐞 Bug Fixes
  • sort-modules: Detect decorator metadata dependencies
    (dbcd0b8)
  • sort-objects: Don't ignore callback dependencies by default
    (7fd2e9b)
  • Don't fail on tsconfig files without input files
    (0418393)
❤️ Contributors
Rel1cx/eslint-react (eslint-plugin-react-dom)

v5.18.7

Compare Source

🐞 Fixes
  • react-x/set-state-in-effect: no longer misattributes render-phase setState calls to effects when the state updater is passed through a prop function. (#​1945)
🏗️ Internal
  • Bumped typescript-eslint to 8.69.0, eslint to 10.9.1, vitest to 4.1.11, @types/node to 26.4.0, @types/react-dom to 19.2.5, eslint-plugin-package-json to 1.8.0, import-integrity-lint to 1.3.0, nx to 23.1.3, publint to 0.3.24, typedoc-plugin-markdown to 4.13.0, and pnpm to 11.25.0.
New Contributors

Full Changelog: Rel1cx/eslint-react@v5.18.6...v5.18.7

sindresorhus/globals (globals)

v17.12.0

Compare Source


lucide-icons/lucide (lucide-react)

v1.41.0: Version 1.41.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.40.0...1.41.0

v1.40.0: Version 1.40.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.39.0...1.40.0

v1.39.0: Version 1.39.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@1.38.0...1.39.0

v1.38.0: Version 1.38.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@1.36.0...1.38.0

oxc-project/oxc (oxc-transform-react)

v0.148.0

🐛 Bug Fixes
  • e74de61 transform-react: Match Babel diagnostic reporting (#​26128) (Boshen)
oxc-project/oxc (oxfmt)

v0.66.0

Compare Source

oxc-project/oxc (oxlint)

v1.81.0

Compare Source

📚 Documentation
  • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#​26100) (camc314)
millionco/react-doctor (oxlint-plugin-react-doctor)

v0.9.13

Compare Source

Patch Changes
  • #​1651 ffc2d14 Thanks @​aidenybai! - Upgrade the Oxc parser and Oxlint runtime while preserving hard failures for broken JS plugins.

  • #​1652 f7efb7d Thanks @​aidenybai! - Keep ESLint presets on React Doctor's curated low-noise rule behavior and honor configured capabilities when a rule declares disabledWhen, including suppressing manual-memoization diagnostics for React Compiler projects.

  • #​1646 05ef989 Thanks @​aidenybai! - Keep the interactive score header intact in narrow split views and invalidate locally stale scan results when rule implementations change.

    Report standalone Three.js render loops that use requestAnimationFrame instead of the renderer-managed setAnimationLoop API.

    Include standalone Three.js, supported React framework, Remotion, and React Three Fiber ecosystem packages in automatic workspace project discovery.

  • #​1739 a04b933 Thanks @​aidenybai! - Avoid artifact-env-leak false positives from vendored source-map content and intentionally public token names.

  • #​1730 adc3a91 Thanks @​skoshx! - Fix rn-no-raw-text false positives in components that return only direct <fbt> or <fbs> elements.

  • #​1732 2c4560f Thanks @​skoshx! - Classify fragment returns that contain only translation elements and static text as text-producing components.

  • #​1723 e1d4c51 Thanks @​skoshx! - Prevent rn-no-raw-text reports for <fbt> content passed through verified React Native text wrappers.

  • #​1658 905607f Thanks @​skoshx! - Prevent stack overflows while resolving deeply nested local function references. React Doctor now stops following a reference chain after a bounded number of steps instead of aborting the lint scan.

  • #​1717 17eeeb5 Thanks @​skoshx! - Fix a rerender-state-only-in-handlers false positive when a member hook consumes state.

  • #​1706 afa1780 Thanks @​aidenybai! - Avoid false positives for loading resets in finally, animation duration utilities, and string message substring searches.

  • #​1734 025d69d Thanks @​skoshx! - Fix js-set-map-lookups false positives for substring checks on values returned by the global String constructor.

  • #​1725 0f59a3b Thanks @​aidenybai! - Run test-noise rules in ambiguous product-named directories such as tools, demo, and migrations when they are below a recognized application source root. Explicit test surfaces and root-level tooling or example directories remain excluded.

  • #​1668 5bc88ae Thanks @​skoshx! - Ignore browser-global names in TypeScript-only positions so interface and type property keys are not reported as unsafe module-scope runtime access.

  • #​1673 4bf7aff Thanks @​aidenybai! - Use the nearest workspace root when detecting Fast Refresh ownership so nested checkouts keep the correct rule coverage.

  • #​1671 bd08406 Thanks @​aidenybai! - Stop recommending flatMap as a guaranteed performance improvement for .map().filter(Boolean). The rule now suggests a single-pass reduce or for...of rewrite only for measured hot paths.

