Skip to content

Update npm non-major dependencies#4098

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/npm-minor-patch
Open

Update npm non-major dependencies#4098
renovate[bot] wants to merge 1 commit intomainfrom
renovate/npm-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 8, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@eslint/compat (source) 2.0.42.0.5 age confidence
@navikt/aksel-icons (source) 8.9.08.10.3 age confidence
@percy/cli (source) 1.31.111.31.12 age confidence
@tanstack/react-query (source) 5.96.25.100.6 age confidence
@tanstack/react-query-devtools (source) 5.96.25.100.6 age confidence
@typescript-eslint/eslint-plugin (source) 8.58.08.59.1 age confidence
@typescript-eslint/parser (source) 8.58.08.59.1 age confidence
ajv (source) 8.18.08.20.0 age confidence
axe-core (source) 4.11.24.11.3 age confidence
cypress (source) 15.13.015.14.1 age confidence
dotenv 17.4.017.4.2 age confidence
eslint (source) 10.2.010.2.1 age confidence
eslint-plugin-cypress 6.2.26.4.0 age confidence
eslint-plugin-react-hooks (source) 7.0.17.1.1 age confidence
eslint-plugin-sonarjs (source) 4.0.24.0.3 age confidence
globals 17.4.017.5.0 age confidence
lru-cache 11.2.711.3.5 age confidence
marked (source) 17.0.517.0.6 age confidence
marked-mangle 1.1.121.1.13 age confidence
prettier (source) 3.8.13.8.3 age confidence
react (source) 19.2.419.2.5 age confidence
react-dom (source) 19.2.419.2.5 age confidence
react-toastify 11.0.511.1.0 age confidence
tinybench 6.0.06.0.1 age confidence
typescript-eslint (source) 8.58.08.59.1 age confidence
webpack 5.105.45.106.2 age confidence
yarn (source) 4.13.04.14.1 age confidence

Release Notes

eslint/rewrite (@​eslint/compat)

v2.0.5

Compare Source

Dependencies
  • The following workspace dependencies were updated
navikt/aksel (@​navikt/aksel-icons)

v8.10.3

Compare Source

v8.10.2

Compare Source

v8.10.1

Compare Source

v8.10.0

Compare Source

v8.9.1

Compare Source

percy/cli (@​percy/cli)

v1.31.12

Compare Source

New Contributors

Full Changelog: percy/cli@v1.31.11...v1.31.12

TanStack/query (@​tanstack/react-query)

v5.100.6

Compare Source

Patch Changes

v5.100.5

Compare Source

Patch Changes

v5.100.4

Compare Source

Patch Changes

v5.100.3

Compare Source

Patch Changes

v5.100.2

Patch Changes

v5.100.1

Patch Changes

v5.100.0

Compare Source

Patch Changes

v5.99.2

Compare Source

Patch Changes

v5.99.1

Compare Source

Patch Changes

v5.99.0

Compare Source

Patch Changes

v5.98.0

Compare Source

Patch Changes

v5.97.0

Compare Source

Patch Changes
TanStack/query (@​tanstack/react-query-devtools)

v5.100.6

Compare Source

Patch Changes

v5.100.5

Compare Source

Patch Changes

v5.100.4

Compare Source

Patch Changes

v5.100.3

Compare Source

Patch Changes

v5.100.2

Compare Source

Patch Changes

v5.100.1

Compare Source

Patch Changes

v5.100.0

Compare Source

Patch Changes

v5.99.2

Compare Source

Patch Changes

v5.99.1

Compare Source

Patch Changes

v5.99.0

Compare Source

Patch Changes

v5.98.0

Compare Source

Patch Changes

v5.97.0

Compare Source

Patch Changes
typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.59.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-condition] treat void as nullish in no-unnecessary-condition (#​12241)
  • eslint-plugin: [no-unnecessary-type-arguments] handle instantiation expressions (#​12220)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive in logical assignment assertions (#​12278)
  • eslint-plugin: [no-unnecessary-type-assertion] preserve phantom type arguments in generic inference (#​12269)
  • eslint-plugin: [no-unnecessary-type-assertion] preserve index signatures in undefined unions (#​12257)
  • eslint-plugin: [no-unnecessary-type-assertion] fix crash "TypeError: checker.getTypeArguments is not a function" (#​12246)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

🚀 Features
  • eslint-plugin: [no-unnecessary-type-assertion] report more cases based on assignability (#​11789)
❤️ Thank You
  • Ulrich Stark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.2

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#​12147)
  • remove tsbuildinfo cache file from published packages (#​12187)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#​12004)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.59.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.2

Compare Source

🩹 Fixes
  • remove tsbuildinfo cache file from published packages (#​12187)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

ajv-validator/ajv (ajv)

v8.20.0

Compare Source

What's Changed

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

dequelabs/axe-core (axe-core)

v4.11.3

Compare Source

cypress-io/cypress (cypress)

v15.14.1

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-14-1

v15.14.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-14-0

v15.13.1

Compare Source

motdotla/dotenv (dotenv)

v17.4.2

Compare Source

v17.4.1

Compare Source

eslint/eslint (eslint)

v10.2.1

Compare Source

cypress-io/eslint-plugin-cypress (eslint-plugin-cypress)

v6.4.0

Compare Source

Features
  • support chains started of helper functions in unsafe-to-chain-command (#​307) (bdf94f2)

v6.3.1

Compare Source

Bug Fixes

v6.3.0

Compare Source

Features
  • added no-and rule to ensure .and() follows certain commands (#​310) (c0b7e3b)

v6.2.3

Compare Source

Bug Fixes
  • no-unnecessary-waiting flag identifiers defined in object/array patterns (#​308) (f5ccf77)
facebook/react (eslint-plugin-react-hooks)

v7.1.1

Compare Source

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

  • Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #​36307)

v7.1.0

Compare Source

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

SonarSource/SonarJS (eslint-plugin-sonarjs)

v4.0.3

Compare Source

sindresorhus/globals (globals)

v17.5.0

Compare Source

isaacs/node-lru-cache (lru-cache)

v11.3.5

Compare Source

v11.3.4

Compare Source

v11.3.3

Compare Source

v11.3.2

Compare Source

v11.3.1

Compare Source

v11.3.0

Compare Source

markedjs/marked (marked)

v17.0.6

Compare Source

Bug Fixes
markedjs/marked-mangle (marked-mangle)

v1.1.13

Compare Source

Bug Fixes
prettier/prettier (prettier)

v3.8.3

Compare Source

v3.8.2

Compare Source

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components
fkhadra/react-toastify (react-toastify)

v11.1.0

Compare Source

Release Notes

Features

  • CSP nonce support. <ToastContainer nonce={...}> applies the nonce to the
    injected <style> tag. Closes #​1209.

Fixes

  • onChange fires status: 'removed' synchronously on toast.dismiss() instead
    of after the exit animation — observers (incl. useNotificationCenter) now
    see correctly ordered events. Also guards against double-onClose. Closes #​1275.
  • Touch drag no longer re-pauses the toast on release — the old check compared a
    PointerEvent against 'touchend', which never matched. Closes #​1217.
  • Vertical drag now visually moves the toast (--y gets a unit). Thanks
    @​janpaepke, #​1277.
  • Stacked scale is clamped at 0.5, preventing zero/negative scale in deep
    stacks. Closes #​1171, #​1174.
  • Stacked container respects mobile 100vw again. Closes #​1234.

Accessibility

Internal

  • Migrated to a pnpm workspace (pnpm link . no longer required for contributors).
    Publish layout unchanged — addon still ships inside the main package.
  • CSS now injected at mount via useStyleSheet (prerequisite for nonce).
  • Dep bumps: TypeScript 6, Vite 8, Cypress 15, React 19.2, plus the rest.
  • CI: upload-artifact v3 → v4.

Thanks to @​janpaepke, @​singhankit001, and reporters of the fixed issues.

tinylibs/tinybench (tinybench)

v6.0.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
typescript-eslint/typescript-eslint (typescript-eslint)

v8.59.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.2

Compare Source

🩹 Fixes
  • remove tsbuildinfo cache file from published packages (#​12187)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

webpack/webpack (webpack)

v5.106.2

Compare Source

Patch Changes
  • CSS @​import now inherits the parent module's exportType, so a file configured as "text" correctly creates a style tag when @​imported by a "style" parent. (by @​xiaoxiaojx in #​20838)

  • Make asset modules available in JS context when referenced from both CSS and a lazily compiled JS chunk. (by @​xiaoxiaojx in #​20801)

  • Include missing generator options in hash to ensure persistent cache invalidation when configuration changes (CssGenerator exportsOnly, JsonGenerator JSONParse, WebAssemblyGenerator mangleImports). (by @​xiaoxiaojx in #​20821)

  • Fix || default value handling in ProgressPlugin and ManifestPlugin that incorrectly overrode user-provided falsy values (e.g. modules: false, entries: false, entrypoints: false). (by @​xiaoxiaojx in #​20823)

  • Migrate from mime-types to mime-db. (by @​alexander-akait in #​20812)

  • Handle @charset at-rules in CSS modules. (by @​alexander-akait in #​20831)

  • Marked all experimental options in types. (by @​alexander-akait in #​20814)

v5.106.1

Compare Source

Patch Changes
  • Fix two ES5-environment regressions in the anonymous default export .name fix-up: the generated code referenced an undeclared __WEBPACK_DEFAULT_EXPORT__ binding causing ReferenceError, and used Reflect.defineProperty which is not available in pre-ES2015 runtimes. The fix-up now references the real assignment target and uses Object.defineProperty / Object.getOwnPropertyDescriptor. (by @​xiaoxiaojx in #​20796)

  • Prevent !important from being renamed as a local identifier in CSS modules. (by @​xiaoxiaojx in #​20798)

  • Use compiler context instead of module context for CSS modules local ident hashing to avoid hash collisions when files with the same name exist in different directories. (by @​xiaoxiaojx in #​20799)

v5.106.0

Compare Source

Minor Changes
  • Add exportType: "style" for CSS modules to inject styles into DOM via HTMLStyleElement, similar to style-loader functionality. (by @​xiaoxiaojx in #​20579)

  • Add context option support for VirtualUrlPlugin (by @​xiaoxiaojx in #​20449)

    • The context for the virtual module. A string path. Defaults to 'auto', which will try to resolve the context from the module id.
    • Support custom context path for resolving relative imports in virtual modules
    • Add examples demonstrating context usage and filename customization
  • Generate different CssModule instances for different exportType values. (by @​xiaoxiaojx in #​20590)

  • Added the localIdentHashFunction option to configure the hash function to be used for hashing. (by @​alexander-akait in #​20694)
    Additionally, the localIdentName option can now be a function.

  • Added support for destructuring assignment require in cjs, allowing for tree shaking. (by @​ahabhgk in [#​20548](https://redirec

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Oslo)

  • Branch creation
    • "before 07:00 on Thursday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added backport-ignore This PR is a new feature and should not be cherry-picked onto release branches kind/dependencies Pull requests that update a dependency file labels Apr 8, 2026
@renovate renovate Bot force-pushed the renovate/npm-minor-patch branch 15 times, most recently from c86fccd to 527affe Compare April 15, 2026 11:56
@renovate renovate Bot force-pushed the renovate/npm-minor-patch branch 12 times, most recently from 8a34b61 to 5992241 Compare April 22, 2026 19:36
@renovate renovate Bot force-pushed the renovate/npm-minor-patch branch 13 times, most recently from 4a2a2e5 to 29f6922 Compare April 29, 2026 11:39
@renovate renovate Bot changed the title fix(deps): update npm non-major dependencies Update npm non-major dependencies Apr 30, 2026
@renovate renovate Bot force-pushed the renovate/npm-minor-patch branch 2 times, most recently from 481eec3 to df2b349 Compare May 1, 2026 15:36
@renovate renovate Bot force-pushed the renovate/npm-minor-patch branch from df2b349 to b5b2ef7 Compare May 1, 2026 19:32
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented May 1, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-ignore This PR is a new feature and should not be cherry-picked onto release branches kind/dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants