Bump the major group across 1 directory with 40 updates

[dependabot]

Bumps the major group with 39 updates in the / directory:

Package	From	To
@fortawesome/fontawesome-svg-core	6.7.2	7.0.0
@fortawesome/free-brands-svg-icons	6.7.2	7.0.0
@fortawesome/free-solid-svg-icons	6.7.2	7.0.0
@fortawesome/react-fontawesome	0.2.2	3.0.0
@headlessui/react	1.7.19	2.2.7
@tweenjs/tween.js	23.1.3	25.0.0
@xstate/react	4.1.3	6.0.0
diff	7.0.0	8.0.2
@types/diff	7.0.2	8.0.0
openid-client	5.7.1	6.6.4
react	18.3.1	19.1.1
@types/react	18.3.20	19.1.11
react-dom	18.3.1	19.1.1
@types/react-dom	18.3.6	19.1.7
react-hotkeys-hook	4.6.2	5.1.0
react-router-dom	6.30.0	7.8.2
ua-parser-js	1.0.40	2.0.4
web-vitals	3.5.2	5.1.0
yargs	17.7.2	18.0.0
@biomejs/biome	1.9.4	2.2.2
@electron/fuses	1.8.0	2.0.0
@electron/notarize	2.5.0	3.0.2
@testing-library/jest-dom	5.17.0	6.8.0
@testing-library/react	15.0.7	16.3.0
@types/node	22.14.1	24.3.0
@types/uuid	9.0.8	10.0.0
@vitejs/plugin-react	4.4.1	5.0.1
cross-env	7.0.3	10.0.0
electron	34.5.1	37.3.1
eslint	8.57.1	9.34.0
eslint-plugin-jest	28.11.0	29.0.1
happy-dom	17.4.4	18.0.1
jest	29.7.0	30.0.5
@types/jest	29.5.14	30.0.0
jest-environment-jsdom	29.7.0	30.0.5
pixelmatch	5.3.0	7.1.0
tailwindcss	3.4.17	4.1.12
vite	5.4.19	7.1.3
vite-tsconfig-paths	4.3.2	5.1.4

Updates @fortawesome/fontawesome-svg-core from 6.7.2 to 7.0.0

Release notes

Sourced from @​fortawesome/fontawesome-svg-core's releases.

Release 7.0.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• 14189d0 Release 7.0.0 (#20715)
• 8ff114b Initial commit for 7
• See full diff in compare view

Updates @fortawesome/free-brands-svg-icons from 6.7.2 to 7.0.0

Release notes

Sourced from @​fortawesome/free-brands-svg-icons's releases.

Release 7.0.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• 14189d0 Release 7.0.0 (#20715)
• 8ff114b Initial commit for 7
• See full diff in compare view

Updates @fortawesome/free-solid-svg-icons from 6.7.2 to 7.0.0

Release notes

Sourced from @​fortawesome/free-solid-svg-icons's releases.

Release 7.0.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• 14189d0 Release 7.0.0 (#20715)
• 8ff114b Initial commit for 7
• See full diff in compare view

Updates @fortawesome/react-fontawesome from 0.2.2 to 3.0.0

Release notes

Sourced from @​fortawesome/react-fontawesome's releases.

Release 3.0.0

BREAKING

• Dropped support for end-of-life FontAwesome versions (below v6), Node versions (below 20.x) and React versions (below 18.x)
• Dropped support for browser versions that don't support the ES2020 standard, namely JavaScript built-in: globalThis

Changes

• Rewrote the entire library from plain JavaScript to TypeScript
• Replaced rollup with tsup for providing both ESM and CJS exports from one TypeScript source
• Removed prop-types in favour of colocated typings for React component props
• Added better type definitions to each prop including examples of usage
• Upgraded eslint from v6 to v9, rewrote config as Flat Config, modernised ESLint config, plugins and rules
• Refactored all unit tests from the deprecated react-test-renderer to the industry standard @testing-library/react
• Upgraded all other development dependencies to latest versions as of release date
• Optimised FontAwesomeIcon by reducing per-render function calls and memory allocations
• Optimised classList function by removing runtime semver checks and array operations
• Optimised converter with a full rewrite for significant performance increases (~70%)
• Moved inline class strings from getClassListFromProps to pre-computed maps

Bug Fixes

• Fixed accessibility ID generation (titleId, maskId) for SSR ensuring a consistent ID across server and client renders (#93, #550, #573)
• Fixed TypeScript errors when styling duotone icons with CSS variables (#509)
• Fixed aria-hidden so it is false if there is a non-empty aria-label attribute (#126)
• Resolved large number of npm audit issues by removing and updating dependencies

New Contributors

• @​charles4221 made their first contribution in FortAwesome/react-fontawesome#581

Full Changelog: FortAwesome/react-fontawesome@0.2.6...3.0.0

Release 0.2.6

Fixed

• check for existence of process before reading process.env (#585)

Full Changelog: FortAwesome/react-fontawesome@0.2.5...0.2.6

Release 0.2.5

What's Changed

• #583 - fix interface definition by @​dom-the-dev in FortAwesome/react-fontawesome#584

New Contributors

• @​dom-the-dev made their first contribution in FortAwesome/react-fontawesome#584

Full Changelog: FortAwesome/react-fontawesome@0.2.4...0.2.5

Release 0.2.4

What's Changed

... (truncated)

Changelog

Sourced from @​fortawesome/react-fontawesome's changelog.

3.0.0 - 2025-08-22

BREAKING

• Dropped support for end-of-life FontAwesome versions (below v6), Node versions (below 20.x) and React versions (below 18.x)
• Dropped support for browser versions that don't support the ES2020 standard, namely JavaScript built-in: globalThis

Changes

• Rewrote the entire library from plain JavaScript to TypeScript
• Replaced rollup with tsup for providing both ESM and CJS exports from one TypeScript source
• Removed prop-types in favour of colocated typings for React component props
• Added better type definitions to each prop including examples of usage
• Upgraded eslint from v6 to v9, rewrote config as Flat Config, modernised ESLint config, plugins and rules
• Refactored all unit tests from the deprecated react-test-renderer to the industry standard @testing-library/react
• Upgraded all other development dependencies to latest versions as of release date
• Optimised FontAwesomeIcon by reducing per-render function calls and memory allocations
• Optimised classList function by removing runtime semver checks and array operations
• Optimised converter with a full rewrite for significant performance increases (~70%)
• Moved inline class strings from getClassListFromProps to pre-computed maps

Bug Fixes

• Fixed accessibility ID generation (titleId, maskId) for SSR ensuring a consistent ID across server and client renders (#93, #550, #573)
• Fixed TypeScript errors when styling duotone icons with CSS variables (#509)
• Fixed aria-hidden so it is false if there is a non-empty aria-label attribute (#126)
• Resolved large number of npm audit issues by removing and updating dependencies

---

0.2.x

Previous 0.2.x change log available here

---

0.1.x

Previous 0.1.x change log available here

---

Commits

• 7e7375b Release 3.0.0
• e0ac370 fix: no named import of package.json versions
• 67e412b Merge pull request #587 from FortAwesome/fix/ci-auth-issue
• b009168 test(converter): more leeway on memoryIncrease tests
• 34310a1 ci: fix auth issue with explicit env config
• b82c3cc Merge pull request #581 from charles4221/feat/typescript-rewrite
• 7786a8f chore: implement final PR feedback
• 4bd7b57 chore: build as bundle instead of split modules
• 6f57fc7 fix: wrap process.env calls in guards
• fce9a20 feat: rewrite converter for significant perf increase
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lordofbacon, a new releaser for @​fortawesome/react-fontawesome since your current version.

Updates @headlessui/react from 1.7.19 to 2.2.7

Release notes

Sourced from @​headlessui/react's releases.

