Bump the "monthly-maintenance" group with 2 updates across multiple ecosystems by dependabot[bot] · Pull Request #1 · OWASP/DecodeBox

dependabot · 2026-10-19T12:31:47Z

Bumps the monthly-maintenance group with 10 updates:

Package	From	To
lucide-react	`1.47.0`	`1.58.0`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
@eslint/js	`9.38.0`	`9.39.5`
@types/node	`26.6.2`	`26.6.5`
eslint	`10.11.0`	`10.12.0`
globals	`16.4.0`	`16.5.0`
postcss	`8.5.28`	`8.5.30`
typescript-eslint	`8.70.0`	`8.71.2`
vitest	`5.0.1`	`5.0.5`

Updates lucide-react from 1.47.0 to 1.58.0

Release notes

Sourced from lucide-react's releases.

Version 1.58.0

What's Changed

feat(docs): add third-party package lucide-jte by @sgruendel in lucide-icons/lucide#5000

chore(integration-tests): Add Svelte integration tests for @ucide/svelte by @ericfennis in lucide-icons/lucide#5005

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#5004

fix(site): Fix homepage animation by @ericfennis in lucide-icons/lucide#5015

feat(ci): auto-generate PR titles from added file paths by @ericfennis with @Copilot in lucide-icons/lucide#4790

fix(icons): changed barrel icon by @karsa-mistmere in lucide-icons/lucide#4639

ci(dev): fix "Generate PR Title" job by using REST API for changed files by @ericfennis with @Copilot in lucide-icons/lucide#5017

feat(icons): added certificate icon by @rrod497 in lucide-icons/lucide#4327

fix(icons): update music icons by @jamiemlaw in lucide-icons/lucide#4072

New Contributors

@sgruendel made their first contribution in lucide-icons/lucide#5000

Full Changelog: lucide-icons/lucide@1.57.0...1.58.0

Version 1.57.0

What's Changed

feat(icons): added folder-user and folder-user icons by @rrod497 in lucide-icons/lucide#4603

feat(icons): added calendar-chevrons-left icon by @karsa-mistmere in lucide-icons/lucide#5001

feat(icons): added users-collaboration icon by @rrod497 in lucide-icons/lucide#4922

feat(icons): added Belarusian ruble icon by @js-best in lucide-icons/lucide#4984

feat(icons): added circle-fading-play icon by @tatianatsiguleva in lucide-icons/lucide#4990

feat(icons): add cpu-ai icon by @signalgridco in lucide-icons/lucide#4992

feat(icons): added guitar-electric icon by @rrod497 in lucide-icons/lucide#4917

feat(icons): added graph-star icon by @Nitero in lucide-icons/lucide#4983

chore(deps-dev): bump the svelte-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4996

chore(deps-dev): bump preact from 11.0.0 to 11.0.1 in the preact-deps group by @dependabot[bot] in lucide-icons/lucide#4999

chore(deps-dev): bump @vitejs/plugin-react from 6.1.1 to 6.1.2 in the react-deps group by @dependabot[bot] in lucide-icons/lucide#4995

feat(icons): added perfume icon by @rrod497 in lucide-icons/lucide#4426

New Contributors

@js-best made their first contribution in lucide-icons/lucide#4984

@tatianatsiguleva made their first contribution in lucide-icons/lucide#4990

@signalgridco made their first contribution in lucide-icons/lucide#4992

@Nitero made their first contribution in lucide-icons/lucide#4983

Full Changelog: lucide-icons/lucide@1.56.0...1.57.0

Version 1.56.0

What's Changed

feat(icons): added server-nas icon by @benhaube in lucide-icons/lucide#4537

fix(icons,categories): fix notifications category name and refine circle-x tags by @Rachit315 in lucide-icons/lucide#4994

feat(icons): add message-circle-text icon by @ericfennis in lucide-icons/lucide#4898

New Contributors

@Rachit315 made their first contribution in lucide-icons/lucide#4994

Full Changelog: lucide-icons/lucide@1.55.0...1.56.0

... (truncated)

Commits

3f1255e chore(deps-dev): bump @vitejs/plugin-react (#4995)
949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
See full diff in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates @eslint/js from 9.38.0 to 9.39.5

Release notes

Sourced from @eslint/js's releases.

