Skip to content

security(deps): bump the dataviewer-frontend-dependencies group in /data-management/viewer/frontend with 28 updates#407

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/data-management/viewer/frontend/dataviewer-frontend-dependencies-6b273954cb
Closed

security(deps): bump the dataviewer-frontend-dependencies group in /data-management/viewer/frontend with 28 updates#407
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/data-management/viewer/frontend/dataviewer-frontend-dependencies-6b273954cb

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 7, 2026 •
edited
Loading

Bumps the dataviewer-frontend-dependencies group in /data-management/viewer/frontend with 28 updates:

Package From To
@azure/msal-browser 4.29.0 5.6.3
@azure/msal-react 3.0.27 5.2.1
@tanstack/react-query 5.90.21 5.96.2
lucide-react 0.469.0 1.7.0
react 18.3.1 19.2.4
@types/react 18.3.28 19.2.14
react-dom 18.3.1 19.2.4
@types/react-dom 18.3.7 19.2.3
recharts 3.7.0 3.8.1
tailwind-merge 2.6.1 3.5.0
zustand 5.0.11 5.0.12
@eslint/js 9.39.3 10.0.1
@tanstack/eslint-plugin-query 5.91.4 5.96.2
@vitejs/plugin-react 4.7.0 6.0.1
@vitest/coverage-v8 4.1.0 4.1.3
autoprefixer 10.4.24 10.4.27
eslint 9.39.3 10.2.0
eslint-plugin-react-hooks 5.2.0 7.0.1
eslint-plugin-react-refresh 0.4.26 0.5.2
eslint-plugin-simple-import-sort 12.1.1 13.0.0
globals 15.15.0 17.4.0
lint-staged 16.2.7 16.4.0
postcss 8.5.6 8.5.8
tailwindcss 3.4.19 4.2.2
typescript 5.6.3 6.0.2
typescript-eslint 8.56.0 8.58.0
vite 6.4.2 8.0.7
vitest 4.1.0 4.1.3

Updates @azure/msal-browser from 4.29.0 to 5.6.3

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.6.3

5.6.3

Wed, 01 Apr 2026 20:08:59 GMT

Patches

@​azure/msal-browser v5.6.2

5.6.2

Fri, 27 Mar 2026 16:35:28 GMT

Patches

@​azure/msal-browser v5.6.1

5.6.1

Thu, 19 Mar 2026 23:46:44 GMT

Patches

  • Set correlation ID after initialization for NAA #8447 (shylasummers@microsoft.com)
  • Bump eslint-config-msal to v0.0.0 (beachball)
  • Bump msal-test-utils to v0.0.1 (beachball)
  • Bump rollup-msal to v0.0.0 (beachball)

@​azure/msal-browser v5.6.0

5.6.0

Wed, 18 Mar 2026 20:47:24 GMT

Minor changes

  • Add support for client data telemetry with CLI_DATA parameter #8378 (kshabelko@microsoft.com)
  • Bump @​azure/msal-common to v16.4.0 (beachball)
  • Bump eslint-config-msal to v0.0.0 (beachball)
  • Bump msal-test-utils to v0.0.1 (beachball)
  • Bump rollup-msal to v0.0.0 (beachball)

Patches

... (truncated)

Commits

Updates @azure/msal-react from 3.0.27 to 5.2.1

Release notes

Sourced from @​azure/msal-react's releases.

@​azure/msal-react v5.2.1

5.2.1

Wed, 01 Apr 2026 20:09:00 GMT

Patches

@​azure/msal-browser v5.2.0

5.2.0

Tue, 10 Feb 2026 23:04:27 GMT

Minor changes

  • Add correlationId to events #8288 (thomas.norling@microsoft.com)
  • Bump @​azure/msal-common to v16.0.4 (beachball)
  • Bump eslint-config-msal to v0.0.0 (beachball)
  • Bump msal-test-utils to v0.0.1 (beachball)
  • Bump rollup-msal to v0.0.0 (beachball)

Patches

@​azure/msal-react v5.2.0

5.2.0

Fri, 27 Mar 2026 16:35:28 GMT

Minor changes

  • Extend peer dependency range to support React 16 (16.8+) and React 17 #8461 (joarroyo@microsoft.com)
  • Bump @​azure/msal-browser to v5.6.2 (beachball)

@​azure/msal-angular v5.1.4

5.1.4

Wed, 01 Apr 2026 20:09:00 GMT

Patches

  • Bump @​azure/msal-browser to v5.6.3 (beachball)

@​azure/msal-angular v5.1.3

5.1.3

... (truncated)

Commits

Updates @tanstack/react-query from 5.90.21 to 5.96.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.96.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.96.2
    • @​tanstack/react-query@​5.96.2

@​tanstack/react-query-next-experimental@​5.96.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.96.2

@​tanstack/react-query-persist-client@​5.96.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.96.2
    • @​tanstack/react-query@​5.96.2

@​tanstack/react-query@​5.96.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.96.2

@​tanstack/react-query-devtools@​5.96.1

Patch Changes

  • fix(build): exclude config files from production DTS rollup to prevent @types/node type pollution (#10358)

  • Updated dependencies []:

    • @​tanstack/query-devtools@​5.96.1
    • @​tanstack/react-query@​5.96.1

@​tanstack/react-query-next-experimental@​5.96.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.96.1

@​tanstack/react-query-persist-client@​5.96.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.96.1
    • @​tanstack/react-query@​5.96.1

@​tanstack/react-query@​5.96.1

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.96.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.96.2

5.96.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.96.1

5.96.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.96.0

5.95.2

Patch Changes

  • Updated dependencies [cd5a35b]:
    • @​tanstack/query-core@​5.95.2

5.95.1

Patch Changes

  • Updated dependencies [1f1775c]:
    • @​tanstack/query-core@​5.95.1

5.95.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.95.0

5.94.5

Patch Changes

  • fix(*): resolve issue about excluded build directory (#10312)

  • Updated dependencies [4b6536d]:

    • @​tanstack/query-core@​5.94.5

... (truncated)

Commits
  • 5ca721f ci: Version Packages (#10379)
  • 75052a7 ci: Version Packages (#10370)
  • 73e783b ci: Version Packages (#10364)
  • 14a97b7 test(react-query): replace 'import React' with 'import * as React' in 'usePre...
  • fd8c068 test({react,preact}-query/useSuspenseQueries): merge redundant second 'descri...
  • f168555 test({react,preact,solid}-query): move 'queryClient' and 'queryCache' to 'bef...
  • afb5812 test({react,preact}-query/useSuspenseQueries): inline test helpers, remove sh...
  • 9e1bb94 test(react-query/useSuspenseQueries): remove unnecessary 'act' wrapper from b...
  • 55cee0a test({react,preact}-query/useSuspenseQueries): add test for not suspending bu...
  • 7fc6e6a test({react,preact}-query/useSuspenseQueries): add test for not suspending bu...
  • Additional commits viewable in compare view

Updates lucide-react from 0.469.0 to 1.7.0

Release notes

Sourced from lucide-react's releases.

Version 1.7.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.6.0...1.7.0

Version 1.6.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.5.0...1.6.0

Version 1.5.0

What's Changed

Full Changelog: lucide-icons/lucide@1.4.0...1.5.0

Version 1.4.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.3.0...1.4.0

Version 1.3.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.2.0...1.3.0

Version 1.2.0

What's Changed

New Contributors

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lucide-react since your current version.


Updates react from 18.3.1 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

... (truncated)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

... (truncated)

Commits

Updates @types/react from 18.3.28 to 19.2.14

Commits

Updates react-dom from 18.3.1 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

... (truncated)

Commits

Updates @types/react-dom from 18.3.7 to 19.2.3

Commits

Updates recharts from 3.7.0 to 3.8.1

Release notes

Sourced from recharts's releases.

v3.8.1

What's Changed

Bugfixes!

New Contributors

Full Changelog: recharts/recharts@v3.8.0...v3.8.1

v3.8.0

What's Changed

We added generics to our data and dataKey props and now you can have your charts validated by TypeScript. See the full guide here: https://recharts.github.io/en-US/guide/typescript/

We are releasing new helper functions and hooks that will allow you to precisely target mouse interactions, and convert coordinates. See the guide here: https://recharts.github.io/en-US/guide/coordinateSystems/

And new functions and hooks:

getRelativeCoordinate - converts mouse events to pixel positions

Convert Data → Pixels:

useXAxisScale - returns a function to convert X data values to pixel positions useYAxisScale - returns a function to convert Y data values to pixel positions useCartesianScale - convenience hook for converting both at once

Pixels → Data:

... (truncated)

Commits
  • 5b10788 chore(deps-dev): bump diff from 8.0.3 to 8.0.4 (#7156)
  • 222396f chore(deps): bump react-router-dom from 7.13.1 to 7.13.2 (#7164)
  • c2642da chore(deps-dev): bump typescript-eslint from 8.57.1 to 8.57.2 (#7166)
  • b186929 fix(RechartsWrapper): prevent ResizeObserver memory leak on ref update (

@dependabot dependabot Bot added dataviewer dependencies Dependency version updates labels Apr 7, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 7, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions github-actions Bot changed the title chore(deps): bump the dataviewer-frontend-dependencies group in /data-management/viewer/frontend with 28 updates security(deps): bump the dataviewer-frontend-dependencies group in /data-management/viewer/frontend with 28 updates Apr 7, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 7, 2026 •
edited
Loading

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.

View full job summary

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Apr 7, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.04%. Comparing base (2ff839a) to head (276f621).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #407   +/-   ##
=======================================
  Coverage   64.04%   64.04%           
=======================================
  Files         250      250           
  Lines       15319    15319           
  Branches     2108     2108           
=======================================
  Hits         9811     9811           
  Misses       5220     5220           
  Partials      288      288
Flag Coverage Δ *Carryforward flag
pester 81.21% <ø> (ø)
pytest 92.40% <ø> (ø)
pytest-dataviewer 63.87% <ø> (ø)
pytest-fuzz 1.59% <ø> (ø)
vitest 50.80% <ø> (ø) Carriedforward from 2ff839a

*This pull request uses carry forward flags. Click here to find out more.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/data-management/viewer/frontend/dataviewer-frontend-dependencies-6b273954cb branch from 11702b5 to eb2b0a6 Compare April 8, 2026 20:31
@dependabot
chore(deps): bump the dataviewer-frontend-dependencies group
276f621 
Bumps the dataviewer-frontend-dependencies group in /data-management/viewer/frontend with 28 updates:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `4.29.0` | `5.6.3` |
| [@azure/msal-react](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `3.0.27` | `5.2.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.96.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.469.0` | `1.7.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.4` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.28` | `19.2.14` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.4` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.7` | `19.2.3` |
| [recharts](https://github.com/recharts/recharts) | `3.7.0` | `3.8.1` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `2.6.1` | `3.5.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.11` | `5.0.12` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.3` | `10.0.1` |
| [@tanstack/eslint-plugin-query](https://github.com/TanStack/query/tree/HEAD/packages/eslint-plugin-query) | `5.91.4` | `5.96.2` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.7.0` | `6.0.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.0` | `4.1.3` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.24` | `10.4.27` |
| [eslint](https://github.com/eslint/eslint) | `9.39.3` | `10.2.0` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `5.2.0` | `7.0.1` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.26` | `0.5.2` |
| [eslint-plugin-simple-import-sort](https://github.com/lydell/eslint-plugin-simple-import-sort) | `12.1.1` | `13.0.0` |
| [globals](https://github.com/sindresorhus/globals) | `15.15.0` | `17.4.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.7` | `16.4.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.8` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `3.4.19` | `4.2.2` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.3` | `6.0.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.56.0` | `8.58.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.2` | `8.0.7` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.0` | `4.1.3` |


Updates `@azure/msal-browser` from 4.29.0 to 5.6.3
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v4.29.0...msal-browser-v5.6.3)

Updates `@azure/msal-react` from 3.0.27 to 5.2.1
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-react-v3.0.27...msal-react-v5.2.1)

Updates `@tanstack/react-query` from 5.90.21 to 5.96.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.96.2/packages/react-query)

Updates `lucide-react` from 0.469.0 to 1.7.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.7.0/packages/lucide-react)

Updates `react` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react)

Updates `@types/react` from 18.3.28 to 19.2.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom)

Updates `@types/react-dom` from 18.3.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `recharts` from 3.7.0 to 3.8.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.7.0...v3.8.1)

Updates `tailwind-merge` from 2.6.1 to 3.5.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v2.6.1...v3.5.0)

Updates `zustand` from 5.0.11 to 5.0.12
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.11...v5.0.12)

Updates `@eslint/js` from 9.39.3 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

Updates `@tanstack/eslint-plugin-query` from 5.91.4 to 5.96.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/eslint-plugin-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/eslint-plugin-query@5.96.2/packages/eslint-plugin-query)

Updates `@types/react` from 18.3.28 to 19.2.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 18.3.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 4.7.0 to 6.0.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react)

Updates `@vitest/coverage-v8` from 4.1.0 to 4.1.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.3/packages/coverage-v8)

Updates `autoprefixer` from 10.4.24 to 10.4.27
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.24...10.4.27)

Updates `eslint` from 9.39.3 to 10.2.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.3...v10.2.0)

Updates `eslint-plugin-react-hooks` from 5.2.0 to 7.0.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)

Updates `eslint-plugin-react-refresh` from 0.4.26 to 0.5.2
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.26...v0.5.2)

Updates `eslint-plugin-simple-import-sort` from 12.1.1 to 13.0.0
- [Changelog](https://github.com/lydell/eslint-plugin-simple-import-sort/blob/main/CHANGELOG.md)
- [Commits](lydell/eslint-plugin-simple-import-sort@v12.1.1...v13.0.0)

Updates `globals` from 15.15.0 to 17.4.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v15.15.0...v17.4.0)

Updates `lint-staged` from 16.2.7 to 16.4.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.2.7...v16.4.0)

Updates `postcss` from 8.5.6 to 8.5.8
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.8)

Updates `tailwindcss` from 3.4.19 to 4.2.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/tailwindcss)

Updates `typescript` from 5.6.3 to 6.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.6.3...v6.0.2)

Updates `typescript-eslint` from 8.56.0 to 8.58.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/typescript-eslint)

Updates `vite` from 6.4.2 to 8.0.7
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.7/packages/vite)

Updates `vitest` from 4.1.0 to 4.1.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.3/packages/vitest)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.6.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@azure/msal-react"
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.96.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: lucide-react
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: react
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.14
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: recharts
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: zustand
  dependency-version: 5.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@tanstack/eslint-plugin-query"
  dependency-version: 5.96.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.14
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.4.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: eslint
  dependency-version: 10.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: eslint-plugin-simple-import-sort
  dependency-version: 13.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: globals
  dependency-version: 17.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: lint-staged
  dependency-version: 16.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: postcss
  dependency-version: 8.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.58.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: vite
  dependency-version: 8.0.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dataviewer-frontend-dependencies
- dependency-name: vitest
  dependency-version: 4.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dataviewer-frontend-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/data-management/viewer/frontend/dataviewer-frontend-dependencies-6b273954cb branch from eb2b0a6 to 276f621 Compare April 8, 2026 20:39
jjottar pushed a commit to jjottar/physical-ai-toolchain that referenced this pull request Apr 9, 2026
@physical-ai-toolchain-release @github-actions
chore(main): release 0.5.0 (microsoft#173)
fedf854 
🤖 I have created a release *beep* *boop*
---


##
[0.5.0](microsoft/physical-ai-toolchain@v0.4.0...v0.5.0)
(2026-03-26)


### ✨ Features

* add dataviewer web application for dataset analysis and annotation
([microsoft#375](microsoft#375))
([c44d7bb](microsoft@c44d7bb))
* add return type annotations to cli_args functions
([microsoft#476](microsoft#476))
([35523ee](microsoft@35523ee))
* add YAML config schema with pydantic validation for ROS 2 recording
([microsoft#376](microsoft#376))
([1fa5243](microsoft@1fa5243))
* **agents:** Copilot agents and skills for dataviewer and OSMO training
workflows.
([microsoft#444](microsoft#444))
([8b72daf](microsoft@8b72daf))
* **build:** add automated ms.date freshness checking
([microsoft#448](microsoft#448))
([f92ddbc](microsoft@f92ddbc))
* **build:** add CLA section, Dependabot security prefix, and OWASP ZAP
DAST scan
([microsoft#241](microsoft#241))
([083a8af](microsoft@083a8af))
* **build:** add coverage.py configuration to pyproject.toml
([microsoft#428](microsoft#428))
([eac7426](microsoft@eac7426))
* **build:** add Go CI pipeline with golangci-lint and go test
([microsoft#351](microsoft#351))
([b27e4fb](microsoft@b27e4fb))
* **build:** add OpenSSF Scorecard workflow and badge
([microsoft#431](microsoft#431))
([98a62e7](microsoft@98a62e7))
* **build:** add release artifact signing and SBOM attestation
([microsoft#480](microsoft#480))
([b226e96](microsoft@b226e96))
* **build:** add TFLint reusable GitHub Actions workflow
([microsoft#229](microsoft#229))
([34d5575](microsoft@34d5575))
* **build:** split Go CI into separate lint and test pipelines
([microsoft#354](microsoft#354))
([2dec155](microsoft@2dec155))
* **dataviewer:** add authentication middleware and CSRF protection for
mutation endpoints
([microsoft#432](microsoft#432))
([77c8a01](microsoft@77c8a01))
* **docs:** create training documentation hub with guides and migration
([microsoft#380](microsoft#380))
([0fdccc5](microsoft@0fdccc5))
* **docs:** port Docusaurus documentation site with full build
validation
([microsoft#182](microsoft#182))
([29dd640](microsoft@29dd640))
* fix and deploy dataviewer
([microsoft#498](microsoft#498))
([c922d49](microsoft@c922d49))
* **inference:** add AzureML and local LeRobot inference workflows
([microsoft#438](microsoft#438))
([f7d786a](microsoft@f7d786a))
* **inference:** add MLflow trajectory plots and multi-source support to
OSMO inference workflow
([microsoft#421](microsoft#421))
([8637458](microsoft@8637458))
* **infra:** add blob storage lifecycle policies and folder structure
([microsoft#179](microsoft#179))
([101a6e8](microsoft@101a6e8))
* **infrastructure:** add optional observability and compute feature
flags
([microsoft#437](microsoft#437))
([9eba0da](microsoft@9eba0da))
* **infrastructure:** add private Linux Isaac Sim VM deployment option
([microsoft#348](microsoft#348))
([3748c2d](microsoft@3748c2d))
* **infrastructure:** add terraform-docs auto-generation pipeline
([microsoft#358](microsoft#358))
([6565caa](microsoft@6565caa))
* **infrastructure:** harden Isaac Sim VM deployment with encryption and
spot options
([microsoft#355](microsoft#355))
([6ebc1f2](microsoft@6ebc1f2))
* **repo:** migrate to domain-driven architecture
([microsoft#270](microsoft#270))
([a339e70](microsoft@a339e70))
* **scripts:** add --config-preview and deployment summary to submission
scripts
([microsoft#499](microsoft#499))
([4069806](microsoft@4069806))
* **scripts:** add Copilot attribution footer validation to frontmatter
linting
([microsoft#378](microsoft#378))
([4d595f2](microsoft@4d595f2))
* **src:** add dataviewer web application with storage adapter layer
([microsoft#404](microsoft#404))
([8a9fb70](microsoft@8a9fb70))


### 🐛 Bug Fixes

* **build:** add GHSA to cspell custom dictionary
([microsoft#315](microsoft#315))
([67db81a](microsoft@67db81a))
* **build:** correct codecov report_type input for terraform test
uploads
([microsoft#324](microsoft#324))
([d90d66d](microsoft@d90d66d))
* **build:** expand CODEOWNERS coverage to critical paths
([microsoft#505](microsoft#505))
([bafade1](microsoft@bafade1))
* **build:** pin Docker base image and pip dependencies with Dependabot
coverage
([microsoft#497](microsoft#497))
([d3d7ea4](microsoft@d3d7ea4))
* **build:** pin pydantic version and use uv in config schema validation
workflow
([microsoft#493](microsoft#493))
([28d823f](microsoft@28d823f))
* **build:** pin uv installer to versioned URL
([microsoft#495](microsoft#495))
([8d8541b](microsoft@8d8541b))
* **build:** remediate GHSA vulnerabilities flagged by OSSF Scorecard
([microsoft#271](microsoft#271))
([49b6e58](microsoft@49b6e58))
* **build:** remove README frontmatter, add FrontmatterExcludePaths,
enforce Pester 5
([microsoft#443](microsoft#443))
([641d0f3](microsoft@641d0f3))
* **build:** resolve CI failures for release 0.5.0 PR
([microsoft#174](microsoft#174))
([62c9900](microsoft@62c9900))
* **build:** resolve codecov PR comment suppression
([microsoft#523](microsoft#523))
([5603bd7](microsoft@5603bd7))
* **build:** use npm ci for deterministic frontend dependency install
([microsoft#491](microsoft#491))
([ee8b5d3](microsoft@ee8b5d3)),
closes
[microsoft#490](microsoft#490)
* **ci:** add `wait_for_ci` to Codecov configuration
([microsoft#183](microsoft#183))
([370cf44](microsoft@370cf44))
* **CI:** Issue 116 clean up dataviewer tests
([microsoft#184](microsoft#184))
([f466c23](microsoft@f466c23))
* **ci:** pin pydantic to ==2.12.5 across all references
([microsoft#230](microsoft#230))
([9d841d5](microsoft@9d841d5))
* **dataviewer:** add HTTP Range support for blob video streaming
([microsoft#165](microsoft#165))
([8adde50](microsoft@8adde50))
* **dataviewer:** remediate CodeQL alerts and align ruff config
([microsoft#419](microsoft#419))
([eb6fac9](microsoft@eb6fac9))
* **dataviewer:** remediate path traversal and input validation
vulnerabilities
([microsoft#413](microsoft#413))
([0a1d2ca](microsoft@0a1d2ca))
* **docs:** remove trailingSlash: false for GitHub Pages compatibility
([microsoft#228](microsoft#228))
([a78cb97](microsoft@a78cb97))
* **gpu:** add GPU Operator validation dependencies to GRID driver
installer
([microsoft#441](microsoft#441))
([eec42da](microsoft@eec42da))
* **infrastructure:** add zone-redundant config to VPN gateway public IP
([microsoft#352](microsoft#352))
([2d734f4](microsoft@2d734f4))
* **infrastructure:** improve stdout handling for helm commands in GPU…
([microsoft#311](microsoft#311))
([153f467](microsoft@153f467))
* **infrastructure:** resolve remaining TFLint violations in SIL module
and example configs
([microsoft#298](microsoft#298))
([c0ce3e5](microsoft@c0ce3e5))
* **infrastructure:** resolve TFLint violations in root and automation
modules
([microsoft#287](microsoft#287))
([b6a4604](microsoft@b6a4604)),
closes
[microsoft#203](microsoft#203)
* **infrastructure:** update deprecated bgp vng variable name
([microsoft#307](microsoft#307))
([f530734](microsoft@f530734))
* **scripts:** pin uv version in OSMO workflow templates
([microsoft#500](microsoft#500))
([7edf13a](microsoft@7edf13a))
* **scripts:** replace lambda with def in lerobot_handler to satisfy R…
([microsoft#176](microsoft#176))
([baf9e58](microsoft@baf9e58))
* **scripts:** support OSMO control-plane deploys with in-cluster Redis
([microsoft#317](microsoft#317))
([d4b70de](microsoft@d4b70de))
* **scripts:** update compute target name derivation logic
([microsoft#319](microsoft#319))
([bb20431](microsoft@bb20431))
* **settings:** update devcontainer name to match project context
([microsoft#177](microsoft#177))
([745321e](microsoft@745321e))
* **terraform:** create PostgreSQL Key Vault secret via ARM control
plane
([microsoft#304](microsoft#304))
([5d73b81](microsoft@5d73b81))
* **terraform:** gate observability with feature flags
([microsoft#303](microsoft#303))
([ea5e056](microsoft@ea5e056))
* **terraform:** switch VPN gateway defaults to AZ SKUs
([microsoft#309](microsoft#309))
([74989c5](microsoft@74989c5))
* **training:** correct learning rate mapping and pin LeRobot version
([microsoft#439](microsoft#439))
([5cf9943](microsoft@5cf9943))
* **workflows:** enable SARIF upload for dependency-pinning scans
([microsoft#502](microsoft#502))
([124cad6](microsoft@124cad6)),
closes
[microsoft#501](microsoft#501)
* **workflows:** remove redundant top-level permissions from
codeql-analysis
([microsoft#489](microsoft#489))
([1490fda](microsoft@1490fda))
* **workflows:** use bash shell for uv.lock regeneration and add SARIF
to dictionary
([microsoft#225](microsoft#225))
([e6fa6ea](microsoft@e6fa6ea))


### 📚 Documentation

* add chunking and compression configuration guide for Jetson edge
recording
([microsoft#408](microsoft#408))
([787a322](microsoft@787a322))
* add OpenSSF Best Practices badge to README
([microsoft#282](microsoft#282))
([01ea384](microsoft@01ea384))
* add threat model cross-reference to SECURITY.md
([microsoft#235](microsoft#235))
([88a461e](microsoft@88a461e))
* add vulnerability remediation timeline to SECURITY.md
([microsoft#233](microsoft#233))
([5ead3ee](microsoft@5ead3ee))
* **contributing:** remove version-specific planning language from
ownership tip
([microsoft#407](microsoft#407))
([3191f9b](microsoft@3191f9b))
* **deploy:** replace deploy/ READMEs with pointer files
([microsoft#379](microsoft#379))
([b3c3abb](microsoft@b3c3abb))
* **docs:** add bug report response timeline for OSSF report_responses
criterion
([microsoft#485](microsoft#485))
([9b26212](microsoft@9b26212))
* **docs:** add component update process for OpenSSF Silver badge
([microsoft#446](microsoft#446))
([6adc8a2](microsoft@6adc8a2))
* **docs:** Add data collection and training recipes
([microsoft#343](microsoft#343))
([9c34f86](microsoft@9c34f86))
* **docs:** add deprecation policy for external interfaces
([microsoft#445](microsoft#445))
([229d5db](microsoft@229d5db))
* **docs:** add structure for recipes in repo
([microsoft#322](microsoft#322))
([098757b](microsoft@098757b))
* **docs:** add YAML frontmatter to SUPPORT.md
([microsoft#478](microsoft#478))
([d94c15d](microsoft@d94c15d)),
closes
[microsoft#347](microsoft#347)
* **docs:** clarify issue assignment requirement before starting work
([microsoft#299](microsoft#299))
([1534462](microsoft@1534462))
* **docs:** create inference and training docs hubs
([microsoft#402](microsoft#402))
([7a20a2e](microsoft@7a20a2e))
* **docs:** create reference hub and migrate script documentation
([microsoft#503](microsoft#503))
([03a31c6](microsoft@03a31c6))
* **docs:** create training and inference documentation hubs
([microsoft#403](microsoft#403))
([7be003b](microsoft@7be003b))
* **operations:** create operations hub and troubleshooting guide
([microsoft#525](microsoft#525))
([31c7aaa](microsoft@31c7aaa))
* **reference:** add copilot artifacts documentation hub
([microsoft#170](microsoft#170))
([9a45ca4](microsoft@9a45ca4))
* simplify root README and update prerequisites
([microsoft#440](microsoft#440))
([c0c7710](microsoft@c0c7710))


### ♻️ Code Refactoring

* **build:** align Python dependency workflows with uv
([microsoft#447](microsoft#447))
([3102e03](microsoft@3102e03))
* **docs:** rename Docusaurus site to Physical AI Toolchain
([microsoft#224](microsoft#224))
([cfdf47a](microsoft@cfdf47a))
* **infrastructure:** rename boolean variables to `should_` prefix and
add missing core variables
([microsoft#292](microsoft#292))
([4496593](microsoft@4496593))
* **python:** move runtime deps to workflow pyproject manifests
([microsoft#405](microsoft#405))
([6c5fbeb](microsoft@6c5fbeb))


### 📦 Build System

* **build:** add Codecov upload to pytest workflow
([microsoft#434](microsoft#434))
([0110c17](microsoft@0110c17))
* **deps-dev:** bump the npm_and_yarn group across 2 directories with 1
update
([microsoft#325](microsoft#325))
([59cf9e6](microsoft@59cf9e6))
* **workflows:** enable coverage parameters and fix Pester test
infrastructure
([microsoft#435](microsoft#435))
([528bbde](microsoft@528bbde))


### 🔧 Miscellaneous

* add gomod to cspell general-technical wordlist
([microsoft#362](microsoft#362))
([1f93f47](microsoft@1f93f47))
* **build:** add codecov.yml for unified coverage reporting
([microsoft#430](microsoft#430))
([b0faf70](microsoft@b0faf70))
* **build:** add Go toolchain devcontainer feature and Dependabot gomod
([microsoft#337](microsoft#337))
([8a36620](microsoft@8a36620))
* **deps:** bump cryptography from 45.0.7 to 46.0.5 in /src/training
([microsoft#506](microsoft#506))
([a06434e](microsoft@a06434e))
* **deps:** bump minimatch in /src/dataviewer/frontend
([microsoft#416](microsoft#416))
([38a7607](microsoft@38a7607))
* **deps:** bump pyasn1 from 0.6.2 to 0.6.3 in /training/rl
([microsoft#296](microsoft#296))
([7b42cf5](microsoft@7b42cf5))
* **deps:** bump rollup in /src/dataviewer/frontend
([microsoft#417](microsoft#417))
([6302ce4](microsoft@6302ce4))
* **deps:** bump the common-dependencies group in /src/common with 3
updates
([microsoft#507](microsoft#507))
([db05074](microsoft@db05074))
* **deps:** bump the github-actions group across 1 directory with 6
updates
([microsoft#284](microsoft#284))
([c40eff6](microsoft@c40eff6))
* **deps:** bump the github-actions group across 1 directory with 6
updates
([microsoft#433](microsoft#433))
([2d9dd4f](microsoft@2d9dd4f))
* **deps:** bump the github-actions group across 1 directory with 6
updates
([microsoft#510](microsoft#510))
([c334a64](microsoft@c334a64))
* **deps:** bump the github-actions group with 2 updates
([microsoft#163](microsoft#163))
([f25713e](microsoft@f25713e))
* **deps:** bump the inference-dependencies group in /evaluation with 3
updates
([microsoft#279](microsoft#279))
([1d2d3dc](microsoft@1d2d3dc))
* **deps:** bump the inference-dependencies group in /src/inference with
5 updates
([microsoft#508](microsoft#508))
([2852ffb](microsoft@2852ffb))
* **deps:** bump the lerobot-inference-dependencies group in
/workflows/azureml with 4 updates
([microsoft#511](microsoft#511))
([b7c5773](microsoft@b7c5773))
* **deps:** bump the npm_and_yarn group across 2 directories with 1
update
([microsoft#223](microsoft#223))
([6a261ab](microsoft@6a261ab))
* **deps:** bump the training-dependencies group
([microsoft#429](microsoft#429))
([66e43f4](microsoft@66e43f4))
* **deps:** bump tornado from 6.5.4 to 6.5.5 in the uv group across 1
directory
([microsoft#172](microsoft#172))
([d6caf29](microsoft@d6caf29))
* **docs:** correct ms.date tooling and refresh stale documentation
([microsoft#349](microsoft#349))
([ccaa1e8](microsoft@ccaa1e8))
* **infrastructure:** add Go module and golangci-lint config for e2e
tests
([microsoft#347](microsoft#347))
([e0e6bbf](microsoft@e0e6bbf))
* **infrastructure:** add root .terraform-docs.yml configuration
([microsoft#312](microsoft#312))
([bb73bbb](microsoft@bb73bbb))
* migrate references from Azure-Samples to
microsoft/physical-ai-toolchain
([f58f0ef](microsoft@f58f0ef))
* **workflows:** update Dependabot, CodeQL, CODEOWNERS, and cspell for
dataviewer coverage
([microsoft#231](microsoft#231))
([6d8c2e8](microsoft@6d8c2e8))


### 🔒 Security

* **deps:** bump mlflow from 3.5.0 to 3.8.0rc0 in /training/rl
([microsoft#297](microsoft#297))
([e9929df](microsoft@e9929df))
* **deps:** bump the github-actions group across 1 directory with 4
updates
([microsoft#344](microsoft#344))
([6826929](microsoft@6826929))
* **deps:** bump the inference-dependencies group in /evaluation with 2
updates
([microsoft#339](microsoft#339))
([6804630](microsoft@6804630))
* **deps:** bump the npm_and_yarn group across 3 directories with 1
update
([microsoft#361](microsoft#361))
([6760857](microsoft@6760857))
* **deps:** bump the training-dependencies group across 1 directory with
54 updates
([microsoft#286](microsoft#286))
([d9ae04f](microsoft@d9ae04f))
* **deps:** bump the uv group across 3 directories with 1 update
([microsoft#360](microsoft#360))
([dfbda06](microsoft@dfbda06))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

---------

Co-authored-by: physical-ai-toolchain-release[bot] <267194360+physical-ai-toolchain-release[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Bill Berry <wbery@microsoft.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 13, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 13, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/data-management/viewer/frontend/dataviewer-frontend-dependencies-6b273954cb branch April 13, 2026 03:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dataviewer dependencies Dependency version updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@codecov-commenter