build(deps): bump the frontend-runtime group across 1 directory with 14 updates by dependabot[bot] · Pull Request #105 · w0rldx/XE-Local-AI-Engine.Source

dependabot · 2026-10-19T04:59:24Z

Bumps the frontend-runtime group with 14 updates in the /XE-Local-AI-Engine.Client.React directory:

Package	From	To
@mantine/charts	`9.7.0`	`9.7.2`
@mantine/colors-generator	`9.7.0`	`9.7.2`
@mantine/core	`9.7.0`	`9.7.2`
@mantine/hooks	`9.7.0`	`9.7.2`
@mantine/notifications	`9.7.0`	`9.7.2`
@tanstack/react-query	`5.104.1`	`5.104.2`
@tanstack/react-router	`1.170.41`	`1.170.44`
@tanstack/react-virtual	`3.14.13`	`3.14.19`
framer-motion	`14.0.0`	`14.2.0`
i18next	`26.4.2`	`26.4.4`
react-i18next	`17.0.15`	`17.0.16`
react-syntax-highlighter	`16.1.1`	`16.1.2`
zod	`4.6.5`	`4.6.7`
@rollup/rollup-linux-x64-gnu	`4.64.0`	`4.64.6`

Updates @mantine/charts from 9.7.0 to 9.7.2

Release notes

Sourced from @mantine/charts's releases.

9.7.2

[@mantine/core] PinInput: Fix readOnly not preventing value changes on Delete, Backspace and paste (#9258)

[@mantine/core] Divider: Add aria-orientation (#9259)

[@mantine/core] Tooltip: Fix disabled tooltip setting aria-describedby on its target (#9261)

[@mantine/core] Transition: Fix frames and callbacks running after unmount during the first frame (#9263)

[@mantine/hooks] use-scroll-into-view: Reset start time on cancel (#9265)

[@mantine/core] Fix Backspace removing the last value when readOnly is set in MultiSelect and TreeSelect components (#9267)

[@mantine/schedule] ResourcesDayView: Fix sticky resource labels covering the time labels row (#9268)

[@mantine/hooks] use-debounced-callback: Avoid repeating completed leading calls (#9269)

[@mantine/schedule] MobileMonthView: Fix multi-day event time display on start, middle and end days (#9272)

[@mantine/form] Add UseContextForm type export (#9275)

[@mantine/form] Fix potential global prototype position

[@mantine/tiptap] Add option to handle images pasted with other rich text elements in the image extension (#9270)

9.7.1

[@mantine/schedule] Fix startScrollTime scroll position (#9255)

[@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional zoom levels (#9251)

[@mantine/core] Tree: Add aria-expanded to tree items with children (#9247)

[@mantine/core] SegmentedControl: Do not call Math.random during render (#9245)

[@mantine/core] Popover: Add capture prop to control events capturing phase (#9243)

[@mantine/form] Fix clearing state of unrelated fields (#9242)

[@mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#9238)

[@mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#9236)

[@mantine/form] Fix reorderListItem moving errors of items whose index shares a prefix with the reordered index (#9235)

[@mantine/schedule] MonthView: Fix quadratic row assignment for weeks with many events (#9232)

[@mantine/hooks] use-pagination: Fix single page being replaced with dots on the right side (#9229)

[@mantine/core] ScrollArea: Fix wheel listener on document blocking compositor scrolling for the whole page (#9225)

[@mantine/dates] DateTimePicker: Fix time not being limited by minDate and maxDate (#9221)

[@mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox aria-labelledby referencing a missing label element (#9219) (#9220)

[@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)

Commits

1319141 [release] Version: 9.7.2
f0e2bc6 [release] Version: 9.7.1
See full diff in compare view

Updates @mantine/colors-generator from 9.7.0 to 9.7.2

Release notes

Sourced from @mantine/colors-generator's releases.

9.7.2

[@mantine/core] PinInput: Fix readOnly not preventing value changes on Delete, Backspace and paste (#9258)

[@mantine/core] Divider: Add aria-orientation (#9259)

[@mantine/core] Tooltip: Fix disabled tooltip setting aria-describedby on its target (#9261)

[@mantine/core] Transition: Fix frames and callbacks running after unmount during the first frame (#9263)

[@mantine/hooks] use-scroll-into-view: Reset start time on cancel (#9265)

[@mantine/core] Fix Backspace removing the last value when readOnly is set in MultiSelect and TreeSelect components (#9267)

[@mantine/schedule] ResourcesDayView: Fix sticky resource labels covering the time labels row (#9268)

[@mantine/hooks] use-debounced-callback: Avoid repeating completed leading calls (#9269)

[@mantine/schedule] MobileMonthView: Fix multi-day event time display on start, middle and end days (#9272)

[@mantine/form] Add UseContextForm type export (#9275)

[@mantine/form] Fix potential global prototype position

[@mantine/tiptap] Add option to handle images pasted with other rich text elements in the image extension (#9270)

9.7.1

[@mantine/schedule] Fix startScrollTime scroll position (#9255)

[@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional zoom levels (#9251)

[@mantine/core] Tree: Add aria-expanded to tree items with children (#9247)

[@mantine/core] SegmentedControl: Do not call Math.random during render (#9245)

[@mantine/core] Popover: Add capture prop to control events capturing phase (#9243)

[@mantine/form] Fix clearing state of unrelated fields (#9242)

[@mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#9238)

[@mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#9236)

[@mantine/form] Fix reorderListItem moving errors of items whose index shares a prefix with the reordered index (#9235)

[@mantine/schedule] MonthView: Fix quadratic row assignment for weeks with many events (#9232)

[@mantine/hooks] use-pagination: Fix single page being replaced with dots on the right side (#9229)

[@mantine/core] ScrollArea: Fix wheel listener on document blocking compositor scrolling for the whole page (#9225)

[@mantine/dates] DateTimePicker: Fix time not being limited by minDate and maxDate (#9221)

[@mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox aria-labelledby referencing a missing label element (#9219) (#9220)

[@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)

Commits

1319141 [release] Version: 9.7.2
f0e2bc6 [release] Version: 9.7.1
See full diff in compare view

Updates @mantine/core from 9.7.0 to 9.7.2

Release notes

Sourced from @mantine/core's releases.

9.7.2

[@mantine/core] PinInput: Fix readOnly not preventing value changes on Delete, Backspace and paste (#9258)

[@mantine/core] Divider: Add aria-orientation (#9259)

[@mantine/core] Tooltip: Fix disabled tooltip setting aria-describedby on its target (#9261)

[@mantine/core] Transition: Fix frames and callbacks running after unmount during the first frame (#9263)

[@mantine/hooks] use-scroll-into-view: Reset start time on cancel (#9265)

[@mantine/core] Fix Backspace removing the last value when readOnly is set in MultiSelect and TreeSelect components (#9267)

[@mantine/schedule] ResourcesDayView: Fix sticky resource labels covering the time labels row (#9268)

[@mantine/hooks] use-debounced-callback: Avoid repeating completed leading calls (#9269)

[@mantine/schedule] MobileMonthView: Fix multi-day event time display on start, middle and end days (#9272)

[@mantine/form] Add UseContextForm type export (#9275)

[@mantine/form] Fix potential global prototype position

[@mantine/tiptap] Add option to handle images pasted with other rich text elements in the image extension (#9270)

9.7.1

[@mantine/schedule] Fix startScrollTime scroll position (#9255)

[@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional zoom levels (#9251)

[@mantine/core] Tree: Add aria-expanded to tree items with children (#9247)

[@mantine/core] SegmentedControl: Do not call Math.random during render (#9245)

[@mantine/core] Popover: Add capture prop to control events capturing phase (#9243)

[@mantine/form] Fix clearing state of unrelated fields (#9242)

[@mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#9238)

[@mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#9236)

[@mantine/form] Fix reorderListItem moving errors of items whose index shares a prefix with the reordered index (#9235)

[@mantine/schedule] MonthView: Fix quadratic row assignment for weeks with many events (#9232)

[@mantine/hooks] use-pagination: Fix single page being replaced with dots on the right side (#9229)

[@mantine/core] ScrollArea: Fix wheel listener on document blocking compositor scrolling for the whole page (#9225)

[@mantine/dates] DateTimePicker: Fix time not being limited by minDate and maxDate (#9221)

[@mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox aria-labelledby referencing a missing label element (#9219) (#9220)

[@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)

Commits

1319141 [release] Version: 9.7.2
27cc947 [@mantine/core] PinInput: Fix readOnly not preventing value changes on Delete...
6b6c9c2 [@mantine/core] Divider: Add aria-orientation (#9259)
46edd9b [@mantine/core] Tooltip: Fix disabled tooltip setting aria-describedby on i...
55ff015 [@mantine/core] Transition: Fix frames and callbacks running after unmount du...
5fbea93 [@mantine/core] Fix Backspace removing the last value when readOnly is set in...
f0e2bc6 [release] Version: 9.7.1
7dc25c4 [@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional...
de32b23 [@mantine/core] Tree: Add aria-expanded to tree items with children (#9247)
e492200 [@mantine/core] SegmentedControl: Do not call Math.random during render (#9245)
Additional commits viewable in compare view

Updates @mantine/hooks from 9.7.0 to 9.7.2

Release notes

Sourced from @mantine/hooks's releases.

9.7.2

[@mantine/core] PinInput: Fix readOnly not preventing value changes on Delete, Backspace and paste (#9258)

[@mantine/core] Divider: Add aria-orientation (#9259)

[@mantine/core] Tooltip: Fix disabled tooltip setting aria-describedby on its target (#9261)

[@mantine/core] Transition: Fix frames and callbacks running after unmount during the first frame (#9263)

[@mantine/hooks] use-scroll-into-view: Reset start time on cancel (#9265)

[@mantine/core] Fix Backspace removing the last value when readOnly is set in MultiSelect and TreeSelect components (#9267)

[@mantine/schedule] ResourcesDayView: Fix sticky resource labels covering the time labels row (#9268)

[@mantine/hooks] use-debounced-callback: Avoid repeating completed leading calls (#9269)

[@mantine/schedule] MobileMonthView: Fix multi-day event time display on start, middle and end days (#9272)

[@mantine/form] Add UseContextForm type export (#9275)

[@mantine/form] Fix potential global prototype position

[@mantine/tiptap] Add option to handle images pasted with other rich text elements in the image extension (#9270)

9.7.1

[@mantine/schedule] Fix startScrollTime scroll position (#9255)

[@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional zoom levels (#9251)

[@mantine/core] Tree: Add aria-expanded to tree items with children (#9247)

[@mantine/core] SegmentedControl: Do not call Math.random during render (#9245)

[@mantine/core] Popover: Add capture prop to control events capturing phase (#9243)

[@mantine/form] Fix clearing state of unrelated fields (#9242)

[@mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#9238)

[@mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#9236)

[@mantine/form] Fix reorderListItem moving errors of items whose index shares a prefix with the reordered index (#9235)

[@mantine/schedule] MonthView: Fix quadratic row assignment for weeks with many events (#9232)

[@mantine/hooks] use-pagination: Fix single page being replaced with dots on the right side (#9229)

[@mantine/core] ScrollArea: Fix wheel listener on document blocking compositor scrolling for the whole page (#9225)

[@mantine/dates] DateTimePicker: Fix time not being limited by minDate and maxDate (#9221)

[@mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox aria-labelledby referencing a missing label element (#9219) (#9220)

[@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)

Commits

1319141 [release] Version: 9.7.2
d6474ab [@mantine/hooks] use-scroll-into-view: Reset start time on cancel (#9265)
c7f93f4 [@mantine/hooks] use-debounced-callback: Avoid repeating completed leading ca...
f0e2bc6 [release] Version: 9.7.1
6d583b3 [@mantine/hooks] use-pagination: Fix single page being replaced with dots on ...
f61997e [@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)
See full diff in compare view

Updates @mantine/notifications from 9.7.0 to 9.7.2

Release notes

Sourced from @mantine/notifications's releases.

9.7.2

[@mantine/core] PinInput: Fix readOnly not preventing value changes on Delete, Backspace and paste (#9258)

[@mantine/core] Divider: Add aria-orientation (#9259)

[@mantine/core] Tooltip: Fix disabled tooltip setting aria-describedby on its target (#9261)

[@mantine/core] Transition: Fix frames and callbacks running after unmount during the first frame (#9263)

[@mantine/hooks] use-scroll-into-view: Reset start time on cancel (#9265)

[@mantine/core] Fix Backspace removing the last value when readOnly is set in MultiSelect and TreeSelect components (#9267)

[@mantine/schedule] ResourcesDayView: Fix sticky resource labels covering the time labels row (#9268)

[@mantine/hooks] use-debounced-callback: Avoid repeating completed leading calls (#9269)

[@mantine/schedule] MobileMonthView: Fix multi-day event time display on start, middle and end days (#9272)

[@mantine/form] Add UseContextForm type export (#9275)

[@mantine/form] Fix potential global prototype position

[@mantine/tiptap] Add option to handle images pasted with other rich text elements in the image extension (#9270)

9.7.1

[@mantine/schedule] Fix startScrollTime scroll position (#9255)

[@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional zoom levels (#9251)

[@mantine/core] Tree: Add aria-expanded to tree items with children (#9247)

[@mantine/core] SegmentedControl: Do not call Math.random during render (#9245)

[@mantine/core] Popover: Add capture prop to control events capturing phase (#9243)

[@mantine/form] Fix clearing state of unrelated fields (#9242)

[@mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#9238)

[@mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#9236)

[@mantine/form] Fix reorderListItem moving errors of items whose index shares a prefix with the reordered index (#9235)

[@mantine/schedule] MonthView: Fix quadratic row assignment for weeks with many events (#9232)

[@mantine/hooks] use-pagination: Fix single page being replaced with dots on the right side (#9229)

[@mantine/core] ScrollArea: Fix wheel listener on document blocking compositor scrolling for the whole page (#9225)

[@mantine/dates] DateTimePicker: Fix time not being limited by minDate and maxDate (#9221)

[@mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox aria-labelledby referencing a missing label element (#9219) (#9220)

[@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#9214)

Commits

1319141 [release] Version: 9.7.2
f0e2bc6 [release] Version: 9.7.1
See full diff in compare view

Updates @tanstack/react-query from 5.104.1 to 5.104.2

Changelog

Sourced from @tanstack/react-query's changelog.

5.104.2

Patch Changes

Updated dependencies [03e8c39]:

@tanstack/query-core@5.104.2

Commits

b699b52 ci: Version Packages (#11849)
e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
833062c chore: replace prettier with oxfmt (#11939)
d0cfa6a chore: replace eslint with oxlint (#11938)
0012ec1 docs(react-query): add JSDoc to the properties of the exported interfaces and...
b5e8e7b docs(react-query): add JSDoc to the exported classes, methods, and arrow func...
01abab3 docs(*): note that 'throwOnError' makes the hook rethrow the errors of 'mutat...
b42166e docs(react-query): add JSDoc to the exported interfaces and type aliases (#11...
205d422 docs(*): add missing JSDoc descriptions and enforce 'jsdoc/require-descriptio...
Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.41 to 1.170.44

Release notes

Sourced from @tanstack/react-router's releases.

@tanstack/react-router@1.170.44

Patch Changes

Updated dependencies [d6ba115]:

@tanstack/router-core@1.171.37

@tanstack/react-router@1.170.43

Patch Changes

Updated dependencies [94d6d8e]:

@tanstack/router-core@1.171.36

Changelog

Sourced from @tanstack/react-router's changelog.

1.170.44

Patch Changes

Updated dependencies [d6ba115]:

@tanstack/router-core@1.171.37

1.170.43

Patch Changes

Updated dependencies [94d6d8e]:

@tanstack/router-core@1.171.36

1.170.42

Patch Changes

#8594 2413cc0 - reduce component nesting per route match

#8602 efc2042 - Links of a route that the pending navigation leaves skip deriving the destination location, and clicks and preloads follow the href a Link displays. buildLocation now builds mask and routeMasks locations from the same _fromLocation as the destination.

#8602 efc2042 - Fixed Link destinations that resolve to a route mask are now reused across navigations instead of being rebuilt every time. A mounted Link now follows changes to its href and reloadDocument props, and React Links no longer each subscribe to a hydration flag.

#8579 d35aab4 - Cancel pending link preload timers when starting navigation to avoid redundant preloading while the destination is loading.

Updated dependencies [dfe3dea, dfe3dea, dfe3dea, efc2042, efc2042, dfe3dea, 663282b]:

@tanstack/history@1.162.5

@tanstack/router-core@1.171.35

Commits

4ff63eb ci: Version Packages (#8700)
80e2eab ci: Version Packages (#8661)
c79c620 ci: Version Packages (#8580)
f6d21de revert: keep server-rendered pending UI of no-SSR routes through hydration (#...
ff9f753 fix: keep server-rendered pending UI of no-SSR routes through hydration (#8643)
df8bbf2 docs: use new query methods (#7100)
efc2042 perf(router): skip Link work for routes a navigation leaves (#8602)
c4cb0e4 test(router): Link tests that hold on main, ahead of the departing-Link work ...
2413cc0 perf(react-router): reduce component nesting per route match (#8594)
d35aab4 fix(router): cancel pending link preload before navigation (#8579)
See full diff in compare view

Updates @tanstack/react-virtual from 3.14.13 to 3.14.19

Release notes

Sourced from @tanstack/react-virtual's releases.

@tanstack/react-virtual@3.14.19

Patch Changes

Updated dependencies [269e8ed]:

@tanstack/virtual-core@3.19.4

@tanstack/react-virtual@3.14.18

Patch Changes

Updated dependencies [f211d3a]:

@tanstack/virtual-core@3.19.3

@tanstack/react-virtual@3.14.17

Patch Changes

Updated dependencies [3800fb3, cb510cb]:

@tanstack/virtual-core@3.19.2

@tanstack/react-virtual@3.14.16

Patch Changes

Updated dependencies [7aa34f6, e7a0a92]:

@tanstack/virtual-core@3.19.1

@tanstack/react-virtual@3.14.15

Patch Changes

Updated dependencies [28a2174, 92c697f]:

@tanstack/virtual-core@3.19.0

@tanstack/react-virtual@3.14.14

Patch Changes

#1301 ce57b78 - fix(react-virtual): position directDomUpdates rows that mount without the owner re-rendering

Rows were only positioned by the owner's layout effect or the next onChange. A row mounted by a child that re-renders on its own (local state, context, a resolved Suspense boundary) skipped both when it was fixed-size, and stayed unpositioned until the range changed. Rows are now positioned as they register through measureElement, and containerRef positions the rows that mounted together with the container.

Updated dependencies [43675bc, 9df47a3, c644f10, 2a631f4]:

@tanstack/virtual-core@3.18.0

Changelog

Sourced from @tanstack/react-virtual's changelog.

3.14.19

Patch Changes

Updated dependencies [269e8ed]:

@tanstack/virtual-core@3.19.4

3.14.18

Patch Changes

Updated dependencies [f211d3a]:

@tanstack/virtual-core@3.19.3

3.14.17

Patch Changes

Updated dependencies [3800fb3, cb510cb]:

@tanstack/virtual-core@3.19.2

3.14.16

Patch Changes

Updated dependencies [7aa34f6, e7a0a92]:

@tanstack/virtual-core@3.19.1

3.14.15

Patch Changes

Updated dependencies [28a2174, 92c697f]:

@tanstack/virtual-core@3.19.0

3.14.14

Patch Changes

#1301 ce57b78 - fix(react-virtual): position directDomUpdates rows that mount without the owner re-rendering

Rows were only positioned by the owner's layout effect or the next onChange. A row mounted by a child that re-renders on its own (local state, context, a resolved Suspense boundary) skipped both when it was fixed-size, and stayed unpositioned until the range changed. Rows are now positioned as they register through measureElement, and containerRef positions the rows that mounted together with the container.

Updated dependencies [43675bc, 9df47a3, c644f10, 2a631f4]:

@tanstack/virtual-core@3.18.0

Commits

4f9636e ci: Version Packages (#1322)
676a098 ci: Version Packages (#1317)
7c20899 ci: Version Packages (#1315)
cb510cb refactor(virtual-core): describe an in-flight scroll command by one phase (#1...
46f73fb ci: Version Packages (#1312)
6732e00 test(virtual-core): pin the iOS deferral and index-scroll orderings measured ...
84c1502 ci: Version Packages (#1303)
92c697f fix(virtual-core): keep lanes aligned after changing lanes with measureElemen...
259fc1a ci: Version Packages (#1299)
2a631f4 fix(virtual-core): reconcile index scrolls after pending measurements (#1294)
Additional commits viewable in compare view

Updates framer-motion from 14.0.0 to 14.2.0

Changelog

Sourced from framer-motion's changelog.

[14.2.0] 2026-10-13

Added

Hardware accelerated independent transforms like x, y, scaleX etc.

[14.1.1] 2026-10-13

Fixed

Fix velocity hand-off for hardware-accelerated springs.

cubicBezier: More accurate, 2x faster.

Reorder: Fix click events on reoredered items.

useTransform: Fix desync when source is set in an effect under Strict Mode.

[14.1.0] 2026-10-09

Added

animateLayout: Layout animations for vanilla JS.

Fixed

Delay animation start when main thread held to prevent visual jumps.

Fix whileHover/whileTap getting stuck after Fast Refresh reorders siblings.

scroll/useScroll: Fix reporting of elastic overscroll.

AnimatePresence: Fix popLayout when rendering into another window or iframe.

animate: Fix JS animations jumping ahead when played after a pause at non-1 speed.

Allow layout animations inside dragged elements.

Commits

bd3a91b v14.2.0
c35493f Updating changelog
e0c0e7f Merge pull request #3897 from motiondivision/claude/independent-transform-waa...
9f4da2e Merge remote-tracking branch 'origin/main' into claude/independent-transform-...
c53fcc6 Trim transform group code and reuse shared helpers
23b2a56 v14.1.1
7d5bb80 Updating changelog
4840bbc Merge pull request #3915 from motiondivision/claude/project-thread-jj781x-use...
9dc3a40 Merge pull request #3916 from motiondivision/claude/project-thread-jj781x-reo...
5ce6caf Merge pull request #3914 from motiondivision/claude/project-thread-jj781x-cub...
Additional commits viewable in compare view

Updates i18next from 26.4.2 to 26.4.4

Release notes

Sourced from i18next's releases.

v26.4.4

fix(security): the nesting regexp no longer backtracks exponentially (ReDoS) on an unclosed $t(. Its repeated group had overlapping alternatives ([^()"']+ inside (?:...)*?, and inside parentheses [^()] also matched quotes), so a string containing $t( without a closing ) made the engine try every way to split the text: about 2x the runtime per extra character, and a ~25 character value hung t() for minutes. With the default config this was reachable through any interpolated value (t('greet', { name: '$t(aaaaaaaaaaaaaaaaaaaaaaaa' })): escaping does not touch $, t or (, and the skipOnVariables check runs the regexp on the interpolated result, so nest: false did not help either. Every alternative now starts with a different character (plain char, ", ' or (), so there is only one way to match and the cost is linear. Quoted strings and one level of parentheses in nesting options keep working (#2336). The only difference: a lone " or ' inside unquoted parentheses within $t(...) is no longer matched. Affects 25.3.3 to 26.4.3. Thanks to Anisetti Chaitanya Eshwar Prasad for the responsible disclosure.

fix(security): nest() now resolves $t(...) in a single pass and no longer nests text that came out of a resolved value. Every nested lookup reset the shared nesting regexp, so the loop started over from the beginning of the string after each match. That had two effects. First, a $t(...) inside a variable that the nested lookup deliberately kept literal (default skipOnVariables: true) was resolved anyway by the outer loop: with outer: 'A $t(inner) B' and inner: 'Hi {{name}}', t('outer', { name: '$t(secret)' }) rendered the secret ...
Description has been truncated

…14 updates Bumps the frontend-runtime group with 14 updates in the /XE-Local-AI-Engine.Client.React directory: | Package | From | To | | --- | --- | --- | | [@mantine/charts](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/charts) | `9.7.0` | `9.7.2` | | [@mantine/colors-generator](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/colors-generator) | `9.7.0` | `9.7.2` | | [@mantine/core](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/core) | `9.7.0` | `9.7.2` | | [@mantine/hooks](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/hooks) | `9.7.0` | `9.7.2` | | [@mantine/notifications](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/notifications) | `9.7.0` | `9.7.2` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.1` | `5.104.2` | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.41` | `1.170.44` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.13` | `3.14.19` | | [framer-motion](https://github.com/motiondivision/motion) | `14.0.0` | `14.2.0` | | [i18next](https://github.com/i18next/i18next) | `26.4.2` | `26.4.4` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.15` | `17.0.16` | | [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `16.1.1` | `16.1.2` | | [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` | | [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.64.0` | `4.64.6` | Updates `@mantine/charts` from 9.7.0 to 9.7.2 - [Release notes](https://github.com/mantinedev/mantine/releases) - [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md) - [Commits](https://github.com/mantinedev/mantine/commits/9.7.2/packages/@mantine/charts) Updates `@mantine/colors-generator` from 9.7.0 to 9.7.2 - [Release notes](https://github.com/mantinedev/mantine/releases) - [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md) - [Commits](https://github.com/mantinedev/mantine/commits/9.7.2/packages/@mantine/colors-generator) Updates `@mantine/core` from 9.7.0 to 9.7.2 - [Release notes](https://github.com/mantinedev/mantine/releases) - [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md) - [Commits](https://github.com/mantinedev/mantine/commits/9.7.2/packages/@mantine/core) Updates `@mantine/hooks` from 9.7.0 to 9.7.2 - [Release notes](https://github.com/mantinedev/mantine/releases) - [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md) - [Commits](https://github.com/mantinedev/mantine/commits/9.7.2/packages/@mantine/hooks) Updates `@mantine/notifications` from 9.7.0 to 9.7.2 - [Release notes](https://github.com/mantinedev/mantine/releases) - [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md) - [Commits](https://github.com/mantinedev/mantine/commits/9.7.2/packages/@mantine/notifications) Updates `@tanstack/react-query` from 5.104.1 to 5.104.2 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.2/packages/react-query) Updates `@tanstack/react-router` from 1.170.41 to 1.170.44 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.44/packages/react-router) Updates `@tanstack/react-virtual` from 3.14.13 to 3.14.19 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.19/packages/react-virtual) Updates `framer-motion` from 14.0.0 to 14.2.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v14.0.0...v14.2.0) Updates `i18next` from 26.4.2 to 26.4.4 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v26.4.2...v26.4.4) Updates `react-i18next` from 17.0.15 to 17.0.16 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v17.0.15...v17.0.16) Updates `react-syntax-highlighter` from 16.1.1 to 16.1.2 - [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases) - [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD) - [Commits](react-syntax-highlighter/react-syntax-highlighter@v16.1.1...v16.1.2) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) Updates `@rollup/rollup-linux-x64-gnu` from 4.64.0 to 4.64.6 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.64.0...v4.64.6) --- updated-dependencies: - dependency-name: "@mantine/charts" dependency-version: 9.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: "@mantine/colors-generator" dependency-version: 9.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: "@mantine/core" dependency-version: 9.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: "@mantine/hooks" dependency-version: 9.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: "@mantine/notifications" dependency-version: 9.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.64.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: "@tanstack/react-query" dependency-version: 5.104.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: "@tanstack/react-router" dependency-version: 1.170.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: framer-motion dependency-version: 14.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-runtime - dependency-name: i18next dependency-version: 26.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: react-i18next dependency-version: 17.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: react-syntax-highlighter dependency-version: 16.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime - dependency-name: zod dependency-version: 4.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-runtime ... Signed-off-by: dependabot[bot] <support@github.com>

…y fixes Absorbs Dependabot #107 (nuget-remaining, 27 updates: ASP.NET Core and EF Core 10.0.13, OpenTelemetry 1.20.0, Quartz 3.22.6, TUnit 1.75.0, Microsoft.Mxc.Sdk 1.0.1, Meziantou.Analyzer 3.0.312, NAudio.Wasapi 3.2.0, UTF.Unknown 2.8.0), #104 (agent-ai-coupled: Microsoft.Agents.AI 1.25.0, Microsoft.Extensions.AI. Abstractions 10.11.0) and #105 (frontend-runtime, 14 updates), and regenerates third-party-licenses.generated.json. Fixes Dependabot alerts 45-48: follow-redirects 1.16.1 (GHSA-q3jh-wrc6-jgq8, GHSA-8r9p-f939-6h3c), launch-editor 2.14.2 (GHSA-698v-4r3x-3vcv), and certifi 2026.10.19 in tools/training (GHSA-6q48-6c7w-9gw2), all lock-only. Backend gate green on the branch tip (Tests 17171/0/133, Persistence 1539/0/2, Agent 490, Cli 193), Node 22 acceptance 6175/0, release contracts 42/42, docs inventory 0 missing, OpenAPI no drift. None of the curated-license packages moved. The dev-build package job is still owed as the license-corpus proof.

dependabot · 2026-10-20T21:23:48Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot requested a review from w0rldx as a code owner October 19, 2026 04:59

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026

dependabot Bot changed the title ~~build(deps): bump the frontend-runtime group in /XE-Local-AI-Engine.Client.React with 14 updates~~ build(deps): bump the frontend-runtime group across 1 directory with 14 updates Oct 20, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/XE-Local-AI-Engine.Client.React/develop/frontend-runtime-ec552619d5 branch from 7860188 to 46c393e Compare October 20, 2026 19:53

dependabot Bot closed this Oct 20, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/XE-Local-AI-Engine.Client.React/develop/frontend-runtime-ec552619d5 branch October 20, 2026 21:23

w0rldx mentioned this pull request Oct 20, 2026

Bump the nuget-remaining group with 27 updates #107

Closed

Navigation Menu

Repository navigation

build(deps): bump the frontend-runtime group across 1 directory with 14 updates - #105

build(deps): bump the frontend-runtime group across 1 directory with 14 updates#105
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/XE-Local-AI-Engine.Client.React/develop/frontend-runtime-ec552619d5

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

9.7.2

9.7.1

9.7.2

9.7.1

9.7.2

9.7.1

9.7.2

9.7.1

9.7.2

9.7.1

5.104.2

Patch Changes

@​tanstack/react-router@​1.170.44

Patch Changes

@​tanstack/react-router@​1.170.43

Patch Changes

1.170.44

Patch Changes

1.170.43

Patch Changes

1.170.42

Patch Changes

@​tanstack/react-virtual@​3.14.19

Patch Changes

@​tanstack/react-virtual@​3.14.18

Patch Changes

@​tanstack/react-virtual@​3.14.17

Patch Changes

@​tanstack/react-virtual@​3.14.16

Patch Changes

@​tanstack/react-virtual@​3.14.15

Patch Changes

@​tanstack/react-virtual@​3.14.14

Patch Changes

3.14.19

Patch Changes

3.14.18

Patch Changes

3.14.17

Patch Changes

3.14.16

Patch Changes

3.14.15

Patch Changes

3.14.14

Patch Changes

[14.2.0] 2026-10-13

Added

[14.1.1] 2026-10-13

Fixed

[14.1.0] 2026-10-09

Added

Fixed

v26.4.4

Uh oh!

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

`@tanstack/react-router@1`.170.44

`@tanstack/react-router@1`.170.43

`@tanstack/react-virtual@3`.14.19

`@tanstack/react-virtual@3`.14.18

`@tanstack/react-virtual@3`.14.17

`@tanstack/react-virtual@3`.14.16

`@tanstack/react-virtual@3`.14.15

`@tanstack/react-virtual@3`.14.14