chore(deps): Bump the npm-minor-patch group with 25 updates by dependabot[bot] · Pull Request #44 · finallyjay/csgo-inventory-tracker

dependabot · 2026-07-22T18:30:58Z

Bumps the npm-minor-patch group with 25 updates:

Package	From	To
@radix-ui/react-avatar	`1.2.2`	`1.2.3`
@radix-ui/react-checkbox	`1.3.7`	`1.3.8`
@radix-ui/react-collapsible	`1.1.16`	`1.1.17`
@radix-ui/react-dialog	`1.1.19`	`1.1.20`
@radix-ui/react-dropdown-menu	`2.1.20`	`2.1.21`
@radix-ui/react-label	`2.1.11`	`2.1.12`
@radix-ui/react-progress	`1.1.12`	`1.1.13`
@radix-ui/react-select	`2.3.3`	`2.3.4`
@radix-ui/react-switch	`1.3.3`	`1.3.4`
@radix-ui/react-tabs	`1.1.17`	`1.1.18`
@radix-ui/react-toast	`1.2.19`	`1.2.20`
lucide-react	`1.23.0`	`1.25.0`
next	`16.2.10`	`16.2.11`
radix-ui	`1.6.2`	`1.6.4`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
react-hook-form	`7.81.0`	`7.82.0`
recharts	`3.9.2`	`3.10.0`
slot-text	`0.3.2`	`0.3.3`
@tailwindcss/postcss	`4.3.2`	`4.3.3`
lint-staged	`17.0.8`	`17.1.1`
oxfmt	`0.58.0`	`0.60.0`
oxlint	`1.73.0`	`1.75.0`
postcss	`8.5.16`	`8.5.22`
tailwindcss	`4.3.2`	`4.3.3`

Updates @radix-ui/react-avatar from 1.2.2 to 1.2.3

Changelog

Sourced from @radix-ui/react-avatar's changelog.

1.2.3

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Fix dev-only checks with conditional exports to drop dev-warnings from production builds.

Updated dependencies: @radix-ui/primitive@1.1.6, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2

Commits

See full diff in compare view

Updates @radix-ui/react-checkbox from 1.3.7 to 1.3.8

Changelog

Sourced from @radix-ui/react-checkbox's changelog.

1.3.8

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Fixed a bug where updating a Checkbox, Switch, or RadioGroup value programmatically (eg. a "select all" control) while inside a <form> would dispatch a click event from the hidden bubble input that propagated to ancestor onClick handlers.

Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-size@1.1.2

Commits

See full diff in compare view

Updates @radix-ui/react-collapsible from 1.1.16 to 1.1.17

Changelog

Sourced from @radix-ui/react-collapsible's changelog.

1.1.17

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-layout-effect@1.1.2

Commits

See full diff in compare view

Updates @radix-ui/react-dialog from 1.1.19 to 1.1.20

Changelog

Sourced from @radix-ui/react-dialog's changelog.

1.1.20

Fixed broken ARIA references in Dialogs where a title or description elements are not rendered.

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

Commits

See full diff in compare view

Updates @radix-ui/react-dropdown-menu from 2.1.20 to 2.1.21

Changelog

Sourced from @radix-ui/react-dropdown-menu's changelog.

2.1.21

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-menu@2.1.21, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7

Commits

See full diff in compare view

Updates @radix-ui/react-label from 2.1.11 to 2.1.12

Changelog

Sourced from @radix-ui/react-label's changelog.

2.1.12

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-primitive@2.1.7

Commits

See full diff in compare view

Updates @radix-ui/react-progress from 1.1.12 to 1.1.13

Changelog

Sourced from @radix-ui/react-progress's changelog.

1.1.13

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7

Commits

See full diff in compare view

Updates @radix-ui/react-select from 2.3.3 to 2.3.4

Changelog

Sourced from @radix-ui/react-select's changelog.

2.3.4

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-popper@1.3.4, @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-visually-hidden@1.2.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/number@1.1.2, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2

Commits

See full diff in compare view

Updates @radix-ui/react-switch from 1.3.3 to 1.3.4

Changelog

Sourced from @radix-ui/react-switch's changelog.

1.3.4

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Fixed a bug where updating a Checkbox, Switch, or RadioGroup value programmatically (eg. a "select all" control) while inside a <form> would dispatch a click event from the hidden bubble input that propagated to ancestor onClick handlers.

Updated dependencies: @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-size@1.1.2

Commits

See full diff in compare view

Updates @radix-ui/react-tabs from 1.1.17 to 1.1.18

Changelog

Sourced from @radix-ui/react-tabs's changelog.

1.1.18

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/react-roving-focus@1.1.16, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7

Commits

See full diff in compare view

Updates @radix-ui/react-toast from 1.2.19 to 1.2.20

Changelog

Sourced from @radix-ui/react-toast's changelog.

1.2.20

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Fixed Toast removing non-focused toasts when pressing Escape.

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-visually-hidden@1.2.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2

Commits

See full diff in compare view

Updates lucide-react from 1.23.0 to 1.25.0

Release notes

Sourced from lucide-react's releases.

Version 1.25.0

What's Changed

fix(icons): Rename to circle-euro to match other euro icons by @ericfennis in lucide-icons/lucide#4531

chore(deps-dev): bump astro from 6.1.10 to 6.4.6 by @dependabot[bot] in lucide-icons/lucide#4487

fix(site): empty search results on first load for tag-only matches by @taimar in lucide-icons/lucide#4413

chore(deps-dev): bump @babel/core from 7.28.5 to 7.29.6 by @dependabot[bot] in lucide-icons/lucide#4476

fix(ci): broken link in brand logo comment by @jguddas in lucide-icons/lucide#4533

chore(depedencies): Update dependencies by @ericfennis in lucide-icons/lucide#4553

feat(docs): add studio link by @jguddas in lucide-icons/lucide#4534

fix(icons): changed hdmi-port icon by @karsa-mistmere in lucide-icons/lucide#4554

fix(icons): changed ethernet-port icon by @karsa-mistmere in lucide-icons/lucide#4555

fix(icons): changed file-box icon by @karsa-mistmere in lucide-icons/lucide#4552

feat(icons): added scan-box icon by @karsa-mistmere in lucide-icons/lucide#4551

Full Changelog: lucide-icons/lucide@1.24.0...1.25.0

Version 1.24.0

What's Changed

fix(scripts): fix typo in renameIcon.function.mts by @karsa-mistmere in lucide-icons/lucide#4514

chore(icons): remove toBeRemovedInVersion metadata and make it optional in schema by @ericfennis with @Copilot in lucide-icons/lucide#4513

feat(site): Add merch link by @ericfennis in lucide-icons/lucide#4524

fix(packages/angular): move child rendering logic to template from effect by @karsa-mistmere in lucide-icons/lucide#4519

docs(site): list @gyeonghokim/lucide-lit as third-party package by @GyeongHoKim in lucide-icons/lucide#4421

fix(icons): changed option icon by @jamiemlaw in lucide-icons/lucide#4326

fix(lucide-react-native): restore the icons entry point in the JS bundles by @pvinis in lucide-icons/lucide#4528

fix(vue): support kebab-case icon-node prop on Icon component by @Sagargupta16 in lucide-icons/lucide#4512

fix(lucide-react-native): Add icon exports property to the package.json file by @ericfennis in lucide-icons/lucide#4522

fix(icons): centered the dot icon by @cnlancehu in lucide-icons/lucide#4492

feat(icons): added circle-euro-sign icon by @Guido3000 in lucide-icons/lucide#4353

feat(icons): added server-plus icon by @Turboman3000 in lucide-icons/lucide#4232

New Contributors

@ericfennis with @Copilot made their first contribution in lucide-icons/lucide#4513

@GyeongHoKim made their first contribution in lucide-icons/lucide#4421

@pvinis made their first contribution in lucide-icons/lucide#4528

@Sagargupta16 made their first contribution in lucide-icons/lucide#4512

@Guido3000 made their first contribution in lucide-icons/lucide#4353

@Turboman3000 made their first contribution in lucide-icons/lucide#4232

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Commits

f229f83 chore(depedencies): Update dependencies (#4553)
See full diff in compare view

Updates next from 16.2.10 to 16.2.11

Release notes

Sourced from next's releases.