  • #​1663 2b0f06e Thanks @​aidenybai! - Improve repeated effect analysis and deeply nested JSX performance, preserve derived-state detection through transparent TypeScript wrappers, and upgrade Oxc parser and linter dependencies.

  • #​1624 8c2f03a Thanks @​aidenybai! - Make React cleanup a first-class part of React Doctor with diagnostics for complex React functions and repeated JSX composition. Keep whole-project unused file, export, type, dependency, and import-cycle analysis as explicit opt-in rules while removing the separate Deslop packages, experimental language server, and IDE extensions.

  • #​1654 6416370 Thanks @​aidenybai! - Add component-composition and correctness rules for shadcn, Radix UI, Base UI, React Aria, TanStack Table, and TanStack Virtual behind six new project capabilities (shadcn from components.json; the rest from their package dependencies). Dialog surfaces that render no title part and carry no accessible name are reported across all three libraries (shadcn DialogContent/SheetContent/AlertDialogContent/DrawerContent, Radix Dialog.Content and AlertDialog.Content, Base UI Dialog.Popup and AlertDialog.Popup). Icon-sized shadcn Buttons with no accessible name, shadcn FormItem fields wrapping a FormControl without a FormLabel, and Base UI Field.Root controls without a Field.Label are reported as unlabeled. Raw Input, Textarea, and Button controls placed directly inside shadcn InputGroup are reported in favor of its InputGroupInput, InputGroupTextarea, and InputGroupAddon parts, and presence-only data-[selected]: / data-[disabled]: Tailwind variants on command items are reported because cmdk renders both attributes as "true" or "false". TanStack Form submit handlers that call the form's handleSubmit without event.preventDefault() are reported because the browser still performs a native full-page submission. Tabs triggers provably inside the root without the list part are reported for shadcn, Radix, and Base UI; the existing shadcn-tabs-trigger-requires-list rule is now enabled by default for shadcn projects through the capability gate and no longer risks false positives on extracted trigger subcomponents. React Aria Dialogs without a Heading or aria-label are reported as unnamed. TanStack Table data/columns options that provably get a new array identity every render (inline literals, render-scoped const arrays, fresh ?? [] fallbacks, inline .filter()/.map() transforms) are reported for rebuilding row and column models each render and looping auto-reset features, and elements measured by TanStack Virtual's measureElement without a data-index attribute are reported because the virtualizer drops the measurement.

  • #​1742 28d4343 Thanks @​aidenybai! - Avoid cleanup false positives for callback refs, observer iteration, and effect-local stored disposers.

pnpm/pnpm (pnpm)

v12.3.4: pnpm 12.3.4

Compare Source

Patch Changes

  • Sped up dependency resolution in large workspaces #​14352.

  • pnpm 12 now accepts the boolean settings as command-line flags on every command that takes them in pnpm 11, for example pnpm install --unsafe-perm, pnpm add foo --offline, and pnpm install --dangerously-allow-all-builds. pnpm 12 rejected them with unexpected argument, which failed every install on Vercel, whose build runs pnpm install --unsafe-perm #​14346.

    pnpm remove now accepts --unsafe-perm, the same flag pnpm install, pnpm add, and pnpm update take.

Platinum Sponsors

Bit OpenAI Notion

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx Latitude

v12.3.3: pnpm 12.3.3

Compare Source

Patch Changes

  • Fixed concurrent installs sharing a store occasionally failing with an ENOENT error while importing a package file #​14353.

  • Sped up writing the lockfile in large workspaces #​14352.

  • Sped up dependency resolution in large workspaces #​14352.

  • pnpm now runs through Node.js when it was installed by a tool that skips build scripts, such as Vercel's packageManager provisioning, Bun, Deno, or npm install --ignore-scripts. Those installs previously failed with syntax error near unexpected token ')'. They still cannot run pnpm on Windows. On macOS only a shell can start it #​14346.

Platinum Sponsors

Bit OpenAI Notion

Gold Sponsors

Sanity Discord Vite

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) September 6, 2026 11:17
@netlify

netlify Bot commented Sep 6, 2026

Copy link
Copy Markdown

Deploy Preview for ucmacm ready!

Name Link
🔨 Latest commit 33f19c2
🔍 Latest deploy log https://app.netlify.com/projects/ucmacm/deploys/6a9d4bc94e5c0f0008125420
😎 Deploy Preview https://deploy-preview-878--ucmacm.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 83
Accessibility: 97
Best Practices: 92
SEO: 83
PWA: 100
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@sonarqubecloud

sonarqubecloud Bot commented Sep 6, 2026

Copy link
Copy Markdown

@renovate
renovate Bot merged commit 207d119 into react-rewrite Sep 6, 2026
10 checks passed
@renovate
renovate Bot deleted the renovate/npm-dependencies branch September 6, 2026 11:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants