Javascript dependency: Bump the web-javascript-minor-and-patch group across 1 directory with 24 updates by dependabot[bot] · Pull Request #10444 · pgadmin-org/pgadmin4

dependabot · 2026-09-21T12:17:35Z

Bumps the web-javascript-minor-and-patch group with 24 updates in the /web directory:

Package	From	To
@tanstack/react-query	`5.102.8`	`5.103.1`
@tanstack/react-virtual	`3.14.10`	`3.14.13`
anti-trojan-source	`1.12.2`	`1.13.0`
diff-arrays-of-objects	`1.1.11`	`1.1.12`
dompurify	`3.4.14`	`3.4.15`
hotkeys-js	`4.0.7`	`4.0.8`
ip-address	`10.5.0`	`10.7.2`
marked	`18.0.11`	`18.0.13`
moment	`2.30.1`	`2.31.0`
moment-timezone	`0.6.3`	`0.6.4`
postcss	`8.5.26`	`8.5.28`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.5`	`19.3.0`
react-draggable	`4.7.1`	`4.7.2`
react-frame-component	`5.2.7`	`5.3.2`
@testing-library/dom	`10.4.1`	`10.4.2`
@testing-library/user-event	`14.6.3`	`14.6.7`
autoprefixer	`10.5.4`	`10.6.1`
html-react-parser	`6.1.7`	`6.1.8`
typescript-eslint	`8.69.0`	`8.70.0`
webpack	`5.108.4`	`5.111.1`
webpack-bundle-analyzer	`5.3.2`	`5.4.0`

Updates @tanstack/react-query from 5.102.8 to 5.103.1

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.103.1

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.103.1

@tanstack/react-query@5.103.1

@tanstack/react-query-next-experimental@5.103.1

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.103.1

@tanstack/react-query-persist-client@5.103.1

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.103.1

@tanstack/react-query@5.103.1

@tanstack/react-query@5.103.1

Patch Changes

Updated dependencies [8330b2f, 3212966]:

@tanstack/query-core@5.103.1

@tanstack/react-query-devtools@5.103.0

Patch Changes

#11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

Updated dependencies [9567367]:

@tanstack/query-devtools@5.103.0

@tanstack/react-query@5.103.0

@tanstack/react-query-next-experimental@5.103.0

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.103.0

@tanstack/react-query-persist-client@5.103.0

Patch Changes

Updated dependencies [4c7cdbb]:

@tanstack/query-persist-client-core@5.103.0

@tanstack/react-query@5.103.0

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.103.1

Patch Changes

Updated dependencies [8330b2f, 3212966]:

@tanstack/query-core@5.103.1

5.103.0

Patch Changes

Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:

@tanstack/query-core@5.103.0

Commits

c08f576 ci: Version Packages (#11511)
19ccf27 ci: Version Packages (#11339)
2da46cd chore(*): use eslint description syntax for grandfathered 'no-restricted-synt...
58ad3e2 fix: isolate TypeScript test output (#11503)
d63afc7 Simplifed query methods/internal tests new lint (#11347)
23fbdc3 test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...
50680b9 test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...
0b326b6 test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...
a1119e5 ref(hydration): remove outdated dehydratedAt fallback (#11436)
1a51bb8 docs(*): clarify 'Promise.all' only waits for all mutateAsync calls when they...
Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.10 to 3.14.13

Release notes

Sourced from @tanstack/react-virtual's releases.

@tanstack/react-virtual@3.14.13

Patch Changes

#1282 b48e3b0 - Skip flushSync for the synchronous notify raised from measureElement. React calls measureElement from a ref callback, i.e. while it is committing, and flushSync cannot flush there — it warns in development instead. The commit phase already runs at discrete (sync) priority, so the update lands in the same lane and the same frame without flushSync. Notifies from every other path (ResizeObserver re-measures, scroll adjustments) still flush synchronously.

Updated dependencies [06d1b6b, 2c0a0ea]:

@tanstack/virtual-core@3.17.11

@tanstack/react-virtual@3.14.12

Patch Changes

Updated dependencies [ab3278c]:

@tanstack/virtual-core@3.17.10

@tanstack/react-virtual@3.14.11

Patch Changes

Updated dependencies [4a0adf3]:

@tanstack/virtual-core@3.17.9

Changelog

Sourced from @tanstack/react-virtual's changelog.

3.14.13

Patch Changes

#1282 b48e3b0 - Skip flushSync for the synchronous notify raised from measureElement. React calls measureElement from a ref callback, i.e. while it is committing, and flushSync cannot flush there — it warns in development instead. The commit phase already runs at discrete (sync) priority, so the update lands in the same lane and the same frame without flushSync. Notifies from every other path (ResizeObserver re-measures, scroll adjustments) still flush synchronously.

Updated dependencies [06d1b6b, 2c0a0ea]:

@tanstack/virtual-core@3.17.11

3.14.12

Patch Changes

Updated dependencies [ab3278c]:

@tanstack/virtual-core@3.17.10

3.14.11

Patch Changes

Updated dependencies [4a0adf3]:

@tanstack/virtual-core@3.17.9

Commits

78371e8 ci: Version Packages (#1279)
b48e3b0 fix(react-virtual): skip flushSync while measuring from the ref callback (#1282)
1a57cf7 test(react-virtual): wait for smooth scrolls to settle instead of a fixed 2s ...
2c0a0ea fix(virtual-core): keep a travelling smooth scroll alive through a prepend (#...
df47889 ci: Version Packages (#1277)
171029d ci: Version Packages (#1269)
4a0adf3 fix(virtual-core): re-issue clamped end-anchor compensation once the sizer gr...
See full diff in compare view

Updates anti-trojan-source from 1.12.2 to 1.13.0

Release notes

Sourced from anti-trojan-source's releases.

v1.13.0

1.13.0 (2026-09-08)

Features

Update README with video and image examples (5c95bf5)

Commits

5c95bf5 feat: Update README with video and image examples
See full diff in compare view

Updates diff-arrays-of-objects from 1.1.11 to 1.1.12

Release notes

Sourced from diff-arrays-of-objects's releases.

v1.11.12

Dependency security patches

Commits

1663275 v1.1.12
b840efa Merge pull request #29 from malcolmvr/dependabot/npm_and_yarn/fast-uri-3.1.7
b2b5107 Bump fast-uri from 3.1.5 to 3.1.7
See full diff in compare view

Updates dompurify from 3.4.14 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

Added better clobbering hardening when XML content is involved, thanks @gnyselcuk

Added several smaller hardening and edge-case improvements, thanks @leechristensen

Bumped several dependencies where possible

Commits

1d7460c release: 3.4.15 (#1609)
See full diff in compare view

Updates hotkeys-js from 4.0.7 to 4.0.8

Release notes

Sourced from hotkeys-js's releases.

v4.0.8

Documentation v4.0.8: https://raw.githack.com/jaywcjlove/hotkeys/bf98015/index.html
Comparing Changes: jaywcjlove/hotkeys-js@v4.0.7...v4.0.8
npm i hotkeys-js@4.0.8
🐞 fix: support modern numeric key events (#548) 7e90d63 @ogonkov

Commits

8a0e151 released v4.0.8 (#548)
7e90d63 fix: support modern numeric key events (#548)
See full diff in compare view

Updates ip-address from 10.5.0 to 10.7.2

Release notes

Sourced from ip-address's releases.

v10.7.2

What's Changed

Accept an arpa suffix in any case and without the root dot in fromArpa by @beaugunderson in beaugunderson/ip-address#227

Full Changelog: beaugunderson/ip-address@v10.7.1...v10.7.2

v10.7.1

What's Changed

Bump js-yaml and brace-expansion in the lockfile by @beaugunderson in beaugunderson/ip-address#226

Full Changelog: beaugunderson/ip-address@v10.7.0...v10.7.1

v10.7.0

What's Changed

Add offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct the IPv6 end-address docs by @beaugunderson in beaugunderson/ip-address#225

Full Changelog: beaugunderson/ip-address@v10.6.0...v10.7.0

v10.6.0

What's Changed

Add isGlobal() and pin the classifiers to the IANA special-purpose registries by @beaugunderson in beaugunderson/ip-address#224

Full Changelog: beaugunderson/ip-address@v10.5.1...v10.6.0

v10.5.1

Full Changelog: beaugunderson/ip-address@v10.5.0...v10.5.1

Commits

974b48d 10.7.2
4dfe8e5 Accept an arpa suffix in any case and without the root dot in fromArpa (#227)
f0c25df 10.7.1
8b34a21 Merge commit from fork
13b6155 Merge commit from fork
469ead1 Reject an address longer than the family allows before parsing it
1343629 Report an address of the other family as not contained
4c2184a Bump js-yaml and brace-expansion in the lockfile (#226)
2b7cab5 10.7.0
87fae23 Add offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct ...
Additional commits viewable in compare view

