Skip to content

build(deps): bump the npm-minor group across 1 directory with 25 updates - #1

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-0036ea842f
Closed

build(deps): bump the npm-minor group across 1 directory with 25 updates#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-0036ea842f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor group with 24 updates in the / directory:

Package From To
@sentry/react 10.39.0 10.65.0
@stellar/design-system 3.2.5 3.2.8
@tailwindcss/vite 4.2.0 4.3.2
@tanstack/react-query 5.90.21 5.101.2
axios 1.13.5 1.18.1
date-fns 4.1.0 4.4.0
framer-motion 12.34.3 12.42.2
react 19.2.0 19.2.7
@types/react 19.2.7 19.2.17
react-dom 19.2.0 19.2.7
react-router-dom 7.9.6 7.18.1
recharts 3.7.0 3.9.2
zod 4.1.13 4.4.3
zustand 5.0.11 5.0.14
@types/lodash 4.17.21 4.17.24
dotenv 17.2.3 17.4.2
eslint-plugin-react-refresh 0.4.24 0.5.3
fast-check 4.5.3 4.9.0
glob 13.0.0 13.0.6
prettier 3.6.2 3.9.5
typescript-eslint 8.48.1 8.63.0
vite-plugin-node-polyfills 0.24.0 0.28.0
vite-plugin-wasm 3.5.0 3.6.0
vitest 4.0.18 4.1.10

Updates @sentry/react from 10.39.0 to 10.65.0

Release notes

Sourced from @​sentry/react's releases.

10.65.0

  • feat(angular): Set url attributes on pageload and navigation spans (#21985)
  • feat(astro): Set url.template on pageload spans (#22011)
  • feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)
  • feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)
  • feat(bun): warn when externalizing instrumented deps (#21999)
  • feat(core): Require attributes on SerializedStreamedSpan (#22052)
  • feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)
  • feat(nextjs): Set url attributes on pageload and navigation spans (#22006)
  • feat(react): Set url.template, url.path and url.full on routing spans (#22087)
  • feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)
  • feat(remix): Set url.template on pageload and navigation spans (#22025)
  • feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)
  • feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)
  • feat(server-utils): Implement orchestrion-based express integration (#21889)
  • feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)
  • feat(solid): Set url attributes on solid router and tanstack router spans (#22090)
  • feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)
  • feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)
  • fix(browser): Send web vital span sentry.segment.name attribute (#22024)
  • fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)
  • fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)
  • fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)
  • fix(replay): Skip client reports for replay failures after stop (#22177)
  • perf(vite): add fast component annotation transform (#22089)
  • ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)
  • chore: Add external contributor to CHANGELOG.md (#22111)
  • chore: Reinstate changelog anchor (#22022)
  • chore(cloudflare): Ignore import patterns (#22008)
  • chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)
  • chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)
  • chore(opentelemetry): Add worker as export | sort exports (#21859)
  • chore(size-limit): weekly auto-bump (#21812)
  • ci: Only run cloudflare & bundler plugin tests when necessary (#22130)
  • ci(deps): bump actions/checkout from 6 to 7 (#21898)
  • ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)
  • ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)
  • ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)
  • ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)
  • feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)
  • feat(core): add uniq array util and consolidate call sites (#22152)
  • feat(deps): Bump @​growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)
  • feat(deps): Bump @​opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)
  • feat(deps): Bump dotenv from 16.0.3 to 17.4.2 (#22150)

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.65.0

  • feat(angular): Set url attributes on pageload and navigation spans (#21985)
  • feat(astro): Set url.template on pageload spans (#22011)
  • feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)
  • feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)
  • feat(bun): warn when externalizing instrumented deps (#21999)
  • feat(core): Require attributes on SerializedStreamedSpan (#22052)
  • feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)
  • feat(nextjs): Set url attributes on pageload and navigation spans (#22006)
  • feat(react): Set url.template, url.path and url.full on routing spans (#22087)
  • feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)
  • feat(remix): Set url.template on pageload and navigation spans (#22025)
  • feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)
  • feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)
  • feat(server-utils): Implement orchestrion-based express integration (#21889)
  • feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)
  • feat(solid): Set url attributes on solid router and tanstack router spans (#22090)
  • feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)
  • feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)
  • fix(browser): Send web vital span sentry.segment.name attribute (#22024)
  • fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)
  • fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)
  • fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)
  • fix(replay): Skip client reports for replay failures after stop (#22177)
  • perf(vite): add fast component annotation transform (#22089)
  • ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)
  • chore: Add external contributor to CHANGELOG.md (#22111)
  • chore: Reinstate changelog anchor (#22022)
  • chore(cloudflare): Ignore import patterns (#22008)
  • chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)
  • chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)
  • chore(opentelemetry): Add worker as export | sort exports (#21859)
  • chore(size-limit): weekly auto-bump (#21812)
  • ci: Only run cloudflare & bundler plugin tests when necessary (#22130)
  • ci(deps): bump actions/checkout from 6 to 7 (#21898)
  • ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)
  • ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)
  • ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)
  • ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)
  • feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)
  • feat(core): add uniq array util and consolidate call sites (#22152)
  • feat(deps): Bump @​growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)
  • feat(deps): Bump @​opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)

... (truncated)

Commits
  • c66a815 release: 10.65.0
  • 018c570 Merge pull request #22179 from getsentry/prepare-release/10.65.0
  • 5a1e331 meta(changelog): Update changelog for 10.65.0
  • e934b44 feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • 04bbb79 fix(replay): Skip client reports for replay failures after stop (#22177)
  • cb77f42 test: Remove fixed container_name from node integration test docker-compose f...
  • a84cc9d test(node-integration-tests): Surface early scenario exit instead of hanging ...
  • 88e3b32 feat(core): add isObjectLike guard and consolidate non-null-object checks (#2...
  • 7565c90 ref(nitro, nuxt): inline == null checks for nullish detection (#22154)
  • 256b9b9 feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • Additional commits viewable in compare view

Updates @stellar/design-system from 3.2.5 to 3.2.8

Release notes

Sourced from @​stellar/design-system's releases.

v3.2.8

What's Changed

New Contributors

Full Changelog: stellar/stellar-design-system@v3.2.7...v3.2.8

v3.2.7

What's Changed

Full Changelog: stellar/stellar-design-system@v3.2.6...v3.2.7

v3.2.6

What's Changed

Full Changelog: stellar/stellar-design-system@v3.2.5...v3.2.6

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​stellar/design-system since your current version.


Updates @tailwindcss/vite from 4.2.0 to 4.3.2

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.2

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

v4.3.1

Added

  • Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
  • Allow @apply to be used with CSS mixins (#19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#20059)
  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#20080)
  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#20103)
  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#20027)
  • Canonicalization: don't suggest invalid calc(…) expressions (e.g. px-[calc(1rem+0px)] → px-[calc(1rem+0)]) (#20127)
  • Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. left-[99999px] → left-[99999px], not left-24999.75) (#20130)
  • Ensure @tailwindcss/cli in --watch mode recovers when a tracked dependency is deleted and restored (#20137)
  • Ensure standalone @tailwindcss/cli binaries are ignored when scanning for class candidates (#20139)
  • Ensure class candidates are extracted from Twig addClass(…) and removeClass(…) calls (#20198)
  • Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (#19588)
  • Allow @variant to be used inside addBase (#19480)
  • Ensure @source globs with symlinks are preserved (#20203)
  • Ensure later @source rules can re-include files excluded by earlier @source not rules (#20203)
  • Upgrade: don't migrate empty class rules to invalid @utility rules (#20205)
  • Ensure transitions between inset-shadow-none and other inset shadows work correctly (#20208)
  • Ensure explicitly referenced @source directories are scanned even when ignored by git (#20214)
  • Ensure @source globs ending in **/* preserve dynamic path segments to avoid scanning too many files (#20217)
  • Canonicalization: don't fold calc(…) divisions when the result would require high precision (e.g. w-[calc(100%/3.5)] → w-[calc(100%/3.5)], not w-[28.571428571428573%]) (#20221)
  • Serve ESM type declarations to ESM importers of @tailwindcss/postcss (#20228)

Changed

  • Generate 0 instead of calc(var(--spacing) * 0) for spacing utilities like m-0 and left-0 (#20196)

... (truncated)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.2] - 2026-06-26

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

[4.3.1] - 2026-06-12

Added

  • Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
  • Allow @apply to be used with CSS mixins (#19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#20059)
  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#20080)
  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#20103)
  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#20027)
  • Canonicalization: don't suggest invalid calc(…) expressions (e.g. px-[calc(1rem+0px)] → px-[calc(1rem+0)]) (#20127)
  • Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. left-[99999px] → left-[99999px], not left-24999.75) (#20130)
  • Ensure @tailwindcss/cli in --watch mode recovers when a tracked dependency is deleted and restored (#20137)
  • Ensure standalone @tailwindcss/cli binaries are ignored when scanning for class candidates (#20139)
  • Ensure class candidates are extracted from Twig addClass(…) and removeClass(…) calls (#20198)
  • Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (#19588)
  • Allow @variant to be used inside addBase (#19480)
  • Ensure @source globs with symlinks are preserved (#20203)
  • Ensure later @source rules can re-include files excluded by earlier @source not rules (#20203)
  • Upgrade: don't migrate empty class rules to invalid @utility rules (#20205)
  • Ensure transitions between inset-shadow-none and other inset shadows work correctly (#20208)
  • Ensure explicitly referenced @source directories are scanned even when ignored by git (#20214)
  • Ensure @source globs ending in **/* preserve dynamic path segments to avoid scanning too many files (#20217)
  • Canonicalization: don't fold calc(…) divisions when the result would require high precision (e.g. w-[calc(100%/3.5)] → w-[calc(100%/3.5)], not w-[28.571428571428573%]) (#20221)
  • Serve ESM type declarations to ESM importers of @tailwindcss/postcss (#20228)

Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tailwindcss/vite since your current version.


Updates @tanstack/react-query from 5.90.21 to 5.101.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.2

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.2

@​tanstack/react-query-persist-client@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.2
    • @​tanstack/react-query@​5.101.2

@​tanstack/react-query@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2

@​tanstack/react-query-devtools@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.1
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query-next-experimental@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query-persist-client@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.1
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query@​5.101.1

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2

5.101.1

Patch Changes

  • Updated dependencies [9eff92e]:
    • @​tanstack/query-core@​5.101.1

5.101.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.0

5.100.14

Patch Changes

  • fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)

  • Updated dependencies []:

    • @​tanstack/query-core@​5.100.14

5.100.13

Patch Changes

  • Updated dependencies [d423168]:
    • @​tanstack/query-core@​5.100.13

5.100.12

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.12

5.100.11

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.11

... (truncated)

Commits
  • 610e8d1 ci: Version Packages (#10996)
  • 1f84256 docs: document the select typing caveat for parallel-queries hooks (#10984)
  • b809297 ci: Version Packages (#10977)
  • ccc843e test({react,preact}-query/useQueries): move type-only tests to 'useQueries.te...
  • 4154613 test({react,preact}-query/useMutation): split 'should handle conditional logi...
  • 8bb5fde test({react,preact}-query/useMutation): split 'should pass meta to mutation' ...
  • 87426a3 test(react-query): replace deprecated 'toBeCalledTimes' with 'toHaveBeenCalle...
  • feb1efd test(*): move 'vi.useRealTimers' to the end of 'afterEach' so cleanup runs un...
  • f3d8d2a ci: Version Packages (#10774)
  • 532bb29 fix(tests): disable local coverage instrumentation (#10776)
  • Additional commits viewable in compare view

Updates axios from 1.13.5 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

  • AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)
  • Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)
  • Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)
  • AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

  • Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

  • Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 11, 2026
@vercel

vercel Bot commented Jul 11, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
latterfix-frontend Error Error Jul 18, 2026 10:57am

@dependabot dependabot Bot changed the title chore(deps): bump the npm-minor group with 25 updates chore(deps): bump the npm-minor group across 1 directory with 25 updates Jul 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-0036ea842f branch from 8a10c48 to 575bbac Compare July 11, 2026 10:57
@dependabot
build(deps): bump the npm-minor group across 1 directory with 25 updates
1a5c8a6 
Bumps the npm-minor group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.39.0` | `10.65.0` |
| [@stellar/design-system](https://github.com/stellar/stellar-design-system) | `3.2.5` | `3.2.8` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.2.0` | `4.3.2` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.101.2` |
| [axios](https://github.com/axios/axios) | `1.13.5` | `1.18.1` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.34.3` | `12.42.2` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.7` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.9.6` | `7.18.1` |
| [recharts](https://github.com/recharts/recharts) | `3.7.0` | `3.9.2` |
| [zod](https://github.com/colinhacks/zod) | `4.1.13` | `4.4.3` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.11` | `5.0.14` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.21` | `4.17.24` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `17.4.2` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.24` | `0.5.3` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.5.3` | `4.9.0` |
| [glob](https://github.com/isaacs/node-glob) | `13.0.0` | `13.0.6` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.5` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.48.1` | `8.63.0` |
| [vite-plugin-node-polyfills](https://github.com/davidmyersdev/vite-plugin-node-polyfills) | `0.24.0` | `0.28.0` |
| [vite-plugin-wasm](https://github.com/Menci/vite-plugin-wasm) | `3.5.0` | `3.6.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.10` |



Updates `@sentry/react` from 10.39.0 to 10.65.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.39.0...10.65.0)

Updates `@stellar/design-system` from 3.2.5 to 3.2.8
- [Release notes](https://github.com/stellar/stellar-design-system/releases)
- [Commits](stellar/stellar-design-system@v3.2.5...v3.2.8)

Updates `@tailwindcss/vite` from 4.2.0 to 4.3.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-vite)

Updates `@tanstack/react-query` from 5.90.21 to 5.101.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.2/packages/react-query)

Updates `axios` from 1.13.5 to 1.18.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.5...v1.18.1)

Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.1.0...v4.4.0)

Updates `framer-motion` from 12.34.3 to 12.42.2
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.34.3...v12.42.2)

Updates `react` from 19.2.0 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.2.7 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.0 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `react-router-dom` from 7.9.6 to 7.18.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom)

Updates `recharts` from 3.7.0 to 3.9.2
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.7.0...v3.9.2)

Updates `tailwindcss` from 4.2.0 to 4.3.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/tailwindcss)

Updates `zod` from 4.1.13 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.1.13...v4.4.3)

Updates `zustand` from 5.0.11 to 5.0.14
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.11...v5.0.14)

Updates `@types/lodash` from 4.17.21 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/react` from 19.2.7 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `dotenv` from 17.2.3 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.3...v17.4.2)

Updates `eslint-plugin-react-refresh` from 0.4.24 to 0.5.3
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.24...v0.5.3)

Updates `fast-check` from 4.5.3 to 4.9.0
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.9.0/packages/fast-check)

Updates `glob` from 13.0.0 to 13.0.6
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v13.0.0...v13.0.6)

Updates `prettier` from 3.6.2 to 3.9.5
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.9.5)

Updates `typescript-eslint` from 8.48.1 to 8.63.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/typescript-eslint)

Updates `vite-plugin-node-polyfills` from 0.24.0 to 0.28.0
- [Release notes](https://github.com/davidmyersdev/vite-plugin-node-polyfills/releases)
- [Commits](davidmyersdev/vite-plugin-node-polyfills@v0.24.0...v0.28.0)

Updates `vite-plugin-wasm` from 3.5.0 to 3.6.0
- [Commits](Menci/vite-plugin-wasm@v3.5.0...v3.6.0)

Updates `vitest` from 4.0.18 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@sentry/react"
  dependency-version: 10.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@stellar/design-system"
  dependency-version: 3.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@types/lodash"
  dependency-version: 4.17.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: fast-check
  dependency-version: 4.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: framer-motion
  dependency-version: 12.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: prettier
  dependency-version: 3.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: react-router-dom
  dependency-version: 7.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: recharts
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: tailwindcss
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: vite-plugin-node-polyfills
  dependency-version: 0.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: vite-plugin-wasm
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: vitest
  dependency-version: 4.1.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: zustand
  dependency-version: 5.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the npm-minor group across 1 directory with 25 updates build(deps): bump the npm-minor group across 1 directory with 25 updates Jul 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-0036ea842f branch from 575bbac to 1a5c8a6 Compare July 18, 2026 10:56
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-0036ea842f branch August 1, 2026 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants