Skip to content

chore(deps): bump the npm-minor-and-patch group across 1 directory with 29 updates - #147

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-c713dfa1c0
Closed

chore(deps): bump the npm-minor-and-patch group across 1 directory with 29 updates#147
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-c713dfa1c0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 29 updates in the / directory:

Package From To
@bpmn-io/form-js 1.24.1 1.26.0
@bpmn-io/properties-panel 3.48.0 3.54.1
@tanstack/react-query 5.101.4 5.102.8
axios 1.19.0 1.20.0
bpmn-js 18.22.1 18.28.0
bpmn-js-properties-panel 5.63.0 5.65.0
dmn-js 17.10.1 17.10.2
dmn-js-properties-panel 3.11.1 3.12.0
i18next 26.3.6 26.4.2
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.4 19.3.0
react-i18next 17.0.11 17.0.13
react-router-dom 7.18.2 7.18.3
@playwright/test 1.62.1 1.63.0
@redocly/cli 2.46.0 2.52.0
@storybook/addon-a11y 10.5.7 10.6.0
@storybook/addon-docs 10.5.7 10.6.0
@storybook/react-vite 10.5.7 10.6.0
@types/node 26.2.0 26.5.1
@vitejs/plugin-react 6.0.5 6.1.1
eslint 10.8.1 10.10.0
eslint-plugin-react-refresh 0.5.3 0.5.6
eslint-plugin-storybook 10.5.7 10.6.0
globals 17.9.0 17.12.0
storybook 10.5.7 10.6.0
typescript-eslint 8.66.0 8.70.0
vite 8.2.1 8.3.0

Updates @bpmn-io/form-js from 1.24.1 to 1.26.0

Release notes

Sourced from @​bpmn-io/form-js's releases.

v1.25.0

Changes

  • FEAT: render the properties panel as a reactive section (#1536)
  • FIX: wrap long checkbox, checkbox group and radio group option label (#1545)

Full Changelog: bpmn-io/form-js@v1.24.1...v1.25.0

Changelog

Sourced from @​bpmn-io/form-js's changelog.

Changelog

All notable changes to form-js are documented here. We use semantic versioning for releases.

Unreleased

Note: Yet to be released changes appear here.

1.25.0

  • FEAT: render the properties panel as a reactive section (#1536)
  • FIX: wrap long checkbox, checkbox group and radio group option label (#1545)
Commits

Updates @bpmn-io/properties-panel from 3.48.0 to 3.54.1

Release notes

Sourced from @​bpmn-io/properties-panel's releases.

v3.54.0

  • chore(CHANGELOG): update to v3.54.0 b85b60d
  • chore(refactor): provide popup event bus via context e210411
  • chore: replace helper with min-dash function bae087a
  • fix: center popup based on its own size 9d5f578
  • feat: expose popup components 67f4db7
  • fix: release popup element reference on close eff6a7a

bpmn-io/properties-panel@v3.53.0...v3.54.0

v3.53.0

Changes

  • chore(CHANGELOG): update to v3.53.0 14a2fda
  • chore: update to diagram-js@15.25.0 5a987de
  • chore(project): add start:styles script f39ece9
  • test(styles): add accent to the visual playground 727f463
  • feat: add accent theming tokens and use WCAG AA compliant accent dda11c1
  • ci: verify pull request quality cac8828
  • chore: update CHANGELOG.md 5c6bc06
  • fix: reserve space for open pop-up button in FEEL editor db312e3
  • ci: verify pull request quality 0746f3a

bpmn-io/properties-panel@v3.52.0...v3.53.0

v3.52.0

  • chore: update changelog 28d23f3
  • test: replace custom contrast measure with axe-core c1622fc
  • fix: use accessible foreground color for warning list badge 5249f29
  • feat: add warning / error badge theming tokens 1975963
  • chore: update changelog 42005ce

bpmn-io/properties-panel@v3.51.2...v3.52.0

v3.51.2

  • chore(CHANGELOG): update to v3.51.2 b4bca53
  • deps: update feel-editor to 2.7.1 2dd95bc

bpmn-io/properties-panel@v3.51.1...v3.51.2

v3.51.1

Changes

... (truncated)

Changelog

Sourced from @​bpmn-io/properties-panel's changelog.

3.54.1

  • FIX: remove background from FEEL popup icon (#555)

3.54.0

  • FEAT: expose popup components (#550)
  • FIX: center popup based on its own size (#550)
  • FIX: release popup element reference on close (#550)

3.53.0

  • FEAT: add --accent-* theming tokens and --accent list badge (#549)
  • FIX: reserve space for open pop-up button in FEEL editor (#525)
  • FIX: use WCAG AA compliant accent color (#549)

3.52.0

  • FEAT: add --warning-badge-* and --error-badge-* theming tokens (#547)
  • FIX: use accessible foreground color for warning list badge (#547)

3.51.2

3.51.1

  • FIX: correct checkbox alignment (#545)
  • FIX: unify line height across warning, error and description attachments (#545)
  • FIX: increase description and label offset to accommodate for focus ring (#545)

3.51.0

  • FEAT: add semantic warning tokens and .has-warning entry modifier (#544)

3.50.0

  • FEAT: use CSS for textarea auto-resize (#540)
  • FIX: react to engines change of FEEL editor (#543)

3.49.2

  • FIX: only show text popup scrollbar when content overflows (#542)

3.49.1

  • FIX: resolve sticky observer scroll container relative to observed element (#539)
  • FIX: correct sticky headers not working when multiple properties panels are mounted (#539)

... (truncated)

Commits
  • 8ddb525 3.54.1
  • f062e11 chore: update CHANGELOG.md
  • 1c957bf chore: update CHANGELOG.md
  • 47e616b fix: remove background from feel popup icon
  • 847d897 3.54.0
  • b85b60d chore(CHANGELOG): update to v3.54.0
  • e210411 chore(refactor): provide popup event bus via context
  • bae087a chore: replace helper with min-dash function
  • 9d5f578 fix: center popup based on its own size
  • 67f4db7 feat: expose popup components
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.4 to 5.102.8

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-next-experimental@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-persist-client@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.8

@​tanstack/react-query-devtools@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-next-experimental@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-persist-client@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query@​5.102.7

Patch Changes

  • Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.7

5.102.6

Patch Changes

  • #11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

  • Updated dependencies []:

    • @​tanstack/query-core@​5.102.6

5.102.5

Patch Changes

  • Updated dependencies [578e5c2]:
    • @​tanstack/query-core@​5.102.5

5.102.4

Patch Changes

  • Updated dependencies [a05df6a]:
    • @​tanstack/query-core@​5.102.4

5.102.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.3

5.102.2

Patch Changes

  • Updated dependencies [80fbf73]:
    • @​tanstack/query-core@​5.102.2

... (truncated)

Commits

Updates axios from 1.19.0 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

  • HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

  • Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

  • Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
  • Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
  • XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
  • Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
  • Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

  • Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
  • Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
  • Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
  • CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog (axios/axios@v1.19.0...v1.20.0)

Changelog

Sourced from axios's changelog.

Changelog

Commits
  • 84a9f3b chore(release): prepare release 1.20.0 (#11152)
  • e6824ee fix: core methodList, HTTP adapter errors, and add tests (#11096)
  • d8a919f fix(xhr): flush final progress during the live loadend dispatch (#11121)
  • 2d2a21a fix(interceptors): tolerate nullish handlers in syncHandlerEntries (#11118)
  • d19040b fix: harden runtime option handling (#11141)
  • e0a02dd chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...
  • d10cb3a chore(deps-dev): bump the development_dependencies group with 4 updates (#11143)
  • 2c94646 chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (#11133)
  • 76c12bc chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#11140)
  • ba98559 docs: add ScrapingBee sponsor (#11137)
  • Additional commits viewable in compare view

Updates bpmn-js from 18.22.1 to 18.28.0

Release notes

Sourced from bpmn-js's releases.

v18.28.0

  • feat: keep selection visible on canvas resize 682e0fe02

bpmn-io/bpmn-js@v18.27.1...v18.28.0

v18.27.1

  • fix: do not adjust group label position away from the group 8fe930c40

bpmn-io/bpmn-js@v18.27.0...v18.27.1

v18.27.0

  • FEAT: add tooltip with title and shortcut on palette entries (#2465)
  • FIX: point label link to the closest point of the connection (#2493)
  • DEPS: update to diagram-js@15.26.0

v18.26.0

Changes

  • chore(CHANGELOG): update to v18.26.0 d85caf06
  • deps: update to bpmn-font@0.13.0 a0fc447f
  • deps: update to bpmn-moddle@10.2.0 e8915d7a
  • deps: update to diagram-js@15.25.0 e9c84adb
  • feat: add themeable, WCAG AA compliant primary accent a56516e6
  • ci: verify pull request quality 91437959
  • ci: verify pull request quality 34d6362b

bpmn-io/bpmn-js@v18.25.1...v18.26.0

v18.25.1

Changes

  • chore(CHANGELOG): update to v18.25.1 4efc9a94
  • chore(release): increase await published tries 8ecd8fb0
  • chore(release): remove redundant $ 22d72ba7
  • chore(release): print time waited when await published failed f1fdd79e
  • chore(release): extract await published interval into variable 5e7efd5c
  • fix(drilldown): make breadcrumb navigation keyboard accessible 1b9a3598
  • fix(drilldown): restore focus outline on drilldown button deed26af
  • chore(CHANGELOG): update cee7677d
  • fix(drilldown): give breadcrumbs a solid background 31cc4019

bpmn-io/bpmn-js@v18.25.0...v18.25.1

... (truncated)

Changelog

Sourced from bpmn-js's changelog.

18.28.0

18.27.1

  • FIX: do not move group label away from the group (#2495)

18.27.0

  • FEAT: add tooltip with title and shortcut on palette entries (#2465)
  • FIX: point label link to the closest point of the connection (#2493)
  • DEPS: update to diagram-js@15.26.0

18.26.0

  • FEAT: give resize handle a border radius (bpmn-io/diagram-js#1100)
  • FEAT: give segment dragger a border radius (bpmn-io/diagram-js#1100)
  • FEAT: add --accent-color theming token (#2492)
  • FIX: use WCAG AA compliant primary accent color (#2492)
  • DEPS: update to diagram-js@15.25.0
  • DEPS: update to bpmn-moddle@10.2.0
  • DEPS: update to bpmn-font@0.13.0

18.25.1

  • FIX: make breadcrumps keyboard accessible (#2487)
  • FIX: give breadcrumps a background (#2487, #2482)

18.25.0

  • FEAT: expose default element sizes via lib/util/ElementSizeUtil (#2485)
  • FIX: do not throw when getting default size of participant without DI (#2485)

18.24.0

18.23.0

  • FEAT: tag elements visually inside a group via categoryValueRef (#2469)
  • FEAT: eagerly create category value when creating or updating a group (#2469)
  • FIX: do not copy message flows without participants (#1902, #2475)
  • FIX: ignore labels in laneRef updates (#2469)
  • FIX: do not copy message flows without participants (#1902, #2475)
Commits
  • e27d065 18.28.0
  • 682e0fe feat: keep selection visible on canvas resize
  • 230692f 18.27.1
  • 8fe930c fix: do not adjust group label position away from the group
  • 911c6f7 18.27.0
  • d4eea5f chore: update CHANGELOG.md
  • b2340e4 chore: update CHANGELOG.md
  • a74e994 deps: update diagram-js to 15.26.0
  • e000bf0 feat: add keyboard shortcuts to tool entries
  • c08e0a9 refactor: simplify keyboard bindings registration
  • Additional commits viewable in compare view

Updates bpmn-js-properties-panel from 5.63.0 to 5.65.0

Release notes

Sourced from bpmn-js-properties-panel's releases.

v5.65.0

  • chore(CHANGELOG): update to 5.65.0 55b4157c
  • feat: allow updating FEEL language context d835e4e4
  • chore: bump dependencies dcb144c3

bpmn-io/bpmn-js-properties-panel@v5.64.0...v5.65.0

v5.64.0

Changes

  • chore(CHANGELOG): update to v5.64.0 04d98078
  • deps: update to @​bpmn-io/properties-panel@​3.49.0 1440cc18

bpmn-io/bpmn-js-properties-panel@v5.63.0...v5.64.0

Changelog

Sourced from bpmn-js-properties-panel's changelog.

5.65.0

  • FEAT: allow updating FEEL language context (#1247)

5.64.0

Commits

Updates dmn-js from 17.10.1 to 17.10.2

Changelog

Sourced from dmn-js's changelog.

17.10.2

  • FIX: open literal expression decisions without variable element (#1023)
Commits

Updates dmn-js-properties-panel from 3.11.1 to 3.12.0

Release notes

Sourced from dmn-js-properties-panel's releases.

v3.12.0

Changes

  • chore(CHANGELOG): update to v3.12.0 dd4bfab
  • deps: update to min-dash@5.1.0 e128eab
  • deps: update to min-dom@5.3.0 7d9d25e
  • chore: update to npm-run-all2@9.0.3 3489e0b
  • chore: update to @​bpmn-io/properties-panel@​3.52.0 0011be2
  • chore: update to dmn-moddle@12.1.0 0a071a4
  • chore: update eslint* 5f1e9f3
  • chore: update rollup* 86f60f4
  • chore: update test dependencies 37c9fdc
  • chore: update babel* dd3c0a2
  • chore: update to dmn-js@17.10.2 0dd1ce1
  • chore: update actions/setup-node action to v7 67c40a0
  • chore: update dependency karma-tldr-reporter to v1 dc374f1
  • chore: update actions/checkout action to v7 d9d55b8
  • chore: switch to karma-tldr-reporter 007d0a1
  • ci: remove puppeteer a59dcc0
  • chore: update codecov/codecov-action action to v7 b614078
  • deps: update dependency rollup to v4.59.0 [security] e58c939

bpmn-io/dmn-js-properties-panel@v3.11.1...v3.12.0

Changelog

Sourced from dmn-js-properties-panel's changelog.

3.12.0

  • DEPS: update to min-dom@5.3.0
  • DEPS: update to min-dash@5.1.0
  • CHORE: support @bpmn-io/properties-panel@3.52.0
Commits

Updates i18next from 26.3.6 to 26.4.2

Release notes

Sourced from i18next's releases.

v26.4.2

  • fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @​mahirhir (#2447).

v26.4.1

  • fix(types): the selector-form keyPrefix overload of getFixedT() is now available under enableSelector: 'strict'. Its constraint was gated on true | 'optimize' only, so under 'strict' it collapsed to never, the overload dropped out, and the returned t silently lost its keyPrefix scope (t(($) => $.deep) failed with Property 'deep' does not exist on type '{}'). The same call already typechecked under true and 'optimize'. Thanks @​hovelopin (#2446).

v26.4.0

  • perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
  • chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.
Changelog

Sourced from i18next's changelog.

26.4.2

  • fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @​mahirhir (#2447).

26.4.1

  • fix(types): the selector-form keyPrefix overload of getFixedT() is now available under enableSelector: 'strict'. Its constraint was gated on true | 'optimize' only, so under 'strict' it collapsed to never, the overload dropped out, and the returned t silently lost its keyPrefix scope (t(($) => $.deep) failed with Property 'deep' does not exist on type '{}'). The same call already typechecked under true and 'optimize'. Thanks @​hovelopin (#2446).

26.4.0

  • perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
  • chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.
Commits
  • 4dba50f 26.4.2
  • e436b62 build
  • d955fb0 fix: stringify formatter results in nested values, changelog v26.4.2
  • dfafa3c fix: keep replacement patterns literal in nested values (#2447)
  • 3c9981e chore: keep dev-only and local files out of the npm package
  • c057ee0 26.4.1
  • 02e3e16 changelog v26.4.1
  • 6f198f2 fix(types): allow selector keyPrefix in getFixedT under enableSelector 'stric...
  • 652847e 26.4.0
  • 6c6025f prettier fix
  • Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

@dependabot
chore(deps): bump the npm-minor-and-patch group across 1 directory wi…
5c2fbfa 
…th 29 updates

Bumps the npm-minor-and-patch group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@bpmn-io/form-js](https://github.com/bpmn-io/form-js/tree/HEAD/packages/form-js) | `1.24.1` | `1.26.0` |
| [@bpmn-io/properties-panel](https://github.com/bpmn-io/properties-panel) | `3.48.0` | `3.54.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.4` | `5.102.8` |
| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |
| [bpmn-js](https://github.com/bpmn-io/bpmn-js) | `18.22.1` | `18.28.0` |
| [bpmn-js-properties-panel](https://github.com/bpmn-io/bpmn-js-properties-panel) | `5.63.0` | `5.65.0` |
| [dmn-js](https://github.com/bpmn-io/dmn-js/tree/HEAD/packages/dmn-js) | `17.10.1` | `17.10.2` |
| [dmn-js-properties-panel](https://github.com/bpmn-io/dmn-js-properties-panel) | `3.11.1` | `3.12.0` |
| [i18next](https://github.com/i18next/i18next) | `26.3.6` | `26.4.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.11` | `17.0.13` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.3` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `2.46.0` | `2.52.0` |
| [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.5.7` | `10.6.0` |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.5.7` | `10.6.0` |
| [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.5.7` | `10.6.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.5.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.1` |
| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.10.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.3` | `0.5.6` |
| [eslint-plugin-storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/eslint-plugin) | `10.5.7` | `10.6.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.9.0` | `17.12.0` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.5.7` | `10.6.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.66.0` | `8.70.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.3.0` |



Updates `@bpmn-io/form-js` from 1.24.1 to 1.26.0
- [Release notes](https://github.com/bpmn-io/form-js/releases)
- [Changelog](https://github.com/bpmn-io/form-js/blob/develop/packages/form-js/CHANGELOG.md)
- [Commits](https://github.com/bpmn-io/form-js/commits/v1.26.0/packages/form-js)

Updates `@bpmn-io/properties-panel` from 3.48.0 to 3.54.1
- [Release notes](https://github.com/bpmn-io/properties-panel/releases)
- [Changelog](https://github.com/bpmn-io/properties-panel/blob/main/CHANGELOG.md)
- [Commits](bpmn-io/properties-panel@v3.48.0...v3.54.1)

Updates `@tanstack/react-query` from 5.101.4 to 5.102.8
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query)

Updates `axios` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.19.0...v1.20.0)

Updates `bpmn-js` from 18.22.1 to 18.28.0
- [Release notes](https://github.com/bpmn-io/bpmn-js/releases)
- [Changelog](https://github.com/bpmn-io/bpmn-js/blob/develop/CHANGELOG.md)
- [Commits](bpmn-io/bpmn-js@v18.22.1...v18.28.0)

Updates `bpmn-js-properties-panel` from 5.63.0 to 5.65.0
- [Release notes](https://github.com/bpmn-io/bpmn-js-properties-panel/releases)
- [Changelog](https://github.com/bpmn-io/bpmn-js-properties-panel/blob/main/CHANGELOG.md)
- [Commits](bpmn-io/bpmn-js-properties-panel@v5.63.0...v5.65.0)

Updates `dmn-js` from 17.10.1 to 17.10.2
- [Release notes](https://github.com/bpmn-io/dmn-js/releases)
- [Changelog](https://github.com/bpmn-io/dmn-js/blob/develop/packages/dmn-js/CHANGELOG.md)
- [Commits](https://github.com/bpmn-io/dmn-js/commits/v17.10.2/packages/dmn-js)

Updates `dmn-js-properties-panel` from 3.11.1 to 3.12.0
- [Release notes](https://github.com/bpmn-io/dmn-js-properties-panel/releases)
- [Changelog](https://github.com/bpmn-io/dmn-js-properties-panel/blob/main/CHANGELOG.md)
- [Commits](bpmn-io/dmn-js-properties-panel@v3.11.1...v3.12.0)

Updates `i18next` from 26.3.6 to 26.4.2
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.3.6...v26.4.2)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-i18next` from 17.0.11 to 17.0.13
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.0.11...v17.0.13)

Updates `react-router-dom` from 7.18.2 to 7.18.3
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.3/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.3/packages/react-router-dom)

Updates `@playwright/test` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `@redocly/cli` from 2.46.0 to 2.52.0
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.46.0...@redocly/cli@2.52.0)

Updates `@storybook/addon-a11y` from 10.5.7 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/addons/a11y)

Updates `@storybook/addon-docs` from 10.5.7 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/addons/docs)

Updates `@storybook/react-vite` from 10.5.7 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/frameworks/react-vite)

Updates `@types/node` from 26.2.0 to 26.5.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

Updates `eslint` from 10.8.1 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.1...v10.10.0)

Updates `eslint-plugin-react-refresh` from 0.5.3 to 0.5.6
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.3...v0.5.6)

Updates `eslint-plugin-storybook` from 10.5.7 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/lib/eslint-plugin)

Updates `globals` from 17.9.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.9.0...v17.12.0)

Updates `storybook` from 10.5.7 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/core)

Updates `typescript-eslint` from 8.66.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint)

Updates `vite` from 8.2.1 to 8.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@bpmn-io/form-js"
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@bpmn-io/properties-panel"
  dependency-version: 3.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.102.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: bpmn-js
  dependency-version: 18.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: bpmn-js-properties-panel
  dependency-version: 5.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: dmn-js
  dependency-version: 17.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: dmn-js-properties-panel
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: i18next
  dependency-version: 26.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react-i18next
  dependency-version: 17.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: react-router-dom
  dependency-version: 7.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@redocly/cli"
  dependency-version: 2.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@storybook/addon-a11y"
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@storybook/react-vite"
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: eslint-plugin-storybook
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: storybook
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 4dc1ce52-9fc1-4a73-ab0a-a37e714d6c82

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-c713dfa1c0 branch September 15, 2026 10:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants