[dependabot]

Bumps the design-system group with 3 updates: @gopherium/godmin, @gopherium/gottext and @gopherium/react-auth.

Updates @gopherium/godmin from 0.21.0 to 0.22.0

Changelog

Sourced from @​gopherium/godmin's changelog.

[0.22.0] - 2026-10-18

Added

• SHEET_BREAKPOINT, 600, the width below which a modal is a bottom sheet and a toast widens to the screen less a 16px gap on each side, as in WordPress.
• TITLE_BREAKPOINT, 404, the width below which an editor header drops its document title, as the WordPress editor does.
• setViewport in @gopherium/godmin/testing takes { width } and answers min-width and max-width queries by it, screen ones included, so a test can sit between two breakpoints. { matches } works as before, and the new TestViewport type names both.
• ConfirmDialog takes size, small for a 400px card or medium for the 560px default, as WordPress uses small for the Move to trash button of its editor and medium for the Trash action of its menus.

Commits

• 7415bda chore(release): bump version to 0.22.0
• cb80436 feat: Name the phone breakpoints, a width for setViewport and a small Confirm...
• bafa027 test(testing): check long space runs by their answer, not by the clock
• 5c28d4e fix(testing): read media queries in any case and in linear time
• 2ffc6fb docs: name the new breakpoints and the viewport type and log the additions
• 44c176e feat(dialogs): let ConfirmDialog take a small or a medium size
• 977f1c5 feat(testing): answer width queries by a width given to setViewport
• e3df938 feat(breakpoints): name the sheet and the title widths
• See full diff in compare view

Updates @gopherium/gottext from 0.6.0 to 0.7.0

Changelog

Sourced from @​gopherium/gottext's changelog.

[0.7.0] - 2026-10-18

Changed

• Breaking: messages keeps only the calls naming the given domain, and so does pot for the calls it reads from sources. A call naming no domain belongs to default, and a call whose domain is not a string literal is kept. Go markers and templates are read as before. An app whose catalogue loads under the default domain builds its template with domain: 'default'.

Fixed

• untranslated reports plural messages missing forms required by the catalogue's Plural-Forms header, including answers flattened to one form in the catalogue. It rejects a declared rule with no usable count, matching catalogue sync, and defaults to two forms only when the header is absent.

Commits

• See full diff in compare view

Updates @gopherium/react-auth from 0.12.0 to 0.13.0

Changelog

Sourced from @​gopherium/react-auth's changelog.

[0.13.0] - 2026-10-16

Changed

• LoginScreen says "Lost your password?" under the card, as WordPress does.

Commits

• d859909 chore(react-auth): release 0.8.0
• f0450c5 docs(react-auth): note the handoff retry
• ffc4211 i18n(react-auth): translate the retry button
• d555540 fix(react-auth): refuse a whitespace activation link and answer padded ones t...
• 126bbb2 fix(react-auth): offer a handoff retry that never posts the spent token
• cd1b32e test(react-auth): import the users key from where it is exported
• f34ecce fix(react-auth): stop blaming activation for a failed handoff
• 0b1629c fix(react-auth): hold every invite transport to the invitation contract
• 57190e1 fix(react-auth): hold the invitation form through the handoff
• 863814a fix(react-auth): report a failed handoff instead of dropping it
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: gopherium/gophenberg/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7a18d313-7f1d-4c15-a6a9-f0f156adb7c6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codescene-access]

No application code in the PR — skipped Code Health checks.

See analysis details in CodeScene

Quality Gate Profile: Clean Code Collective
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.