chore(deps): bump the minor-patch group across 1 directory with 16 updates

[dependabot]

Bumps the minor-patch group with 16 updates in the /frontend directory:

Package	From	To
@tailwindcss/vite	4.1.14	4.1.16
@tanstack/react-query	5.90.3	5.90.5
axios	1.12.2	1.13.1
lucide-react	0.545.0	0.548.0
react-i18next	16.0.1	16.2.2
react-router	7.9.4	7.9.5
tailwindcss	4.1.14	4.1.16
@eslint/js	9.37.0	9.38.0
@tanstack/eslint-plugin-query	5.91.0	5.91.2
@types/node	24.7.2	24.9.2
@vitejs/plugin-react	5.0.4	5.1.0
eslint	9.37.0	9.38.0
eslint-plugin-react-hooks	7.0.0	7.0.1
eslint-plugin-react-refresh	0.4.23	0.4.24
typescript-eslint	8.46.1	8.46.2
vite	7.1.10	7.1.12

Updates @tailwindcss/vite from 4.1.14 to 4.1.16

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.1.16

Fixed

• Discard candidates with an empty data type (#19172)
• Fix canonicalization of arbitrary variants with attribute selectors (#19176)
• Fix invalid colors due to nested & (#19184)
• Improve canonicalization for & > :pseudo and & :pseudo arbitrary variants (#19178)

v4.1.15

Fixed

• Fix Safari devtools rendering issue due to color-mix fallback (#19069)
• Suppress Lightning CSS warnings about :deep, :slotted, and :global (#19094)
• Fix resolving theme keys when starting with the name of another theme key in JS configs and plugins (#19097)
• Allow named groups in combination with not-*, has-*, and in-* (#19100)
• Prevent important utilities from affecting other utilities (#19110)
• Don’t index into strings with the theme(…) function (#19111)
• Fix parsing issue when \t is used in at-rules (#19130)
• Upgrade: Canonicalize utilities containing 0 values (#19095)
• Upgrade: Migrate deprecated break-words to wrap-break-word (#19157)

Changed

• Remove the postinstall script from oxide (#19149)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.1.16] - 2025-10-23

Fixed

• Discard candidates with an empty data type (#19172)
• Fix canonicalization of arbitrary variants with attribute selectors (#19176)
• Fix invalid colors due to nested & (#19184)
• Improve canonicalization for & > :pseudo and & :pseudo arbitrary variants (#19178)

[4.1.15] - 2025-10-20

Fixed

• Fix Safari devtools rendering issue due to color-mix fallback (#19069)
• Suppress Lightning CSS warnings about :deep, :slotted, and :global (#19094)
• Fix resolving theme keys when starting with the name of another theme key in JS configs and plugins (#19097)
• Allow named groups in combination with not-*, has-*, and in-* (#19100)
• Prevent important utilities from affecting other utilities (#19110)
• Don’t index into strings with the theme(…) function (#19111)
• Fix parsing issue when \t is used in at-rules (#19130)
• Upgrade: Canonicalize utilities containing 0 values (#19095)
• Upgrade: Migrate deprecated break-words to wrap-break-word (#19157)

Changed

• Remove the postinstall script from oxide (#19149)(tailwindlabs/tailwindcss#19149)

Commits

• cbbbe84 Release 4.1.16 (#19185)
• b2e2435 Release 4.1.15 (#19159)
• 89cbfc7 Add optimize option to @tailwindcss/vite plugin (#19131)
• See full diff in compare view

Updates @tanstack/react-query from 5.90.3 to 5.90.5

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-persist-client@​5.90.5

Patch Changes

• Updated dependencies [4e1c433]:
  • @​tanstack/react-query@​5.90.3
  • @​tanstack/query-persist-client-core@​5.91.2

@​tanstack/react-query@​5.90.5

Patch Changes

• Updated dependencies [e42ddfe]:
  • @​tanstack/query-core@​5.90.5

@​tanstack/react-query-persist-client@​5.90.4

Patch Changes

• Updated dependencies [846d53d]:
  • @​tanstack/query-persist-client-core@​5.91.1
  • @​tanstack/react-query@​5.90.2

@​tanstack/react-query@​5.90.4

Patch Changes

• Updated dependencies [20ef922]:
  • @​tanstack/query-core@​5.90.4

Changelog

Sourced from @​tanstack/react-query's changelog.

5.90.5

Patch Changes

• Updated dependencies [e42ddfe]:
  • @​tanstack/query-core@​5.90.5

5.90.4

Patch Changes

• Updated dependencies [20ef922]:
  • @​tanstack/query-core@​5.90.4

Commits

• ecdf962 ci: Version Packages (#9773)
• e42ddfe fix(core): observing "promise" needs to implicitly observe "data" (#9772)
• cfc755c ci: Version Packages (#9770)
• See full diff in compare view

Updates axios from 1.12.2 to 1.13.1

Release notes

Sourced from axios's releases.

Release v1.13.1

Release notes:

Bug Fixes

• http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#7193) (bcd5581)

Contributors to this release

• Anchal Singh
• Dmitriy Mozgovoy

Release v1.13.0

Release notes:

Bug Fixes

• fetch: prevent TypeError when config.env is undefined (#7155) (015faec)
• resolve issue #7131 (added spacing in mergeConfig.js) (#7133) (9b9ec98)

Features

• http: add HTTP2 support; (#7150) (d676df7)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi
• Aviraj2929
• prasoon patel
• Samyak Dandge
• Anchal Singh
• Rahul Kumar
• Amit Verma
• Abhishek3880
• Dhvani Maktuporia
• Usama Ayoub
• ikuy1203
• Nikhil Simon Toppo
• Jane Wangari
• Supakorn Ieamgomol
• Kian-Meng Ang
• UTSUMI Keiji

Changelog

Sourced from axios's changelog.

1.13.1 (2025-10-28)

Bug Fixes

• http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#7193) (bcd5581)

Contributors to this release

• Anchal Singh
• Dmitriy Mozgovoy

1.13.0 (2025-10-27)

Bug Fixes

• fetch: prevent TypeError when config.env is undefined (#7155) (015faec)
• resolve issue #7131 (added spacing in mergeConfig.js) (#7133) (9b9ec98)

Features

• http: add HTTP2 support; (#7150) (d676df7)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi
• Aviraj2929
• prasoon patel
• Samyak Dandge
• Anchal Singh
• Rahul Kumar
• Amit Verma
• Abhishek3880
• Dhvani Maktuporia
• Usama Ayoub
• ikuy1203
• Nikhil Simon Toppo
• Jane Wangari
• Supakorn Ieamgomol
• Kian-Meng Ang
• UTSUMI Keiji

Commits

• 1ef8e72 chore(release): v1.13.1 (#7194)
• bcd5581 fix(http): fixed a regression that caused the data stream to be interrupted f...
• c9b3371 chore: enhance styling and responsiveness in client.html (#7173)
• 9ead04d [Release] v1.13.0 (#7189)
• d000fbf fix(http2): fix possible race condition when handling http2 stream on almost ...
• 08db960 docs: added example for improved network error handling (with Wrapper/Middlew...
• 46e1981 refactor: form data handling in index.html (#7170)
• 889f8ef docs: fix mismatched return type (#7172)
• 7b197ef fix: sandbox ui updated (#7175)
• 6dff629 chore: fix typos in examples (#7166)
• Additional commits viewable in compare view

Updates lucide-react from 0.545.0 to 0.548.0

Release notes

Sourced from lucide-react's releases.

Version 0.548.0

What's Changed

• feat(docs): add new package for Slint by @​cnlancehu in lucide-icons/lucide#3698
• docs(site): add introductions for packages in documentation by @​mattheskaiser in lucide-icons/lucide#3643
• Fix default prop by @​ericfennis in lucide-icons/lucide#3730
• feat(icons): added gamepad-directional icon by @​felipeajzanetti in lucide-icons/lucide#3693

New Contributors

• @​cnlancehu made their first contribution in lucide-icons/lucide#3698
• @​mattheskaiser made their first contribution in lucide-icons/lucide#3643
• @​felipeajzanetti made their first contribution in lucide-icons/lucide#3693

Full Changelog: lucide-icons/lucide@0.547.0...0.548.0

Version 0.547.0

What's Changed

• fix(docs): update brand logo statement link in github action by @​karsa-mistmere in lucide-icons/lucide#3630
• chore(deps): bump astro from 5.5.2 to 5.14.4 by @​dependabot[bot] in lucide-icons/lucide#3683
• fix(packages/lucide): replace elements inside \<template> (#2635) by @​KhalidAlansary in lucide-icons/lucide#3576
• feat(icons): added birdhouse icon by @​hieu-onefold in lucide-icons/lucide#3378

New Contributors

• @​KhalidAlansary made their first contribution in lucide-icons/lucide#3576
• @​hieu-onefold made their first contribution in lucide-icons/lucide#3378

Full Changelog: lucide-icons/lucide@0.546.0...0.547.0

Version 0.546.0

What's Changed

• fix(icons): changed receipt-text icon by @​jguddas in lucide-icons/lucide#3553
• fix(docs): removed duplicate text in intro text by @​nielsswinkels in lucide-icons/lucide#3673
• feat(icons): add VS Code squircle base shape snippet by @​danielbayley in lucide-icons/lucide#3674
• fix(icons): changed sword icon by @​jguddas in lucide-icons/lucide#3421
• feat(icons): added monitor-cloud icon by @​karsa-mistmere in lucide-icons/lucide#3037

New Contributors

• @​nielsswinkels made their first contribution in lucide-icons/lucide#3673

Full Changelog: lucide-icons/lucide@0.545.0...0.546.0

Commits

• See full diff in compare view

Updates react-i18next from 16.0.1 to 16.2.2

Changelog

Sourced from react-i18next's changelog.

16.2.2

• fix trans component break with less than sign 1880, closes 1734

16.2.1

• fix regression in v16.2.0: bindI18nStore does not work correctly 1879

16.2.0

• try to address: useTranslation hook violates React's rules of hooks by conditionally calling inner hooks 1863

16.1.6

• fix: fix: handle spread props for inner components in Trans (icu) 1877

16.1.5

• fix: Incosistent behaviour of Trans and t. Trans set defaultValue when t call doesn't set the field. 1876
• Trans: use also defaultValue via tOptions as fallback

16.1.4

• fix: detect pre-transformation use of interpolation like number/date/etc. 1875

16.1.3

• fix: ensure invalid identifiers are quoted in the props object 1874

16.1.2

• missing.js extensions for Icu imports

16.1.1

• exports for IcuTrans component 1873

16.1.0

• Introduce IcuTrans component 1869

Commits

• 8eeaf96 16.2.2
• 4aebae0 release
• e0e882f fix trans component break with less than sign (#1880)
• badbfa3 16.2.1
• dc7225e fix regression in v16.2.0: bindI18nStore #1879
• aa66a89 16.2.0
• a080c76 address #1863 with Option 2
• 0c33e69 Merge branch 'try-fix-react-violation-2'
• 3bf5c85 use use-sync-external-store shim for useSyncExternalStore
• 4dab58c 16.1.6
• Additional commits viewable in compare view

Updates react-router from 7.9.4 to 7.9.5

Release notes

Sourced from react-router's releases.

v7.9.5

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v795

Changelog

Sourced from react-router's changelog.

7.9.5

Patch Changes

• Move RSCHydratedRouter and utils to /dom export. (#14457)

• useRoute: return type-safe handle (#14462)

  For example:

  // app/routes/admin.tsx
  const handle = { hello: "world" };

  // app/routes/some-other-route.tsx
  export default function Component() {
    const admin = useRoute("routes/admin");
    if (!admin) throw new Error("Not nested within 'routes/admin'");
    console.log(admin.handle);
    //                ^? { hello: string }
  }

• Ensure action handlers run for routes with middleware even if no loader is present (#14443)

• Add unstable_instrumentations API to allow users to add observablity to their apps by instrumenting route loaders, actions, middlewares, lazy, as well as server-side request handlers and client side navigations/fetches (#14412)

  • Framework Mode:
    • entry.server.tsx: export const unstable_instrumentations = [...]
    • entry.client.tsx: <HydratedRouter unstable_instrumentations={[...]} />
  • Data Mode
    • createBrowserRouter(routes, { unstable_instrumentations: [...] })

  This also adds a new unstable_pattern parameter to loaders/actions/middleware which contains the un-interpolated route pattern (i.e., /blog/:slug) which is useful for aggregating performance metrics by route

Commits

• a191812 chore: Update version for release (#14485)
• 74bef78 chore: Update version for release (pre) (#14469)
• c0577e4 Merge branch 'main' into release-next
• 0163df4 fix(react-router): run action handlers for routes with middleware even if no ...
• c84016b Minor updates for instrumentations (#14467)
• adadca5 Add unstable_instrumentations API (#14412)
• dea842d fix: move RSCHydratedRouter and utils to /dom export (#14457)
• 1d1b188 useRoute: return type-safe handle (#14462)
• 3e3a223 docs: fix references (#14441)
• 158847e fix: Fix invalid markdown link for createHashRouter (#14434)
• Additional commits viewable in compare view

Updates tailwindcss from 4.1.14 to 4.1.16

Release notes

Sourced from tailwindcss's releases.

v4.1.16

Fixed

• Discard candidates with an empty data type (#19172)
• Fix canonicalization of arbitrary variants with attribute selectors (#19176)
• Fix invalid colors due to nested & (#19184)
• Improve canonicalization for & > :pseudo and & :pseudo arbitrary variants (#19178)

v4.1.15

Fixed

• Fix Safari devtools rendering issue due to color-mix fallback (#19069)
• Suppress Lightning CSS warnings about :deep, :slotted, and :global (#19094)
• Fix resolving theme keys when starting with the name of another theme key in JS configs and plugins (#19097)
• Allow named groups in combination with not-*, has-*, and in-* (#19100)
• Prevent important utilities from affecting other utilities (#19110)
• Don’t index into strings with the theme(…) function (#19111)
• Fix parsing issue when \t is used in at-rules (#19130)
• Upgrade: Canonicalize utilities containing 0 values (#19095)
• Upgrade: Migrate deprecated break-words to wrap-break-word (#19157)

Changed

• Remove the postinstall script from oxide (#19149)

Changelog

Sourced from tailwindcss's changelog.

[4.1.16] - 2025-10-23

Fixed

• Discard candidates with an empty data type (#19172)
• Fix canonicalization of arbitrary variants with attribute selectors (#19176)
• Fix invalid colors due to nested & (#19184)
• Improve canonicalization for & > :pseudo and & :pseudo arbitrary variants (#19178)

[4.1.15] - 2025-10-20

Fixed

• Fix Safari devtools rendering issue due to color-mix fallback (#19069)
• Suppress Lightning CSS warnings about :deep, :slotted, and :global (#19094)
• Fix resolving theme keys when starting with the name of another theme key in JS configs and plugins (#19097)
• Allow named groups in combination with not-*, has-*, and in-* (#19100)
• Prevent important utilities from affecting other utilities (#19110)
• Don’t index into strings with the theme(…) function (#19111)
• Fix parsing issue when \t is used in at-rules (#19130)
• Upgrade: Canonicalize utilities containing 0 values (#19095)
• Upgrade: Migrate deprecated break-words to wrap-break-word (#19157)

Changed

• Remove the postinstall script from oxide (#19149)(tailwindlabs/tailwindcss#19149)

Commits

• cbbbe84 Release 4.1.16 (#19185)
• 601d671 Fix incorrect colors used in pseudo-element (#19184)
• a41add9 Improve canonicalization for & > :pseudo and & :pseudo arbitrary variants...
• 0113b88 Fix canonicalization of arbitrary variants with attribute selectors (#19176)
• 29687e0 Discard candidates with an empty data type (#19172)
• 56e7f3b Improve memory usage during canonicalization (#19171)
• 3a4ab82 Stop suggesting legacy utilities (#19169)
• 7537e34 Ignore --tw- variables during internal signature computation (#19156)
• 66c18ca Collapse multiple utilities (#19147)
• b2e2435 Release 4.1.15 (#19159)
• Additional commits viewable in compare view

Updates @eslint/js from 9.37.0 to 9.38.0

Release notes

Sourced from @​eslint/js's releases.

v9.38.0

Features

• ce40f74 feat: update complexity rule to only highlight function header (#20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode typings (#20114) (Pixel998)

Documentation

• 462675a docs: improve web accessibility by hiding non-semantic character (#20205) (루밀LuMir)
• c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#20203) (루밀LuMir)
• b39e71a docs: Update README (GitHub Actions Bot)
• cd39983 docs: move custom-formatters type descriptions to nodejs-api (#20190) (Percy Ma)

Chores

• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#20221) (Milos Djermanovic)
• 25d0e33 chore: package.json update for @​eslint/js release (Jenkins)
• c82b5ef refactor: Use types from @​eslint/core (#20168) (Nicholas C. Zakas)
• ff31609 ci: add Node.js 25 to ci.yml (#20220) (루밀LuMir)
• 004577e ci: bump github/codeql-action from 3 to 4 (#20211) (dependabot[bot])
• eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#20206) (Milos Djermanovic)
• 4168a18 chore: fix typo in legacy-eslint.js (#20202) (Sweta Tanwar)
• 205dbd2 chore: fix typos (#20200) (ntnyq)
• dbb200e chore: use team member's username when name is not available in data (#20194) (Milos Djermanovic)
• 8962089 chore: mark deprecated rules as available until v11.0.0 (#20184) (Pixel998)

Commits

• 25d0e33 chore: package.json update for @​eslint/js release
• See full diff in compare view

Updates @tanstack/eslint-plugin-query from 5.91.0 to 5.91.2

Release notes

Sourced from @​tanstack/eslint-plugin-query's releases.

@​tanstack/eslint-plugin-query@​5.91.2

Patch Changes

• fix: allow useQueries with combine property in no-unstable-deps rule (#9720)

@​tanstack/eslint-plugin-query@​5.91.1

Patch Changes

• avoid typescript import in no-void-query-fn rule (#9759)

Changelog

Sourced from @​tanstack/eslint-plugin-query's changelog.

5.91.2

Patch Changes

• fix: allow useQueries with combine property in no-unstable-deps rule (#9720)

5.91.1

Patch Changes

• avoid typescript import in no-void-query-fn rule (#9759)

Commits

• 9df1308 ci: Version Packages (#9765)
• 9595254 fix: allow useQueries with combine property in no-unstable-deps rule (#9720)
• b59925e ci: Version Packages (#9760)
• b9a478d fix(eslint-plugin): avoid imports from typescript (#9759)
• a242f98 Revert "chore(deps): update all non-major dependencies" (#9715)
• 571bc18 chore(deps): update all non-major dependencies (#9712)
• See full diff in compare view

Updates @types/node from 24.7.2 to 24.9.2

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 5.0.4 to 5.1.0

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@5.1.0

Add @vitejs/plugin-react/preamble virtual module for SSR HMR (#890)

SSR applications can now initialize HMR runtime by importing @vitejs/plugin-react/preamble at the top of their client entry instead of manually calling transformIndexHtml. This simplifies SSR setup for applications that don't use the transformIndexHtml API.

Fix raw Rolldown support for Rolldown 1.0.0-beta.44+ (#930)

Rolldown 1.0.0-beta.44+ removed the top-level jsx option in favor of transform.jsx. This plugin now uses the transform.jsx option to support Rolldown 1.0.0-beta.44+.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

5.1.0 (2025-10-24)

Add @vitejs/plugin-react/preamble virtual module for SSR HMR (#890)

SSR applications can now initialize HMR runtime by importing @vitejs/plugin-react/preamble at the top of their client entry instead of manually calling transformIndexHtml. This simplifies SSR setup for applications that don't use the transformIndexHtml API.

Fix raw Rolldown support for Rolldown 1.0.0-beta.44+ (#930)

Rolldown 1.0.0-beta.44+ removed the top-level jsx option in favor of transform.jsx. This plugin now uses the transform.jsx option to support Rolldown 1.0.0-beta.44+.

Commits

• 3e5a374 release: plugin-react@5.1.0
• 44cbed4 fix(react): compat with newer rolldown (#930)
• c54d3c6 chore(deps): update all non-major dependencies (#926)
• a2d76d9 fix(deps): update all non-major dependencies (#918)
• fffb7eb feat(react): expose virtual module to simplify hmr preamble setup on ssr (#890)
• b79592a fix(deps): update react-related dependencies (#901)
• 2d239fc fix(deps): update all non-major dependencies (#896)
• 73be2f0 chore(deps): fix vitest > rolldown-vite dependency (#889)
• 407795d fix(deps): update all non-major dependencies (#887)
• 47db473 chore(react): fix ecosystem-ci failure (#888)
• See full diff in compare view

Updates eslint from 9.37.0 to 9.38.0

Release notes

Sourced from eslint's releases.

v9.38.0

Features

• ce40f74 feat: update complexity rule to only highlight function header (#20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode t...

  Description has been truncated

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.