build(deps): Bump the frontend-patch group in /frontend with 7 updates by dependabot[bot] · Pull Request #122 · VortexFLOW-dev/VortexFLOW

dependabot · 2026-10-01T07:40:47Z

Bumps the frontend-patch group in /frontend with 7 updates:

Package	From	To
zod	`4.6.2`	`4.6.5`
@types/node	`25.9.6`	`25.9.8`
eslint-plugin-react-refresh	`0.5.6`	`0.5.7`
prettier	`3.9.6`	`3.9.9`
tsx	`4.23.13`	`4.23.15`
typescript-eslint	`8.70.0`	`8.70.1`
vite	`8.3.0`	`8.3.1`

Updates zod from 4.6.2 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post

f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections

de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)

56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)

ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"

cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""

0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5

59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)

ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)

2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump

f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged

75d63ee1 docs: show only the .properties() method form in the 4.6 post

46da9572 docs: match the error-message examples to what the parsers emit

Commits

59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
0f3f5ee 4.6.5
cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
743aedb 4.6.4
Additional commits viewable in compare view

Updates @types/node from 25.9.6 to 25.9.8

Commits

See full diff in compare view

Updates eslint-plugin-react-refresh from 0.5.6 to 0.5.7

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.7

Add allowCompoundComponents option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.
{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}
Enabling this option allows code such as the following:
const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.7

Add allowCompoundComponents option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.
{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}
Enabling this option allows code such as the following:
const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };

Commits

fd40d83 Add allowCompoundComponents option [publish] (#117)
See full diff in compare view

Updates prettier from 3.9.6 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

3.9.8

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @seiyab)

🔗 Changelog

3.9.7

Support Angular 22.2

Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by `@seiyab`)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by `@Austin1serb`, `@giaBaoJS`)

<!-- Input -->
- [x] short first line.
</tr></table>

... (truncated)

Commits

cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
4f2ab67 Release 3.9.8
3d82af8 Update Regex related dependencies (#20082)
5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
5b142ed Release Release @prettier/plugin-hermes@0.2.3, @prettier/plugin-oxc@0.2.3, an...
Additional commits viewable in compare view

Updates tsx from 4.23.13 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

exclude bare builtins from namespace inheritance (38e1588)

expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)

make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

npm package (@latest dist-tag)

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

npm package (@latest dist-tag)

Commits

ca66105 test: fix drive-less file URLs in ESM resolver fixtures
2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
38e1588 fix: exclude bare builtins from namespace inheritance
562c434 fix: make namespaced register() overloads portable for declaration emit
edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
70e7828 test: upgrade tinyspy for disposable API
9ed2022 ci: avoid duplicate release notifications
872e77f refactor: use disposables for cleanup
6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
See full diff in compare view

Updates typescript-eslint from 8.70.0 to 8.70.1

Release notes

Sourced from typescript-eslint's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

ast-spec: narrow import attribute keys to identifiers and strings (#12879)

eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)

eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)

eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)

eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)

eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)

eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)

eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)

eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)

eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)

eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)

eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)

eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)

eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)

rule-tester: test the final autofix output instead of the first pass (#12867)

scope-manager: merge implicit global definitions (#12809)

type-utils: match package specifiers on whole path components (#12838)

typescript-estree: resolve symlinked paths when matching files to projects (#12725)

typescript-estree: add missing < token opening type arguments (#12821)

typescript-estree: require string literal import attribute values (#12894)

website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

Amin @amiin-dev

Brad Zacher @bradzacher

Cameron

Diptajoy Mistry @diptomistry

Evyatar Daud @StyleShit

Grit @Grit03

Hugo @hugop95

Josh Goldberg ✨

Michael Naumov @mnaoumov

Mikhail Baev @baevm

Om Rawat

overlookmotel

Sanath @sansynx

Shinji

stoicism @stoicism02

Vinccool96

Younsang Na @nayounsang

김채영 @cchaeyoung

송재욱

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

23d38ce chore(release): publish 8.70.1
eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
8c80531 chore: fix typos in comments and docs (#12846)
b6b86a1 chore: migrate to nx 23.2.0 (#12843)
See full diff in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Commits

39ddf7c release: v8.3.1 (#23573)
f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
e8990c4 fix(deps): update all non-major dependencies (#23537)
af7cdf6 refactor: replace find with some (#23554)
39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
9abd99b refactor: remove duplicate configurations (#23532)
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
@types/node	[>= 26.a, < 27]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the frontend-patch group in /frontend with 7 updates: | Package | From | To | | --- | --- | --- | | [zod](https://github.com/colinhacks/zod) | `4.6.2` | `4.6.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.6` | `25.9.8` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.6` | `0.5.7` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.70.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` | Updates `zod` from 4.6.2 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.2...v4.6.5) Updates `@types/node` from 25.9.6 to 25.9.8 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-plugin-react-refresh` from 0.5.6 to 0.5.7 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.6...v0.5.7) Updates `prettier` from 3.9.6 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.9) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) Updates `typescript-eslint` from 8.70.0 to 8.70.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint) Updates `vite` from 8.3.0 to 8.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite) --- updated-dependencies: - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patch - dependency-name: "@types/node" dependency-version: 25.9.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-patch - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-patch - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-patch - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-patch - dependency-name: typescript-eslint dependency-version: 8.70.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-patch - dependency-name: vite dependency-version: 8.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-01T07:40:48Z

Labels

The following labels could not be found: dependencies, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from jamesbrock as a code owner October 1, 2026 07:40

github-actions Bot enabled auto-merge (squash) October 1, 2026 07:40

github-actions Bot merged commit 3482fc9 into main Oct 1, 2026
8 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/frontend/frontend-patch-9030a6c12b branch October 1, 2026 07:43

Navigation Menu

Repository navigation

build(deps): Bump the frontend-patch group in /frontend with 7 updates - #122

build(deps): Bump the frontend-patch group in /frontend with 7 updates#122
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-patch-9030a6c12b

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

v4.6.5

Commits:

v4.6.4

v4.6.3

v0.5.7

Add allowCompoundComponents option (#117)

0.5.7

Add allowCompoundComponents option (#117)

3.9.9

3.9.8

3.9.7

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

3.9.8

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

3.9.7

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

❤️ Thank You

8.70.1 (2026-09-21)

v8.3.1

Bug Fixes

Miscellaneous Chores

Code Refactoring

8.3.1 (2026-09-24)

Bug Fixes

Miscellaneous Chores

Code Refactoring

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Labels

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Add `allowCompoundComponents` option (#117)

Add `allowCompoundComponents` option (#117)

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by `@seiyab`)

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by `@Austin1serb`, `@giaBaoJS`)