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

Commits

9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
bf9d17f [16.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
fe28768 [16.x] fix(next/image): improve performance of detectContentType()
d8afb8d [16.x] Performance improvements when decoding React Server function payloads
Additional commits viewable in compare view

Updates radix-ui from 1.6.2 to 1.6.4

Changelog

Sourced from radix-ui's changelog.

1.6.4

Fixed a regression where importing primitives from the root radix-ui entry point erased every primitive's types to any.

1.6.3

Dialog

Fixed broken ARIA references in Dialogs where title or description elements are not rendered.

Slider

Fixed a bug where onValueCommit was not called when a slider thumb was dragged across another thumb.

Toast

Fixed Toast removing non-focused toasts when pressing Escape.

Tooltip

Fixed a bug where Tooltip.Content children were mounted to the DOM twice.

Other updates

Fixed overriding inline animation style in Popper.Content.

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Widened virtualRef prop type to allow RefObject<Measurable | null> in popover components.

Fixed dev-only checks with conditional exports to drop dev-warnings from production builds.

Added per-primitive subpath entry points so each primitive can be imported directly, eg. import { Accordion } from 'radix-ui/accordion' or import * as Accordion from 'radix-ui/accordion'. This mirrors the namespaced exports available from the root radix-ui entry point.

Fixed a bug where updating a Checkbox, Switch, or RadioGroup value programmatically (eg. a "select all" control) while inside a <form> would dispatch a click event from the hidden bubble input that propagated to ancestor onClick handlers.

Commits

See full diff in compare view

Attestation changes

This version has no provenance attestation, while the previous version (1.6.2) was attested. Review the package versions before updating.

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-hook-form from 7.81.0 to 7.82.0

Release notes

Sourced from react-hook-form's releases.

Version 7.82.0

🚀 feat: add opt-in delayError option for setValue (#13337)
setValue("firstName", "Bill", {
  delayError: 500, // delay validation error updates by 500ms
  shouldValidate: true
});
⚡ perf: improve getDirtyFields performance (#13590)

Improved dirty field calculation, especially for larger forms and deeply nested values.

🐞 fix: expose resetDefaultValues through form context (#13598)
const { resetDefaultValues } = useFormContext();
resetDefaultValues();
🐞 fix: setValue with shouldDirty now correctly updates dirty state when the form is disabled (#13594) 🐞 fix: preserve dirtyFields boolean values for registered array fields (#13586) 🐞 fix: restore FieldArray component export (#13596) 🧪 test: migrate test suite to Playwright and improve delayError test reliability (#13589)

thanks to @candymask0712, @wanxiankai, @a-y-ibrahim, @ankit1324 & @abnud11

Changelog

Sourced from react-hook-form's changelog.

[7.82.0] - 2026-07-18

Added

Opt-in delayError option for setValue to delay validation error updates

Fixed

Expose resetDefaultValues through form context

setValue with shouldDirty not updating dirty state correctly when the form is disabled

Preserve dirtyFields boolean values for registered array fields

Restore FieldArray component export

Performance

Improve getDirtyFields performance, especially for larger forms and deeply nested values

Commits

553d290 7.82.0
2791e4f 🐞 fix: prevent stale _setValid() calls from overwriting isValid/isValidating ...
521adfc 🤦🏻‍♂️ fix: expose resetDefaultValues through form context (#13598)
2f7c1c5 🤧 fix FieldArray component export (#13596)
9378288 🐞 fix #13592 setValue with shouldDirty not marking dirty state when form is d...
65599cc 🚗 perf: improve get dirty fields (#13590)
142f299 🖲️ chore: upgrade pnpm to v11 (#13587)
673aae4 🤖 build(deps-dev): bump vite from 5.4.11 to 6.4.3 in /app (#13534)
11bd6df 🥗 migrate to playwright & fix delay error feature (#13589)
95da27a ⏳ feat: add opt-in delayError option for setValue (#13337)
Additional commits viewable in compare view

Updates recharts from 3.9.2 to 3.10.0

Release notes

Sourced from recharts's releases.

v3.10.0

What's Changed

Legend position

Legend now supports position and offset props, same as Label and LabeList. This replaces the previous align and verticalAlign for a more convenient positioning, and fixes couple visual bugs too. See https://recharts.github.io/en-US/examples/LegendPosition/

Legend position and offset by @PavelVanecek in recharts/recharts#7564

XAxis auto height

XAxis now supports height="auto" prop, similar to YAxis width="auto".

feat(XAxis): support height="auto" to size the axis to its tick labels by @kimlj in recharts/recharts#7570

Other features

feat(Sankey): support accessibilityLayer, title and desc props by @MahinAnowar in recharts/recharts#7546

Bugfixes

fix: clear stale active bar layer state by @pupuking723 in recharts/recharts#7547

fix(Brush): slide snaps back to original position on mouseup when start/endIndex are controlled by @MaksZhukov in recharts/recharts#7542

fix(Tooltip): find the active sector in the angle-axis wrap-around gap by @MahinAnowar in recharts/recharts#7550

fix(Brush): keep controlled startIndex/endIndex on data updates by @momomuchu in recharts/recharts#7530

Fix Legend type by @PavelVanecek in recharts/recharts#7560

fix(Label): pass computed position attributes to custom label content by @MahinAnowar in recharts/recharts#7549

fix(CartesianAxis): skip renderedTicks dispatch when tick values are unchanged by @kimlj in recharts/recharts#7565

fix: prevent getBandSizeOfAxis from collapsing band size due to floating-point tick gaps by @xianjianlf2 in recharts/recharts#7556

fix(Area): connectNulls connects across stacked points where every series is null by @kimlj in recharts/recharts#7566

New Contributors

@MahinAnowar made their first contribution in recharts/recharts#7546

@MaksZhukov made their first contribution in recharts/recharts#7542

@momomuchu made their first contribution in recharts/recharts#7530

@kimlj made their first contribution in recharts/recharts#7565

@xianjianlf2 made their first contribution in recharts/recharts#7556

Full Changelog: recharts/recharts@v3.9.2...v3.10.0

Commits

770191a 3.10.0
9d9b15d feat(XAxis): support height="auto" to size the axis to its tick labels (#7570)
38020e8 chore(deps-dev): bump the storybook group with 8 updates (#7568)
e9795a1 Clarify Legend comments and examples (#7567)
9817ae5 fix(Area): connectNulls connects across stacked points where every series is ...
082495a Legend position and offset (#7564)
2ea9ca0 fix: prevent getBandSizeOfAxis from collapsing band size due to floating-poin...
ccdd02a fix(CartesianAxis): skip renderedTicks dispatch when tick values are unchange...
ca62d1c fix(Label): pass computed position attributes to custom label content (#7549)
ea3eef3 chore(deps-dev): bump babel-loader from 9.2.1 to 10.1.1 (#7562)
Additional commits viewable in compare view

Updates slot-text from 0.3.2 to 0.3.3

Updates @tailwindcss/postcss from 4.3.2 to 4.3.3

Release notes

Sourced from @tailwindcss/postcss's releases.

v4.3.3

Fixed

Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)

Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)

Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)

Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)

Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)

Parse selectors like [data-foo]div as two selectors instead of one (#20303)

Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)

Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)

Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)

Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)

Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)

Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)

Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)

Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)

Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Changelog

Sourced from @tailwindcss/postcss's changelog.

[4.3.3] - 2026-07-16

Fixed

Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)

Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)

Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)

Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)

Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)

Parse selectors like [data-foo]div as two selectors instead of one (#20303)

Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)

Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)

Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)

Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)

Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)

Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)

Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)

Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)

Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Commits

c2b24dd 4.3.3 (#20334)
e48c5e8 Fix weird character rendering on Windows with Japanese locale (#20318)
9b0e8af Ensure @tailwindcss/postcss rebuilds when the input CSS changes but its mti...
b53fa09 fix: exclude iframes from focus-visible auto outline in Preflight (#20292)
See full diff in compare view

Updates lint-staged from 17.0.8 to 17.1.1

Release notes

Sourced from lint-staged's releases.

v17.1.1

Patch Changes

#1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.

v17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.1.1

Patch Changes

#1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.

17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!

... (truncated)

Commits

dbc7831 Merge pull request #1821 from lint-staged/changeset-release/main
47da3c4 chore(changeset): release
7447ad3 Merge pull request #1822 from lint-staged/fixes
b148829 fix: allow previous maxArgLength: null
0fb4316 Merge pull request #1820 from lint-staged/fix-max-arg-length
a626a9f fix: allow setting --max-arg-length=Infinity
25e2fbb docs: remove fury.io badge
dd5a95f Merge pull request #1817 from lint-staged/changeset-release/main
aad7f3b chore(changeset): release
11b1d5c Merge pull request #1818 from lint-staged/fixes
Additional commits viewable in compare view

Updates oxfmt from 0.58.0 to 0.60.0

Commits

83abe3b release(apps): oxlint v1.75.0 && oxfmt v0.60.0 (#24713)
e2e0f94 chore(docs): update s...
Description has been truncated

Bumps the npm-minor-patch group with 25 updates: | Package | From | To | | --- | --- | --- | | [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar) | `1.2.2` | `1.2.3` | | [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox) | `1.3.7` | `1.3.8` | | [@radix-ui/react-collapsible](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/collapsible) | `1.1.16` | `1.1.17` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.19` | `1.1.20` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.20` | `2.1.21` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.11` | `2.1.12` | | [@radix-ui/react-progress](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/progress) | `1.1.12` | `1.1.13` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.3` | `2.3.4` | | [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.3` | `1.3.4` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.17` | `1.1.18` | | [@radix-ui/react-toast](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toast) | `1.2.19` | `1.2.20` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.23.0` | `1.25.0` | | [next](https://github.com/vercel/next.js) | `16.2.10` | `16.2.11` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.2` | `1.6.4` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.81.0` | `7.82.0` | | [recharts](https://github.com/recharts/recharts) | `3.9.2` | `3.10.0` | | slot-text | `0.3.2` | `0.3.3` | | [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.2` | `4.3.3` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.8` | `17.1.1` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.58.0` | `0.60.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.73.0` | `1.75.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.16` | `8.5.22` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.2` | `4.3.3` | Updates `@radix-ui/react-avatar` from 1.2.2 to 1.2.3 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar) Updates `@radix-ui/react-checkbox` from 1.3.7 to 1.3.8 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox) Updates `@radix-ui/react-collapsible` from 1.1.16 to 1.1.17 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/collapsible/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/collapsible) Updates `@radix-ui/react-dialog` from 1.1.19 to 1.1.20 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.20 to 2.1.21 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-label` from 2.1.11 to 2.1.12 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-progress` from 1.1.12 to 1.1.13 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/progress/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/progress) Updates `@radix-ui/react-select` from 2.3.3 to 2.3.4 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-switch` from 1.3.3 to 1.3.4 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch) Updates `@radix-ui/react-tabs` from 1.1.17 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-toast` from 1.2.19 to 1.2.20 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/toast/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toast) Updates `lucide-react` from 1.23.0 to 1.25.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/lucide-react) Updates `next` from 16.2.10 to 16.2.11 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.10...v16.2.11) Updates `radix-ui` from 1.6.2 to 1.6.4 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `react-hook-form` from 7.81.0 to 7.82.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.81.0...v7.82.0) Updates `recharts` from 3.9.2 to 3.10.0 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.9.2...v3.10.0) Updates `slot-text` from 0.3.2 to 0.3.3 Updates `@tailwindcss/postcss` from 4.3.2 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss) Updates `lint-staged` from 17.0.8 to 17.1.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.0.8...v17.1.1) Updates `oxfmt` from 0.58.0 to 0.60.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.60.0/npm/oxfmt) Updates `oxlint` from 1.73.0 to 1.75.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.75.0/npm/oxlint) Updates `postcss` from 8.5.16 to 8.5.22 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.16...8.5.22) Updates `tailwindcss` from 4.3.2 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) --- updated-dependencies: - dependency-name: "@radix-ui/react-avatar" dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-checkbox" dependency-version: 1.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-collapsible" dependency-version: 1.1.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.1.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-progress" dependency-version: 1.1.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-select" dependency-version: 2.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-switch" dependency-version: 1.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.1.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@radix-ui/react-toast" dependency-version: 1.2.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: lucide-react dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: next dependency-version: 16.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: radix-ui dependency-version: 1.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react-hook-form dependency-version: 7.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: recharts dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: slot-text dependency-version: 0.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@tailwindcss/postcss" dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: lint-staged dependency-version: 17.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: oxfmt dependency-version: 0.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: oxlint dependency-version: 1.75.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: postcss dependency-version: 8.5.22 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-07-22T18:31:17Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e7b1860e-d413-4b0f-a24d-eeebb6ea2974

📥 Commits

Reviewing files that changed from the base of the PR and between 9811798 and b0fe7ce.

⛔ Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

package.json

📜 Recent review details

⚠️ CI failures not shown inline (2)

GitHub Actions: CI / 0_quality.txt: chore(deps): Bump the npm-minor-patch group with 25 updates

Conclusion: failure

View job details

##[group]Run pnpm install --frozen-lockfile
 �[36;1mpnpm install --frozen-lockfile�[0m
 shell: /usr/bin/bash -e {0}
 env:
   PNPM_HOME: /home/runner/setup-pnpm/node_modules/.bin
 ##[endgroup]
 ? Verifying lockfile against supply-chain policies (423 entries)...
 Lockfile is up to date, resolution step is skipped
 Progress: resolved 1, reused 0, downloaded 0, added 0
 Packages: +306
 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 Progress: resolved 306, reused 0, downloaded 15, added 0
 Progress: resolved 306, reused 0, downloaded 119, added 5
 Progress: resolved 306, reused 0, downloaded 233, added 16
 Progress: resolved 306, reused 0, downloaded 301, added 24
 Progress: resolved 306, reused 0, downloaded 306, added 259
 ✗ Lockfile failed supply-chain policy check (423 entries in 5.3s)
 Progress: resolved 306, reused 0, downloaded 306, added 306, done
 [ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION] 42 lockfile entries failed verification:
   `@oxfmt/binding-android-arm-eabi`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-android-arm64`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-darwin-arm64`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-darwin-x64`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-freebsd-x64`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-arm-gnueabihf`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-arm-musleabihf`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-arm64-gnu`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-arm64-musl`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-ppc64-gnu`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-riscv`...

GitHub Actions: CI / quality: chore(deps): Bump the npm-minor-patch group with 25 updates

Conclusion: failure

View job details

##[group]Run pnpm install --frozen-lockfile
 �[36;1mpnpm install --frozen-lockfile�[0m
 shell: /usr/bin/bash -e {0}
 env:
   PNPM_HOME: /home/runner/setup-pnpm/node_modules/.bin
 ##[endgroup]
 ? Verifying lockfile against supply-chain policies (423 entries)...
 Lockfile is up to date, resolution step is skipped
 Progress: resolved 1, reused 0, downloaded 0, added 0
 Packages: +306
 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 Progress: resolved 306, reused 0, downloaded 15, added 0
 Progress: resolved 306, reused 0, downloaded 119, added 5
 Progress: resolved 306, reused 0, downloaded 233, added 16
 Progress: resolved 306, reused 0, downloaded 301, added 24
 Progress: resolved 306, reused 0, downloaded 306, added 259
 ✗ Lockfile failed supply-chain policy check (423 entries in 5.3s)
 Progress: resolved 306, reused 0, downloaded 306, added 306, done
 [ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION] 42 lockfile entries failed verification:
   `@oxfmt/binding-android-arm-eabi`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-android-arm64`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-darwin-arm64`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-darwin-x64`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-freebsd-x64`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-arm-gnueabihf`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-arm-musleabihf`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-arm64-gnu`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-arm64-musl`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-ppc64-gnu`@0.60.0 was published at , within the minimumReleaseAge cutoff ()
   `@oxfmt/binding-linux-riscv`...

🧰 Additional context used

📓 Path-based instructions (1)

{package.json,pnpm-lock.yaml,.npmrc}

📄 CodeRabbit inference engine (CLAUDE.md)

Use pnpm as the package manager (pnpm 10.25)

Files:

package.json

🔇 Additional comments (2)

package.json (2)
48-48: 🎯 Functional Correctness

Verify the Node.js runtime for Next.js 16.

Next.js 16 requires Node.js 20.9.0 or newer. Confirm .nvmrc, CI, and deployment runtimes meet that minimum before merging this dependency update. (nextjs.org)

32-61: 🗄️ Data Integrity & Integration

No lockfile update needed. pnpm-lock.yaml already matches package.json, and the repo is pinned to pnpm@11.7.0.
			> Likely an incorrect or invalid review comment.

📝 Walkthrough

Summary by CodeRabbit

Chores
- Updated application libraries and development tooling to newer versions.
- Refreshed formatting, linting, CSS, and build-related packages for improved compatibility and maintenance.

Walkthrough

Updated package.json dependency and devDependency version pins across the application runtime, UI libraries, CSS tooling, formatting, linting, and staged-file tooling.

Changes

Dependency Refresh

Layer / File(s)	Summary
Manifest version updates `package.json`	Runtime, UI, CSS, formatting, linting, and staging tool versions are updated to newer pins.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

finallyjay/csgo-inventory-tracker#15: Updates overlapping runtime, UI, and development tooling dependencies.
finallyjay/csgo-inventory-tracker#40: Updates dependency and devDependency versions in the same manifest.

Suggested reviewers: finallyjay

Poem

A rabbit found new packages in a row,
With fresher tools to help code grow.
Radix and React hopped along,
While lint and style joined the song.
package.json now wears a newer glow!

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description lists dependency upgrades but omits the required Summary, Test plan, Breaking changes, and Related sections from the template.	Add the template sections with a brief why-focused summary, concrete test plan, breaking-change notes if any, and related issue links.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the dependency group bump and its scope.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dependabot/npm_and_yarn/npm-minor-patch-70e83d0041

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 Checkov (3.3.8)

package.json

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 22, 2026

coderabbitai Bot requested a review from finallyjay July 22, 2026 18:31

coderabbitai Bot approved these changes Jul 22, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the npm-minor-patch group with 25 updates#44

chore(deps): Bump the npm-minor-patch group with 25 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-70e83d0041

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

coderabbitai Bot commented Jul 22, 2026 •

edited

Loading

Summary by CodeRabbit

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026

1.2.3

1.3.8

1.1.17

1.1.20

2.1.21

2.1.12

1.1.13

2.3.4

1.3.4

1.1.18

1.2.20

Version 1.25.0

What's Changed

Version 1.24.0

What's Changed

New Contributors

v16.2.11

1.6.4

1.6.3

Dialog

Slider

Toast

Tooltip

Other updates

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

Version 7.82.0

[7.82.0] - 2026-07-18

Added

Fixed

Performance

v3.10.0

What's Changed

Legend position

XAxis auto height

Other features

Bugfixes

New Contributors

v4.3.3

Fixed

[4.3.3] - 2026-07-16

Fixed

v17.1.1

Patch Changes

v17.1.0

Minor Changes

Patch Changes

17.1.1

Patch Changes

17.1.0

Minor Changes

Uh oh!

coderabbitai Bot commented Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

coderabbitai Bot commented Jul 22, 2026 •

edited

Loading