Skip to content

chore(deps): bump the web group across 1 directory with 15 updates - #97

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-82f1364ba5
Open

chore(deps): bump the web group across 1 directory with 15 updates#97
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-82f1364ba5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the web group with 15 updates in the /web directory:

Package From To
@cosmos.gl/graph 2.6.4 3.4.0
@hpcc-js/wasm-graphviz 1.21.5 1.28.0
@xyflow/react 12.10.2 12.11.2
js-yaml 4.2.0 5.2.3
lucide-react 0.468.0 1.31.0
monaco-editor 0.52.2 0.56.0
react 18.3.1 19.2.8
@types/react 18.3.28 19.2.18
react-dom 18.3.1 19.2.8
@types/react-dom 18.3.7 19.2.4
react-router 7.16.0 8.3.0
@playwright/test 1.60.0 1.62.1
@vitejs/plugin-react 4.7.0 6.0.5
typescript 5.9.3 7.0.2
vite 6.4.3 8.2.1

Updates @cosmos.gl/graph from 2.6.4 to 3.4.0

Release notes

Sourced from @​cosmos.gl/graph's releases.

Release v3.4

🎉 What's New

Better-Looking Dense Graphs

The repulsion force was rebuilt around one idea: handle far and near neighbors differently.

  • Far away — a stack of grids, coarse for distant points and finer closer in. A distant group counts as one blob at its average position, and every part of space is counted exactly once: no gaps, no double counting, nothing to tune.
  • Up close — real point-to-point forces instead of an average. From each nearby grid cell a point takes up to 8 actual neighbors, picked at random and re-picked every tick, weighted so it averages out to the exact answer as the layout settles. Cells holding 8 points or fewer use all of them, so most graphs get exact close-range forces.
  • Stacked points — points sitting at exactly the same spot have no direction to separate along, so each is pushed along its own random direction and the pile comes apart instead of staying stuck.

Dense hubs spread into readable clouds and tight clusters open up. It's also faster per simulation step. How it works in detail →

simulationRepulsionTheta no longer does anything — the new algorithm has no distance bands to tune. It's still accepted so existing configs keep working, but you can safely delete it.

Smoother Hover on Large Graphs

The GPU now keeps extra, off-screen images of the graph in which every pixel records which point — or which link — covers it. Hovering is then a quick lookup: read the pixels right under the cursor, instead of checking every point in the graph.

The point image is drawn smaller than the screen — half resolution, and capped on very large displays. Hover doesn't need pixel-perfect precision, and at full size the image would cost tens of megabytes of GPU memory. Links keep full resolution, because a thin link would otherwise fall between pixels and become hard to hover. Both images are redrawn only when the scene changes, and hover reads them without making anything wait.

Hover does nothing at all while the scene and the cursor are both still, and picking is forgiving: you don't have to hit a point dead-center.

Faster Rendering When Points Overlap

When opaque points overlap, only the one on top is visible. The opaque middles are now drawn first, starting with the topmost point, so the GPU can skip whatever is buried underneath instead of drawing it and painting over it. Soft edges and see-through points follow in a second pass, so the picture looks exactly the same — while heavily overlapping scenes render faster.

It's on by default, and applies while points are fully opaque and highlighting isn't in use — otherwise rendering falls back to the old single pass on its own. Set pointOcclusionCulling: false to switch it off entirely. Live demo: Misc → Point Occlusion Culling.

On-Demand Rendering

Frames are drawn only when something changes, and rendering stops completely when your graph is idle — no GPU, CPU, or battery spent on a static scene. Interactions, config changes, and data updates all wake rendering automatically.

Release v3.3

🎉 What's New

Link Styles: Dashed, Dotted, and Gradient Links

Screen.Recording.2026-07-08.at.7.30.41.PM.mp4

Links can now be dashed or dotted, and colored as a gradient between their endpoint colors. Both combine freely — per link.

import { Graph, LinkStyle } from '@cosmos.gl/graph'
// one value per link, like setPointShapes
graph.setLinkStyles(new Float32Array([LinkStyle.Solid, LinkStyle.Dashed, LinkStyle.Dotted]))
// gradient from source to target point color
</tr></table>

... (truncated)

Commits
  • 3bc6aca 3.4.0
  • 7947034 docs(picking): hover invalidates only the link buffer, not both
  • 37c8175 fix(picking): don't burn a throttle cycle on a failed async issue
  • d166abb docs(history): record the hover-forgiveness point-vs-link semantics change
  • 9718d56 docs(picking): illustrated guide to the screen-space picking buffers
  • af9719d fix(picking): async results must never outlive what they were read from
  • 85e6dae docs(history): record the on-demand composition and rebase follow-ups in the ...
  • 6754b4f fix(picking): keep the render loop alive while a pick readback is in flight
  • fb61edd docs(history): picking entry — gated ID buffers + async readback (points & li...
  • 767d176 perf(picking): change-gate the link index pass; async link hover readback
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @hpcc-js/wasm-graphviz from 1.21.5 to 1.28.0

Release notes

Sourced from @​hpcc-js/wasm-graphviz's releases.

wasm-graphviz: v1.28.0

1.28.0 (2026-07-24)

Features

  • nam-core: Add WebAssembly wrapper for Neural Amp Modeler DSP models (ca2c8ac)
  • update DuckDB version to 1.5.5 in README, tests, and vcpkg configuration (ab79021)

Bug Fixes

  • prevent automatic id attribute synchronization for implicitly created nodes in addEdge (522e4d5)

wasm-graphviz: v1.27.3

1.27.3 (2026-07-22)

Bug Fixes

  • update load and unload methods for consistency and error handling (874c9f3)

wasm-graphviz: v1.27.2

1.27.2 (2026-07-21)

Bug Fixes

  • add /docs/nam-core to .gitignore (2de35d2)

wasm-graphviz: v1.27.1

1.27.1 (2026-07-21)

Bug Fixes

  • graphviz: update graph creation identifiers from 'name' to 'id' for consistency (bbcff19)

wasm-graphviz: v1.27.0

1.27.0 (2026-07-17)

Features

  • enhance Subgraph and Graph classes with additional attributes for nodes, edges, and subgraphs (40e2e4c)

wasm-graphviz: v1.26.0

1.26.0 (2026-07-15)

... (truncated)

Commits
  • 1d7a356 chore: release main (#424)
  • ca2c8ac feat(nam-core): Add WebAssembly wrapper for Neural Amp Modeler DSP models
  • 522e4d5 fix: prevent automatic id attribute synchronization for implicitly created no...
  • ab79021 feat: update DuckDB version to 1.5.5 in README, tests, and vcpkg configuration
  • b4279f0 chore: release main (#423)
  • 874c9f3 fix: update load and unload methods for consistency and error handling
  • 5a6e4ac chore: release main (#422)
  • 2de35d2 fix: add /docs/nam-core to .gitignore
  • cb49500 chore: release main (#421)
  • bbcff19 fix(graphviz): update graph creation identifiers from 'name' to 'id' for cons...
  • Additional commits viewable in compare view

Updates @xyflow/react from 12.10.2 to 12.11.2

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.2

Patch Changes

@​xyflow/react@​12.11.1

Patch Changes

  • #5815 87da45c - Fix FinalConnectionState type so it preserves the discriminated union.

  • #5823 a6afc91 - Update attribution link

  • #5824 6b1dac5 - Do not fire on pane click when connection ends on pane

  • #5818 4ddc2d8 - Provide the shared handle config (connectOnClick, noPanClassName, rfId) through context instead of subscribing to the store in every Handle, so a store update no longer runs a selector once per handle

  • #5817 8df250b - Reduce per-handle work on store updates by returning a shared connection state while no connection is in progress.

  • #5822 a6249de - Return stable reference for edge position when connected node gets deleted

  • Updated dependencies [ceb8604, 87da45c]:

    • @​xyflow/system@​0.0.78

@​xyflow/react@​12.11.0

12.11.0

Minor Changes

  • #5677 e6661de - Add autoPanOnSelection to auto-pan when user drags a selection close to the edge of the viewport.

Patch Changes

... (truncated)

Changelog

Sourced from @​xyflow/react's changelog.

12.11.2

Patch Changes

12.11.1

Patch Changes

  • #5815 87da45c - Fix FinalConnectionState type so it preserves the discriminated union.

  • #5823 a6afc91 - Update attribution link

  • #5824 6b1dac5 - Do not fire on pane click when connection ends on pane

  • #5818 4ddc2d8 - Provide the shared handle config (connectOnClick, noPanClassName, rfId) through context instead of subscribing to the store in every Handle, so a store update no longer runs a selector once per handle

  • #5817 8df250b - Reduce per-handle work on store updates by returning a shared connection state while no connection is in progress.

  • #5822 a6249de - Return stable reference for edge position when connected node gets deleted

  • Updated dependencies [ceb8604, 87da45c]:

    • @​xyflow/system@​0.0.78

12.11.0

Minor Changes

... (truncated)

Commits
  • 3ab66ef chore(packages): bump
  • 01d58b6 Merge pull request #5846 from AlaricBaraou/perf/viewport-imperative-transform
  • 742860c perf(react): skip minimap re-renders when its geometry is unchanged
  • 17c64a1 perf(react): apply the viewport transform imperatively instead of re-renderin...
  • 775bdd6 Merge pull request #5825 from AlaricBaraou/perf/xydrag-draggable-only
  • 576a43d refactor(react): pass nodesDraggable to prevent wrong initial state
  • eedbc81 chore(packages): bump
  • c7bdce4 chore(pane): cleanup
  • cd5ec45 chore(react/pane): cleanup
  • f919daa fix(pane): do not fire pane click when connection ends on pane
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​xyflow/react since your current version.


Updates js-yaml from 4.2.0 to 5.2.3

Changelog

Sourced from js-yaml's changelog.

[5.2.3] - 2026-08-01

Fixed

  • Prevent prototype fallback when resolving tags and mapping entries, #782.
  • Resolve !!timestamp years 0000-0099 correctly, #775.
  • Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
  • Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through present(); dump() and loading are unaffected, #780.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
  • Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

  • Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

... (truncated)

Commits
  • 6740445 5.2.3 released
  • 94e766d Update changelog
  • c3bd7ca Polish previous commit, #780
  • 00209b6 presenter: treat a tab-indented line in a folded scalar as more-indented (#780)
  • 40fcb4f Fix missing mapping values before document markers and reject unpaired mappin...
  • 49280f3 Fix !!timestamp resolution for years 0000-0099, #775
  • 355dc96 fix: prevent prototype fallback in tag and harden object lookups, #782 (than...
  • d524f83 docs: add contributing guidelines
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • Additional commits viewable in compare view

Updates lucide-react from 0.468.0 to 1.31.0

Release notes

Sourced from lucide-react's releases.

Version 1.31.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.30.0...1.31.0

Version 1.30.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

Version 1.29.0

What's Changed

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

Version 1.28.0

... (truncated)

Commits
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • f229f83 chore(depedencies): Update dependencies (#4553)
  • 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
  • 07c885e fix(docs): fix zephyr-cloud URL in readmes
  • 50d8af5 docs(readme): Update readme files (#4320)
  • 653e44b feat(packages): use .mjs for ESM bundles (#4285)
  • 7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
  • dada0a8 fix(lucide-react): Fix dynamic imports (#4210)
  • a6e648a fix(lucide-react): correct client directives in RSC files (#4189)
  • 1f010a3 fix(lucide-react): Fixes provider export and RSC render issues (#4175)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lucide-react since your current version.


Updates monaco-editor from 0.52.2 to 0.56.0

Release notes

Sourced from monaco-editor's releases.

v0.56.0

Changes:

  • #5392: Bump websocket-driver from 0.7.4 to 0.7.5 in /website
  • #5396: Release Monaco Editor 0.56.0
  • #5385: Bump websocket-driver from 0.7.4 to 0.7.5 in /samples
  • #5379: Removes leftover debugger statements.
  • #5376: fixes pipeline
  • #5374: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples
  • #5373: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website
  • #5371: Bump undici from 7.24.7 to 7.28.0
  • #5372: Fixes CI
  • #5363: Bump launch-editor from 2.10.0 to 2.14.1 in /samples
  • #5362: Bump @​babel/core from 7.17.8 to 7.29.6 in /samples/browser-esm-webpack-typescript-react
  • #5361: Bump js-yaml from 4.1.1 to 4.2.0
  • #5360: Bump vite from 7.3.2 to 7.3.5
  • #5358: Bump shell-quote from 1.8.3 to 1.8.4 in /samples
  • #5359: Bump ws from 8.20.1 to 8.21.0 in /monaco-lsp-client
  • #5357: Bump esbuild and vite in /samples/browser-esm-vite-react
  • #5354: Bump shell-quote from 1.8.3 to 1.8.4 in /website
  • #5333: Bump dompurify from 3.2.7 to 3.4.5
  • #5347: Revert "Bump dompurify from 3.2.7 to 3.4.5"
  • #5337: Bump qs from 6.14.2 to 6.15.2
  • #5338: Bump qs and express in /samples
  • #5336: Bump qs and express in /website
  • #5335: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /website
  • #5331: Bump ws from 8.18.3 to 8.20.1 in /monaco-lsp-client
  • #5330: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /samples
  • #5326: Run npm audit fix and update lockfile
  • #5323: Bump postcss from 8.5.6 to 8.5.14 in /samples/browser-esm-vite-react
  • #5322: Bump postcss from 8.5.6 to 8.5.14 in /website
  • #5320: Bump @​babel/plugin-transform-modules-systemjs from 7.17.8 to 7.29.4 in /samples/browser-esm-webpack-typescript-react
  • #5317: Bump fast-uri from 3.1.0 to 3.1.2 in /webpack-plugin
  • #5315: Bump fast-uri from 3.0.6 to 3.1.2 in /samples
  • #5316: Bump fast-uri from 3.1.0 to 3.1.2
  • #5318: Bump fast-uri from 3.1.0 to 3.1.2 in /website
  • #5319: Bump fast-uri from 3.1.0 to 3.1.2 in /samples/browser-esm-webpack-typescript-react
  • #5313: Bump postcss from 8.4.31 to 8.5.13 in /samples
  • #5308: Bump postcss from 8.5.6 to 8.5.12
  • #5306: Bump postcss from 8.4.31 to 8.5.10 in /webpack-plugin
  • #5301: Bump follow-redirects from 1.15.9 to 1.16.0 in /samples
  • #5300: Bump follow-redirects from 1.15.11 to 1.16.0 in /website
  • #5299: Bump follow-redirects from 1.15.6 to 1.16.0
  • #5295: Bump vite from 5.4.21 to 6.4.2 in /samples/browser-esm-vite-react
  • #5293: Bump lodash from 4.17.23 to 4.18.1 in /website
  • #5292: Bump lodash from 4.17.23 to 4.18.1 in /samples

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.56.0]

Breaking Changes

  • Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:
    • all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;
    • all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;
    • the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.
  • Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.
  • Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

  • Adds editor.doubleClickSelectsBlock.
  • Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.
  • Adds offWhenInlineCompletions to QuickSuggestionsValue.
  • Adds model and provider option support to inline completion providers.
  • Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.
  • Adds advanced-external and advanced-wasm diff algorithms.
  • Exposes typed native LSP client and transport APIs.

Fixes

  • Treats Markdown returned by language servers as untrusted (#5280).
  • Updates the editor core to the version used by 0.56.0-dev-20260625.

[0.55.1]

  • Fixes missing language exports (monaco.json/typescript/...) due to wrong "types" path - #5123

[0.55.0]

Breaking Changes

  • Moves nested namespaces (languages.css, languages.html, languages.json, languages.typescript) to top level namespaces (css, html, json, typescript) to simplify the build process and align with typescript recommendations.

New Features

  • Adds native LSP support (see new lsp namespace).

Bug Fixes

  • Updates dompurify to 3.2.7

[0.54.0]

  • Adds option editor.mouseMiddleClickAction
  • Various bug fixes

[0.53.0]

  • ⚠️ This release deprecates the AMD build and ships with significant changes of the AMD build. The AMD build will still be shipped for a while, but we don't offer support for it anymore. Please migrate to the ESM build.

... (truncated)

Commits
  • 13f0c87 Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)
  • b5f23a3 Merge pull request #5396 from microsoft/hediet/b/release-0.56.0
  • 9d053ab Improve Monaco Editor 0.56.0 changelog
  • 0ba33d0 Release Monaco Editor 0.56.0
  • 6d961b1 Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)
  • d8c9ff0 Removes leftover debugger statements. (#5379)
  • 59285ab fixes pipeline (#5376)
  • aaf58db Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)
  • d8ac38e Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)
  • 874af57 Bump undici from 7.24.7 to 7.28.0 (#5371)
  • Additional commits viewable in compare view

Updates react from 18.3.1 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

19.2.3 (Dec 11, 2025)

React Server Components

19.2.2 (Dec 11, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 18.3.28 to 19.2.18

Commits

Updates react-dom from 18.3.1 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 2, 2026
qiansheng91
qiansheng91 reviewed Jul 21, 2026
View reviewed changes

@qiansheng91 qiansheng91 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Reviewed PR #97: chore(deps): bump the web group in /web with 15 updates

The changes appear reasonable. No critical issues found in the diff.

Automated review by github-manager-bot

@qiansheng91

qiansheng91 commented Jul 25, 2026

Copy link
Copy Markdown
Collaborator

Issue Evaluation

Category: enhancement | Status: Evaluated

Thank you for this suggestion. It has been classified as an enhancement request.

Assessment:

  • This enhancement will be reviewed for feasibility and scope
  • Community feedback is welcome
  • If aligned with project goals, a spec and implementation PR may follow

Automated evaluation by github-manager-bot

@qiansheng91 qiansheng91 added the enhancement New feature or request label Jul 25, 2026
@qiansheng91

qiansheng91 commented Jul 30, 2026

Copy link
Copy Markdown
Collaborator

Issue Evaluation

Category: question

Thank you for your question. This has been flagged for maintainer review.

For more details, refer to the project documentation.

Automated evaluation by github-manager-bot

@qiansheng91 qiansheng91 added the question Further information is requested label Jul 30, 2026
@qiansheng91

qiansheng91 commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

Issue Evaluation

Category: needs-triage | Status: Needs Manual Review

Thank you @ for this issue. The automated classifier could not determine a clear category.

A maintainer will review and classify this issue manually.

Automated evaluation by github-manager-bot

@qiansheng91

qiansheng91 commented Aug 5, 2026

Copy link
Copy Markdown
Collaborator

Issue Evaluation

Category: triage | Status: Needs Classification

This issue has been scanned but could not be automatically classified with high confidence. A maintainer review is recommended.

Automated evaluation by github-manager

@qiansheng91

qiansheng91 commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

Issue Evaluation

Category: enhancement | Status: Evaluated

Thank you for the suggestion. This has been classified as an enhancement/dependency update.

Assessment:

  • This will be reviewed by maintainers for feasibility and scope
  • If accepted, it may be implemented in a future release

Automated evaluation by github-manager-bot

@qiansheng91

qiansheng91 commented Aug 9, 2026

Copy link
Copy Markdown
Collaborator

Issue Evaluation

Category: triage | Status: Needs Classification

This issue has been received and is awaiting manual classification by a maintainer.

Automated evaluation by github-manager-bot

@qiansheng91

qiansheng91 commented Aug 10, 2026

Copy link
Copy Markdown
Collaborator

Issue Evaluation

Category: bug | Status: Under Review

Thank you for reporting this issue. It has been classified as a potential bug and flagged for code-level verification.

A maintainer or automated agent will verify this against the current codebase. If confirmed, an automated fix proposal may be generated.

Automated evaluation by github-manager-bot

@qiansheng91 qiansheng91 added the bug Something isn't working label Aug 10, 2026
@dependabot
chore(deps): bump the web group across 1 directory with 15 updates
8dad2c5 
Bumps the web group with 15 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@cosmos.gl/graph](https://github.com/cosmosgl/graph) | `2.6.4` | `3.4.0` |
| [@hpcc-js/wasm-graphviz](https://github.com/hpcc-systems/hpcc-js-wasm) | `1.21.5` | `1.28.0` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.10.2` | `12.11.2` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `5.2.3` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.468.0` | `1.31.0` |
| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.52.2` | `0.56.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.28` | `19.2.18` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.8` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.7` | `19.2.4` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.16.0` | `8.3.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.7.0` | `6.0.5` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.3` | `8.2.1` |



Updates `@cosmos.gl/graph` from 2.6.4 to 3.4.0
- [Release notes](https://github.com/cosmosgl/graph/releases)
- [Commits](cosmosgl/graph@2.6.4...v3.4.0)

Updates `@hpcc-js/wasm-graphviz` from 1.21.5 to 1.28.0
- [Release notes](https://github.com/hpcc-systems/hpcc-js-wasm/releases)
- [Changelog](https://github.com/hpcc-systems/hpcc-js-wasm/blob/main/CHANGELOG.md)
- [Commits](hpcc-systems/hpcc-js-wasm@wasm-graphviz-v1.21.5...wasm-graphviz-v1.28.0)

Updates `@xyflow/react` from 12.10.2 to 12.11.2
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.2/packages/react)

Updates `js-yaml` from 4.2.0 to 5.2.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.2.0...5.2.3)

Updates `lucide-react` from 0.468.0 to 1.31.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.31.0/packages/lucide-react)

Updates `monaco-editor` from 0.52.2 to 0.56.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](microsoft/monaco-editor@v0.52.2...v0.56.0)

Updates `react` from 18.3.1 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 18.3.28 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 18.3.1 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/react-dom` from 18.3.7 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-router` from 7.16.0 to 8.3.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@8.3.0/packages/react-router)

Updates `@playwright/test` from 1.60.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.1)

Updates `@types/react` from 18.3.28 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 18.3.7 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 4.7.0 to 6.0.5
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vite` from 6.4.3 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite)

---
updated-dependencies:
- dependency-name: "@cosmos.gl/graph"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: "@hpcc-js/wasm-graphviz"
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: "@xyflow/react"
  dependency-version: 12.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: js-yaml
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: lucide-react
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: monaco-editor
  dependency-version: 0.55.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: react-router
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: vite
  dependency-version: 8.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the web group in /web with 15 updates chore(deps): bump the web group across 1 directory with 15 updates Aug 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/web-82f1364ba5 branch from 67f2f03 to 8dad2c5 Compare August 12, 2026 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@qiansheng91 qiansheng91 qiansheng91 left review comments

Assignees

No one assigned

Labels

bug Something isn't working dependencies Pull requests that update a dependency file enhancement New feature or request javascript Pull requests that update javascript code question Further information is requested

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@qiansheng91