chore(deps)(deps): bump react-mosaic-component from 7.0.0 to 7.1.0

[dependabot]

Bumps react-mosaic-component from 7.0.0 to 7.1.0.

Release notes

Sourced from react-mosaic-component's releases.

v7.1.0

7.1.0 (2026-09-10)

🩹 Fixes

• Tab groups no longer remount on sibling insert or tab reorder. Tab groups and their leaf tiles now carry intrinsic keys, so inserting a sibling elsewhere in the tree — or reordering tabs within a group — preserves tile state instead of tearing down and rebuilding the subtree (547bb23)
• renderTabToolbar gets a stable DraggableTab component type. The component handed to a custom tab toolbar keeps its identity across updates, so custom toolbars no longer remount on every render (547bb23)
• Legacy (v6) trees are converted once. In both controlled and uncontrolled mode a legacy value/initialValue is converted a single time, getRoot() is identity-stable afterwards, and the converted tree is reported through onChange exactly once so callers can persist the migrated shape (547bb23)
• No throttled onChange after onRelease during a split resize. The trailing throttled callback can no longer land after the release event, which previously let a stale layout overwrite the final one (547bb23)
• CJS consumers work again on Node 18. The CJS bundle is now a single self-contained file that inlines the ESM-only dependencies (lodash-es and the react-dnd v16 family), so
• CJS consumers work again on Node 18. The CJS bundle is now a single self-contained file that inlines the ESM-only dependencies (lodash-es and the react-dnd v16 family), so require('react-mosaic-component') no longer crashes on Node versions without require(esm) support (95421f8)

🔒 Security

• Raised the uuid floor to ^11.1.1 to clear GHSA-w5hq-g745-h8pq (missing buffer bounds check in v3/v5/v6 when buf is supplied, moderate). react-mosaic only ever calls v4, so the flaw was not reachable through this library, but dependency scanners flag anything below 11.1.1 (95421f8)

🏡 Chore

• Package-level export tests (tools/package-tests/) now verify the built artifacts load in plain Node under both CJS and ESM, and are wired into nx-release-publish so a broken export surface blocks a release (95421f8)
• Dependency updates (f276851), Nx 23.2.1 (00832f5), release-config and PR-template housekeeping (d9a9dcc, 80099b2)

❤️ Thank You

• Lonli-Lokli @​Lonli-Lokli

Commits

• f499ae5 chore(release): publish 7.1.0
• 00832f5 chore: update nx to 23.2.1
• d9a9dcc chore: disable workspace changelog in nx release
• 80099b2 chore: update PR template
• f276851 chore: update deps
• 95421f8 fix: make sure we can work in NodeJS 18 without esm imports
• 547bb23 chore: rendering improvements
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.