Updates marked from 18.0.11 to 18.0.13

Release notes

Sourced from marked's releases.

v18.0.13

18.0.13 (2026-09-12)

Bug Fixes

allow tabs in the thematic break that ends a list item (#4087) (afbb27c)

avoid O(n^2) scanning in reflinkSearch (#4090) (c6a25bb)

case fold reference link labels (#4077) (aed9336)

drop the leading whitespace after a hard line break (#4075) (123ce04)

match html block start conditions when ending a list item (#4072) (c2facac)

respect raw tokens when closing link labels (#4066) (ef394f7)

strip a tab that follows spaces in an indented code block (#4080) (dbb393d)

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

allow a tab before the closing sequence of an ATX heading (#4084) (4417582)

allow one more level of nested brackets in a link label (#4064) (37b28d8)

do not add a newline to an empty code block (#4073) (23b1706)

escape character references in autolink destinations (#4053) (8f432f0)

reject GFM email autolink when the domain ends in _ or - (#4063) (df57534)

reject invalid characters in HTML tag names (#4083) (300bb1d)

remove up to the fence indentation from each content line (#4074) (0244f08)

Commits

634f810 chore(release): 18.0.13 [skip ci]
2a66071 docs: add AtlasDocs to the list of tools using Marked (#4093)
c2facac fix: match html block start conditions when ending a list item (#4072)
ef394f7 fix: respect raw tokens when closing link labels (#4066)
c6a25bb fix: avoid O(n^2) scanning in reflinkSearch (#4090)
a43c064 chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 (#4089)
afbb27c fix: allow tabs in the thematic break that ends a list item (#4087)
aed9336 fix: case fold reference link labels (#4077)
123ce04 fix: drop the leading whitespace after a hard line break (#4075)
dbb393d fix: strip a tab that follows spaces in an indented code block (#4080)
Additional commits viewable in compare view

Updates moment from 2.30.1 to 2.31.0

Release notes

Sourced from moment's releases.

2.31.0

Released Sep 14, 2026

Security fixes

Fix CVE-2026-17495 (GHSA-4p3w-j4w9-5jqw)

Bug fixes

#6376 Prevent object prototype properties from being used as format tokens

#6386 Normalize lazy-loaded locale names

#6404 Fix parsing issue with eHHmm format

#6433 Ignore non-Moment arguments in min and max

#6434 Fix inherited lowercase long date formats

#6436 Reset locale parsing caches after updates

#6437 Fix weekday mismatch when the format only has part of a date

#6442 Fix locale('__proto__') corrupting the global locale

#6443 Avoid Object.assign in duration.humanize

#6446 Validate range when parsing a time zone offset

#6447 Include metadata in all-locales bundle

#6448 Apply postformat to locale relative time methods

#6450 Add stack traces to conditional deprecation warnings

New features

#6451 Add internal date-default hook for Moment Timezone

New locales

#6000: Pashto ('ps')

#6278, #6379: Amharic (Ethiopia) ('am-et')

Updates to existing locales

#5404 Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time

#6197 Indonesian ('id'): Correct the abbreviation for August

#6217 Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct L date formats

#6289 Swedish ('sv'): Correct the abbreviation for Thursday

#6306 Catalan ('ca'): Use typographic apostrophes in relative time

#6347 Swahili ('sw'): Correct the spelling of hour in calendar output

#6360 Ukrainian ('uk'): Use ISO week numbering

#6370 Ukrainian ('uk'): Use U+02BC apostrophes in Friday names

#6371 Hungarian ('hu'): Preserve numeric values in relative seconds

#6391 Swahili ('sw'): Fix weekday and relative-time grammar

#6396 German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots

#6409 Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting

#6410 Polish ('pl'): Use genitive month names in dotted day formats

Changelog

Sourced from moment's changelog.

2.31.0

Released Sep 14, 2026

Security fixes

Fix CVE-2026-17495 (GHSA-4p3w-j4w9-5jqw)

Bug fixes

#6376 Prevent object prototype properties from being used as format tokens

#6386 Normalize lazy-loaded locale names

#6404 Fix parsing issue with eHHmm format

#6433 Ignore non-Moment arguments in min and max

#6434 Fix inherited lowercase long date formats

#6436 Reset locale parsing caches after updates

#6437 Fix weekday mismatch when the format only has part of a date

#6442 Fix locale('__proto__') corrupting the global locale

#6443 Avoid Object.assign in duration.humanize

#6446 Validate range when parsing a time zone offset

#6447 Include metadata in all-locales bundle

#6448 Apply postformat to locale relative time methods

#6450 Add stack traces to conditional deprecation warnings

New features

#6451 Add internal date-default hook for Moment Timezone

New locales

#6000: Pashto ('ps')

#6278, #6379: Amharic (Ethiopia) ('am-et')

Updates to existing locales

#5404 Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time

#6197 Indonesian ('id'): Correct the abbreviation for August

#6217 Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct L date formats

#6289 Swedish ('sv'): Correct the abbreviation for Thursday

#6306 Catalan ('ca'): Use typographic apostrophes in relative time

#6347 Swahili ('sw'): Correct the spelling of hour in calendar output

#6360 Ukrainian ('uk'): Use ISO week numbering

#6370 Ukrainian ('uk'): Use U+02BC apostrophes in Friday names

#6371 Hungarian ('hu'): Preserve numeric values in relative seconds

#6391 Swahili ('sw'): Fix weekday and relative-time grammar

#6396 German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots

#6409 Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting

#6410 Polish ('pl'): Use genitive month names in dotted day formats

Commits

15b45d4 [pkg] Build 2.31.0 (#6452)
631cd81 [pkg] Update changelog for upcoming release (#6394)
6caff9e Merge commit from fork
710703b [feature] Add internal date-default hook for Moment Timezone (#6451)
863ed94 [bugfix] Add stack traces to conditional deprecation warnings (#6450)
2c7abe1 [bugfix] Apply postformat to locale relative time methods (#6448)
9c45ac3 [bugfix] Include metadata in all-locales bundle (#6447)
f6eefc5 [bugfix] Validate timezone offset range (#6446)
136b441 [bugfix] Avoid Object.assign in duration.humanize (#6443)
0d10504 [bugfix] Fix locale('proto') corrupting the global locale (#6442)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for moment since your current version.

Updates moment-timezone from 0.6.3 to 0.6.4

Release notes

Sourced from moment-timezone's releases.

Release 0.6.4

Updated data to IANA TZDB 2026d. #1157

Fixed calendar arithmetic around time zone gaps. #1151

Fixed default date selection when creating a zoned Moment with only time fields.

Object inputs (e.g. moment.tz({ hour: 9 }, zoneName)). #1156

String inputs (e.g. moment.tz('09:00', 'HH:mm', zoneName)). #1159

Using un-zoned moment() when there is also a zone set with moment.tz.setDefault(zoneName). #1161

NOTE: This specific fix only works when also using core moment version 2.31.0 or higher. All other fixes in this release work with all supported versions of moment.

Changelog

Sourced from moment-timezone's changelog.

0.6.4 2026-09-15

Updated data to IANA TZDB 2026d. #1157

Fixed calendar arithmetic around time zone gaps. #1151

Fixed default date selection when creating a zoned Moment with only time fields.

Object inputs (e.g. moment.tz({ hour: 9 }, zoneName)). #1156

String inputs (e.g. moment.tz('09:00', 'HH:mm', zoneName)). #1159

Using un-zoned moment() when there is also a zone set with moment.tz.setDefault(zoneName). #1161

NOTE: This specific fix only works when also using core moment version 2.31.0 or higher. All other fixes in this release work with all supported versions of moment.

Commits

3722a7d Bump version and build moment-timezone 0.6.4
70b06e9 Merge pull request #1161 from moment/mjp/fix-default-zone-date-defaults
afac5bd [bugfix] Apply default zone to omitted date fields
114242a Merge pull request #1159 from moment/mjp/fix-119
0662d8b [bugfix] Use target zone for string date defaults
9da68c4 data: Add 2026d (#1157)
518ab31 build(deps): bump js-yaml and grunt (#1155)
ffe3e48 build(deps): bump browserslist from 4.21.5 to 4.28.8 (#1154)
4282f22 [bugfix] Use target zone for object date defaults (#1156)
7030b19 build(deps): bump brace-expansion (#1152)
Additional commits viewable in compare view

Updates postcss from 8.5.26 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Changelog

Sourced from postcss's changelog.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Commits

e544bff Release 8.5.28 version
f8fc252 Typo
5039fd7 Add missed release notes
ae40ca4 Release 8.5.27 version
62b1626 Fix linter
1dba938 Update dependencies
3e82edc Keep non-annotation comments when the processor has no plugins (#2150)
6d23bc3 Fix link
508e997 Add GitHub Sponsors link
e993739 Add CodeRabbit sponsor (#2145)
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser())Description has been truncated

…across 1 directory with 24 updates Bumps the web-javascript-minor-and-patch group with 24 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.103.1` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.10` | `3.14.13` | | [anti-trojan-source](https://github.com/lirantal/anti-trojan-source) | `1.12.2` | `1.13.0` | | [diff-arrays-of-objects](https://github.com/malcolmvr/diff-arrays-of-objects) | `1.1.11` | `1.1.12` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.15` | | [hotkeys-js](https://github.com/jaywcjlove/hotkeys-js) | `4.0.7` | `4.0.8` | | [ip-address](https://github.com/beaugunderson/ip-address) | `10.5.0` | `10.7.2` | | [marked](https://github.com/markedjs/marked) | `18.0.11` | `18.0.13` | | [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` | | [moment-timezone](https://github.com/moment/moment-timezone) | `0.6.3` | `0.6.4` | | [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.3.0` | | [react-draggable](https://github.com/react-grid-layout/react-draggable) | `4.7.1` | `4.7.2` | | [react-frame-component](https://github.com/ryanseddon/react-frame-component) | `5.2.7` | `5.3.2` | | [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.3` | `14.6.7` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` | | [html-react-parser](https://github.com/remarkablemark/html-react-parser) | `6.1.7` | `6.1.8` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.69.0` | `8.70.0` | | [webpack](https://github.com/webpack/webpack) | `5.108.4` | `5.111.1` | | [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.3.2` | `5.4.0` | Updates `@tanstack/react-query` from 5.102.8 to 5.103.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.1/packages/react-query) Updates `@tanstack/react-virtual` from 3.14.10 to 3.14.13 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.13/packages/react-virtual) Updates `anti-trojan-source` from 1.12.2 to 1.13.0 - [Release notes](https://github.com/lirantal/anti-trojan-source/releases) - [Changelog](https://github.com/lirantal/anti-trojan-source/blob/main/RELEASE.md) - [Commits](lirantal/anti-trojan-source@v1.12.2...v1.13.0) Updates `diff-arrays-of-objects` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/malcolmvr/diff-arrays-of-objects/releases) - [Commits](malcolmvr/diff-arrays-of-objects@v1.1.11...v1.1.12) Updates `dompurify` from 3.4.14 to 3.4.15 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.14...3.4.15) Updates `hotkeys-js` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/jaywcjlove/hotkeys-js/releases) - [Commits](jaywcjlove/hotkeys-js@v4.0.7...v4.0.8) Updates `ip-address` from 10.5.0 to 10.7.2 - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](beaugunderson/ip-address@v10.5.0...v10.7.2) Updates `marked` from 18.0.11 to 18.0.13 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.0.11...v18.0.13) Updates `moment` from 2.30.1 to 2.31.0 - [Release notes](https://github.com/moment/moment/releases) - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.30.1...2.31.0) Updates `moment-timezone` from 0.6.3 to 0.6.4 - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](moment/moment-timezone@0.6.3...0.6.4) Updates `postcss` from 8.5.26 to 8.5.28 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.26...8.5.28) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.5 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-draggable` from 4.7.1 to 4.7.2 - [Release notes](https://github.com/react-grid-layout/react-draggable/releases) - [Changelog](https://github.com/react-grid-layout/react-draggable/blob/master/CHANGELOG.md) - [Commits](react-grid-layout/react-draggable@v4.7.1...v4.7.2) Updates `react-frame-component` from 5.2.7 to 5.3.2 - [Release notes](https://github.com/ryanseddon/react-frame-component/releases) - [Changelog](https://github.com/ryanseddon/react-frame-component/blob/master/CHANGELOG.md) - [Commits](ryanseddon/react-frame-component@v5.2.7...v5.3.2) Updates `@testing-library/dom` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/testing-library/dom-testing-library/releases) - [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2) Updates `@testing-library/user-event` from 14.6.3 to 14.6.7 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.3...v14.6.7) Updates `autoprefixer` from 10.5.4 to 10.6.1 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.4...10.6.1) Updates `html-react-parser` from 6.1.7 to 6.1.8 - [Release notes](https://github.com/remarkablemark/html-react-parser/releases) - [Changelog](https://github.com/remarkablemark/html-react-parser/blob/master/CHANGELOG.md) - [Commits](remarkablemark/html-react-parser@v6.1.7...v6.1.8) Updates `typescript-eslint` from 8.69.0 to 8.70.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint) Updates `webpack` from 5.108.4 to 5.111.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.4...v5.111.1) Updates `webpack-bundle-analyzer` from 5.3.2 to 5.4.0 - [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases) - [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-bundle-analyzer@v5.3.2...v5.4.0) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.103.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: anti-trojan-source dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: diff-arrays-of-objects dependency-version: 1.1.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: dompurify dependency-version: 3.4.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: hotkeys-js dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: ip-address dependency-version: 10.7.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: marked dependency-version: 18.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: moment dependency-version: 2.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: moment-timezone dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: postcss dependency-version: 8.5.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: react-draggable dependency-version: 4.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: react-frame-component dependency-version: 5.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: "@testing-library/dom" dependency-version: 10.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: "@testing-library/user-event" dependency-version: 14.6.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: autoprefixer dependency-version: 10.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: html-react-parser dependency-version: 6.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-javascript-minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: webpack dependency-version: 5.111.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch - dependency-name: webpack-bundle-analyzer dependency-version: 5.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-javascript-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-09-21T12:17:42Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: pgadmin-org/pgadmin4/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: dd565d75-8a4d-48de-b2ad-c3294d9e95a1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added the Dependencies Pull requests that update a dependency file label Sep 21, 2026

Navigation Menu

Javascript dependency: Bump the web-javascript-minor-and-patch group across 1 directory with 24 updates - #10444

Javascript dependency: Bump the web-javascript-minor-and-patch group across 1 directory with 24 updates#10444
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web/web-javascript-minor-and-patch-c2a021da8e

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

coderabbitai Bot commented Sep 21, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026

@​tanstack/react-query-devtools@​5.103.1

Patch Changes

@​tanstack/react-query-next-experimental@​5.103.1

Patch Changes

@​tanstack/react-query-persist-client@​5.103.1

Patch Changes

@​tanstack/react-query@​5.103.1

Patch Changes

@​tanstack/react-query-devtools@​5.103.0

Patch Changes

@​tanstack/react-query-next-experimental@​5.103.0

Patch Changes

@​tanstack/react-query-persist-client@​5.103.0

Patch Changes

5.103.1

Patch Changes

5.103.0

Patch Changes

@​tanstack/react-virtual@​3.14.13

Patch Changes

@​tanstack/react-virtual@​3.14.12

Patch Changes

@​tanstack/react-virtual@​3.14.11

Patch Changes

3.14.13

Patch Changes

3.14.12

Patch Changes

3.14.11

Patch Changes

v1.13.0

1.13.0 (2026-09-08)

Features

v1.11.12

DOMPurify 3.4.15

v4.0.8

v10.7.2

What's Changed

v10.7.1

What's Changed

v10.7.0

What's Changed

v10.6.0

What's Changed

v10.5.1

v18.0.13

18.0.13 (2026-09-12)

Bug Fixes

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

2.31.0

Security fixes

Bug fixes

New features

New locales

Updates to existing locales

2.31.0

Security fixes

Bug fixes

New features

New locales

Updates to existing locales

Release 0.6.4

0.6.4 2026-09-15

8.5.28

8.5.27

8.5.28

8.5.27

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Uh oh!

coderabbitai Bot commented Sep 21, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

`@tanstack/react-query-devtools@5`.103.1

`@tanstack/react-query-next-experimental@5`.103.1

`@tanstack/react-query-persist-client@5`.103.1

`@tanstack/react-query@5`.103.1

`@tanstack/react-query-devtools@5`.103.0

`@tanstack/react-query-next-experimental@5`.103.0

`@tanstack/react-query-persist-client@5`.103.0

`@tanstack/react-virtual@3`.14.13

`@tanstack/react-virtual@3`.14.12

`@tanstack/react-virtual@3`.14.11

`0.6.4` 2026-09-15