Bump the node-requirements group across 1 directory with 23 updates by dependabot[bot] · Pull Request #265 · Azure-Samples/Cosmic-Food-RAG-app

dependabot · 2026-03-24T14:09:58Z

Bumps the node-requirements group with 23 updates in the /frontend directory:

Package	From	To
@fluentui/react	`8.112.5`	`8.125.5`
@fluentui/react-components	`9.56.8`	`9.73.7`
@fluentui/react-icons	`2.0.270`	`2.0.324`
@react-spring/web	`9.7.5`	`10.0.3`
dompurify	`3.2.4`	`3.4.0`
@types/dompurify	`3.0.5`	`3.2.0`
react	`18.3.1`	`19.2.5`
@types/react	`18.3.18`	`19.2.14`
react-dom	`18.3.1`	`19.2.5`
@types/react-dom	`18.3.5`	`19.2.3`
react-router-dom	`7.13.0`	`7.14.1`
react-syntax-highlighter	`16.1.0`	`16.1.1`
scheduler	`0.20.2`	`0.27.0`
@eslint/js	`9.5.0`	`10.0.1`
@types/dom-speech-recognition	`0.0.7`	`0.0.9`
@vitejs/plugin-react	`4.3.4`	`6.0.1`
eslint	`8.57.1`	`10.2.0`
globals	`15.6.0`	`17.5.0`
prettier	`3.3.3`	`3.8.3`
rollup-plugin-visualizer	`5.12.0`	`7.0.1`
typescript	`5.6.3`	`6.0.3`
typescript-eslint	`7.18.0`	`8.58.2`
vite	`6.4.1`	`8.0.8`

Updates @fluentui/react from 8.112.5 to 8.125.5

Release notes

Sourced from @fluentui/react's releases.

@fluentui/react v8.125.5

Patches

Bump @fluentui/foundation-legacy to v8.6.5 (commit)

Bump @fluentui/font-icons-mdl2 to v8.5.72 (commit)

Bump @fluentui/react-focus to v8.10.5 (commit)

Bump @fluentui/style-utilities to v8.15.0 (commit)

@fluentui/react v8.125.4

Patches

Bump @fluentui/foundation-legacy to v8.6.4 (PR #35643 by Anush2303)

Bump @fluentui/font-icons-mdl2 to v8.5.71 (PR #35643 by Anush2303)

Bump @fluentui/react-focus to v8.10.4 (PR #35643 by Anush2303)

Bump @fluentui/style-utilities to v8.14.0 (PR #35643 by Anush2303)

Commits

f2dbecc release: applying package updates - react v8
cbf6cd2 release: applying package updates - react-components
e9a0c23 fix(react-tabs): tabster attributes should be overridable on Tabs (#35782)
f3c8400 fix(storybook-llms-extractor): extract only serializable component props befo...
46f1041 release: applying package updates - web-components
7cbc248 fix(web-components): add set theme export (#35778)
019b0e7 feat(react-motion): add MotionRefForwarder helper (#35774)
cbf0ef2 feat(react-positioning): add placement to onPositioningEnd event (#35773)
30d6910 release: applying package updates - web-components
7a60597 fix(web-components): prevent double tab open on Ctrl+click in BaseAnchor (#35...
Additional commits viewable in compare view

Updates @fluentui/react-components from 9.56.8 to 9.73.7

Release notes

Sourced from @fluentui/react-components's releases.

@fluentui/react-components v9.73.1

Minor changes

feat: export MotionRefForwarder and useMotionForwardedRef for shared motion ref forwarding (PR #35774 by robertpenner)

feat(react-positioning): add placement to onPositioningEnd event (PR #35773 by robertpenner)

feat: add disableAutoFocus prop to TagPicker and deprecate on TagPickerList (PR #35768 by bsunderhus)

Patches

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

refactor: use shared MotionRefForwarder from react-motion (PR #35774 by robertpenner)

fix: add missing "use client" directive to getWindow utility files (PR #35719 by dmytrokirpa)

refactor: use shared MotionRefForwarder from react-motion (PR #35774 by robertpenner)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: fix read-only functionality (PR #35761 by dmytrokirpa)

fix: tabster attributes should be overridable on Tabs (PR #35782 by layershifter)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

Prerelease changes

fix: add missing "use client" directive to client components and styles (PR #35719 by dmytrokirpa)

Commits

46b84d2 release: applying package updates - react-components
e068b98 feat(react-tags): add base hooks for Tags components (#35912)
d743ae8 feat(react-combobox): add base hooks for Combobox and Dropdown (#35915)
2b928d0 feat(react-avatar): expose base hooks and types for Avatar components (#35899)
b9772fe feat(react-progress): add useProgressBarBase_unstable hook (#35817)
b5fd7a7 feat(react-checkbox): add useCheckboxBase_unstable hook (#35826)
068690f release: applying package updates - tools
51317b2 fix(react-avatar): support initials calculation for GB18030-2022 extension ch...
e084883 feat(react-tabs): expose base hooks and types for Tab and TabList (#35902)
eaea7b7 feat(react-select): add useSelectBase_unstable hook (#35906)
Additional commits viewable in compare view

Updates @fluentui/react-icons from 2.0.270 to 2.0.324

Commits

See full diff in compare view

Updates @react-spring/web from 9.7.5 to 10.0.3

Release notes

Sourced from @react-spring/web's releases.

v10.0.3

What's Changed

Fix issue with Jest and legacy React apps using useTransition by @dimitris-tsetsonis in pmndrs/react-spring#2394

New Contributors

@dimitris-tsetsonis made their first contribution in pmndrs/react-spring#2394

Full Changelog: pmndrs/react-spring@v10.0.2...v10.0.3

v10.0.2

What's Changed

fix: remove accessing elem.ref in renderTransitions by @robertjarske in pmndrs/react-spring#2373

Support immediate useResize by @LoganDark in pmndrs/react-spring#2375

New Contributors

@robertjarske made their first contribution in pmndrs/react-spring#2373

Full Changelog: pmndrs/react-spring@v10.0.1...v10.0.2

v10.0.1

What's Changed

fix: spring does not start by @dagatsoin in pmndrs/react-spring#2372

Full Changelog: pmndrs/react-spring@v10.0.0...v10.0.1

v10.0.0

What's Changed

chore(deps): update dependency concurrently to v9 by @renovate in pmndrs/react-spring#2326

chore: update TSUP to v8 by @joshuaellis in pmndrs/react-spring#2328

chore(deps): update dependency chokidar to v4 by @renovate in pmndrs/react-spring#2325

chore(deps): update all non-major dependencies by @renovate in pmndrs/react-spring#2274

chore(ci): fix bad spelling of package name by @joshuaellis in pmndrs/react-spring#2350

chore(deps): update dependency vite-tsconfig-paths to v5 by @renovate in pmndrs/react-spring#2338

chore(deps): update dependency vite to v6 by @renovate in pmndrs/react-spring#2337

fix(deps): update all non-major dependencies by @renovate in pmndrs/react-spring#2330

Clarify what immediate does by @jorisw in pmndrs/react-spring#2357

chore(deps): update dependency @vanilla-extract/vite-plugin to v5 by @renovate in pmndrs/react-spring#2360

feat!: react 19 support by @dagatsoin in pmndrs/react-spring#2368

chore(deps): update node.js to v22 by @renovate in pmndrs/react-spring#2339

chore(deps): update dependency cypress to v14 by @renovate in pmndrs/react-spring#2367

fix(deps): update dependency cookie to v1 by @renovate in pmndrs/react-spring#2348

New Contributors

@jorisw made their first contribution in pmndrs/react-spring#2357

@dagatsoin made their first contribution in pmndrs/react-spring#2368

Full Changelog: pmndrs/react-spring@v9.7.5...v10.0.0

Commits

b6fbb98 v10.0.3
f69b748 fix: ref access issue in jest and legacy react apps (#2394)
8631391 v10.0.2
7cc1c90 fix: respect immediate option to useResize hook (#2375)
197e0a7 fix: remove accessing elem.ref in renderTransitions (#2373)
2dec583 v10.0.1
de1244b fix: spring does not start (#2372)
195c479 chore: v10.0.0
7116bba fix(deps): update dependency cookie to v1 (#2348)
f463ef7 chore(deps): update dependency cypress to v14 (#2367)
Additional commits viewable in compare view

Updates dompurify from 3.2.4 to 3.4.0

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.0

Most relevant changes:

Fixed a problem with FORBID_TAGS not winning over ADD_TAGS, thanks @kodareef5

Fixed several minor problems and typos regarding MathML attributes, thanks @DavidOliver

Fixed ADD_ATTR/ADD_TAGS function leaking into subsequent array-based calls, thanks @1Jesper1

Fixed a missing SAFE_FOR_TEMPLATES scrub in RETURN_DOM path, thanks @bencalif

Fixed a prototype pollution via CUSTOM_ELEMENT_HANDLING, thanks @trace37labs

Fixed an issue with ADD_TAGS function form bypassing FORBID_TAGS, thanks @eddieran

Fixed an issue with ADD_ATTR predicates skipping URI validation, thanks @christos-eth

Fixed an issue with USE_PROFILES prototype pollution, thanks @christos-eth

Fixed an issue leading to possible mXSS via Re-Contextualization, thanks @researchatfluidattacks and others

Fixed an issue with closing tags leading to possible mXSS, thanks @frevadiscor

Fixed a problem with the type dentition patcher after Node version bump

Fixed freezing BS runs by reducing the tested browsers array

Bumped several dependencies where possible

Added needed files for OpenSSF scorecard checks

Published Advisories are here: https://github.com/cure53/DOMPurify/security/advisories?state=published

DOMPurify 3.3.3

Fixed an engine requirement for Node 20 which caused hiccups, thanks @Rotzbua

DOMPurify 3.3.2

Fixed a possible bypass caused by jsdom's faulty raw-text tag parsing, thanks multiple reporters

Fixed a prototype pollution issue when working with custom elements, thanks @christos-eth

Fixed a lenient config parsing in _isValidAttribute, thanks @christos-eth

Bumped and removed several dependencies, thanks @Rotzbua

Fixed the test suite after bumping dependencies, thanks @Rotzbua

DOMPurify 3.3.1

Updated ADD_FORBID_CONTENTS setting to extend default list, thanks @MariusRumpf

Updated the ESM import syntax to be more correct, thanks @binhpv

DOMPurify 3.3.0

Added the SVG mask-type attribute to default allow-list, thanks @prasadrajandran

Added support for ADD_ATTR and ADD_TAGS to accept functions, thanks @nelstrom

Fixed an issue with the slot element being in both SVG and HTML allow-list, thanks @Wim-Valgaeren

DOMPurify 3.2.7

Added new attributes and elements to default allow-list, thanks @elrion018

Added tagName parameter to custom element attributeNameCheck, thanks @nelstrom

Added better check for animated href attributes, thanks @llamakko

Updated and improved the bundled types, thanks @ssi02014

Updated several tests to better align with new browser encoding behaviors

Improved the handling of potentially risky content inside CDATA elements, thanks @securityMB & @terjanq

Improved the regular expression for raw-text elements to cover textareas, thanks @securityMB & @terjanq

DOMPurify 3.2.6

... (truncated)

Commits

5b16e0b Getting 3.x branch ready for 3.4.0 release (#1250)
8bcbf73 chore: Preparing 3.3.3 release
5faddd6 fix: engine requirement (#1210)
0f91e3a Update README.md
d5ff1a8 Merge branch 'main' of github.com:cure53/DOMPurify
c3efd48 fix: moved back from jsdom 28 to jsdom 20
988b888 fix: moved back from jsdom 28 to jsdom 20
2726c74 chore: Preparing 3.3.2 release
6202c7e build(deps): bump @tootallnate/once and jsdom (#1204)
302b51d fix: Expanded the regex ever so slightly to also cover script
Additional commits viewable in compare view

Updates @types/dompurify from 3.0.5 to 3.2.0

Commits

See full diff in compare view

Updates react from 18.3.1 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

... (truncated)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js

Use underscore instead of : IDs generated by useId

All Changes

React

<Activity /> was developed over many years, starting before ClassComponent.setState (@acdlite @sebmarkbage and many others)

Stringify context as "SomeContext" instead of "SomeContext.Provider" (@kassens #33507)

Include stack of cause of React instrumentation errors with %o placeholder (@eps1lon #34198)

Fix infinite useDeferredValue loop in popstate event (@acdlite #32821)

Fix a bug when an initial value was passed to useDeferredValue (@acdlite #34376)

Fix a crash when submitting forms with Client Actions (@sebmarkbage #33055)

Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@sebmarkbage #32900)

Avoid stack overflow on wide trees during Hot Reload (@sophiebits #34145)

Improve Owner and Component stacks in various places (@sebmarkbage, @eps1lon: #33629, #33724, #32735, #33723)

Add cacheSignal (@sebmarkbage #33557)

... (truncated)

Commits

23f4f9f 19.2.5
90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
5667a41 Bump next prerelease version numbers (#34639)
8bb7241 Bump useEffectEvent to Canary (#34610)
e3c9656 Ensure Performance Track are Clamped and Don't overlap (#34509)
68f00c9 Release Activity in Canary (#34374)
0e10ee9 [Reconciler] Set ProfileMode for Host Root Fiber by default in dev (#34432)
Additional commits viewable in compare view

Updates @types/react from 18.3.18 to 19.2.14

Commits

See full diff in compare view

Updates react-dom from 18.3.1 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js

Use underscore instead of : IDs generated by useId

All Changes

React

<Activity /> was developed over many years, starting before ClassComponent.setState (@acdlite @sebmarkbage and many others)

Stringify context as "SomeContext" instead of "SomeContext.Provider" (@kassens #33507)

Include stack of cause of React instrumentation errors with %o placeholder (@eps1lon #34198)

Fix infinite useDeferredValue loop in popstate event (@acdlite #32821)

Fix a bug when an initial value was passed to useDeferredValue (@acdlite #34376)

Fix a crash when submitting forms with Client Actions (@sebmarkbage #33055)

Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@sebmarkbage #32900)

Avoid stack overflow on wide trees during Hot Reload (@sophiebits #34145)

Improve Owner and Component stacks in various places (@sebmarkbage, @eps1lon: #33629, #33724, #32735, #33723)

Add cacheSignal (@sebmarkbage #33557)

... (truncated)

Commits

23f4f9f 19.2.5
90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
8618113 Bump scheduler version (#34671)
1bd1f01 Ship partial-prerendering APIs to Canary (#34633)
2f0649a [Fizz] Remove nonce option from resume-and-prerender APIs (#34664)
5667a41 Bump next prerelease version numbers (#34639)
e08f53b Match react-dom/static test entrypoints and published entrypoints (#34599)
Additional commits viewable in compare view

Updates @types/react-dom from 18.3.5 to 19.2.3

Commits

See full diff in compare view

Updates react-router-dom from 7.13.0 to 7.14.1

Changelog

Sourced from react-router-dom's changelog.

v7.14.1

Patch Changes

Updated dependencies:

react-router@7.14.1

7.14.0

Patch Changes

Updated dependencies:

react-router@7.14.0

7.13.2

Patch Changes

Updated dependencies:

react-router@7.13.2

7.13.1

Patch Changes

Updated dependencies:

react-router@7.13.1

Commits

197674b Release 7.14.1 (#14973)
a87774f Add new release process (#14916)
e31077b chore: Update version for release (#14945)
6683e85 chore: Update version for release (pre) (#14943)
aadb56f chore: Update version for release (#14908)
c68a9b3 chore: Update version for release (pre) (#14893)
aa3f078 chore: Update version for release (#14829)
3207a5c chore: Update version for release (pre) (#14814)
See full diff in compare view

Updates react-syntax-highlighter from 16.1.0 to 16.1.1

Release notes

Sourced from react-syntax-highlighter's releases.

v16.1.1

What's Changed

Updated installation section in README.md by @quntamant in react-syntax-highlighter/react-syntax-highlighter#633

fix: ESM missing .js by @JulesGuesnon in react-syntax-highlighter/react-syntax-highlighter#627

Fix: grammar in README.md by @WuMingDao in react-syntax-highlighter/react-syntax-highlighter#622

New Contributors

@quntamant made their first contribution in react-syntax-highlighter/react-syntax-highlighter#633

@JulesGuesnon made their first contribution in react-syntax-highlighter/react-syntax-highlighter#627

@WuMingDao made their first contribution in react-syntax-highlighter/react-syntax-highlighter#622

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v16.1.0...v16.1.1

Commits

ecac533 new package lock
4957908 version bump
5853a48 Fix: grammar in README.md (#622)
fc5d7b7 fix: Added a babel plugin to auto add the js exts for esm (#627)
d2b43e0 Updated installation section in README.md (

Bumps the node-requirements group with 23 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@fluentui/react](https://github.com/microsoft/fluentui) | `8.112.5` | `8.125.5` | | [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.56.8` | `9.73.7` | | [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.270` | `2.0.324` | | [@react-spring/web](https://github.com/pmndrs/react-spring) | `9.7.5` | `10.0.3` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.2.4` | `3.4.0` | | [@types/dompurify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dompurify) | `3.0.5` | `3.2.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.5` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.18` | `19.2.14` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.5` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.5` | `19.2.3` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.0` | `7.14.1` | | [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `16.1.0` | `16.1.1` | | [scheduler](https://github.com/facebook/react/tree/HEAD/packages/scheduler) | `0.20.2` | `0.27.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.5.0` | `10.0.1` | | [@types/dom-speech-recognition](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dom-speech-recognition) | `0.0.7` | `0.0.9` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.3.4` | `6.0.1` | | [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.2.0` | | [globals](https://github.com/sindresorhus/globals) | `15.6.0` | `17.5.0` | | [prettier](https://github.com/prettier/prettier) | `3.3.3` | `3.8.3` | | [rollup-plugin-visualizer](https://github.com/btd/rollup-plugin-visualizer) | `5.12.0` | `7.0.1` | | [typescript](https://github.com/microsoft/TypeScript) | `5.6.3` | `6.0.3` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `7.18.0` | `8.58.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.1` | `8.0.8` | Updates `@fluentui/react` from 8.112.5 to 8.125.5 - [Release notes](https://github.com/microsoft/fluentui/releases) - [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react_v8.112.5...@fluentui/react_v8.125.5) Updates `@fluentui/react-components` from 9.56.8 to 9.73.7 - [Release notes](https://github.com/microsoft/fluentui/releases) - [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-components_v9.56.8...@fluentui/react-components_v9.73.7) Updates `@fluentui/react-icons` from 2.0.270 to 2.0.324 - [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md) - [Commits](https://github.com/microsoft/fluentui-system-icons/commits) Updates `@react-spring/web` from 9.7.5 to 10.0.3 - [Release notes](https://github.com/pmndrs/react-spring/releases) - [Commits](pmndrs/react-spring@v9.7.5...v10.0.3) Updates `dompurify` from 3.2.4 to 3.4.0 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.2.4...3.4.0) Updates `@types/dompurify` from 3.0.5 to 3.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify) Updates `react` from 18.3.1 to 19.2.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react) Updates `@types/react` from 18.3.18 to 19.2.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 18.3.1 to 19.2.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom) Updates `@types/react-dom` from 18.3.5 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-router-dom` from 7.13.0 to 7.14.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.14.1/packages/react-router-dom) Updates `react-syntax-highlighter` from 16.1.0 to 16.1.1 - [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases) - [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD) - [Commits](react-syntax-highlighter/react-syntax-highlighter@v16.1.0...v16.1.1) Updates `scheduler` from 0.20.2 to 0.27.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/HEAD/packages/scheduler) Updates `@eslint/js` from 9.5.0 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@types/dom-speech-recognition` from 0.0.7 to 0.0.9 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dom-speech-recognition) Updates `@types/dompurify` from 3.0.5 to 3.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify) Updates `@types/react` from 18.3.18 to 19.2.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 18.3.5 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 4.3.4 to 6.0.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react) Updates `eslint` from 8.57.1 to 10.2.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.1...v10.2.0) Updates `globals` from 15.6.0 to 17.5.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v15.6.0...v17.5.0) Updates `prettier` from 3.3.3 to 3.8.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.3.3...3.8.3) Updates `rollup-plugin-visualizer` from 5.12.0 to 7.0.1 - [Changelog](https://github.com/btd/rollup-plugin-visualizer/blob/master/CHANGELOG.md) - [Commits](btd/rollup-plugin-visualizer@v5.12.0...v7.0.1) Updates `typescript` from 5.6.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.6.3...v6.0.3) Updates `typescript-eslint` from 7.18.0 to 8.58.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.2/packages/typescript-eslint) Updates `vite` from 6.4.1 to 8.0.8 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.8/packages/vite) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: "@fluentui/react" dependency-version: 8.125.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: node-requirements - dependency-name: "@fluentui/react-components" dependency-version: 9.73.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: node-requirements - dependency-name: "@fluentui/react-icons" dependency-version: 2.0.321 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: node-requirements - dependency-name: "@react-spring/web" dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: "@types/dom-speech-recognition" dependency-version: 0.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: node-requirements - dependency-name: "@types/dompurify" dependency-version: 3.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: node-requirements - dependency-name: "@types/dompurify" dependency-version: 3.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: node-requirements - dependency-name: "@types/react" dependency-version: 19.2.14 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: "@types/react" dependency-version: 19.2.14 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: dompurify dependency-version: 3.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: node-requirements - dependency-name: eslint dependency-version: 10.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: globals dependency-version: 17.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: node-requirements - dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: react-dom dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: react-router-dom dependency-version: 7.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: node-requirements - dependency-name: react-syntax-highlighter dependency-version: 16.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: node-requirements - dependency-name: rollup-plugin-visualizer dependency-version: 7.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: scheduler dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: node-requirements - dependency-name: typescript dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: typescript-eslint dependency-version: 8.57.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements - dependency-name: vite dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: node-requirements ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 24, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/node-requirements-f7bd71cf35 branch from 67ac52d to a680e25 Compare April 24, 2026 20:38

dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/node-requirements-f7bd71cf35 branch from a680e25 to 25f0160 Compare May 1, 2026 16:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the node-requirements group across 1 directory with 23 updates#265

Bump the node-requirements group across 1 directory with 23 updates#265
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/node-requirements-f7bd71cf35

dependabot Bot commented on behalf of github Mar 24, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​fluentui/react v8.125.5

Patches

@​fluentui/react v8.125.4

Patches

@​fluentui/react-components v9.73.1

Minor changes

Patches

Prerelease changes

v10.0.3

What's Changed

New Contributors

v10.0.2

What's Changed

New Contributors

v10.0.1

What's Changed

v10.0.0

What's Changed

New Contributors

DOMPurify 3.4.0

DOMPurify 3.3.3

DOMPurify 3.3.2

DOMPurify 3.3.1

DOMPurify 3.3.0

DOMPurify 3.2.7

DOMPurify 3.2.6

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

New React Features

New React DOM Features

Notable changes

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

New React Features

New React DOM Features

Notable changes

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

New React Features

New React DOM Features

Notable changes

All Changes

React

v7.14.1

Patch Changes

7.14.0

Patch Changes

7.13.2

Patch Changes

7.13.1

dependabot Bot commented on behalf of github Mar 24, 2026 •

edited

Loading

`@fluentui/react` v8.125.5

`@fluentui/react` v8.125.4

`@fluentui/react-components` v9.73.1