Skip to content

chore(deps)(deps): bump the production-dependencies group across 1 directory with 10 updates #448

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps)(deps): bump the production-dependencies group across 1 directory with 10 updates #448

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Bumps the production-dependencies group with 10 updates in the /frontend directory:

Package From To
@tanstack/react-query 5.90.16 5.90.20
axios 1.13.2 1.13.4
i18next 25.7.4 25.8.0
lucide-react 0.562.0 0.563.0
mixpanel-browser 2.73.0 2.74.0
react-hook-form 7.70.0 7.71.1
react-i18next 16.5.1 16.5.4
react-router-dom 7.12.0 7.13.0
recharts 3.6.0 3.7.0
zustand 5.0.9 5.0.11

Updates @tanstack/react-query from 5.90.16 to 5.90.20

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-persist-client@​5.90.20

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.17
    • @​tanstack/react-query@​5.90.18

@​tanstack/react-query@​5.90.20

Patch Changes

  • Updated dependencies [e7258c5]:
    • @​tanstack/query-core@​5.90.20

@​tanstack/react-query-persist-client@​5.90.19

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.16
    • @​tanstack/react-query@​5.90.17

@​tanstack/react-query@​5.90.19

Patch Changes

  • Updated dependencies [53fc74e]:
    • @​tanstack/query-core@​5.90.19

@​tanstack/react-query-persist-client@​5.90.18

Patch Changes

  • Updated dependencies [4be3ad7]:
    • @​tanstack/react-query@​5.90.16
    • @​tanstack/query-persist-client-core@​5.91.15

@​tanstack/react-query@​5.90.18

Patch Changes

  • Updated dependencies [dea1614]:
    • @​tanstack/query-core@​5.90.18

@​tanstack/react-query@​5.90.17

Patch Changes

  • Updated dependencies [269351b]:
    • @​tanstack/query-core@​5.90.17
Changelog

Sourced from @​tanstack/react-query's changelog.

5.90.20

Patch Changes

  • Updated dependencies [e7258c5]:
    • @​tanstack/query-core@​5.90.20

5.90.19

Patch Changes

  • Updated dependencies [53fc74e]:
    • @​tanstack/query-core@​5.90.19

5.90.18

Patch Changes

  • Updated dependencies [dea1614]:
    • @​tanstack/query-core@​5.90.18

5.90.17

Patch Changes

  • Updated dependencies [269351b]:
    • @​tanstack/query-core@​5.90.17
Commits

Updates axios from 1.13.2 to 1.13.4

Release notes

Sourced from axios's releases.

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

  • fix: issues with version 1.13.3 (#7352) (ee90dfc)
    • Fixed issues discovered in v1.13.3 release
    • Cleaned up interceptor test files
    • Improved workflow configurations

Infrastructure & CI/CD

  • refactor: ci and build (#7340) (8ff6c19)

    • Major refactoring of CI/CD workflows
    • Consolidated workflow files for better maintainability
    • Added mise configuration for the development environment
    • Improved sponsor block update automation
    • Enhanced issue and PR templates
    • Added automatic release notes generation
    • Implemented workflow cancellation for concurrent runs

  • chore: codegen and some updates to workflows (76cf77b)

    • Code generation improvements
    • Workflow optimisations

Migration Notes

Breaking Changes

None in this release.

Deprecations

None in this release.

Contributors

Thank you to all contributors who made this release possible! Special thanks to:

Release v1.13.3

Release notes:

Bug Fixes

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

1.13.3 (2026-01-20)

Bug Fixes

  • http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
  • turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

Reverts

  • Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
  • deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

... (truncated)

Commits
  • 9336cf9 chore(release): prepare release 1.13.4 (#7353)
  • ee90dfc fix: issues with version 1.13.3 (#7352)
  • af4f6d9 fix: release branch yml
  • 253e3ad fix: all merge configs
  • 8ff6c19 refactor: ci and build (#7340)
  • ab06109 chore(release): v1.13.3 (#7335)
  • 2d6ad5e revert(deps): bump peter-evans/create-pull-request from 7 to 8 in the github-...
  • cb49a6f chore(sponsor): update sponsor block (#7330)
  • d8233d9 fix(types): restore AxiosError.cause type from unknown to Error (#7327)
  • 5945e40 fix(interceptor): handle the error in the same interceptor (#6269)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.


Updates i18next from 25.7.4 to 25.8.0

Release notes

Sourced from i18next's releases.

v25.8.0

  • fix: TFunctionReturn fallback 2360
Changelog

Sourced from i18next's changelog.

25.8.0

  • fix: TFunctionReturn fallback 2360
Commits

Updates lucide-react from 0.562.0 to 0.563.0

Release notes

Sourced from lucide-react's releases.

Version 0.563.0

What's Changed

aria-hidden is by default added to icons components in all packages. This was already added to lucide-react before. Making icons accessible, you can add an aria-label or a title. See docs about accessibility.

All changes

New Contributors

Full Changelog: lucide-icons/lucide@0.562.0...0.563.0

Commits
  • 67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
  • b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
  • See full diff in compare view

Updates mixpanel-browser from 2.73.0 to 2.74.0

Release notes

Sourced from mixpanel-browser's releases.

New masking API, remote settings, and more

New Recorder Masking API

Session recording now supports unmasking inputs, as well as an allow-list based masking API for both inputs and text. New configuration options:

Option Type Default Description
record_mask_all_text boolean true When true, all text is masked by default. Use record_unmask_text_selector to selectively reveal specific elements.
record_mask_text_selector string | string[] undefined CSS selector(s) for elements to mask. Only applies when record_mask_all_text is false.
record_unmask_text_selector string | string[] undefined CSS selector(s) for elements to unmask. Only applies when record_mask_all_text is true.
record_mask_all_inputs boolean true When true, all inputs are masked by default. Use record_unmask_input_selector to selectively reveal specific inputs.
record_mask_input_selector string | string[] "" CSS selector(s) for inputs to mask. Only applies when record_mask_all_inputs is false.
record_unmask_input_selector string | string[] "" CSS selector(s) for inputs to unmask. Only applies when record_mask_all_inputs is true.

Old record_mask_text_selector configuration options are migrated to the equivalent new config options for compatibility - e.g. record_mask_text_selector: '' will be applied as record_mask_all_text: false

Initial Remote Settings Support

Preparation to support remote settings functionality which will allow customizing session recording configurations (and eventually more) within the Mixpanel UI. The config option remote_settings_mode allows 3 states:

  • strict - do not act (for instance, start session recording) unless the remote settings are loaded in a timely manner
  • fallback - use fallback configuration values (options set during initialization) if remote settings fail to load in a timely manner
  • disabled (default) - do not use or attempt to load remote settings

Remote settings are currently in a CLOSED alpha as of 1/27/2026, and the SDK API could be updated with breaking changes.

Other fixes

  • Add missing typescript fields for api_routes (thanks @​rnbrady!)
  • Fix issue where Mixpanel import breaks in Safari when cookies are disabled: mixpanel/mixpanel-js#530
  • Deleted some outdated example directories
Changelog

Sourced from mixpanel-browser's changelog.

2.74.0 (27 Jan 2026)

  • New session recording masking configuration options, including the ability to unmask inputs and allowlist-based selector masking.
  • Adds initial support for the remote settings API, allowing remote configuration of SDK config options.
  • Adds new automated browser test suite that runs in CI and locally in chrome headless. See tests/browser/README.html for more information.
  • Fixes type definitions for api_routes
  • Removes outdated examples in the examples/ dir

2.73.0 (23 Dec 2025)

  • Adds several new hooks: before_identify, before_register, before_register_once, before_track, before_unregister
  • Adds instance-initialization notification to allow Data Inspector browser extension to hook into SDK actions
  • Fixes and extends type definitions

2.72.0 (14 Nov 2025)

  • Adds Autocapture rage-click configuration option interactive_elements_only, to ignore clicks on non-interactive page elements such as text. Configure with: mixpanel.init('<TOKEN>', {autocapture: {rage_click: {interactive_elements_only: true}}})
  • Adds TypeScript types for Feature Flags subsystem (mixpanel.flags)
  • Adds JS console data to Session Recordings, enabled by default but configurable via the record_console initialization option.
  • Fixes an issue in session recording where closing and opening a page would upload a replay shorter than the configured minimum duration (record_min_ms)
  • Fixes an issue in session recording where payloads get truncated on old Safari versions due to a bug in their CompressionStream implementation

2.71.1 (30 Oct 2025)

  • fixes issue with $mp_page_leave events getting tracked when record_heatmap_data is on and there was no session recording taking place.

2.71.0 (2 Oct 2025)

  • adds Dead Click ($mp_dead_click) autocapture event: when a click occurs but there is no DOM mutation afterwards
  • adds Page Leave ($mp_page_leave) autocapture event: when a page is "left" either by navigation or leaving the tab
  • adds additional properties to experiment exposure events for feature flags
  • upgrades rrweb fork to fix a hidden input masking issue
  • gets rid of package.json exports feature to be less restrictive of what can be imported
  • adds type definitions for each build option

2.70.0 (4 Sep 2025)

  • Feature flags requests now send params on query string with GET instead of POST for easier caching

2.68.0 (11 Aug 2025)

  • Initial rage-click detection support
  • Block <audio> tags by default in Session Recording
  • Add flags.update_context() method for updating context variables and refetching variants

2.67.0 (17 Jul 2025)

  • Use get_api_host() consistently across the SDK
  • Include device_id in default Feature Flag context
  • Track latency props in $experiment_started event
  • Fix async behavior in mixpanel.reset() when a session recording is active
  • Fix recorder integration test race conditions

2.66.0 (8 Jul 2025)

  • Add api_host configuration option to support different hosts/proxies for different endpoints (thanks @​chrisknu)
  • Add types.d.ts from existing public repo
  • Fix race condition when calling mixpanel.reset() while a session recording is active

... (truncated)

Commits

Updates react-hook-form from 7.70.0 to 7.71.1

Release notes

Sourced from react-hook-form's releases.

Version v7.71.1

🐞 fix #13250 issue with booleans_as_integers (#13252)

Version 7.71.0

⚡ perf: memoize FormProvider context value to prevent unnecessary rerenders (#13235) 🚄 perf: separate control context to prevent unnecessary rerenders (#13234) 🐞 fix: update isValid when field disabled state changes (#13231) 👌 chore: optimize bundle size via safe terser options (#13243) (#13244)

thanks to @​kamja44, @​a28689604 & @​newsiberian

Commits

Updates react-i18next from 16.5.1 to 16.5.4

Changelog

Sourced from react-i18next's changelog.

16.5.4

  • fix: Overriding React component props not working 1902

16.5.3

  • fix: Trans named tags with underscore 1901

16.5.2

  • fix: Type errors when you've declared a resources type 1899 via 1900
Commits

Updates react-router-dom from 7.12.0 to 7.13.0

Release notes

Sourced from react-router-dom's releases.

[email protected]

Patch Changes

Changelog

Sourced from react-router-dom's changelog.

7.13.0

Patch Changes

Commits

Updates recharts from 3.6.0 to 3.7.0

Release notes

Sourced from recharts's releases.

v3.7.0

What's Changed

📢 Cell is now deprecated and will be removed in the next major version. Please migrate all Cell usage to use the shape prop of respective chart elements. ‼️

Feat

New Hooks

Other

Fix

Chore

Docs

We've started auto-generating our docs for the most part so you should see large improvements in accuracy of the docs between the code, the website, and the storybook. Huge shoutout to @​PavelVanecek 🚀

New Contributors

Full Changelog: recharts/recharts@v3.6.0...v3.7.0

Commits

Updates zustand from 5.0.9 to 5.0.11

Release notes

Sourced from zustand's releases.

v5.0.11

This release includes small improvements in middleware thanks to contributors.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.10...v5.0.11

v5.0.10

This version includes a fix to the persist middleware for an edge case.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.9...v5.0.10

Commits
  • 99379a6 5.0.11
  • c81b4eb chore(deps): update dev dependencies (#3375)
  • 3871d53 fix(immer): Proper typing for immer middleware in combination with slices (#...
  • 9b505ac fix(persist): use window.localStorage as default storage reference (#3367)
  • 267a57c Update code block in tutorial-tic-tac-toe.md (#3373)
  • 6813f7b docs: remove stray Russian comment in beginner-typescript guide (#3369)
  • d9ea330 docs(testing): fix undefined counterStoreRef variable (#3368)
  • 6e026d7 chore: improve typing in devtools middleware (#3362)
  • e7d4593 Revert "chore(deps): bump pmndrs/docs/.github/workflows/build.yml from 2 to 3...
  • 0f49ad8 chore(deps): bump pmndrs/docs/.github/workflows/build.yml from 2 to 3 (#3364)
  • Additional commits viewable in compare view

Depend...

Description has been truncated

@dependabot
chore(deps)(deps): bump the production-dependencies group across 1 di…
15f5ede 
…rectory with 10 updates

Bumps the production-dependencies group with 10 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.16` | `5.90.20` |
| [axios](https://github.com/axios/axios) | `1.13.2` | `1.13.4` |
| [i18next](https://github.com/i18next/i18next) | `25.7.4` | `25.8.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.562.0` | `0.563.0` |
| [mixpanel-browser](https://github.com/mixpanel/mixpanel-js) | `2.73.0` | `2.74.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.70.0` | `7.71.1` |
| [react-i18next](https://github.com/i18next/react-i18next) | `16.5.1` | `16.5.4` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.12.0` | `7.13.0` |
| [recharts](https://github.com/recharts/recharts) | `3.6.0` | `3.7.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.9` | `5.0.11` |



Updates `@tanstack/react-query` from 5.90.16 to 5.90.20
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query)

Updates `axios` from 1.13.2 to 1.13.4
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.2...v1.13.4)

Updates `i18next` from 25.7.4 to 25.8.0
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v25.7.4...v25.8.0)

Updates `lucide-react` from 0.562.0 to 0.563.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.563.0/packages/lucide-react)

Updates `mixpanel-browser` from 2.73.0 to 2.74.0
- [Release notes](https://github.com/mixpanel/mixpanel-js/releases)
- [Changelog](https://github.com/mixpanel/mixpanel-js/blob/master/CHANGELOG.md)
- [Commits](mixpanel/mixpanel-js@v2.73.0...v2.74.0)

Updates `react-hook-form` from 7.70.0 to 7.71.1
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.70.0...v7.71.1)

Updates `react-i18next` from 16.5.1 to 16.5.4
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v16.5.1...v16.5.4)

Updates `react-router-dom` from 7.12.0 to 7.13.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom)

Updates `recharts` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.6.0...v3.7.0)

Updates `zustand` from 5.0.9 to 5.0.11
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.9...v5.0.11)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.90.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: axios
  dependency-version: 1.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: i18next
  dependency-version: 25.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 0.563.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: mixpanel-browser
  dependency-version: 2.74.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.71.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-i18next
  dependency-version: 16.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: recharts
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 2, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 2, 2026

Labels

The following labels could not be found: frontend, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants