Skip to content

Web app packages: Bump the frontend group across 1 directory with 7 updates - #48

Merged
github-actions[bot] merged 2 commits into
devfrom
dependabot/npm_and_yarn/frontend-d5f7e8194e
Oct 25, 2026
Merged

Web app packages: Bump the frontend group across 1 directory with 7 updates#48
github-actions[bot] merged 2 commits into
devfrom
dependabot/npm_and_yarn/frontend-d5f7e8194e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the frontend group with 7 updates in the / directory:

Package From To
@sentry/integrations 7.119.1 7.120.4
react-focus-lock 2.9.4 2.13.7
@types/lodash 4.17.26 4.17.27
@typescript-eslint/eslint-plugin 8.71.2 8.72.0
@typescript-eslint/parser 8.71.2 8.72.0
core-js 3.50.0 3.51.0
postcss 8.5.30 8.5.31

Updates @sentry/integrations from 7.119.1 to 7.120.4

Changelog

Sourced from @​sentry/integrations's changelog.

7.120.4

  • fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)

7.120.4-alpha.1

No user-facing changes, only internal changes.

7.120.4-alpha.0

  • fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)

7.120.3

  • fix(v7/publish): Ensure discontinued packages are published with latest tag (#14926)

7.120.2

  • fix(tracing-internal): Fix case when lrp keys offset is 0 (#14615)

Work in this release contributed by @​LubomirIgonda1. Thank you for your contribution!

7.120.1

  • fix(v7/cdn): Ensure _sentryModuleMetadata is not mangled (#14357)

Work in this release contributed by @​gilisho. Thank you for your contribution!

7.120.0

  • feat(v7/browser): Add moduleMetadataIntegration lazy loading support (#13822)

Work in this release contributed by @​gilisho. Thank you for your contribution!

7.119.2

  • chore(nextjs/v7): Bump rollup to 2.79.2
Commits

Updates react-focus-lock from 2.9.4 to 2.13.7

Release notes

Sourced from react-focus-lock's releases.

Updating focus management

This release changes the way focus is managed in some edge cases:

  • then content inside FocusLock is updated in a way that the previosly focused element no longer focusable (or deleted)
    • before: focus moves to the body
    • now: focus moves to the nearest sibling (of any), or first element on the block
  • when the focus lock is active inside iframe
    • before: it will (endlessly) fight with focus lock that might be present in the parent frame
    • now: the parent frame always wins
      • explanation: as for parent focus inside iframe means iframe is focused, and it will prevent another element on the same page from being focused

ESM compatible (no, that did not happen)

Features

Changelog

Sourced from react-focus-lock's changelog.

2.13.7 (2025-11-29)

Bug Fixes

  • correct Context instability leading to hydration failure (#388, #377) (0986de6)

2.13.6 (2025-02-07)

Bug Fixes

  • enforce react 19 compatible dependencies (ab5b53b)

2.13.5 (2024-12-15)

Bug Fixes

  • correct focus order for non-autofocusable modals, fixes #340 (5b06e8d)

2.13.4 (2024-12-15)

2.13.3 (2024-12-15)

Bug Fixes

Features

  • refactor: use name imports; (e0c95bf)

2.13.2 (2024-08-26)

Bug Fixes

... (truncated)

Commits
  • 296c4e9 2.13.7
  • b6bc637 Merge pull request #395 from theKashey/fix-ssr-stability
  • 0986de6 fix: correct Context instability leading to hydration failure (#388, #377)
  • ae8eb0c Merge pull request #392 from theKashey/migrate-off-enzyme
  • 474dfe4 migrate off enzyme. Update dev version of React
  • 21d199a Merge pull request #362 from Maxobat/patch-1
  • 7e8e6e6 docs: fix singleton typo
  • 1ad1b96 2.13.6
  • e062e63 Merge pull request #359 from rexxars/fix/enforce-react-19-compat-deps
  • ab5b53b fix: enforce react 19 compatible dependencies
  • Additional commits viewable in compare view
Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.


Updates @types/lodash from 4.17.26 to 4.17.27

Commits

Updates @typescript-eslint/eslint-plugin from 8.71.2 to 8.72.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • eslint-plugin: lazy load rules (#13010)

🩹 Fixes

  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • a4c2603 chore(release): publish 8.72.0
  • c6eb98c feat(eslint-plugin): [await-thenable] add allowMixedPromiseArrays option (#...
  • b382b74 fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...
  • 79edd89 fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...
  • e7d57dd fix(eslint-plugin): [require-array-sort-compare] check tuples (#13058)
  • 2d107ae fix(eslint-plugin): use isTypeLiteralType instead of type.isLiteral() to incl...
  • e4695b3 feat(eslint-plugin): lazy load rules (#13010)
  • a1a912b fix(eslint-plugin): [no-deprecated] report deprecated properties in object li...
  • 1edc975 fix(eslint-plugin): [prefer-readonly-parameter-types] check where allowed typ...
  • 61cb700 chore: fix all eslint-plugin-internal/no-multiple-lines-of-errors (#12893)
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.71.2 to 8.72.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.0 (2026-10-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates core-js from 3.50.0 to 3.51.0

Release notes

Sourced from core-js's releases.

3.51.0 - 2026.10.19

Changelog

Sourced from core-js's changelog.

3.51.0 - 2026.10.19

Commits
  • 633931a v3.51.0
  • 1dfe94e add missed detection of imprecise native Math.{ asinh, cbrt }
  • e1ecf25 fix Promise.{ allKeyed, allSettledKeyed } algorithm for sync promises
  • 9b69e68 add detection / fix of Math.sumPrecise V8 bugs
  • bb0a65f add detection / fix of Math.sumPrecise negative numbers handling WebKit bug
  • b70f13b update eslint-plugin-unicorn
  • e6d323a add detection / fix of RegExp.escape code points handling WebKit bug
  • d6561e3 move Iterator chunking to stable ES
  • ce38a98 move Iterator.prototype.includes to stable ES
  • bceffe8 move Iterator.prototype.join to stable ES
  • See full diff in compare view

Updates postcss from 8.5.30 to 8.5.31

Release notes

Sourced from postcss's releases.

8.5.31

Changelog

Sourced from postcss's changelog.

8.5.31

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 25, 2026
@github-actions github-actions Bot added the automatic update Patch or minor dependency update: merges into dev on its own once build passes label Oct 25, 2026
@github-actions
github-actions Bot enabled auto-merge October 25, 2026 07:47
@github-actions github-actions Bot added needs review Major dependency update, or one that failed: waits for Claude Code to review and removed automatic update Patch or minor dependency update: merges into dev on its own once build passes labels Oct 25, 2026
@github-actions
github-actions Bot disabled auto-merge October 25, 2026 07:51
@github-actions

github-actions Bot commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

Held for review: build failed on it. Claude Code reviews it, fixes what breaks and merges it in a normal task (docs/development.md#dependency-updates).

@EaZyCheaZ EaZyCheaZ mentioned this pull request Oct 25, 2026
Merged
@EaZyCheaZ EaZyCheaZ added automatic update Patch or minor dependency update: merges into dev on its own once build passes and removed needs review Major dependency update, or one that failed: waits for Claude Code to review labels Oct 25, 2026
@EaZyCheaZ

EaZyCheaZ commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

Not a failed build: the hold came from runs waiting for approval, which #50 no longer counts. Back to automatic.

@github-actions
github-actions Bot enabled auto-merge October 25, 2026 09:38
@EaZyCheaZ EaZyCheaZ mentioned this pull request Oct 25, 2026
Merged
@github-actions github-actions Bot added needs review Major dependency update, or one that failed: waits for Claude Code to review and removed automatic update Patch or minor dependency update: merges into dev on its own once build passes labels Oct 25, 2026
@github-actions
github-actions Bot disabled auto-merge October 25, 2026 10:43
@EaZyCheaZ EaZyCheaZ mentioned this pull request Oct 25, 2026
Merged
@EaZyCheaZ EaZyCheaZ added automatic update Patch or minor dependency update: merges into dev on its own once build passes and removed needs review Major dependency update, or one that failed: waits for Claude Code to review labels Oct 25, 2026
@EaZyCheaZ

EaZyCheaZ commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

Back to automatic: the hold came from GitHub's API not yet knowing dev's newest commit (fixed in #54), not from this update.

@github-actions
github-actions Bot enabled auto-merge October 25, 2026 11:07
@EaZyCheaZ

EaZyCheaZ commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
Web app packages: Bump the frontend group across 1 directory with 7 u…
5902a89 
…pdates

Bumps the frontend group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/integrations](https://github.com/getsentry/sentry-javascript) | `7.119.1` | `7.120.4` |
| [react-focus-lock](https://github.com/theKashey/react-focus-lock) | `2.9.4` | `2.13.7` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.26` | `4.17.27` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.71.2` | `8.72.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.71.2` | `8.72.0` |
| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.50.0` | `3.51.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.30` | `8.5.31` |



Updates `@sentry/integrations` from 7.119.1 to 7.120.4
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.4/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@7.119.1...7.120.4)

Updates `react-focus-lock` from 2.9.4 to 2.13.7
- [Release notes](https://github.com/theKashey/react-focus-lock/releases)
- [Changelog](https://github.com/theKashey/react-focus-lock/blob/master/CHANGELOG.md)
- [Commits](theKashey/react-focus-lock@v2.9.4...v2.13.7)

Updates `@types/lodash` from 4.17.26 to 4.17.27
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@typescript-eslint/eslint-plugin` from 8.71.2 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.71.2 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/parser)

Updates `core-js` from 3.50.0 to 3.51.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.51.0/packages/core-js)

Updates `postcss` from 8.5.30 to 8.5.31
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.30...8.5.31)

---
updated-dependencies:
- dependency-name: "@sentry/integrations"
  dependency-version: 7.120.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: "@types/lodash"
  dependency-version: 4.17.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: core-js
  dependency-version: 3.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: postcss
  dependency-version: 8.5.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: react-focus-lock
  dependency-version: 2.13.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Web app packages: Bump the frontend group with 7 updates Web app packages: Bump the frontend group across 1 directory with 7 updates Oct 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend-d5f7e8194e branch from ae8a4f0 to 5902a89 Compare October 25, 2026 11:12
@EaZyCheaZ

EaZyCheaZ commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@github-actions
github-actions Bot merged commit fdc7b70 into dev Oct 25, 2026
23 checks passed
@EaZyCheaZ EaZyCheaZ mentioned this pull request Oct 26, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

automatic update Patch or minor dependency update: merges into dev on its own once build passes dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@EaZyCheaZ