deps(deps): bump the major-updates group in /app with 23 updates

[dependabot]

Bumps the major-updates group in /app with 23 updates:

Package	From	To
@headlessui/react	1.7.18	2.2.6
bcryptjs	2.4.3	3.0.2
@types/bcryptjs	2.4.6	3.0.0
date-fns	3.6.0	4.1.0
dotenv	16.5.0	17.2.1
mapbox-gl	1.13.3	3.13.0
plotly.js	2.35.3	3.0.3
@types/plotly.js	2.35.5	3.0.2
react-datepicker	6.1.0	8.4.0
react-day-picker	8.10.1	9.8.0
react-is	18.3.1	19.1.0
react-resizable-panels	2.1.3	3.0.3
recharts	2.15.3	3.1.0
sonner	1.5.0	2.0.6
tailwind-scrollbar-hide	1.1.7	4.0.0
vaul	0.9.9	1.1.2
@next/swc-wasm-nodejs	13.5.1	15.4.4
@types/node	20.6.2	24.1.0
@typescript-eslint/eslint-plugin	7.0.0	8.38.0
@typescript-eslint/parser	7.0.0	8.38.0
eslint-plugin-react-hooks	4.6.0	5.2.0
tailwind-merge	2.5.2	3.3.1
tailwindcss	3.3.3	4.1.11

Updates @headlessui/react from 1.7.18 to 2.2.6

Release notes

Sourced from @​headlessui/react's releases.

@​headlessui/react@​v2.2.6

Fixed

• Fix immediately closing Listbox by requiring some cursor movement (#3762)

@​headlessui/react@​v2.2.5

Fixed

• Fix listbox closing immediately after opening on touch devices (#3755)

@​headlessui/react@​v2.2.4

Fixed

• Fix Combobox error (unexpected undefined) when using virtual mode (#3734)

@​headlessui/react@​v2.2.3

Added

• Add a quick trigger action to the Menu, Listbox and Combobox components (#3700)

Fixed

• Fix clicking Label component should open <Input type="file"> (#3707)
• Ensure clicking on interactive elements inside Label component works (#3709)
• Fix focus not returned to SVG Element (#3704)
• Fix Listbox not focusing first or last option on ArrowUp / ArrowDown (#3721)
• Performance improvement: only re-render top-level component when nesting components e.g.: Menu inside a Dialog (#3722)
• Fix closing Menu when other Menu is opened (#3726)

@​headlessui/react@​v2.2.2

Fixed

• Improve Menu component performance (#3685)
• Improve Listbox component performance (#3688)
• Improve Combobox component performance (#3697)
• Open Menu and Listbox on mousedown (#3689)
• Fix Transition component from incorrectly exposing the Closing state (#3696)

@​headlessui/react@​v2.2.1

Added

• Accept tabIndex on the Checkbox component (#3645)
• Accept tabIndex on the RadioGroup component (#3646)

Fixed

• Use correct ownerDocument when using internal Portal component (#3594)
• Bump @tanstack/react-virtual to fix warnings in React 19 projects (#3588)
• Fix aria-invalid attributes to have a valid 'true' value (#3639)
• Add missing invalid prop to Combobox component (#3677)

... (truncated)

Changelog

Sourced from @​headlessui/react's changelog.

[2.2.6] - 2025-07-24

Fixed

• Fix immediately closing Listbox by requiring some cursor movement (#3762)

[2.2.5] - 2025-07-23

Fixed

• Fix listbox closing immediately after opening on touch devices (#3755)

[2.2.4] - 2025-05-20

Fixed

• Fix Combobox error (unexpected undefined) when using virtual mode (#3734)

[2.2.3] - 2025-05-12

Added

• Add a quick trigger action to the Menu, Listbox and Combobox components (#3700)

Fixed

• Fix clicking Label component should open <Input type="file"> (#3707)
• Ensure clicking on interactive elements inside Label component works (#3709)
• Fix focus not returned to SVG Element (#3704)
• Fix Listbox not focusing first or last option on ArrowUp / ArrowDown (#3721)
• Performance improvement: only re-render top-level component when nesting components e.g.: Menu inside a Dialog (#3722)
• Fix closing Menu when other Menu is opened (#3726)

[2.2.2] - 2025-04-17

Fixed

• Improve Menu component performance (#3685)
• Improve Listbox component performance (#3688)
• Open Menu and Listbox on mousedown (#3689)
• Fix Transition component from incorrectly exposing the Closing state (#3696)
• Improve Combobox component performance (#3697)

[2.2.1] - 2025-04-04

Added

• Accept tabIndex on the Checkbox component (#3645)
• Accept tabIndex on the RadioGroup component (#3646)

... (truncated)

Commits

• 51b5bf6 2.2.6 - @​headlessui/react
• 0a14649 Improve quick release by requiring some cursor movement (#3762)
• 2ff307c 2.2.5 - @​headlessui/react
• 3b7c0b6 Fix listbox closing immediately after opening on touch devices (#3755)
• 38986df update READMEs
• 0933dd5 chore: remove redundant word in comment (#3742)
• bc76bbd 2.2.4 - @​headlessui/react
• 17f75c3 update changelog
• d689bbc Fix Combobox issue when using virtual mode (#3734)
• 8a24040 2.2.3 - @​headlessui/react
• Additional commits viewable in compare view

Updates bcryptjs from 2.4.3 to 3.0.2

Release notes

Sourced from bcryptjs's releases.

v3.0.2

Bug fixes

• Use upstream fix to emit interop helpers (28e510389374f5736c447395443d4a6687325048)

v3.0.1

Bug fixes

• Separate ESM and UMD type definitions (e7055caf0c723cbcf8bc3f0784b8c30ee332380f)

v3.0.0

Breaking changes

• Modernize project structure (2f45985738604c743c4b8cc8464e3e7d3e04c73d) The project now exports an ECMAScript module by default, albeit with an UMD fallback, ships with types, the dist/ directory no longer exists in version control, and Closure Compiler externs have been removed.
• Generate 2b hashes by default (d36bfb42fa642b6d6986a84ce106a7110e5824db) This library was not affected by the bug that led to incrementing the bcrypt version from 2a to 2b, but nowadays most implementations use 2b, including the native bcrypt binding, so this change aligns with them. Existing hashes will continue to work, but test logic that generates hashes and compares them literally might need to be updated to account for the new default.

Features

• Add helper to check for password input length (d5656b39e2e368c87724a312e4e454456a4e5d1b)

Other

• Update publish workflow (2a9bea9e276e6be04dbd403f9695937788b3b10a)
• Add note on using the ESM variant in the browser (e09eb9afb14170069aaea19631b763307ee7b480)
• Update types (58333a1533dd53838e2697628f84b98d54a5c079)
• Merge lint and test workflows (2e3b17659e8856696acfe3015631ce2989eb3084)
• Fix tests (ec02e8a0ada7a8f6c71a91df164db8c25bbbb7b4)
• Update legacy fallback to handle crypto dependency (9db275fa10b1b40da4a6844480d7f8ae8df27fb8)
• Update lint workflow title (ac70ac57c2f99ad5639eddf54578e5fdd07b9c4c)
• Adapt crypto module usage for ESM environments (574d690d4972bcebbd5ca07880a62abab9ae3c0b)
• Format with prettier (e7465479282d8155852ce88d6407eccb14adc106)
• Rename default branch to 'main' (548559d032d7dd5ac3e4e16d7afd87b36ebe96ca)
• Update description to mention TypeScript support (4977df0849eaf8cad5b0d0b543fe452432a2d761)
• Add stale action for issues and PRs (a84d4e45487df0972d8781feafa477d5db4c1dbd)
• Fix typo (c8c9c01799bbc13092fcbb20cfab4d9015d14c61)
• Fix Node.js version in CI (1b54cc48d4120b50e1d9058e5a67f326102fd744)

Backlog from v2

• Added externs to .npmignore (#124) (7e2e93af99df2952253f9cf32db29aefa8f272f7) The npm package does not need externs as it is needed only for closure compiler. Added it in .npmignore since bcryptjs overrides global module and process in WebStorm IDE.
• Make sure the bin script uses LF (684fac6814a81d974c805a15e22fd69922c7ca6e)
• Post-merge; Clean up a bit (b09f7f266a7015456b7b36deeb026dc636f64542)
• Improve safeStringCompare using xor (#77) (648482a5395bef074ad34e52759fede957a89397)
• Added bin entry (49a1d1ab46d22ac02659cb787ded08d644f79cb5)

Commits

• 28e5103 fix: Use upstream fix to emit interop helpers
• e7055ca fix: Separate ESM and UMD type definitions
• 2a9bea9 Update publish workflow
• d5656b3 Add helper to check for password input length
• e09eb9a Add note on using the ESM variant in the browser
• 58333a1 Update types
• 2e3b176 Merge lint and test workflows
• ec02e8a Fix tests
• 9db275f Update legacy fallback to handle crypto dependency
• ac70ac5 Update lint workflow title
• Additional commits viewable in compare view

Updates @types/bcryptjs from 2.4.6 to 3.0.0

Commits

• See full diff in compare view

Updates date-fns from 3.6.0 to 4.1.0

Release notes

Sourced from date-fns's releases.

v4.1.0

This release adds time zone support to format functions (that I somehow missed when working on the feature) and fixes a few bugs.

Make sure also upgrade TZDate to v1.0.2 as it includes a bunch of critical bug fixes.

Fixed

• Fixed internal constructFrom throwing an exception on null arguments. While null isn't allowed, the functions should rather return Invalid Date or NaN in such cases. See #3885.

Added

• Added missing time zone support to format, formatISO, formatISO9075, formatRelative and formatRFC3339. See #3886.

v4.0.0

I have great news! First, ten years after its release, date-fns finally gets first-class time zone support.

Another great news is that there aren't many breaking changes in this release. All of them are type-related and will affect only those explicitly using internal date-fns types. Finally, it has been less than a year since the last major release, which is an improvement over the previous four years between v2 and v3. I plan on keeping the pace and minimizing breaking changes moving forward.

Read more about the release in the announcement blog post.

- Sasha @​kossnocorp

Added

• Added time zones support via @date-fns/tz's TZDate class and tz helper function. See its README for the details about the API.

• All relevant functions now accept the context in option, which allows to specify the time zone to make the calculations in. If the function also returns a date, it will be in the specified time zone:

  import { addDays, startOfDay } from "date-fns";
  import { tz } from "@date-fns/tz";
  startOfDay(addDays(Date.now(), 5, { in: tz("Asia/Singapore") }));
  //=> "2024-09-16T00:00:00.000+08:00"

  In the example, addDays will get the current date and time in Singapore and add 5 days to it. startOfDay will inherit the date type and return the start of the day in Singapore.

Changed

• The function arguments, as well as Interval's start and end, now can be of different types, allowing you to mix UTCDate, TZDate, Date, and other extensions, as well as primitives (strings and numbers).

  The functions will normalize these values, make calculations, and return the result in the same type, preventing any bugs caused by the discrepancy. If passed, the type will be inferred from the context in option or the first encountered argument object type. The Interval's start and end will be considered separately, starting from start.

  In the given example, the result will be in the TZDate as the first argument is a number, and the start takes precedence over the end.

  clamp(Date.now(), {
    start: new TZDate(start, "Asia/Singapore"),
    end: new UTCDate(),

... (truncated)

Changelog

Sourced from date-fns's changelog.

v4.1.0 - 2024-09-17

This release adds time zone support to format functions (that I somehow missed when working on the feature) and fixes a few bugs.

Make sure also upgrade TZDate to v1.0.2 as it includes a bunch of critical bug fixes.

Fixed

• Fixed internal constructFrom throwing an exception on null arguments. While null isn't allowed, the functions should rather return Invalid Date or NaN in such cases. See #3885.

Added

• Added missing time zone support to format, formatISO, formatISO9075, formatRelative and formatRFC3339. See #3886.

v4.0.0 - 2024-09-16

I have great news! First, ten years after its release, date-fns finally gets first-class time zone support.

Another great news is that there aren't many breaking changes in this release. All of them are type-related and will affect only those explicitly using internal date-fns types. Finally, it has been less than a year since the last major release, which is an improvement over the previous four years between v2 and v3. I plan on keeping the pace and minimizing breaking changes moving forward.

Read more about the release in the announcement blog post.

- Sasha @​kossnocorp

Added

• Added time zones support via @date-fns/tz's TZDate class and tz helper function. See its README for the details about the API.

• All relevant functions now accept the context in option, which allows to specify the time zone to make the calculations in. If the function also returns a date, it will be in the specified time zone:

  import { addDays, startOfDay } from "date-fns";
  import { tz } from "@date-fns/tz";
  startOfDay(addDays(Date.now(), 5, { in: tz("Asia/Singapore") }));
  //=> "2024-09-16T00:00:00.000+08:00"

  In the example, addDays will get the current date and time in Singapore and add 5 days to it. startOfDay will inherit the date type and return the start of the day in Singapore.

Changed

• The function arguments, as well as Interval's start and end, now can be of different types, allowing you to mix UTCDate, TZDate, Date, and other extensions, as well as primitives (strings and numbers).

  The functions will normalize these values, make calculations, and return the result in the same type, preventing any bugs caused by the discrepancy. If passed, the type will be inferred from the context in option or the first encountered argument object type. The Interval's start and end will be considered separately, starting from start.

  In the given example, the result will be in the TZDate as the first argument is a number, and the start takes precedence over the end.

  clamp(Date.now(), {

... (truncated)

Commits

• 313b902 Fix v4.1.0 change log entry
• 26cd336 Promote to v4.1.0
• 97b53b9 Cover time zone edge cases
• 59b7563 Add missing time zone support to format, formatISO, formatISO9075, formatRela...
• 0121164 Prevent constructFrom from throwing an error on null
• bd87ef5 Update @​date-fns/docs
• 99b4e67 Prepare v4.0
• 8df1706 Rewrite the time zones doc
• e351977 Promote to v4.0.0-beta.1
• 8523656 Fix scripts/test/types.sh
• Additional commits viewable in compare view

Updates dotenv from 16.5.0 to 17.2.1

Changelog

Sourced from dotenv's changelog.

17.2.1 (2025-07-24)

Changed

• Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

• Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)
• Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})

# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"

// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)

$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js

17.1.0 (2025-07-07)

Added

• Add additional security and configuration tips to the runtime log (#884)
• Dim the tips text from the main injection information text

const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
  '🛠️  run anywhere with `dotenvx run -- yourcommand`',
  '⚙️  specify custom .env file path with { path: \'/custom/path/.env\' }',
  '⚙️  enable debug logging with { debug: true }',
  '⚙️  override existing env vars with { override: true }',
  '⚙️  suppress all logs with { quiet: true }',
  '⚙️  write to custom object with { processEnv: myObject }',
</tr></table> 

... (truncated)

Commits

• 37cf55a 17.2.1
• f2d92e9 changelog 🪵
• bd27017 Merge pull request #897 from motdotla/adjust-tip-for-click
• 8a9ce45 add to tests
• 19e5ad9 adjust clickable tip
• 4186757 Merge pull request #894 from mjomble/patch-1
• 04322a6 Merge pull request #895 from andersr/add-es6-config-info-to-readme
• 1102cab Add info about ES6 import with config options
• 5566b77 Fixed link in changelog
• 11acd9f 17.2.0
• Additional commits viewable in compare view

Updates mapbox-gl from 1.13.3 to 3.13.0

Release notes

Sourced from mapbox-gl's releases.

v3.13.0

Breaking changes ⚠️

• interpolate expression will interpolate between non-alpha-premultiplied colors. The change might affect raster-particle-color, line-gradient, and heatmap-color.
• rgb expression will return non-premultiplied-alpha color.

Features and improvements ✨

• Add the ["worldview"] expression, which returns the current worldview of the map.
• Add model-translation support for batched model layers.
• Improve indoor level interaction.
• Add support of gradient transforms in the fill style of vector icons.

Bug fixes 🐞

• Fix querying and styling issues with multiple model layers referencing the same source.
• Fix mapbox-gl-rtl-text v0.3.0 plugin not loading in certain configurations.
• Fix icons with text-variable-anchor disappearing.
• Fix minor distortions on vector icons in some cases.
• Fix zooming over terrain with negative altitude values.
• Fix interactions to not throw on mouseleave without mouseenter.
• Fix shadow rendering issues on underground structures.
• Fix striping artifacts when rendering shadows on some GPU configurations.
• Fix errors when viewing a style with filtered model layers.
• Fix parsing of color-use-theme property of 3D lights.
• Fix feature-dependent config expressions (h/t @​brncsk) #13453.
• Fix reset of the indoor floorplan selection after moving the camera.
• Fix excessive rerendering of the map after setStyle with the same URL of an import.
• Fix source reloading during mercator-globe transition with terrain.
• Fix color of semi-transparent vector icons.

Workflow 🛠️

• Switched from CircleCI to GitHub Actions for continuous integration tests.

v3.13.0-beta.1

Breaking changes ⚠️

• interpolate expression will interpolate between non-alpha-premultiplied colors. The change might affect raster-particle-color, line-gradient, and heatmap-color.
• rgb expression will return non-premultiplied-alpha color.

Features and improvements ✨

• Add the ["worldview"] expression, which returns the current worldview of the map.
• Add model-translation support for batched model layers.
• Improve indoor level interaction.
• Add support of gradient transforms in the fill style of vector icons.

Bug fixes 🐞

• Fix icons with text-variable-anchor disappearing.
• Fix zooming over terrain with negative altitude values.
• Fix interactions to not throw on mouseleave without mouseenter.
• Fix errors when viewing a style with filtered model layers.
• Fix parsing of color-use-theme property of 3D lights.
• Fix feature-dependent config expressions (h/t @​brncsk) #13453.

... (truncated)

Changelog

Sourced from mapbox-gl's changelog.

3.13.0

Breaking changes ⚠️

• interpolate expression will interpolate between non-alpha-premultiplied colors. The change might affect raster-particle-color, line-gradient, and heatmap-color.
• rgb expression will return non-premultiplied-alpha color.

Features and improvements ✨

• Add the ["worldview"] expression, which returns the current worldview of the map.
• Add model-translation support for batched model layers.
• Improve indoor level interaction.
• Add support of gradient transforms in the fill style of vector icons.

Bug fixes 🐞

• Fix querying and styling issues with multiple model layers referencing the same source.
• Fix mapbox-gl-rtl-text v0.3.0 plugin not loading in certain configurations.
• Fix icons with text-variable-anchor disappearing.
• Fix minor distortions on vector icons in some cases.
• Fix zooming over terrain with negative altitude values.
• Fix interactions to not throw on mouseleave without mouseenter.
• Fix shadow rendering issues on underground structures.
• Fix striping artifacts when rendering shadows on some GPU configurations.
• Fix errors when viewing a style with filtered model layers.
• Fix parsing of color-use-theme property of 3D lights.
• Fix feature-dependent config expressions (h/t @​brncsk) #13453.
• Fix reset of the indoor floorplan selection after moving the camera.
• Fix excessive rerendering of the map after setStyle with the same URL of an import.
• Fix source reloading during mercator-globe transition with terrain.
• Fix color of semi-transparent vector icons.

Workflow 🛠️

• Switched from CircleCI to GitHub Actions for continuous integration tests.

3.12.0

Features and improvements ✨

• Add experimental support for rendering 3D road intersections.
• Add shadow rendering support for elevated lines.
• Add wrapTileId property to CustomLayerInterface to control whether tile IDs are wrapped across world copies during rendering.
• Add line-pattern-cross-fade, fill-pattern-cross-fade, and fill-extrusion-pattern-cross-fade properties for smooth transitions between pattern images.
• Add support for extra_bounds in TileJSON for more fine-grained control over tile requests, particularly when dealing with sparse data coverage.
• Improve performance by lazy loading 3D models.
• Slightly improve JS bundle sizes.
• Various TypeScript types improvements.

Bug fixes 🐞

• Fixed an issue where calling setData on symbol layers could cause flickering.
• Expose CustomSourceInterface TypeScript type that was missing in the public interface.

... (truncated)

Commits

• ed45b27 v3.13.0
• 65bfa1c [GLJS-1075] Fix loading of mapbox-gl-rtl-plugin@0.3+ (internal-2599)
• c8cac7c Bump @​types/node from 22.15.30 to 24.0.3 (internal-2609)
• 2720db9 Bump tsx from 4.19.4 to 4.20.3 (internal-2608)
• a0828bb Bump eslint-plugin-jsdoc from 50.7.1 to 51.0.1 (internal-2607)
• f21d8c5 Bump postcss from 8.5.4 to 8.5.6 (internal-2605)
• ac5c579 Bump playwright from 1.52.0 to 1.53.0 (internal-2604)
• 6370d92 Bump glob from 11.0.2 to 11.0.3 (internal-2603)
• 9bacb22 Bump the typescript-eslint-dependencies group with 3 updates (internal-2602)
• f4d6f49 Bump @​rollup/plugin-commonjs from 28.0.3 to 28.0.5 in the rollup-dependencies...
• Additional commits viewable in compare view

Updates plotly.js from 2.35.3 to 3.0.3

Release notes

Sourced from plotly.js's releases.

v3.0.3

Fixed

• Remove detailed description of font options [7348]

v3.0.2

Fixed

• Fix installing dependencies in node v22 [#7381], with thanks to @​chaigh-uk for the contribution!
• Fix Persian calendar leap year [#7456]
• Fix scroll wheel zoom for geo subplots in Safari [#7474]
• Add method to check for WebKit WebView user agent string [#7479]
• Fix edit colorbar title [7487]

v3.0.1

Changed

• Update color-rgba from 2.1.1 to 3.0.0 to fix hsl color conversion bug [#7325]

Fixed

• Fix click event handling for plots in shadow DOM elements [#7357]
• Fix hoverlabels and other text labels with null values templated in [#7360]
• Fix importing plotly.js via require on pages with AMD [#7367]
• Update Romanian locale [#7351]
• Update Italian locale [#4425]
• Update Turkish locale [#7352]

v3.0.0

Removed

• Drop support for passing a string to the title attribute, and drop support for deprecated attributes titlefont, titleposition, titleside, and titleoffset (use title.text, title.font, title.side, title.offset instead)[#7212]
• Drop deprecated pointcloud and heatmapgl traces and gl2d subplots [#7213] Drop support for deprecated bardir attribute (use orientation instead) [#7214]
• Drop support for deprecated annotation.ref attribute (use annotation.xref and annotation.yref instead) [#7215]
• Drop support for deprecated error bar opacity attribute (use alpha channel of error bar color attribute instead) [#7214]
• Drop support for deprecated attribute gl3d.cameraposition (use gl3d.camera instead) [#7217]
• Drop deprecated plot3dPixelRatio from config [#7231]
• Drop deprecated zauto, zmin and zmax from the surface trace [#7234]
• Drop deprecated autotick attributes from cartesian axes [#7236]
• Drop transforms from the API [#7240, #7254]
• Drop jQuery events support [#7224]
• Drop the AMD support from the bundle header [#7229]

Changed

• Switch from webpack to esbuild for fast builds & testing as well as allowing modern JavaScript beyond es5 [#6909]
• Make offsetgroup work with barmode "stacked" and "relative" for bar traces [#7009]
• Node v18 required for development [#7116]
• Cleanup remaining code that was there to support the Internet Explorer [#7251]
• Deprecate mapbox traces and provide links to migration docs for plotly.js and plotly.py users [#7260]

Fixed

• Remove inline styles that break plots in strict CSP setups [#7109], with thanks to @​martian111 for the contribution!
• Allow null or broken selection objects without throwing an error [#7164]

... (truncated)

Changelog

Sourced from plotly.js's changelog.

[3.0.3] -- 2025-07-23

Fixed

• Remove detailed description of font options [7348]

[3.0.2] -- 2025-07-22

Fixed

• Fix installing dependencies in node v22 [#7381], with thanks to @​chaigh-uk for the contribution!
• Fix Persian calendar leap year [#7456]
• Fix scroll wheel zoom for geo subplots in Safari #7474
• Add method to check for WebKit WebView user agent string [#7479]
• Fix edit colorbar title 7487

[3.1.0-rc.0] -- 2025-07-15

Added

• Add property zerolinelayer to cartesian axes to allow drawing zeroline above traces [#7269]
• Add pattern.path attribute as an alternative to the preset pattern.shape values, so you can use any SVG path string as a pattern fill. [#7280]
• Allow configuration of horizontal legend max height [#7359]
• Add support for ticklabelposition "inside"/"outside" for category axes with tickson set to "boundaries" [#7420], with thanks to @​my-tien for the contribution!

Changed

• Switch to United Nations (coastlines, countries, land, ocean) + Natural Earth (lakes, rivers, subunits) geodata for building topojson used in geo plot [#7393]
• Make 'png' all caps [#7400]

Fixed

• Fix installing dependencies in node v22 [#7381], with thanks to @​chaigh-uk for the contribution!
• Fix performance warning in scattergl traces, [#7390], with thanks to @​MzyzzG for the contribution!
• Move css-loader and other dependencies into devDependencies section [#7407]
• Fix Persian calendar leap year [#7456]

[3.0.1] -- 2025-02-18

Changed

• Update color-rgba from 2.1.1 to 3.0.0 to fix hsl color conversion bug [#7325]

Fixed

• Fix click event handling for plots in shadow DOM elements [#7357]
• Fix hoverlabels and other text labels with null values templated in [#7360]
• Fix importing plotly.js via require on pages with AMD [#7367]
• Update Romanian locale [#7351]
• Update Italian locale [#4425]
• Update Turkish locale [#7352]

[3.0.0] -- 2025-01-27

... (truncated)

Commits

• 2bb6513 3.0.3
• d085879 Update changelog
• ffe2a7d Update version, date in documentation
• 6d8a361 feat: remove detailed description of font options and regenerate schema
• b8cff10 3.0.2
• 25568e5 Update changelog
• 08da356 Update version, date in documentation
• c7934f2 add sane-topojson to package-lock
• d50719d copy package-lock from master
• 4316461 update package.json
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by packages-team-plotly, a new releaser for plotly.js since your current version.

Updates @types/plotly.js from 2.35.5 to 3.0.2

Commits

• See full diff in compare view

Updates react-datepicker from 6.1.0 to 8.4.0

Release notes

Sourced from react-datepicker's releases.

8.4.0

What's Changed

• Fix readOnly prop for a clearButton and inline calendare by @​SergeyKazarinov in Hacker0x01/react-datepicker#5564
• Fix #5573 🐛 Fix the Selected Year Picker style when no date is selected by @​balajis-qb in Hacker0x01/react-datepicker#5584
• Parse date range with dashes by @​alexz-sg in Hacker0x01/react-datepicker#5578
• Include SCSS files in exports by @​saltire in Hacker0x01/react-datepicker#5560
• 🐛 Add missing datepicker close call onPopperKeyDown event - to handle ESC keydown event outside the day component by @​balajis-qb in Hacker0x01/react-datepicker#5621
• 🐛 Fix EndDatePicker selection range progress by @​balajis-qb in Hacker0x01/react-datepicker#5619
• Add Claude Code GitHub Workflow by @​martijnrusschen in Hacker0x01/react-datepicker#5640
• Move away from @​import by @​martijnrusschen in Hacker0x01/react-datepicker#5426
• 🐛 Apply --keyboard-selected to only if it's not already selected by @​balajis-qb in Hacker0x01/react-datepicker#5651

New Contributors

• @​alexz-sg made their first contribution in Hacker0x01/react-datepicker#5578

Full Changelog: Hacker0x01/react-datepicker@v8.3.0...v8.4.0

8.3.0

What's Changed

• 🐛🎨 Apply the --selected class for the YearPicker when the selectsMultiple is enabled by @​balajis-qb in Hacker0x01/react-datepicker#5524
• Fix #5502: 🐛 Fix '--in-selecting-range' class apply condition for End Date Picker by @​balajis-qb in Hacker0x01/react-datepicker#5503
• 🎨🔨 Re-adjust the height of TimePicker on Calendar resize due to number of days by @​balajis-qb in Hacker0x01/react-datepicker#5539

Full Changelog: Hacker0x01/react-datepicker@v8.2.1...v8.3.0

8.2.1

What's Changed

• Remove console.log from deferBlur by @​ryangreenberg in Hacker0x01/react-datepicker#5482

New Contributors

• @​ryangreenberg made their first contribution in Hacker0x01/react-datepicker#5482

Full Changelog: Hacker0x01/react-datepicker@v8.2.0...v8.2.1

8.2.0

What's Changed

• 🔧 Update the production build script config to include css:modules:prod by @​balajis-qb in Hacker0x01/react-datepicker#5436
• Fix #5366: 🐛 Fix the re-focus issue of the DatePicker element when the open state is controlled manually by @​balajis-qb in Hacker0x01/react-datepicker#5448
• fix: set css class for the current quarter by @​maksimyaromin in Hacker0x01/react-datepicker#5472
• fix: 5428 ContainerRef Propagation by @​yuki0410-dev in Hacker0x01/react-datepicker#5456

New Contributors

• @​maksimyaromin made their first contribution in Hacker0x01/react-datepicker#5472

Full Changelog: Hacker0x01/react-datepicker@v8.1.0...v8.2.0

8.1.0

What's Changed

• Fix #5274: 🐛 Auto refresh the input value with the previously entered valid value if any invalid value is entered (when the open state is closed) by @​balajis-qb in Hacker0x01/react-datepicker#5417
• Fix: Make CalendarIconProps.icon optional to prevent type error by @​jingjing2222 in Hacker0x01/react-datepicker#5406

... (truncated)

Commits

• 20e2a1c 8.4.0
• 7261a2e Merge pull request #5651 from qburst/issue-5643/fix/keyboard-selected-month
• a8f4b99 🐛 Apply --keyboard-selected to <Month /> only if it's not already selected
• 9a234e8 Merge pull request #5558 from Hacker0x01/dependabot/npm_and_yarn/stylelint-co...
• 1d54260 Fix linter
• e396d41 fix: disable problematic color-function-alias-notation rule
• f677c68 Merge pull request #5635 from Hacker0x01/dependabot/npm_and_yarn/docs-site/es...
• 60b74e9 Merge pull request #5629 from Hacker0x01/dependabot/npm_and_yarn/docs-site/ty...
• 6009b85 chore(deps-dev): bump eslint from 9.26.0 to 9.27.0 in /docs-site
• 4ed2c16 chore(deps-dev): bump @​types/react-dom in /docs-site
• Additional commits viewable in compare view

Updates react-day-picker from 8.10.1 to 9.8.0

Release notes

Sourced from

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.