Skip to content

chore(deps): bump the patch-and-minor group in /ui with 5 updates - #182

Merged
jbouder merged 6 commits into
mainfrom
dependabot/npm_and_yarn/ui/patch-and-minor-5718e87bee
Nov 1, 2026
Merged

chore(deps): bump the patch-and-minor group in /ui with 5 updates#182
jbouder merged 6 commits into
mainfrom
dependabot/npm_and_yarn/ui/patch-and-minor-5718e87bee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group in /ui with 5 updates:

Package From To
@tanstack/react-query 5.104.4 5.105.0
keycloak-js 26.2.4 26.2.5
lucide-react 1.59.0 1.64.0
react-router-dom 7.18.4 7.18.5
@biomejs/biome 2.5.15 2.6.4

Updates @tanstack/react-query from 5.104.4 to 5.105.0

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.105.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.105.0
    • @​tanstack/react-query@​5.105.0

@​tanstack/react-query-next-experimental@​5.105.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.105.0

@​tanstack/react-query-persist-client@​5.105.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.105.0
    • @​tanstack/react-query@​5.105.0

@​tanstack/react-query@​5.105.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.105.0

@​tanstack/react-query-devtools@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5
    • @​tanstack/query-devtools@​5.104.5

@​tanstack/react-query-next-experimental@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5

@​tanstack/react-query-persist-client@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5
    • @​tanstack/query-persist-client-core@​5.104.5

@​tanstack/react-query@​5.104.5

Patch Changes

  • #12117 1f8d134 - Recompute useMutationState and useIsMutating results when their filters, selector, or query client change, without waiting for a mutation cache update.

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.105.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.105.0

5.104.5

Patch Changes

  • #12117 1f8d134 - Recompute useMutationState and useIsMutating results when their filters, selector, or query client change, without waiting for a mutation cache update.
  • Updated dependencies [f608f93]:
    • @​tanstack/query-core@​5.104.5
Commits
  • 5cc606e ci: Version Packages (#12301)
  • 14cc330 style(packages): write durations in 'count * unit * 1000' order (#12382)
  • d7c0418 chore(react-query/{useQuery,useInfiniteQuery}): remove the unused '@​eslint-re...
  • aa3e26b chore(react-query/{HydrationBoundary,utils}): explain why 'react-hooks-js/ref...
  • b2801aa test(react-query/useMutation): assert that the mutation settles in the cache ...
  • 43636c4 test(react-query/useMutation): wait for the mutation to settle after unmount ...
  • 1eed9d9 chore(*): explain why 'vitest-js/valid-expect' is disabled for the 'expectTyp...
  • 6bdeb13 test(*/useQuery): rename the 'throwOnError' callback parameter to 'err' to av...
  • 86b9f20 test(*/useMutationState): rename the built 'mutation' to 'existingMutation' t...
  • d09972b test(*): rename the 'queryKey' test helper to 'createKey' since it creates ke...
  • Additional commits viewable in compare view

Updates keycloak-js from 26.2.4 to 26.2.5

Release notes

Sourced from keycloak-js's releases.

26.2.5

Highlights

Features

DPoP support for Keycloak-JS

DPoP is a mechanism that prevents token theft and replay attacks by generating sender-constrained access and refresh tokens. It allows a client to cryptographically prove possession of the private key bound to a token, provided the resource server supports the DPoP standard.

[!NOTE] See the documentation for more information.

Bug Fixes

Cordova/cordova-native adapters skip OAuth state validation on login callback

The cordova and cordova-native adapter login callback paths in keycloak-js process OAuth callback data without consistently validating the stored state parameter before applying token-derived authentication state.

keycloak/keycloak-js#306

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

Commits
  • 931caa7 Set version to 26.2.5
  • be42d6a Bump @​keycloak/keycloak-admin-client from 26.8.0 to 26.8.1 (#369)
  • 69cec6d Remove ts-standard from the project (#358)
  • f53a656 Bump actions/checkout from 6 to 7 (#316)
  • 2ee3f72 Bump @​playwright/test from 1.62.1 to 1.64.0 (#354)
  • 6a55cb7 Bump express from 5.2.1 to 5.3.0 (#356)
  • 5ac4e09 Bump jszip from 3.10.1 to 3.10.2 (#344)
  • 2994182 Bump @​keycloak/keycloak-admin-client from 26.7.0 to 26.8.0 (#352)
  • dfb74a2 Bump @​types/node from 26.1.2 to 26.6.5 (#357)
  • 8803e6b Add DPoP support to keycloak-js (#253)
  • Additional commits viewable in compare view

Updates lucide-react from 1.59.0 to 1.64.0

Release notes

Sourced from lucide-react's releases.

Version 1.64.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Version 1.63.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.62.0...1.63.0

Version 1.62.0

What's Changed

... (truncated)

Commits
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • See full diff in compare view

Updates react-router-dom from 7.18.4 to 7.18.5

Changelog

Sourced from react-router-dom's changelog.

v7.18.5

Patch Changes

Commits

Updates @biomejs/biome from 2.5.15 to 2.6.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.4

2.6.4

Patch Changes

  • #12261 19fbfb2 Thanks @​dyc3! - Added the new nursery rule noConsoleSpaces, which reports a leading or trailing space in a console.log(), console.debug(), console.info(), console.warn(), or console.error() argument that sits next to another argument. These methods already put a space between arguments, so such a space prints twice.

    console.log("abc ", "def");

  • #12469 cd716d3 Thanks @​dyc3! - Added the new nursery rule noMagicArrayFlatDepth, which reports number literals other than 1 passed as the depth of Array.prototype.flat() unless a comment inside the parentheses explains them.

    const items = array.flat(2);

  • #12470 92c9e81 Thanks @​dyc3! - Added the nursery rule noNull, which reports uses of the null literal and suggests undefined instead. Strict comparisons such as foo === null are allowed.

    let foo = null;

  • #12483 9bd3527 Thanks @​dyc3! - Added the nursery rule noReturnArrayPush, which reports code that uses the return value of push() or unshift(). These methods return the new length of the array, not the added item or the array.

    function add(item) {
  return items.push(item);
}

  • #12477 a384892 Thanks @​dyc3! - Added the nursery rule noUnreadableIife, which reports arrow functions that are called right where they are defined and whose body is wrapped in parentheses.

    const foo = (bar => (bar ? bar.baz : baz))(getBar());

  • #12447 0a963e4 Thanks @​dyc3! - Added the nursery rule noUselessRecursion, which reports functions that return a call to themselves when a loop can do the same work. Too many nested calls can crash the program with a stack overflow error.

    function findRoot(node) {
    if (node.parent) {
        return findRoot(node.parent);
    }
    return node;
}

  • #12554 2eddda9 Thanks @​dyc3! - Added the nursery rule noVueComputedPropertiesInData, which reports computed properties used inside the data function of a Vue component. Vue runs data before it sets up computed properties, so the value read there is undefined.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the patch-and-minor group in /ui with 5 updates
30c9868 
Bumps the patch-and-minor group in /ui with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.4` | `5.105.0` |
| [keycloak-js](https://github.com/keycloak/keycloak-js) | `26.2.4` | `26.2.5` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.59.0` | `1.64.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.4` | `7.18.5` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.15` | `2.6.4` |


Updates `@tanstack/react-query` from 5.104.4 to 5.105.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.105.0/packages/react-query)

Updates `keycloak-js` from 26.2.4 to 26.2.5
- [Release notes](https://github.com/keycloak/keycloak-js/releases)
- [Changelog](https://github.com/keycloak/keycloak-js/blob/main/RELEASE-CHECKLIST.md)
- [Commits](keycloak/keycloak-js@26.2.4...26.2.5)

Updates `lucide-react` from 1.59.0 to 1.64.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.64.0/packages/lucide-react)

Updates `react-router-dom` from 7.18.4 to 7.18.5
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.5/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.5/packages/react-router-dom)

Updates `@biomejs/biome` from 2.5.15 to 2.6.4
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.4/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.105.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: keycloak-js
  dependency-version: 26.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: lucide-react
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: react-router-dom
  dependency-version: 7.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@biomejs/biome"
  dependency-version: 2.6.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026
@dependabot
dependabot Bot requested a review from jbouder as a code owner November 1, 2026 13:16
jbouder and others added 5 commits November 1, 2026 09:09
@jbouder
Merge branch 'main' into dependabot/npm_and_yarn/ui/patch-and-minor-5…
afbab67 
…718e87bee
@jbouder
Merge branch 'main' into dependabot/npm_and_yarn/ui/patch-and-minor-5…
8ccdf0e 
…718e87bee
@jbouder
Merge branch 'main' into dependabot/npm_and_yarn/ui/patch-and-minor-5…
e2276f7 
…718e87bee
@jbouder
Fix Biome 2.6 noComponentHookFactories error and migrate config
d147e2b 
Move the per-action mutation hook in useAppActions to module level
(useAppAction) and update the biome.json schema to 2.6.4.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jbouder
ci(ui): raise total-js bundle budget to 250 kB
4e26fba 
keycloak-js 26.2.5 adds DPoP support, growing the lazily loaded keycloak
chunk and adding a keycloak-dpop chunk (~3.7 kB gzip total). Initial load
is unchanged.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jbouder
jbouder merged commit 313e9c7 into main Nov 1, 2026
14 checks passed
@jbouder
jbouder deleted the dependabot/npm_and_yarn/ui/patch-and-minor-5718e87bee branch November 1, 2026 15:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jbouder jbouder Awaiting requested review from jbouder jbouder is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jbouder