@​headlessui/react@​v2.2.7

Fixed

• Fix incorrect double invocation of menu items, listbox options and combobox options (#3766)
• Fix memory leak in SSR environment (#3767)
• Ensure programmatic .click() on MenuButton ref works (#3768)
• Don't activate hovered items while using the keyboard (#3769)

@​headlessui/react@​v2.2.6

Fixed

• Fix immediately closing Listbox by requiring some cursor movement (#3762)

@​headlessui/react@​v2.2.5

Fixed

• Fix listbox closing immediately after opening on touch devices (#3755)

@​headlessui/react@​v2.2.4

Fixed

• Fix Combobox error (unexpected undefined) when using virtual mode (#3734)

@​headlessui/react@​v2.2.3

Added

• Add a quick trigger action to the Menu, Listbox and Combobox components (#3700)

Fixed

• Fix clicking Label component should open <Input type="file"> (#3707)
• Ensure clicking on interactive elements inside Label component works (#3709)
• Fix focus not returned to SVG Element (#3704)
• Fix Listbox not focusing first or last option on ArrowUp / ArrowDown (#3721)
• Performance improvement: only re-render top-level component when nesting components e.g.: Menu inside a Dialog (#3722)
• Fix closing Menu when other Menu is opened (#3726)

@​headlessui/react@​v2.2.2

Fixed

• Improve Menu component performance (#3685)
• Improve Listbox component performance (#3688)
• Improve Combobox component performance (#3697)
• Open Menu and Listbox on mousedown (#3689)
• Fix Transition component from incorrectly exposing the Closing state (#3696)

@​headlessui/react@​v2.2.1

Added

• Accept tabIndex on the Checkbox component (#3645)

... (truncated)

Changelog

Sourced from @​headlessui/react's changelog.

[2.2.7] - 2025-07-30

Fixed

• Fix incorrect double invocation of menu items, listbox options and combobox options (#3766)
• Fix memory leak in SSR environment (#3767)
• Ensure programmatic .click() on MenuButton ref works (#3768)
• Don't activate hovered items while using the keyboard (#3769)

[2.2.6] - 2025-07-24

Fixed

• Fix immediately closing Listbox by requiring some cursor movement (#3762)

[2.2.5] - 2025-07-23

Fixed

• Fix listbox closing immediately after opening on touch devices (#3755)

[2.2.4] - 2025-05-20

Fixed

• Fix Combobox error (unexpected undefined) when using virtual mode (#3734)

[2.2.3] - 2025-05-12

Added

• Add a quick trigger action to the Menu, Listbox and Combobox components (#3700)

Fixed

• Fix clicking Label component should open <Input type="file"> (#3707)
• Ensure clicking on interactive elements inside Label component works (#3709)
• Fix focus not returned to SVG Element (#3704)
• Fix Listbox not focusing first or last option on ArrowUp / ArrowDown (#3721)
• Performance improvement: only re-render top-level component when nesting components e.g.: Menu inside a Dialog (#3722)
• Fix closing Menu when other Menu is opened (#3726)

[2.2.2] - 2025-04-17

Fixed

• Improve Menu component performance (#3685)
• Improve Listbox component performance (#3688)
• Open Menu and Listbox on mousedown (#3689)
• Fix Transition component from incorrectly exposing the Closing state (#3696)

... (truncated)

Commits

• 2de2779 2.2.7 - @​headlessui/react
• 7d655ba Ensure mouse doesn't active item/option while navigating using the keyboard (...
• af5b0b4 Ensure buttonRef.current.click() works (#3768)
• a12f9f2 Fix memory leak in SSR environment (#3767)
• 4b505e8 Fix incorrect double invocation of menu items (#3766)
• 51b5bf6 2.2.6 - @​headlessui/react
• 0a14649 Improve quick release by requiring some cursor movement (#3762)
• 2ff307c 2.2.5 - @​headlessui/react
• 3b7c0b6 Fix listbox closing immediately after opening on touch devices (#3755)
• 38986df update READMEs
• Additional commits viewable in compare view

Updates @tweenjs/tween.js from 23.1.3 to 25.0.0

Release notes

Sourced from @​tweenjs/tween.js's releases.

v25.0.0 - end of the end

BREAKING: no longer auto-start tweens by default when calling tween.update(). To restore previous behavior for the whole app, set the static Tween.autoStartOnUpdate property to true.

fix: make the end() method work better by setting the end time to start + duration instead of Infinity.

Full Changelog: tweenjs/tween.js@v24.0.0...v25.0.0

v24.0.0 - groupies!

This release finally deprecates usage of TWEEN as a default Group. All new Tweens now default to having no group, and must be explicitly added to a group if desired. Plus some other improvements to related to groups, including breaking changes (see below for all details and how to migrate if affected).

What's Changed

• Tiny readme fix for import-map example code. by @​Bug-Reaper in tweenjs/tween.js#685
• do not default to global TWEEN group for new Tweens, do not auto-add/remove tweens from groups, and update docs accordingly by @​trusktr in tweenjs/tween.js#688

New Contributors

• @​Bug-Reaper made their first contribution in tweenjs/tween.js#685

---

More Details

  feat: do not automatically add/remove a tween to/from its associated group, and do not automatically add new Tweens to the global TWEEN group by default.

feat: the tween.group(group) method now has a reciprocal tween.remove() method that will remove a tween from its associated group, and unassociate the group. tween.group() without an arg is no longer valid, see breaking changes and migration below.

fix: when a tween is stopped before its end time, do not allow its update method to continue, therefore preventing logic (f.e. repeat logic) from being triggered

docs: improved the docs, adding some missing information, removing all examples of the global TWEEN group which has been deprecated, and adding docs on how to manage groups of tweens. Also updated samples to use import syntax for importing Tween, avoiding the use of the TWEEN UMD global variable which has been deprecated.

feat: A new Group.allStopped() method returns true if all tweens in a group are not playing (i.e. stopped, and not paused), otherwise false. Useful for stopping an animation loop once all tweens in a group have finished their animation.

deprecated: Methods on TWEEN that come from Group are now deprecated to be removed in a future major version. Migrate forward by making a new Group instead of using TWEEN as a group.

deprecated: The UMD script that creates a global TWEEN variable is deprecated to be removed in a future major version.

deprecated: The CommonJS build is deprecated to be removed in a future major version.

BREAKING:

• Tweens are no longer automatically added or removed from groups by default when you call any Tween methods such as start(), stop(), or pause(), and the preserve parameter to Group.update() now defaults to true and is deprecated to be removed in a future major version.
  • MIGRATION: To keep old behavior for a while, explicitly call group.update() with false for the second parameter. To migrate forward, do not rely on automatic add/remove of tweens, and instead add/remove tweens to/from groups manually.
• Group.update() no longer returns a boolean indicating if all tweens have been removed.
  • MIGRATION: Don't rely on auto-add/remove to/from groups. This boolean return was previously useful for stopping an animation loop once all tweens were finished animating. Instead, use the new Group.allStopped() method to check if all tweens in a group are stopped in order to determine whether or not to continue an animation loop.
• The second group parameter to Tween.constructor now defaults to undefined instead of the global TWEEN group. Additionally it accepts a value of true to restore the old default behavior. The true value is deprecated and will be removed in a future major version.
  • MIGRATION: For the time being the parameter can be set to true to restore the old behavior. To migrate forward, use tween.group(group) or group.add(tween) instead.
• The argless tween.group() signature has been removed.

... (truncated)

Commits

• eb07dd2 v25.0.0
• 79fd510 BREAKING: no longer auto-start tweens by default when calling tween.update()....
• c92f761 v24.0.0
• 20169e2 Merge pull request #688 from tweenjs/default-to-no-global-group
• f28f069 feat: do not automatically add/remove a tween to/from its associated group
• 2469f1c Merge pull request #685 from Bug-Reaper/patch-1
• 68d91ce ✍️ : Adds missing letter "m" in importmap example.
• 0b1d4cf ✍️ : Fix path for module-map example (missing dot)
• See full diff in compare view

Updates @xstate/react from 4.1.3 to 6.0.0

Release notes

Sourced from @​xstate/react's releases.

@​xstate/react@​6.0.0

Patch Changes

• Updated dependencies [e07a7cd8462473188a0fb646a965e61be1ce6ae3]:
  • xstate@5.20.0

@​xstate/react@​5.0.5

Patch Changes

• Updated dependencies [479c74b83fa77c57c48f54cf0e9dcfab5fe6cae5]:
  • xstate@5.19.4

@​xstate/react@​5.0.4

Patch Changes

• Updated dependencies [b453b2d72ba12d0fe46a995f9ccced8000fd0cc9]:
  • xstate@5.19.3

@​xstate/react@​5.0.3

Patch Changes

• #5223 9e1de554c4ebf49997b717fada540951d01f511c Thanks @​davidkpiano! - Added React 19 as a peer dependency.

@​xstate/react@​5.0.2

Patch Changes

• Updated dependencies [d99df1d8f4fe49145c9974465b65028bf19b365f]:
  • xstate@5.19.2

@​xstate/react@​5.0.1

Patch Changes

• Updated dependencies [bf6119a7310a878afbf4f5b01f5e24288f9a0f16]:
  • xstate@5.19.1

@​xstate/react@​5.0.0

Patch Changes

• #5109 d67b71dd25d457a2a59f2c943db13f50fab7ec3d Thanks @​davidkpiano! - Add React 19 as a peer dependency

• Updated dependencies [8c4b70652acaef2702f32435362e4755679a516d]:

  • xstate@5.19.0

Commits

• f10575a Version Packages (#5294)
• acc285d Move to vitest (updated) (#5293)
• e07a7cd [core] Move graph/test utils to core (#5287)
• dc4d511 Fix lockfile issue
• f9d04bb Update examples and templates
• cc5fa24 Version Packages (#5290)
• 9d375d6 refactor: fix typos (#5292)
• 479c74b Remove outdated context parameter reference from provide method (#5289)
• 77d7dc5 Version Packages (#5285)
• d8a3456 Synchronize the alien-signals algorithm to 2.0.4 (#5280)
• Additional commits viewable in compare view

Updates diff from 7.0.0 to 8.0.2

Changelog

Sourced from diff's changelog.

8.0.2

• #616 Restored compatibility of diffSentences with old Safari versions. This was broken in 8.0.0 by the introduction of a regex with a lookbehind assertion; these weren't supported in Safari prior to version 16.4.
• #612 Improved tree shakeability by marking the built CJS and ESM packages with sideEffects: false.

8.0.1

• #610 Fixes types for diffJson which were broken by 8.0.0. The new bundled types in 8.0.0 only allowed diffJson to be passed string arguments, but it should've been possible to pass either strings or objects (and now is). Thanks to Josh Kelley for the fix.

8.0.0

• #580 Multiple tweaks to diffSentences:
  • tokenization no longer takes quadratic time on pathological inputs (reported as a ReDOS vulnerability by Snyk); is now linear instead
  • the final sentence in the string is now handled the same by the tokenizer regardless of whether it has a trailing punctuation mark or not. (Previously, "foo. bar." tokenized to ["foo.", " ", "bar."] but "foo. bar" tokenized to ["foo.", " bar"] - i.e. whether the space between sentences was treated as a separate token depended upon whether the final sentence had trailing punctuation or not. This was arbitrary and surprising; it is no longer the case.)
  • in a string that starts with a sentence end, like "! hello.", the "!" is now treated as a separate sentence
  • the README now correctly documents the tokenization behaviour (it was wrong before)
• #581 - fixed some regex operations used for tokenization in diffWords taking O(n^2) time in pathological cases
• #595 - fixed a crash in patch creation functions when handling a single hunk consisting of a very large number (e.g. >130k) of lines. (This was caused by spreading indefinitely-large arrays to .push() using .apply or the spread operator and hitting the JS-implementation-specific limit on the maximum number of arguments to a function, as shown at https://stackoverflow.com/a/56809779/1709587; thus the exact threshold to hit the error will depend on the environment in which you were running JsDiff.)
• #596 - removed the merge function. Previously JsDiff included an undocumented function called merge that was meant to, in some sense, merge patches. It had at least a couple of serious bugs that could lead to it returning unambiguously wrong results, and it was difficult to simply "fix" because it was unclear precisely what it was meant to do. For now, the fix is to remove it entirely.
• #591 - JsDiff's source code has been rewritten in TypeScript. This change entails the following changes for end users:

  • the diff package on npm now includes its own TypeScript type definitions. Users who previously used the @types/diff npm package from DefinitelyTyped should remove that dependency when upgrading JsDiff to v8.

    Note that the transition from the DefinitelyTyped types to JsDiff's own type definitions includes multiple fixes and also removes many exported types previously used for options arguments to diffing and patch-generation functions. (There are now different exported options types for abortable calls - ones with a timeout or maxEditLength that may give a result of undefined - and non-abortable calls.) See the TypeScript section of the README for some usage tips.

  • The Diff object is now a class. Custom extensions of Diff, as described in the "Defining custom diffing behaviors" section of the README, can therefore now be done by writing a class CustomDiff extends Diff and overriding methods, instead of the old way based on prototype inheritance. (I think code that did things the old way should still work, though!)

  • diff/lib/index.es6.js and diff/lib/index.mjs no longer exist, and the ESM version of the library is no longer bundled into a single file.

  • The ignoreWhitespace option for diffWords is no longer included in the type declarations. The effect of passing ignoreWhitespace: true has always been to make diffWords just call diffWordsWithSpace instead, which was confusing, because that behaviour doesn't seem properly described as "ignoring" whitespace at all. The property remains available to non-TypeScript applications for the sake of backwards compatibility, but TypeScript applications will now see a type error if they try to pass ignoreWhitespace: true to diffWords and should change their code to call diffWordsWithSpace instead.

  • JsDiff no longer purports to support ES3 environments. (I'm pretty sure it never truly did, despite claiming to in its README, since even the 1.0.0 release used Array.map which was added in ES5.)

• #601 - diffJson's stringifyReplacer option behaves more like JSON.stringify's replacer argument now. In particular:
  • Each key/value pair now gets passed through the replacer once instead of twice
  • The key passed to the replacer when the top-level object is passed in as value is now "" (previously, was undefined), and the key passed with an array element is the array index as a string, like "0" or "1" (previously was whatever the key for the entire array was). Both the new behaviours match that of JSON.stringify.
• #602 - diffing functions now consistently return undefined when called in async mode (i.e. with a callback). Previously, there was an odd quirk where they would return true if the strings being diffed were equal and undefined otherwise.

Commits

• 4f5c473 v8.0.2
• 2717fd8 Fix diffSentences for old Safari versions (#616)
• d3f3bf5 Fix broken diffWords test (#617)
• 27e6c81 Fix typo in scripts (#614)
• 732416a Improve tree shakability (#612)
• 0365f4b Tweak example of using a Chinese word segmenter to one where the segmenter se...
• a5cf0db v8.0.1
• 0307063 Fix types for diffJson (#610)
• f87a74c v8.0.0 released (#607)
• 8e81ac5 Upgrade build deps to latest versions with yarn upgrade --latest (#605)
• Additional commits viewable in compare view

Updates @types/diff from 7.0.2 to 8.0.0

Commits

• See full diff in compare view

Updates openid-client from 5.7.1 to 6.6.4

Release notes

Sourced from openid-client's releases.

v6.6.4

Fixes

• recognize N_A in the token exchange grant (770b177)

v6.6.3

Documentation

• fix TokenEndpointResponseHelpers.claims() note (b77c786)

Refactor

• passport: allow custom logic to drive initiating auth requests (0b57115), closes #811

v6.6.2

Fixes

• RFC8414: strip any terminating "/" when pathname is present (e884302)

v6.6.1

Revert

• revert to use 302 instead of 303 for the redirect (54f2170)

v6.6.0

Features

• passport: automatically use form_post response mode when using hybrid response types (c9f2993)
• passport: easier way to use id_token_hint without overloads (afe24ae)
• passport: easier way to use login_hint without overloads (264db00)
• passport: easier way to use OAuth 2.0 Resource Indicators without overloads (7eb3076)
• passport: easier way to use OAuth 2.0 Rich Authorization Requests without overloads (af0f9d6)

Refactor

• passport: align use of callbackURL with other strategies and user expectations (333ad31)
• passport: use 303 See Other for the redirect (4004070)

Documentation

• passport: add clarity to oauth-specific AuthenticateOptions (dba27f3)
• passport: expand descriptions and structure (0a173ce)

v6.5.3

Fixes

• passport: handle JARM responses with authorizationCodeGrant instead of authorizationRequest (e734bec)

... (truncated)

Changelog

Sourced from openid-client's changelog.

6.6.4 (2025-08-12)

Fixes

• recognize N_A in the token exchange grant (770b177)

6.6.3 (2025-08-05)

Documentation

• fix TokenEndpointResponseHelpers.claims() note (b77c786)

Refactor

• passport: allow custom logic to drive initiating auth requests (0b57115), closes #811

6.6.2 (2025-07-01)

Fixes

• RFC8414: strip any terminating "/" when pathname is present (e884302)

6.6.1 (2025-06-21)

Refactor

• revert use 303 See Other for the redirect (54f2170)

6.6.0 (2025-06-21)

Features

• passport: automatically use form_post response mode when using hybrid response types (c9f2993)
• passport: easier way to use id_token_hint without overloads (afe24ae)
• passport: easier way to use login_hint without overloads (264db00)
• passport: easier way to use OAuth 2.0 Resource Indicators without overloads (7eb3076)
• passport: easier way to use OAuth 2.0 Rich Authorization Requests without overloads (af0f9d6)

Refactor

• passport: align use of callbackURL with other strategies and user expectations (333ad31)
• passport: use 303 See Other for the redirect (4004070)

... (truncated)

Commits

• 9876fa8 chore(release): 6.6.4
• 770b177 fix: recognize N_A in the token exchange grant
• 2af5eb8 test: more discovery coverage
• aed5e0b chore: cleanup after release
• 6de5693 chore(release): 6.6.3
• b3879ad chore: bump packages
• 0b57115 refactor(passport): allow custom logic to drive initiating auth requests
• b77c786 docs: fix TokenEndpointResponseHelpers.claims() note
• 5f37250 chore: bump packages
• 26e1c95 chore: bump packages
• Additional commits viewable in compare view

Updates react from 18.3.1 to 19.1.1

Release notes

Sourced from react's releases.

19.1.1 (July 28, 2025)

React

• Fixed Owner Stacks to work with ES2015 function.name semantics (#33680 by @​hoxyq)

19.1.0 (March 28, 2025)

Owner Stack

An Owner Stack is a string representing the components that are directly responsible for rendering a particular component. You can log Owner Stacks when debugging or use Owner Stacks to enhance error overlays or other development tools. Owner Stacks are only available in development builds. Component Stacks in production are unchanged.

• An Owner Stack is a development-only stack trace that helps identify which components are responsible for rendering a particular component. An Owner Stack is distinct from a Component Stacks, which shows the hierarchy of components leading to an error.
• The captureOwnerStack API is only available in development mode and returns a Owner Stack, if available. The API can be used to enhance error overlays or log component relationships when debugging. #29923, #32353, #30306, #32538, #32529, #32538

React

• Enhanced support for Suspense boundaries to be used anywhere, including the client, server, and during hydration. #32069, #32163, #32224, #32252
• Reduced unnecessary client rendering through improved hydration scheduling #31751
• Increased priority of client rendered Suspense boundaries #31776
• Fixed frozen fallback states by rendering unfinished Suspense boundaries on the client. #31620
• Reduced garbage collection pressure by improving Suspense boundary retries. #31667
• Fixed erroneous “Waiting for Paint” log when the passive effect phase was not delayed #31526
• Fixed a regression causing key warnings for flattened positional children in development mode. #32117
• Updated useId to use valid CSS selectors, changing format from :r123: to «r123». #32001
• Added a dev-only warning for null/undefined created in useEffect, useInsertionEffect, and useLayoutEffect. #32355
• Fixed a bug where dev-only methods were exported in production builds. React.act is no longer available in production builds. #32200
• Improved consistency across prod and dev to improve compatibility with Google Closure Complier and bindings #31808
• Improve passive effect scheduling for consistent task yielding. #31785
• Fixed asserts in React Native when passChildrenWhenCloningPersistedNodes is enabled for OffscreenComponent rendering. #32528
• Fixed component name resolution for Portal #32640
• Added support for beforetoggle and toggle events on the dialog element. #32479 #32479

React DOM<...

Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
modeling-app	Error			Aug 28, 2025 3:51pm

[jacebrowning]

@dependabot rebase