v9.39.5

Bug Fixes

253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)

eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)

202117b chore: package.json update for @eslint/js release (Jenkins)

d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)

7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)

daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)

daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)

116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

v9.39.4

Bug Fixes

f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)

a3c868f fix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)

234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)

b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)

71b2f6b chore: package.json update for @eslint/js release (Jenkins)

1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)

v9.39.3

Bug Fixes

791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)

Chores

8594a43 chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)

9ceef92 chore: package.json update for @eslint/js release (Jenkins)

af498c6 chore: ignore /docs/v9.x in link checker (#20453) (Milos Djermanovic)

v9.39.2

Bug Fixes

5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

... (truncated)

Commits

202117b chore: package.json update for @eslint/js release
71b2f6b chore: package.json update for @eslint/js release
9ceef92 chore: package.json update for @eslint/js release
c43ce24 chore: package.json update for @eslint/js release
c7ebefc chore: package.json update for @eslint/js release
2375a6d chore: package.json update for @eslint/js release
9e7fad4 chore: add script to auto-generate eslint:recommended configuration (#20208)
See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

See full diff in compare view

Updates eslint from 10.11.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

4618052 feat: handle astral letters in new-cap (#21357) (sary)

4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)

bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)

efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)

93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)

02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)

b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)

69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)

686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

67eb586 docs: Update README (GitHub Actions Bot)

5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)

8816c1d docs: Update README (GitHub Actions Bot)

3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

152067f chore: update ecosystem plugins (#21362) (ESLint Bot)

b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])

bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)

322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)

d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])

29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])

39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])

f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)

b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])

3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

Commits

a438ec3 10.12.0
32a73f1 Build: changelog update for 10.12.0
bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
152067f chore: update ecosystem plugins (#21362)
b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
67eb586 docs: Update README
bfaea12 perf: cache normalized config globals per languageOptions (#21364)
322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
d166567 chore: update dependency prettier to v3.9.9 (#21371)
Additional commits viewable in compare view

Updates globals from 16.4.0 to 16.5.0

Release notes

Sourced from globals's releases.

v16.5.0

Update globals (2025-11-01) (#316) 6d441ca

Add Vue, Svelte, and Astro globals (#314) ea31521

sindresorhus/globals@v16.4.0...v16.5.0

Commits

46fdf18 16.5.0
6d441ca Update globals (2025-11-01) (#316)
d323da6 Add test for keys and values (#315)
ea31521 Add Vue, Svelte, and Astro globals (#314)
fa8aaae Add date to automated PR title (#311)
b777f09 Update Puppeteer (#310)
See full diff in compare view

Updates postcss from 8.5.28 to 8.5.30

Release notes

Sourced from postcss's releases.

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

Changelog

Sourced from postcss's changelog.

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

Commits

f1aca7e Release 8.5.30 version
9d83445 Update dependencies
6c9bc73 Fix invalid source map mapping on escaping before new line (#2169)
1fd8f88 Add missed changes in changelog
a7a1f34 Release 8.5.29 version
b55a36d Update dependencies
7647a81 Escape </style> in output of non-Root nodes (#2163)
7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
ebffa97 Add postcss-smooth-corners plugin
57d6401 Speed up source map cleaning
Additional commits viewable in compare view

Updates typescript-eslint from 8.70.0 to 8.71.2

Release notes

Sourced from typescript-eslint's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)

eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)

eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)

eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)

type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

Abraham Guo

Brad Zacher @bradzacher

Evyatar Daud @StyleShit

Josh Goldberg

Vinccool96

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)

eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)

eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)

eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)

eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)

eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)

project-service: throttle cleanup when opening files (#12934)

type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

Diptajoy Mistry @diptomistry

Evyatar Daud @StyleShit

Josh Goldberg

Josh Goldberg ✨

Medhansh Poojari

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

7488d68 chore(release): publish 8.71.2
d57b8da chore(release): publish 8.71.1
8695664 chore(release): publish 8.71.0
23d38ce chore(release): publish 8.70.1
eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
8c80531 chore: fix typos in comments and docs (#12846)
b6b86a1 chore: migrate to nx 23.2.0 (#12843)
See full diff in compare view

Updates vitest from 5.0.1 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

Keep vite default fs.deny with api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11578 (28dc1)

Handle quoted file names in --changed - by @sheremet-va in vitest-dev/vitest#11583 (14921)

Add data to the import.meta.hot stub - by @sheremet-va in vitest-dev/vitest#11590 (3a828)

Set skip in skipIf, ignore undefined options - by @sheremet-va in vitest-dev/vitest#11591 (d523a)

Skip builtin loading in async leak detector - by @sheremet-va in vitest-dev/vitest#11598 (fe86a)

Keep the import frame in native loader errors - by @sheremet-va in vitest-dev/vitest#11599 (9697b)

Run hook cleanups when a later hook fails - by @sheremet-va in vitest-dev/vitest#11605 (6c5a4)

Release mocks of finished test files - by @sheremet-va in vitest-dev/vitest#11607 (e9c3d)

Abort all running tests on cancel - by @sheremet-va in vitest-dev/vitest#11606 (6621a)

browser:

Ignore synthetic pagehide events - by @sheremet-va in vitest-dev/vitest#11582 (ca081)

Run plugin buildStart on server creation - by @sheremet-va in vitest-dev/vitest#11593 (ea611)

Drop late connections of closed sessions - by @sheremet-va in vitest-dev/vitest#11600 (f161e)

Wait 30s for the browser to close - by @sheremet-va in vitest-dev/vitest#11601 (6498b)

Run global setup once with instances - by @sheremet-va in vitest-dev/vitest#11596 (8dd67)

reporter:

End reason &[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39); on worker crash - by @AriPerkkio in vitest-dev/vitest#11568 (6ae8e)

    View changes on GitHub

v5.0.4

   🚀 Features

experimental:

Tag cache directories with CACHEDIR.TAG - by @lifeiscontent in vitest-dev/vitest#11461 (a8ea3)

Support test.ui.theme option - by @sheremet-va in vitest-dev/vitest#11499 (1da66)

Highlight selector multiple matches in trace view - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11489 (5abba)

Print how many tests were affected and a total when running --changed - by @sheremet-va in vitest-dev/vitest#11424 (a2336)

Add an option to cache dependencies instead of statically parsing them - by @sheremet-va in vitest-dev/vitest#11515 (c0601)

Add fit and zoom controls to trace viewer - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11490 (f5dd9)

   🐞 Bug Fixes

Fail the run on git and location filter errors - by @sheremet-va in vitest-dev/vitest#11430 (30d03)

Enable fsModuleCache by default - by @sheremet-va in vitest-dev/vitest#11435 (ad208)

Track project files and mocks with --changed - by @sheremet-va in vitest-dev/vitest#11432 (b0f2b)

Refactor caching, fix : in project and change the shape of results cache - by @sheremet-va in vitest-dev/vitest#11453 (9673c)

Keep full $ string values when taskTitleValueFormatTruncate is 0 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11485 (4f7e1)

Resolve node builtins in client environments - by @sheremet-va in vitest-dev/vitest#11417 (56b31)

Fix module graph builtin externals after #11421 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11491 and vitest-dev/vitest#11421 (008e1)

Wrap module mocks during in-source testing - by @sheremet-va in vitest-dev/vitest#11505 (36d19)

Handle line endings in snapshot - by @sheremet-va in vitest-dev/vitest#11522 (4c468)

Respect root in projects - by @sheremet-va in vitest-dev/vitest#11521 (26642)

Resolve mocks in directories with spaces - by @sheremet-va in vitest-dev/vitest#11539 (caaef)

api:

Publish the api token atomically - by @umairnawaz333 in vitest-dev/vitest#11323 (6f990)

browser:

... (truncated)

Commits

7a825db chore: release v5.0.5 (#11609)
6621a72 fix: abort all running tests on cancel (#11606)
e9c3d72 fix: release mocks of finished test files (#11607)
8dd67c2 fix(browser): run global setup once with instances (#11596)
6c5a447 fix: run hook cleanups when a later hook fails (#11605)
9697b38 fix: keep the import frame in native loader errors (#11599)
6498b66 fix(browser): wait 30s for the browser to close (#11601)
f161e6d fix(browser): drop late connections of closed sessions (#11600)
fe86a64 fix: skip builtin loading in async leak detector (#11598)
6ae8e89 fix(reporter): end reason 'failed' on worker crash (#11568)
Additional commits viewable in compare view

Bumps the monthly-maintenance group with 5 updates:

Package	From	To
actions/setup-node	`7.0.0`	`7.1.0`
actions/upload-artifact	`7.0.1`	`7.0.2`
github/codeql-action/init	`4.38.2`	`4.39.0`
github/codeql-action/autobuild	`4.38.2`	`4.39.0`
github/codeql-action/analyze	`4.38.2`	`4.39.0`

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in actions/setup-node#1421

Support absolute paths in node-version-file by @v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in actions/setup-node#1578

docs: add V7 ESM migration and NODE_AUTH_TOKEN beha...
Description has been truncated

Bumps the monthly-maintenance group with 10 updates: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.47.0` | `1.58.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.38.0` | `9.39.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.5` | | [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.12.0` | | [globals](https://github.com/sindresorhus/globals) | `16.4.0` | `16.5.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.30` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.71.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.0.5` | Updates `lucide-react` from 1.47.0 to 1.58.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.58.0/packages/lucide-react) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@eslint/js` from 9.38.0 to 9.39.5 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.5/packages/js) Updates `@types/node` from 26.6.2 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 10.11.0 to 10.12.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.12.0) Updates `globals` from 16.4.0 to 16.5.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.4.0...v16.5.0) Updates `postcss` from 8.5.28 to 8.5.30 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.28...8.5.30) Updates `typescript-eslint` from 8.70.0 to 8.71.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint) Updates `vitest` from 5.0.1 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) Bump the monthly-maintenance group with 5 updates Bumps the monthly-maintenance group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.39.0` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.38.2` | `4.39.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.39.0` | Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `github/codeql-action/init` from 4.38.2 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...6f2ac81) Updates `github/codeql-action/autobuild` from 4.38.2 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...6f2ac81) Updates `github/codeql-action/analyze` from 4.38.2 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...6f2ac81) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: monthly-maintenance - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: monthly-maintenance - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: monthly-maintenance - dependency-name: "@eslint/js" dependency-version: 9.39.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monthly-maintenance - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: monthly-maintenance - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monthly-maintenance - dependency-name: globals dependency-version: 16.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monthly-maintenance - dependency-name: postcss dependency-version: 8.5.30 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: monthly-maintenance - dependency-name: typescript-eslint dependency-version: 8.71.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monthly-maintenance - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: monthly-maintenance - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: monthly-maintenance - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: monthly-maintenance - dependency-name: github/codeql-action/init dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: monthly-maintenance - dependency-name: github/codeql-action/autobuild dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: monthly-maintenance - dependency-name: github/codeql-action/analyze dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: monthly-maintenance ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from m4sh-wacker as a code owner October 19, 2026 12:31

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026

m4sh-wacker merged commit a3f5fc5 into main Oct 19, 2026
6 checks passed

m4sh-wacker deleted the dependabot/monthly_maintenance-d836994fdd branch October 19, 2026 12:37

Navigation Menu

Repository navigation

Bump the "monthly-maintenance" group with 2 updates across multiple ecosystems - #1

Bump the "monthly-maintenance" group with 2 updates across multiple ecosystems#1
m4sh-wacker merged 1 commit into
mainfrom
dependabot/monthly_maintenance-d836994fdd

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

Version 1.58.0

What's Changed

New Contributors

Version 1.57.0

What's Changed

New Contributors

Version 1.56.0

What's Changed

New Contributors

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

v9.39.5

Bug Fixes

Documentation

Chores

v9.39.4

Bug Fixes

Documentation

Chores

v9.39.3

Bug Fixes

Chores

v9.39.2

Bug Fixes

Build Related

Chores

v10.12.0

Features

Bug Fixes

Documentation

Chores

v16.5.0

8.5.30

8.5.29

8.5.30

8.5.29

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

❤️ Thank You

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

❤️ Thank You

8.71.2 (2026-10-12)

8.71.1 (2026-10-05)

8.71.0 (2026-09-28)

8.70.1 (2026-09-21)

v5.0.5

🐞 Bug Fixes

View changes on GitHub

v5.0.4

🚀 Features

🐞 Bug Fixes

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant