Skip to content

Bump the minor-and-patch group across 1 directory with 7 updates - #68

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/minor-and-patch-10cff3b3a2
Open

Bump the minor-and-patch group across 1 directory with 7 updates#68
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/minor-and-patch-10cff3b3a2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 7 updates in the / directory:

Package From To
shadcn 4.19.0 4.21.0
viem 2.56.0 2.56.3
@types/react-dom 19.2.5 19.2.7
react-doctor 0.9.12 0.9.13
tsx 4.23.12 4.23.13
react-colorful 5.8.0 5.8.1
@types/chrome 0.2.7 0.2.8

Updates shadcn from 4.19.0 to 4.21.0

Release notes

Sourced from shadcn's releases.

shadcn@4.21.0

Minor Changes

Patch Changes

shadcn@4.20.1

Patch Changes

shadcn@4.20.0

Minor Changes

shadcn@4.19.1

Patch Changes

Changelog

Sourced from shadcn's changelog.

4.21.0

Minor Changes

Patch Changes

4.20.1

Patch Changes

4.20.0

Minor Changes

4.19.1

Patch Changes

Commits

Updates viem from 2.56.0 to 2.56.3

Release notes

Sourced from viem's releases.

viem@2.56.3

Patch Changes

viem@2.56.2

Patch Changes

viem@2.56.1

Patch Changes

Commits

Updates @types/react-dom from 19.2.5 to 19.2.7

Commits

Updates react-doctor from 0.9.12 to 0.9.13

Release notes

Sourced from react-doctor's releases.

react-doctor@0.9.13

Patch Changes

  • 28a1a9f Thanks @​aidenybai! - Add bippy as a runtime dependency.

  • #1695 ac87f7d Thanks @​skoshx! - Preserve plugin settings when React Doctor adopts an existing lint config.

  • #1651 ffc2d14 Thanks @​aidenybai! - Upgrade the Oxc parser and Oxlint runtime while preserving hard failures for broken JS plugins.

  • #1689 1d3e4a6 Thanks @​skoshx! - Use pnpm's strict dependency layout and declare the runtime dependencies that the CLI imports directly.

  • #1646 05ef989 Thanks @​aidenybai! - Keep the interactive score header intact in narrow split views and invalidate locally stale scan results when rule implementations change.

    Report standalone Three.js render loops that use requestAnimationFrame instead of the renderer-managed setAnimationLoop API.

    Include standalone Three.js, supported React framework, Remotion, and React Three Fiber ecosystem packages in automatic workspace project discovery.

  • #1714 013f737 Thanks @​aidenybai! - Clean leading npm messages from GitHub Action JSON reports before later steps read them.

  • #1697 0557145 Thanks @​skoshx! - Stop multi-project scans from recommending GitHub Actions when the root workflow is already configured.

  • #1730 adc3a91 Thanks @​skoshx! - Fix rn-no-raw-text false positives in components that return only direct <fbt> or <fbs> elements.

  • #1723 e1d4c51 Thanks @​skoshx! - Prevent rn-no-raw-text reports for <fbt> content passed through verified React Native text wrappers.

  • #1693 4e04921 Thanks @​skoshx! - Show an npm-native recovery command when an incomplete npx installation is missing Ajv meta-schema files.

  • #1734 025d69d Thanks @​skoshx! - Fix js-set-map-lookups false positives for substring checks on values returned by the global String constructor.

  • #1725 0f59a3b Thanks @​aidenybai! - Run test-noise rules in ambiguous product-named directories such as tools, demo, and migrations when they are below a recognized application source root. Explicit test surfaces and root-level tooling or example directories remain excluded.

  • #1688 72a4f46 Thanks @​skoshx! - Make generated GitHub workflows explain how to pin the action to an immutable commit SHA.

  • #1663 2b0f06e Thanks @​aidenybai! - Improve repeated effect analysis and deeply nested JSX performance, preserve derived-state detection through transparent TypeScript wrappers, and upgrade Oxc parser and linter dependencies.

  • #1650 0b670aa Thanks @​aidenybai! - Run installed Claude Code and Cursor hooks once at the end of an agent turn, include untracked files in the changed-file scan, and migrate existing per-tool React Doctor hooks automatically.

  • #1746 ca30808 Thanks @​aidenybai! - Accept source file paths as positional CLI arguments.

  • #1624 8c2f03a Thanks @​aidenybai! - Make React cleanup a first-class part of React Doctor with diagnostics for complex React functions and repeated JSX composition. Keep whole-project unused file, export, type, dependency, and import-cycle analysis as explicit opt-in rules while removing the separate Deslop packages, experimental language server, and IDE extensions.

  • #1653 1971506 Thanks @​aidenybai! - Add an interactive URL scan and /performance skill that record Chrome DevTools traces, flash live component render outlines, and return agent-readable React performance context.

  • #1654 6416370 Thanks @​aidenybai! - Add component-composition and correctness rules for shadcn, Radix UI, Base UI, React Aria, TanStack Table, and TanStack Virtual behind six new project capabilities (shadcn from components.json; the rest from their package dependencies). Dialog surfaces that render no title part and carry no accessible name are reported across all three libraries (shadcn DialogContent/SheetContent/AlertDialogContent/DrawerContent, Radix Dialog.Content and AlertDialog.Content, Base UI Dialog.Popup and AlertDialog.Popup). Icon-sized shadcn Buttons with no accessible name, shadcn FormItem fields wrapping a FormControl without a FormLabel, and Base UI Field.Root controls without a Field.Label are reported as unlabeled. Raw Input, Textarea, and Button controls placed directly inside shadcn InputGroup are reported in favor of its InputGroupInput, InputGroupTextarea, and InputGroupAddon parts, and presence-only data-[selected]: / data-[disabled]: Tailwind variants on command items are reported because cmdk renders both attributes as "true" or "false". TanStack Form submit handlers that call the form's handleSubmit without event.preventDefault() are reported because the browser still performs a native full-page submission. Tabs triggers provably inside the root without the list part are reported for shadcn, Radix, and Base UI; the existing shadcn-tabs-trigger-requires-list rule is now enabled by default for shadcn projects through the capability gate and no longer risks false positives on extracted trigger subcomponents. React Aria Dialogs without a Heading or aria-label are reported as unnamed. TanStack Table data/columns options that provably get a new array identity every render (inline literals, render-scoped const arrays, fresh ?? [] fallbacks, inline .filter()/.map() transforms) are reported for rebuilding row and column models each render and looping auto-reset features, and elements measured by TanStack Virtual's measureElement without a data-index attribute are reported because the virtualizer drops the measurement.

  • #1743 6f3dd03 Thanks @​aidenybai! - Normalize Oxlint file URLs before applying ignore patterns and writing report-relative diagnostic paths.

  • Updated dependencies [ffc2d14, f7efb7d, 05ef989, a04b933, adc3a91, 2c4560f, e1d4c51, 905607f, 17eeeb5, afa1780, 025d69d, 0f59a3b, 5bc88ae, 4bf7aff, bd08406, 2b0f06e, 8c2f03a, 6416370, 28d4343]:

    • oxlint-plugin-react-doctor@0.9.13
Changelog

Sourced from react-doctor's changelog.

0.9.13

Patch Changes

  • 28a1a9f Thanks @​aidenybai! - Add bippy as a runtime dependency.

  • #1695 ac87f7d Thanks @​skoshx! - Preserve plugin settings when React Doctor adopts an existing lint config.

  • #1651 ffc2d14 Thanks @​aidenybai! - Upgrade the Oxc parser and Oxlint runtime while preserving hard failures for broken JS plugins.

  • #1689 1d3e4a6 Thanks @​skoshx! - Use pnpm's strict dependency layout and declare the runtime dependencies that the CLI imports directly.

  • #1646 05ef989 Thanks @​aidenybai! - Keep the interactive score header intact in narrow split views and invalidate locally stale scan results when rule implementations change.

    Report standalone Three.js render loops that use requestAnimationFrame instead of the renderer-managed setAnimationLoop API.

    Include standalone Three.js, supported React framework, Remotion, and React Three Fiber ecosystem packages in automatic workspace project discovery.

  • #1714 013f737 Thanks @​aidenybai! - Clean leading npm messages from GitHub Action JSON reports before later steps read them.

  • #1697 0557145 Thanks @​skoshx! - Stop multi-project scans from recommending GitHub Actions when the root workflow is already configured.

  • #1730 adc3a91 Thanks @​skoshx! - Fix rn-no-raw-text false positives in components that return only direct <fbt> or <fbs> elements.

  • #1723 e1d4c51 Thanks @​skoshx! - Prevent rn-no-raw-text reports for <fbt> content passed through verified React Native text wrappers.

  • #1693 4e04921 Thanks @​skoshx! - Show an npm-native recovery command when an incomplete npx installation is missing Ajv meta-schema files.

  • #1734 025d69d Thanks @​skoshx! - Fix js-set-map-lookups false positives for substring checks on values returned by the global String constructor.

  • #1725 0f59a3b Thanks @​aidenybai! - Run test-noise rules in ambiguous product-named directories such as tools, demo, and migrations when they are below a recognized application source root. Explicit test surfaces and root-level tooling or example directories remain excluded.

  • #1688 72a4f46 Thanks @​skoshx! - Make generated GitHub workflows explain how to pin the action to an immutable commit SHA.

  • #1663 2b0f06e Thanks @​aidenybai! - Improve repeated effect analysis and deeply nested JSX performance, preserve derived-state detection through transparent TypeScript wrappers, and upgrade Oxc parser and linter dependencies.

  • #1650 0b670aa Thanks @​aidenybai! - Run installed Claude Code and Cursor hooks once at the end of an agent turn, include untracked files in the changed-file scan, and migrate existing per-tool React Doctor hooks automatically.

  • #1746 ca30808 Thanks @​aidenybai! - Accept source file paths as positional CLI arguments.

  • #1624 8c2f03a Thanks @​aidenybai! - Make React cleanup a first-class part of React Doctor with diagnostics for complex React functions and repeated JSX composition. Keep whole-project unused file, export, type, dependency, and import-cycle analysis as explicit opt-in rules while removing the separate Deslop packages, experimental language server, and IDE extensions.

  • #1653 1971506 Thanks @​aidenybai! - Add an interactive URL scan and /performance skill that record Chrome DevTools traces, flash live component render outlines, and return agent-readable React performance context.

  • #1654 6416370 Thanks @​aidenybai! - Add component-composition and correctness rules for shadcn, Radix UI, Base UI, React Aria, TanStack Table, and TanStack Virtual behind six new project capabilities (shadcn from components.json; the rest from their package dependencies). Dialog surfaces that render no title part and carry no accessible name are reported across all three libraries (shadcn DialogContent/SheetContent/AlertDialogContent/DrawerContent, Radix Dialog.Content and AlertDialog.Content, Base UI Dialog.Popup and AlertDialog.Popup). Icon-sized shadcn Buttons with no accessible name, shadcn FormItem fields wrapping a FormControl without a FormLabel, and Base UI Field.Root controls without a Field.Label are reported as unlabeled. Raw Input, Textarea, and Button controls placed directly inside shadcn InputGroup are reported in favor of its InputGroupInput, InputGroupTextarea, and InputGroupAddon parts, and presence-only data-[selected]: / data-[disabled]: Tailwind variants on command items are reported because cmdk renders both attributes as "true" or "false". TanStack Form submit handlers that call the form's handleSubmit without event.preventDefault() are reported because the browser still performs a native full-page submission. Tabs triggers provably inside the root without the list part are reported for shadcn, Radix, and Base UI; the existing shadcn-tabs-trigger-requires-list rule is now enabled by default for shadcn projects through the capability gate and no longer risks false positives on extracted trigger subcomponents. React Aria Dialogs without a Heading or aria-label are reported as unnamed. TanStack Table data/columns options that provably get a new array identity every render (inline literals, render-scoped const arrays, fresh ?? [] fallbacks, inline .filter()/.map() transforms) are reported for rebuilding row and column models each render and looping auto-reset features, and elements measured by TanStack Virtual's measureElement without a data-index attribute are reported because the virtualizer drops the measurement.

  • #1743 6f3dd03 Thanks @​aidenybai! - Normalize Oxlint file URLs before applying ignore patterns and writing report-relative diagnostic paths.

  • Updated dependencies [ffc2d14, f7efb7d, 05ef989, a04b933, adc3a91, 2c4560f, e1d4c51, 905607f, 17eeeb5, afa1780, 025d69d, 0f59a3b, 5bc88ae, 4bf7aff, bd08406, 2b0f06e, 8c2f03a, 6416370, 28d4343]:

    • oxlint-plugin-react-doctor@0.9.13
Commits

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits

Updates react-colorful from 5.8.0 to 5.8.1

Changelog

Sourced from react-colorful's changelog.

5.8.1

  • Fix RGB channels drifting when only the alpha channel is changed: { r: 200, g: 120, b: 35 } no longer becomes { r: 199, g: 119, b: 34 } after moving the alpha slider. Thanks to @​t-hamano for the investigation (via #234, fixes #163)
Commits

Updates @types/chrome from 0.2.7 to 0.2.8

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
@dependabot dependabot Bot changed the title Bump the minor-and-patch group with 7 updates Bump the minor-and-patch group across 1 directory with 7 updates Sep 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-10cff3b3a2 branch from d8bcd4f to 76085bd Compare September 7, 2026 22:55
@dependabot
Bump the minor-and-patch group across 1 directory with 7 updates
e5e9f0e 
Bumps the minor-and-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.19.0` | `4.21.0` |
| [viem](https://github.com/wevm/viem) | `2.56.0` | `2.56.3` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.2.7` |
| [react-doctor](https://github.com/millionco/react-doctor/tree/HEAD/packages/react-doctor) | `0.9.12` | `0.9.13` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [react-colorful](https://github.com/omgovich/react-colorful) | `5.8.0` | `5.8.1` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.2.7` | `0.2.8` |



Updates `shadcn` from 4.19.0 to 4.21.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.21.0/packages/shadcn)

Updates `viem` from 2.56.0 to 2.56.3
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.56.0...viem@2.56.3)

Updates `@types/react-dom` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-doctor` from 0.9.12 to 0.9.13
- [Release notes](https://github.com/millionco/react-doctor/releases)
- [Changelog](https://github.com/millionco/react-doctor/blob/main/packages/react-doctor/CHANGELOG.md)
- [Commits](https://github.com/millionco/react-doctor/commits/react-doctor@0.9.13/packages/react-doctor)

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `react-colorful` from 5.8.0 to 5.8.1
- [Release notes](https://github.com/omgovich/react-colorful/releases)
- [Changelog](https://github.com/omgovich/react-colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/omgovich/react-colorful/commits)

Updates `@types/chrome` from 0.2.7 to 0.2.8
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

---
updated-dependencies:
- dependency-name: "@types/chrome"
  dependency-version: 0.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-colorful
  dependency-version: 5.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-doctor
  dependency-version: 0.9.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: shadcn
  dependency-version: 4.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: viem
  dependency-version: 2.56.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-10cff3b3a2 branch from 76085bd to e5e9f0e Compare September 8, 2026 00:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants