Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the frontend-prod-minor-deps group with 9 updates:

Package From To
@marsidev/react-turnstile 1.1.0 1.3.1
@mui/icons-material 6.4.12 6.5.0
@reduxjs/toolkit 2.6.1 2.9.2
chart.js 4.4.9 4.5.1
dayjs 1.11.18 1.11.19
i18next-browser-languagedetector 8.0.5 8.2.0
motion 12.4.13 12.23.24
mui-language-picker 2.4.2 2.5.2
react-router 7.6.3 7.9.5

Updates @marsidev/react-turnstile from 1.1.0 to 1.3.1

Release notes

Sourced from @​marsidev/react-turnstile's releases.

v1.3.1

   🐞 Bug Fixes

  • Update getResponsePromise return type to exclude undefined  -  by @​hyzyla (909ec)
    View changes on GitHub

v1.3.0

   🚀 Features

  • Add rerenderOnCallbackChange prop to fix stale callback closures  -  by @​marsidev (ea126)
    View changes on GitHub

v1.2.0

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 7f2e5ff chore: release v1.3.1
  • 2c4c2c3 chore: include README in npm package publication
  • 02c63a3 Merge pull request #111 from hyzyla/Fix-getResponsePromise-type
  • 8a9a16a fix-fix
  • 909ec20 fix: update getResponsePromise return type to exclude undefined
  • d452f1a chore: release v1.3.0
  • 487a7dd Merge pull request #108 from marsidev/107-bug-in-new-version-it-keeps-verifyi...
  • ea1266b feat: add rerenderOnCallbackChange prop to fix stale callback closures
  • 2b5c573 chore: release v1.2.0
  • 37be4f1 Merge pull request #105 from alfredomariamilano/update-deps-array
  • Additional commits viewable in compare view

Updates @mui/icons-material from 6.4.12 to 6.5.0

Release notes

Sourced from @​mui/icons-material's releases.

v6.5.0

A big thanks to the 2 contributors who made this release possible.

CSS layers make it easier to override styles by splitting a single style sheet into multiple layers. To learn more, check out the CSS layers documentation.

@mui/[email protected]

@mui/[email protected]

@mui/[email protected]

Docs

All contributors of this release in alphabetical order: @​sai6855, @​siriwatknp

Changelog

Sourced from @​mui/icons-material's changelog.

6.5.0

Jul 2, 2025

A big thanks to the 2 contributors who made this release possible.

CSS layers make it easier to override styles by splitting a single style sheet into multiple layers. To learn more, check out the CSS layers documentation.

@mui/[email protected]

@mui/[email protected]

@mui/[email protected]

Docs

All contributors of this release in alphabetical order: @​sai6855, @​siriwatknp

Commits

Updates @reduxjs/toolkit from 2.6.1 to 2.9.2

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.9.2

This bugfix release fixes a potential internal data leak in SSR environments, improves handling of headers in fetchBaseQuery, improves retry handling for unexpected errors and request aborts, and fixes a longstanding issue with prefetch leaving an unused subscription. We've also shipped a new graphqlRequestBaseQuery release with updated dependencies and better error handling.

Changelog

Internal Subscription Handling

We had a report that a Redux SSR app had internal subscription data showing up across different requests. After investigation, this was a bug introduced by the recent RTKQ perf optimizations, where the internal subscription fields were hoisted outside of the middleware setup and into createApi itself. This meant they existed outside of the per-store-instance lifecycle. We've reworked the logic to ensure the data is per-store again. We also fixed another issue that miscalculated when there was an active request while checking for cache entry cleanup.

Note that no actual app data was leaked in this case, just the internal subscription IDs that RTKQ uses in its own middleware to track the existence of subscriptions per cache entry.

fetchBaseQuery Headers

We've updated fetchBaseQuery to avoid setting content-type in cases where a non-JSONifiable value like FormData is being passed as the request body, so that the browser can set that content type itself. It also now sets the accept header based on the selected responseHandler (JSON or text).

retry Behavior and Cleanup

The retry util now respects the maxRetries option when catching unknown errors in addition to the existing known errors logic. It also now checks the request's AbortSignal and will stop retrying if aborted.

In conjunction with that, dispatching resetApiState will now abort all in-flight requests.

The prefetch util and usePrefetch hook had a long-standing issue where they would create a subscription for a cache entry, but there was no way to clean up that subscription. This meant that the cache entry was effectively permanent. They now initiate the request without adding a subscription. This will fetch the cache entry and leave it in the store for the keepUnusedDataFor period as intended, giving your app time to actually subscribe to the value (such as prefetching the cache entry in a route handler, and then subscribing in a component).

graphqlRequestBaseQuery

We've published @rtk-query/graphql-request-base-query v2.3.2, which updates the graphql-request dep to ^7. We also fixed an issue where the error handling rethrew unknown errors - it now returns {error} as a base query is supposed to.

What's Changed

Full Changelog: reduxjs/redux-toolkit@v2.9.1...v2.9.2

v2.9.1

This bugfix release fixes how sorted entity adapters handle duplicate IDs, tweaks the TS types for RTKQ query state cache entries to improve how the data field is handled, and adds better cleanup for long-running listener middleware effects.

What's Changed

Full Changelog: reduxjs/redux-toolkit@v2.9.0...v2.9.1

... (truncated)

Commits
  • 32887d7 Release 2.9.2
  • 4432629 Don't create subscriptions for prefetch calls (#5116)
  • c86d948 Add retry abort handling and abort on resetApiState (#5114)
  • 02630d2 fix: update graphql-request dependency to include version ^7.0.0 (#4987)
  • 1b95037 Respect maxRetries for unexpected errors (#5113)
  • c490b19 Improve fetchBaseQuery default headers handling (#5112)
  • 7b7faea Fix potential subscription leakage in SSR environments (#5111)
  • fde0be7 Release 2.9.1
  • 47e7d81 Release @​rtk-query/codegen-openapi 2.1.0
  • b4b7d17 Allow executing effects that have become unsubscribed to be canceled by `list...
  • Additional commits viewable in compare view

Updates chart.js from 4.4.9 to 4.5.1

Release notes

Sourced from chart.js's releases.

v4.5.1

Essential Links

Bugs Fixed

  • #12098 Do not notify plugins after their uninstall function has been called
  • #12096 Sync Doughnut chart legend options to legend plugin
  • #12097 Attempt fixing charts shrinking on certain zoom values in Chrome

Types

  • #12122 fix(types): add drawingArea to RadialLinearScale
  • #12120 fix(types): allow null for line chart point values (#12027)
  • #12099 Add data.datasets[].tooltip.callbacks to Typescript types

Development

  • #12132 Bump version to 4.5.1
  • #12118 Bump actions/setup-node from 4 to 5

Thanks to @​LeeLenaleee, @​anshukushwaha07, @​bojidar-bg, @​dependabot[bot] and dependabot[bot]

v4.5.0

Essential Links

Enhancements

  • #11470 Fix min js two renames
  • #12054 [fix] #12048 - Add selfJoin option for doughnut graphs
  • #12058 feature: make above/below colors in filler plugin work with pivoted line charts

Bugs Fixed

  • #12070 Fix: display stacked bar with multiple x-Axis

Types

  • #12064 Document requirement of 'this' when calling tick formatters

... (truncated)

Commits

Updates dayjs from 1.11.18 to 1.11.19

Release notes

Sourced from dayjs's releases.

v1.11.19

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)
Changelog

Sourced from dayjs's changelog.

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)
Commits

Updates i18next-browser-languagedetector from 8.0.5 to 8.2.0

Changelog

Sourced from i18next-browser-languagedetector's changelog.

8.2.0

  • feat: add support for hash detector 304

8.1.0

  • feat: add support for Partitioned cookies 303
Commits

Updates motion from 12.4.13 to 12.23.24

Changelog

Sourced from motion's changelog.

[12.23.24] 2025-10-10

Fixed

  • Ensure that when a component remounts, it continues to fire animations even when initial={false}.

[12.23.23] 2025-10-10

Added

  • Exporting PresenceChild and PopChild type for internal use.

[12.23.22] 2025-09-25

Added

  • Exporting HTMLElements and useComposedRefs type for internal use.

[12.23.21] 2025-09-24

Fixed

  • Fixing main-thread scroll with animations that contain delay.

[12.23.20] 2025-09-24

Fixed

  • Suppress non-animatable value warning for instant animations.

[12.23.19] 2025-09-23

Fixed

  • Remove support for changing ref prop.

[12.23.18] 2025-09-19

Fixed

  • <motion /> components now support changing ref prop.

[12.23.17] 2025-09-19

Fixed

  • Ensure animate() onComplete only fires once, when all values are complete.

[12.23.16] 2025-09-19

... (truncated)

Commits

Updates mui-language-picker from 2.4.2 to 2.5.2

Commits

Updates react-router from 7.6.3 to 7.9.5

Release notes

Sourced from react-router's releases.

v7.9.5

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v795

v7.9.4

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v794

v7.9.3

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v793

v7.9.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v792

v7.9.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v791

v7.9.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v790

v7.8.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v782

v7.8.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v781

v7.8.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v780

v7.7.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v771

v7.7.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v770

Changelog

Sourced from react-router's changelog.

7.9.5

Patch Changes

  • Move RSCHydratedRouter and utils to /dom export. (#14457)

  • useRoute: return type-safe handle (#14462)

    For example:

    // app/routes/admin.tsx
    const handle = { hello: "world" };
    // app/routes/some-other-route.tsx
    export default function Component() {
      const admin = useRoute("routes/admin");
      if (!admin) throw new Error("Not nested within 'routes/admin'");
      console.log(admin.handle);
      //                ^? { hello: string }
    }
  • Ensure action handlers run for routes with middleware even if no loader is present (#14443)

  • Add unstable_instrumentations API to allow users to add observablity to their apps by instrumenting route loaders, actions, middlewares, lazy, as well as server-side request handlers and client side navigations/fetches (#14412)

    • Framework Mode:
      • entry.server.tsx: export const unstable_instrumentations = [...]
      • entry.client.tsx: <HydratedRouter unstable_instrumentations={[...]} />
    • Data Mode
      • createBrowserRouter(routes, { unstable_instrumentations: [...] })

    This also adds a new unstable_pattern parameter to loaders/actions/middleware which contains the un-interpolated route pattern (i.e., /blog/:slug) which is useful for aggregating performance metrics by route

7.9.4

Patch Changes

  • handle external redirects in from server actions (#14400)

  • New (unstable) useRoute hook for accessing data from specific routes (#14407)

    For example, let's say you have an admin route somewhere in your app and you want any child routes of admin to all have access to the loaderData and actionData from admin.

    // app/routes/admin.tsx
    import { Outlet } from "react-router";
    export const loader = () => ({ message: "Hello, loader!" });

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@mui/icons-material [>= 7.a, < 8]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

This change is Reviewable

Bumps the frontend-prod-minor-deps group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@marsidev/react-turnstile](https://github.com/marsidev/react-turnstile) | `1.1.0` | `1.3.1` |
| [@mui/icons-material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material) | `6.4.12` | `6.5.0` |
| [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.6.1` | `2.9.2` |
| [chart.js](https://github.com/chartjs/Chart.js) | `4.4.9` | `4.5.1` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.18` | `1.11.19` |
| [i18next-browser-languagedetector](https://github.com/i18next/i18next-browser-languageDetector) | `8.0.5` | `8.2.0` |
| [motion](https://github.com/motiondivision/motion) | `12.4.13` | `12.23.24` |
| [mui-language-picker](https://github.com/sillsdev/mui-language-picker) | `2.4.2` | `2.5.2` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.6.3` | `7.9.5` |


Updates `@marsidev/react-turnstile` from 1.1.0 to 1.3.1
- [Release notes](https://github.com/marsidev/react-turnstile/releases)
- [Commits](marsidev/react-turnstile@v1.1.0...v1.3.1)

Updates `@mui/icons-material` from 6.4.12 to 6.5.0
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/v6.5.0/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v6.5.0/packages/mui-icons-material)

Updates `@reduxjs/toolkit` from 2.6.1 to 2.9.2
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](reduxjs/redux-toolkit@v2.6.1...v2.9.2)

Updates `chart.js` from 4.4.9 to 4.5.1
- [Release notes](https://github.com/chartjs/Chart.js/releases)
- [Commits](chartjs/Chart.js@v4.4.9...v4.5.1)

Updates `dayjs` from 1.11.18 to 1.11.19
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.18...v1.11.19)

Updates `i18next-browser-languagedetector` from 8.0.5 to 8.2.0
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next-browser-languageDetector@v8.0.5...v8.2.0)

Updates `motion` from 12.4.13 to 12.23.24
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.4.13...v12.23.24)

Updates `mui-language-picker` from 2.4.2 to 2.5.2
- [Commits](https://github.com/sillsdev/mui-language-picker/commits)

Updates `react-router` from 7.6.3 to 7.9.5
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router)

---
updated-dependencies:
- dependency-name: "@marsidev/react-turnstile"
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: "@mui/icons-material"
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: chart.js
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: dayjs
  dependency-version: 1.11.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-prod-minor-deps
- dependency-name: i18next-browser-languagedetector
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: motion
  dependency-version: 12.23.24
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: mui-language-picker
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: react-router
  dependency-version: 7.9.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 1, 2025
@github-actions
Copy link

github-actions bot commented Nov 1, 2025

⚠️ Commit Message Format Issues ⚠️

commit 067adfb4ba:
7: B1 Line exceeds max length (96>80): "| @marsidev/react-turnstile | 1.1.0 | 1.3.1 |"
8: B1 Line exceeds max length (120>80): "| @mui/icons-material | 6.4.12 | 6.5.0 |"
9: B1 Line exceeds max length (84>80): "| @reduxjs/toolkit | 2.6.1 | 2.9.2 |"
12: B1 Line exceeds max length (119>80): "| i18next-browser-languagedetector | 8.0.5 | 8.2.0 |"
14: B1 Line exceeds max length (94>80): "| mui-language-picker | 2.4.2 | 2.5.2 |"
15: B1 Line exceeds max length (113>80): "| react-router | 7.6.3 | 7.9.5 |"
25: B1 Line exceeds max length (90>80): "- Commits"
41: B1 Line exceeds max length (99>80): "- Changelog"
42: B1 Line exceeds max length (96>80): "- Commits"
46: B1 Line exceeds max length (82>80): "- Commits"
53: B1 Line exceeds max length (101>80): "- Changelog"
54: B1 Line exceeds max length (103>80): "- Commits"

@codecov
Copy link

codecov bot commented Nov 1, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.45%. Comparing base (e5bccbb) to head (067adfb).
⚠️ Report is 5 commits behind head on master.

Additional details and impacted files
@@             Coverage Diff             @@
##           master    #3991       +/-   ##
===========================================
+ Coverage   74.40%   85.45%   +11.05%     
===========================================
  Files         291       54      -237     
  Lines       10790     4702     -6088     
  Branches     1351      577      -774     
===========================================
- Hits         8028     4018     -4010     
+ Misses       2373      542     -1831     
+ Partials      389      142      -247     
Flag Coverage Δ
backend 85.45% <ø> (ø)
frontend ?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@imnasnainaec
Copy link
Collaborator

@dependabot ignore @mui/icons-material minor version

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 4, 2025

OK, I won't notify you about version 6.5.x of @mui/icons-material again, unless you unignore it.

@imnasnainaec
Copy link
Collaborator

Subsumed in #4002

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 4, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/frontend-prod-minor-deps-06ce903926 branch November 4, 2025 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants