You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Remove stale/invalid unpkg field from package.json. This was removed from other packages with the release of v7 but missed in the react-router-dom re-export package (#15075)
Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)
Fixed
Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)
Fixed
Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:
awaitusinghar=awaitcontext.tracing.startHar('trace.har');constpage=awaitcontext.newPage();awaitpage.goto('https://playwright.dev');// HAR is finalized when `har` goes out of scope.
🪝 Drop API
New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:
New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:
test('does not publish to the shared page',async({ page })=>{awaitpage.route('**/publish',route=>{test.abort('Tests must not publish to the shared page. Use the `clone` option.');returnroute.abort();});// ...});
New APIs
Browser, Context and Page
... (truncated)
Commits
87bb9dd cherry-pick(#40747): fix(yauzl): vendor yauzl with destroy-lifecycle fix
9a9c51c cherry-pick(#40733): chore(electron): revert #40184 (move Electron API to a s...
4b3b628 cherry-pick(#40736): Revert "feat(electron): add timeout option to electronAp...
Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)
Fixed
Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)
Fixed
Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
While Codacy reports the project is 'up to standards', this PR introduces 21 dependency updates including major bumps to core libraries like React 19 and Tailwind 4. A significant incompatibility exists between the updated vite version and the @vitejs/plugin-react version provided, which will likely cause build or development server failures.
Furthermore, the PR lacks any verification that these major upgrades are compatible with the existing codebase. Bundling this many updates into a single group makes isolation of failures difficult. The review recommends addressing the Vite plugin version mismatch and pinning dependencies to exact versions to meet security best practices before merging.
About this PR
The PR includes major version bumps (React 19, Tailwind 4) but lacks verification or smoke tests to confirm compatibility with the existing UI components and styling.
Bundling 21 dependency updates into a single group significantly increases the difficulty of isolating causes for regressions. For future updates, consider smaller, more focused dependency groups.
Test suggestions
Verify that the UI builds successfully with the upgraded dependencies.
Execute existing unit and integration tests to ensure no regressions were introduced by dependency version changes.
Perform a smoke test of the UI specifically checking for Lucide icon rendering and Tailwind utility class application (due to major/minor bumps in those packages).
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that the UI builds successfully with the upgraded dependencies.
2. Execute existing unit and integration tests to ensure no regressions were introduced by dependency version changes.
3. Perform a smoke test of the UI specifically checking for Lucide icon rendering and Tailwind utility class application (due to major/minor bumps in those packages).
The reason will be displayed to describe this comment to others. Learn more.
🔴 HIGH RISK
The @vitejs/plugin-react version (^6.0.2) appears to be incompatible with vite (^8.0.16). Major Vite releases usually require a corresponding major version update for the React plugin to function correctly. Try running the following prompt in your coding agent:
Update @vitejs/plugin-react and any other Vite-related plugins in ui/package.json to versions that are compatible with Vite 8.0.16, ensuring that peer dependency requirements are satisfied.
The reason will be displayed to describe this comment to others. Learn more.
🟡 MEDIUM RISK
Multiple dependencies in this file are using variant versions. To comply with security best practices and ensure total build reproducibility, consider pinning all dependencies to their exact versions.
Try running the following prompt in your IDE agent:
Scan ui/package.json and remove the caret (^) prefix from all version strings to pin them to exact versions as recommended by the security analysis.
The reason will be displayed to describe this comment to others. Learn more.
🟡 MEDIUM RISK
Suggestion: Specify the exact version for 'react' to eliminate variability in dependency resolution and harden the supply chain against malicious upstream updates. This ensures that the version tested is exactly the one deployed, regardless of environment configuration.
dependabotBot
changed the title
build(deps): bump the ui-dependencies group in /ui with 21 updates
build(deps): bump the ui-dependencies group across 1 directory with 21 updates
Jun 2, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code
0 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
dependabot
Bot
added
dependencies
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
Bumps the ui-dependencies group with 21 updates in the /ui directory:
5.100.15.100.143.4.13.4.71.11.01.17.08.5.108.5.1519.2.519.2.619.2.1419.2.1519.2.519.2.67.14.27.16.03.5.03.6.04.2.44.3.01.59.11.60.04.2.44.3.025.6.025.9.16.0.16.0.24.1.54.1.810.2.110.4.117.5.017.6.02.14.22.14.68.59.08.60.08.0.108.0.154.1.54.1.8Updates
@tanstack/react-queryfrom 5.100.1 to 5.100.14Release notes
Sourced from @tanstack/react-query's releases.
... (truncated)
Changelog
Sourced from @tanstack/react-query's changelog.
Commits
ba6e7beci: Version Packages (#10767)ed20b6dfix(react): do not go into optimistic fetching state when not subscribed (#10...05cf2bcci: Version Packages (#10758)d423168fix(query-core): use built-in NoInfer for generic indexed-access types (#10593)5ff4f69ci: Version Packages (#10755)3e85350ci: Version Packages (#10706)9d2692cci: Version Packages (#10695)74fa05echore(tsconfig.json): narrow 'include' pattern to prevent TS6053 race conditi...8c3d523ci: Version Packages (#10630)9800c8fci: Version Packages (#10623)Updates
dompurifyfrom 3.4.1 to 3.4.7Release notes
Sourced from dompurify's releases.
Commits
ca30f07release: 3.4.7 (#1414)bb7739erelease: 3.4.6 (#1394)011b0c7release: 3.4.5 (#1382)5817ad9release: 3.4.4 (#1374)520edb0release: 3.4.3 (#1352)6f67fd3Sync/3.4.2 (#1322)Updates
lucide-reactfrom 1.11.0 to 1.17.0Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
07c885efix(docs): fix zephyr-cloud URL in readmes50d8af5docs(readme): Update readme files (#4320)Updates
postcssfrom 8.5.10 to 8.5.15Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
eae46dbRelease 8.5.15 version79508ffUpdate CI actionsb128e21Speed up declaration parsing by avoiding creating new array on each token9825dcaFix code format55789c8Update dependencies84fbbe9Install older pnpm action for old Node.js9f860bdRevert pnpm action for old Node.js0877198Update CI actionsb2d1a33Fix linter warnings0700dacMerge pull request #2088 from rootvector2/add-oss-fuzz-harnessUpdates
reactfrom 19.2.5 to 19.2.6Release notes
Sourced from react's releases.
Commits
eaf3e95Version 19.2.6Updates
@types/reactfrom 19.2.14 to 19.2.15Commits
Updates
react-domfrom 19.2.5 to 19.2.6Release notes
Sourced from react-dom's releases.
Commits
eaf3e95Version 19.2.6Updates
react-router-domfrom 7.14.2 to 7.16.0Changelog
Sourced from react-router-dom's changelog.
Commits
8984d23Release v7.16.0 (#15105)3ed77afchore: formate96962bfix: remove stale unpkg field from react-router-dom (#15075)587d08fRelease v7.15.1 (#15038)97c8de7Release v7.15.0 (#15018)Updates
tailwind-mergefrom 3.5.0 to 3.6.0Release notes
Sourced from tailwind-merge's releases.
Commits
d54f7e5v3.6.0638871aUpdate README to add info about Tailwind CSS v4.3 support39fc7b5Revert "v3.6.0"bd8390fv3.6.0802877cadd v3.6.0 changeloga35fedaMerge pull request #665 from dcastil/renovate/rollup-plugin-babel-7.x940389cMerge pull request #667 from dcastil/renovate/release-drafter-release-drafter...005af6dpin to specific version5816cedimplement breaking changes17041e1Merge pull request #676 from dcastil/dependabot/npm_and_yarn/babel/plugin-tra...Updates
tailwindcssfrom 4.2.4 to 4.3.0Release notes
Sourced from tailwindcss's releases.
Changelog
Sourced from tailwindcss's changelog.
Commits
588bd734.3.0 (#20023)59936c6Addtab-*utilities (#20022)90a2373addzoom-*utilities (#20020)2e1ccf7Addscrollbar-gutter-*utilities (#20018)754e751Use non-existing example in tests (#20021)12eb5aeCleanup noisy test output (#20015)4255671Improve snapshot tests (#20013)8c77989Ensure math operators are surrounded by whitespace in arbitrary values (#20011)b4db3b9Add scrollbar-width and scrollbar-color utilities (#19981)08cad84Support--default(…)in--value(…)and--modifier(…)to support fallbac...Updates
@playwright/testfrom 1.59.1 to 1.60.0Release notes
Sourced from @playwright/test's releases.
... (truncated)
Commits
87bb9ddcherry-pick(#40747): fix(yauzl): vendor yauzl with destroy-lifecycle fix9a9c51ccherry-pick(#40733): chore(electron): revert #40184 (move Electron API to a s...4b3b628cherry-pick(#40736): Revert "feat(electron): add timeout option to electronAp...f869f96chore: bump version to v1.60.0 (#40714)7eb6918cherry-pick(#40710): docs: release notes v1.60118d2aacherry-pick(#40693): chore(python): formdata path type54012f5chore(deps): bump ip-address and express-rate-limit (#40680)9fa531dfix(screencast): unblock frame ack when an async client disconnects (#40674)3649db5chore(mcp): bump default extension protocol to v2 (#40678)bb6c009chore(extension): mark 0.2.1 (#40679)Updates
@tailwindcss/postcssfrom 4.2.4 to 4.3.0Release notes
Sourced from @tailwindcss/postcss's releases.
Changelog
Sourced from @tailwindcss/postcss's changelog.