chore: Update Web dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint-react/eslint-plugin (source)	5.7.4 → 5.7.5
@tailwindcss/vite (source)	4.2.4 → 4.3.0
tailwindcss (source)	4.2.4 → 4.3.0

---

Release Notes

Rel1cx/eslint-react (@​eslint-react/eslint-plugin)

v5.7.5

Compare Source

🏗️ Internal

• Bumped @eslint/compat from 2.0.5 to 2.1.0.
• Bumped @types/node from 25.6.0 to 25.6.2.
• Bumped next from 16.2.5 to 16.2.6.
• Bumped publint from 0.3.19 to 0.3.20.
• Bumped tsdown from 0.21.10 to 0.22.0.
• Bumped pnpm from 10.33.4 to 11.0.8.
• Adjusted website styles.

Full Changelog: Rel1cx/eslint-react@v5.7.4...v5.7.5

tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.3.0

Compare Source

Added

• Add @container-size utility (#​18901)
• Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#​19981, #​20019)
• Add scrollbar-gutter-* utilities (#​20018)
• Add zoom-* utilities (#​20020)
• Add tab-* utilities (#​20022)
• Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#​19996)
• Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#​19996)
• Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#​19989)

Fixed

• Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#​19949)
• Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#​19965)
• Ensure CSS files containing @variant are processed by @tailwindcss/vite (#​19966)
• Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#​19980)
• Canonicalization: preserve significant _ whitespace in arbitrary values (#​19986)
• Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#​19986)
• Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#​19988)
• Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#​19991)
• Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1" → style="flex-grow: 1", not style="grow: 1") (#​19918)
• Allow multiple @utility definitions with the same name but different value types (#​19777)
• Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#​19707)
• Ensure start and end legacy utilities without values do not generate CSS (#​20003)
• Ensure --value(…) is required in functional @utility definitions (#​20005)
• Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#​20011)

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Between 12:00 AM and 06:59 AM, only on Saturday (* 0-6 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​tailwindcss/​vite@​4.2.4 ⏵ 4.3.0			+1	+1
	npm/​@​eslint-react/​eslint-plugin@​5.7.4 ⏵ 5.7.5

View full report

[codspeed-hq]

Merging this PR will not alter performance

✅ 21 untouched benchmarks
⏩ 33 skipped benchmarks¹

---

_{Comparing renovate/web (a036ea5) with main (410cb3b)²}

Footnotes

1. 33 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on main (6b7d15f) during the generation of this report, so 410cb3b was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

[Aureliolo]

Decision: Minor + patch web-dep refresh (tailwindcss + @tailwindcss/vite 4.2.4 → 4.3.0; @eslint-react/eslint-plugin 5.7.4 → 5.7.5); CI green; Tailwind 4.3.0's behavioural bug-fixes don't touch our CSS surface (no @plugin/@variant directives in web/src/styles/).

Changelog digest:

• Covered: tailwindcss + @tailwindcss/vite 4.2.4 → 4.3.0 (minor) and @eslint-react/eslint-plugin 5.7.4 → 5.7.5 (patch — internal-only dep bumps).
• Relevant: Tailwind 4.3.0 bug fix for relative @import path resolution in @tailwindcss/vite (tailwindlabs/tailwindcss#19965) is the only fix that could affect us; our web/src/styles/global.css colocates relative imports in the same directory, so the wrong-directory bug never bit us, but the fix removes a latent footgun. New utilities (@container-size, scrollbar-{auto,thin,none}, scrollbar-gutter-*, zoom-*, tab-*) are purely additive.
• Reviewed but not relevant: @plugin package-vs-browser-CSS resolution fix (#19949) and @variant processing fix (#19966) — we use neither directive; canonicalisation tweaks only affect the @tailwindcss/upgrade migration tool, not normal builds; eslint-react 5.7.5 contains only @eslint/compat / @types/node / next / publint / tsdown / pnpm dep bumps with no rule or behaviour change.

Follow-ups: none blocking; optional later audit of web/src for hand-rolled scrollbar/zoom/tab styling that the new Tailwind utilities could replace.