chore(deps): bump the minor-patch group across 1 directory with 38 updates

[dependabot]

Bumps the minor-patch group with 38 updates in the / directory:

Package	From	To
@supabase/supabase-js	2.106.2	2.116.0
@tanstack/react-query	5.101.2	5.102.8
i18next	26.3.6	26.4.2
lucide-react	1.24.0	1.45.0
next	16.2.4	16.3.5
next-intl	4.13.1	4.14.4
papaparse	5.5.4	5.7.0
react	19.2.4	19.3.0
@types/react	19.2.17	19.3.0
react-dom	19.2.4	19.3.0
@types/react-dom	19.2.3	19.3.0
react-i18next	17.0.9	17.0.13
resend	6.12.4	6.28.0
sonner	2.0.7	2.0.8
storybook	10.4.6	10.6.0
@chromatic-com/storybook	5.2.1	5.3.1
@playwright/test	1.61.1	1.63.0
@storybook/addon-a11y	10.4.6	10.6.0
@storybook/addon-docs	10.4.6	10.6.0
@storybook/addon-links	10.4.6	10.6.0
@storybook/addon-mcp	0.6.0	0.7.0
@storybook/addon-vitest	10.4.6	10.6.0
@storybook/nextjs-vite	10.4.6	10.6.0
@storybook/react	10.4.6	10.6.0
@storybook/react-vite	10.4.6	10.6.0
@tailwindcss/postcss	4.3.2	4.3.3
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.1	14.6.7
@vitest/browser-playwright	4.1.10	4.1.11
@vitest/coverage-v8	4.1.10	4.1.11
eslint-config-next	16.2.4	16.3.5
eslint-plugin-storybook	10.4.6	10.6.0
playwright	1.61.1	1.63.0
prettier	3.5.3	3.9.6
sharp	0.35.3	0.35.4
tailwindcss	4.3.2	4.3.3
vite	8.1.4	8.3.0
vitest	4.1.10	4.1.11

Updates @supabase/supabase-js from 2.106.2 to 2.116.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.116.0

2.116.0 (2026-09-07)

🚀 Features

• auth: add MFA recovery codes API (#2676)
• storage: add bucket lifecycle configuration (#2659)
• storage: topk 10k support (#2667)
• storage: add versionId support to create URL methods (#2678)

🩹 Fixes

• auth: silence commit-guard-discarded refresh in initial session (#2668)
• storage: drop legacy prefix from lifecycles (#2674)
• supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

• fadymak
• Ferhat Elmas
• Katerina Skroumpelou @​mandarini
• Tyler Hillery

v2.116.0-canary.3

2.116.0-canary.3 (2026-09-07)

🚀 Features

• auth: add MFA recovery codes API (#2676)
• storage: add versionId support to create URL methods (#2678)

❤️ Thank You

• fadymak
• Katerina Skroumpelou
• Tyler Hillery

v2.116.0-canary.2

2.116.0-canary.2 (2026-09-07)

🚀 Features

• storage: topk 10k support (#2667)

🩹 Fixes

• storage: drop legacy prefix from lifecycles (#2674)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.116.0 (2026-09-07)

🚀 Features

• auth: add MFA recovery codes API (#2676)

🩹 Fixes

• supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

• fadymak
• Katerina Skroumpelou @​mandarini

2.115.0 (2026-09-03)

🚀 Features

• postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

2.114.0 (2026-09-02)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.113.0 (2026-09-02)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.4 (2026-08-24)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.3 (2026-08-11)

🩹 Fixes

• supabase: improve trace propagation sampling and diagnostics (#2604)
• supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

2.112.2 (2026-08-06)

... (truncated)

Commits

• 5aedaab feat(auth): add MFA recovery codes API (#2676)
• e4f675a fix(supabase): warn when schema is passed outside db options (#2663)
• dbe7679 chore(release): version 2.115.0 changelogs (#2664)
• 3eb6193 docs(supabase): clarify db.schema needs the second generic (#2662)
• 92fb8ba feat(postgrest): add getOpenApiSpec() (#2651)
• aef432b chore(release): version 2.114.0 changelogs (#2653)
• 67b07b0 chore(release): version 2.113.0 changelogs (#2650)
• 062ae5e chore(release): version 2.112.4 changelogs (#2628)
• c7397c1 chore(supabase): bump supabase cli to 2.113.0 (#2606)
• bbc167c chore(release): version 2.112.3 changelogs (#2608)
• Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.2 to 5.102.8

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.102.8
  • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-next-experimental@​5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-persist-client@​5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.102.8
  • @​tanstack/react-query@​5.102.8

@​tanstack/react-query@​5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.8

@​tanstack/react-query-devtools@​5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.102.7
  • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-next-experimental@​5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-persist-client@​5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.102.7
  • @​tanstack/react-query@​5.102.7

@​tanstack/react-query@​5.102.7

Patch Changes

• Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.7

5.102.6

Patch Changes

• #11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

• Updated dependencies []:

  • @​tanstack/query-core@​5.102.6

5.102.5

Patch Changes

• Updated dependencies [578e5c2]:
  • @​tanstack/query-core@​5.102.5

5.102.4

Patch Changes

• Updated dependencies [a05df6a]:
  • @​tanstack/query-core@​5.102.4

5.102.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.3

5.102.2

Patch Changes

• Updated dependencies [80fbf73]:
  • @​tanstack/query-core@​5.102.2

... (truncated)

Commits

• 2969edf ci: Version Packages (#11316)
• 2eb3c7c ci: Version Packages (#11313)
• 714df67 ci: Version Packages (#11306)
• ac2b612 fix(react-query): propagate falsy errors to the error boundary (#11305)
• 1836e61 ci: Version Packages (#11303)
• 51f12db ci: Version Packages (#11294)
• 730b3aa ci: Version Packages (#11276)
• 388bbaf ci: Version Packages (#11265)
• bc423b3 ci: Version Packages (#11261)
• be1352b test(*): add adapter-level type coverage for optional undefinable mutate vari...
• Additional commits viewable in compare view

Updates i18next from 26.3.6 to 26.4.2

Release notes

Sourced from i18next's releases.

v26.4.2

• fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @​mahirhir (#2447).

v26.4.1

• fix(types): the selector-form keyPrefix overload of getFixedT() is now available under enableSelector: 'strict'. Its constraint was gated on true | 'optimize' only, so under 'strict' it collapsed to never, the overload dropped out, and the returned t silently lost its keyPrefix scope (t(($) => $.deep) failed with Property 'deep' does not exist on type '{}'). The same call already typechecked under true and 'optimize'. Thanks @​hovelopin (#2446).

v26.4.0

• perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
• chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.

Changelog

Sourced from i18next's changelog.

26.4.2

• fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @​mahirhir (#2447).

26.4.1

• fix(types): the selector-form keyPrefix overload of getFixedT() is now available under enableSelector: 'strict'. Its constraint was gated on true | 'optimize' only, so under 'strict' it collapsed to never, the overload dropped out, and the returned t silently lost its keyPrefix scope (t(($) => $.deep) failed with Property 'deep' does not exist on type '{}'). The same call already typechecked under true and 'optimize'. Thanks @​hovelopin (#2446).

26.4.0

• perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
• chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.

Commits

• 4dba50f 26.4.2
• e436b62 build
• d955fb0 fix: stringify formatter results in nested values, changelog v26.4.2
• dfafa3c fix: keep replacement patterns literal in nested values (#2447)
• 3c9981e chore: keep dev-only and local files out of the npm package
• c057ee0 26.4.1
• 02e3e16 changelog v26.4.1
• 6f198f2 fix(types): allow selector keyPrefix in getFixedT under enableSelector 'stric...
• 652847e 26.4.0
• 6c6025f prettier fix
• Additional commits viewable in compare view

Updates lucide-react from 1.24.0 to 1.45.0

Release notes

Sourced from lucide-react's releases.

Version 1.45.0

What's Changed

• feat(icons): added calendar-chevrons-right icon by @​AlexandrePhilibert in lucide-icons/lucide#3565
• feat(icons): added building-complex-plus icon by @​tylerkade in lucide-icons/lucide#4758
• feat(icons): add hourglass-cog icon by @​lazerg in lucide-icons/lucide#4635
• feat(icons): added mouth & mouth-off by @​karsa-mistmere in lucide-icons/lucide#4787
• feat(icons): added iv-bag icon by @​karsa-mistmere in lucide-icons/lucide#4821
• fix(icons): changed lectern icon by @​UsamaKhan in lucide-icons/lucide#2925
• feat(icons): add layout-arrow-right and layout-arrow-down by @​samuelalake in lucide-icons/lucide#4541
• feat(icons): added park icon by @​skajosborn in lucide-icons/lucide#3177
• fix(icons): changed album, book-marked, folder-bookmark icons by @​karsa-mistmere in lucide-icons/lucide#3043
• fix(icons): correct misspelled tags by @​decknamec in lucide-icons/lucide#4836
• feat(icons): added houses icon by @​danielbayley in lucide-icons/lucide#3241
• feat(icons): added notebook-dot icon by @​elenakovelskikh in lucide-icons/lucide#3228
• feat(icons): add messages-circle icon by @​Mirazstudio-offical in lucide-icons/lucide#4754
• feat(icons): added plant-pot icon by @​vqh2602 in lucide-icons/lucide#3122
• fix(icons): changed cookie icon by @​karsa-mistmere in lucide-icons/lucide#4815
• fix(icons): remove duplicate use-cases prop from cookie.json by @​karsa-mistmere in lucide-icons/lucide#4838
• fix(site): fix home card icons by @​karsa-mistmere in lucide-icons/lucide#4839
• feat(docs): added "How to use Lucide icons" section to resources by @​karsa-mistmere in lucide-icons/lucide#4829
• fix(packages/vue): fix generated icon declaration types for @​lucide/vue by @​karsa-mistmere in lucide-icons/lucide#4841
• chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 by @​dependabot[bot] in lucide-icons/lucide#4845
• chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 in /integrations/lucide-react/vite by @​dependabot[bot] in lucide-icons/lucide#4844
• ci(ci.yml): Add dispatch post release by @​ericfennis in lucide-icons/lucide#4847
• feat(icons): added globe-code icon by @​AleksejDix in lucide-icons/lucide#3722

New Contributors

• @​tylerkade made their first contribution in lucide-icons/lucide#4758
• @​alx-xo made their first contribution in lucide-icons/lucide#4115
• @​skajosborn made their first contribution in lucide-icons/lucide#3177
• @​elenakovelskikh made their first contribution in lucide-icons/lucide#3228
• @​Mirazstudio-offical made their first contribution in lucide-icons/lucide#4754
• @​AleksejDix made their first contribution in lucide-icons/lucide#3722

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Version 1.44.0

What's Changed

• feat(packages/icons): fixed @​lucide/icons rollup config by @​karsa-mistmere in lucide-icons/lucide#4824
• fix(icons): changed door-open by @​karsa-mistmere in lucide-icons/lucide#4826
• fix(docs): replace missing LucideIcon icon names in guides by @​karsa-mistmere in lucide-icons/lucide#4827
• feat(docs): fixed fuse js search by @​karsa-mistmere in lucide-icons/lucide#4825
• fix(icons): changed satellite-dish icon by @​karsa-mistmere in lucide-icons/lucide#4813
• fix(icons): arcified flip icons & renamed them by @​karsa-mistmere in lucide-icons/lucide#4833
• fix(icons): improve legibility of credit card icons by @​karsa-mistmere in lucide-icons/lucide#4831
• feat(lab): add check-x icon by @​ishanbagra18 in lucide-icons/lucide#4737
• fix(icons): correct compromised tags in shield icons by @​decknamec in lucide-icons/lucide#4835
• feat(icons): added toothbrush icon by @​karsa-mistmere in lucide-icons/lucide#4755

New Contributors

... (truncated)

Commits

• 94e4cb9 chore(dependencies): Update dependencies (#4806)
• 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
• 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
• 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
• f229f83 chore(depedencies): Update dependencies (#4553)
• See full diff in compare view

Updates next from 16.2.4 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
• next/image: Reject empty images when reading/writing to the disk cache (#98186)
• Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
• Add CSP nonce to script tags of loading and template files (#98403)
• Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [backport] Scope app-entry export validation to files inside the app directory (#97357)
• [backport] Fix catch-all index page being served for every other slug (#97416)
• [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
• [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
• [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
• [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

• [16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @​lukesandberg in vercel/next.js#96653

... (truncated)

Commits

• ca2c75e v16.3.5
• 14fb290 [backport] Fix use cache prerender signal retention (#98448)
• 2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
• 4b56cee [16.3.x] Backport docs fixes (#98317)
• 5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
• 93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
• 6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
• d9eac96 [16.3.x] next/image: skip 0-byte entries when initializing disk LRU cache (#9...
• 84b35fe [test] Fix 16.3 deploy test assertions (#98133)
• 14f9c1a [16.3.x][ci] Run flake detection and new deploy tests when merged and on back...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates next-intl from 4.13.1 to 4.14.4

Release notes

Sourced from next-intl's releases.

v4.14.4

4.14.4 (2026-09-11)

Bug Fixes

• Improve base path detection for setting a cookie (#2410) (f04681d) – by @​soroush5

v4.14.3

4.14.3 (2026-09-10)

Bug Fixes

• Keep $ patterns in route param values literally (#2406) (a97b35e) – by @​soroush5

v4.14.2

4.14.2 (2026-09-01)

Bug Fixes

• Allow @eloqnt/* patches to resolve by moving to ^0.1.0 ranges (#2398) (4d18120) – by @​amannn

v4.14.1

4.14.1 (2026-08-28)

Bug Fixes

• Unbreak experimental.messages without a messages.sourceLocale (#2395) (67fca94) – by @​amannn

v4.14.0

4.14.0 (2026-08-27)

Features

• useExtracted improvements (#2346) (4ccf3b8) – by @​amannn

⚠️ If you're using useExtracted and the po format, this requires an update to your messages.

Please see amannn/next-intl#2393 for details and an upgrade prompt.

v4.13.7

4.13.7 (2026-08-17)

Bug Fixes

• Pin @swc/core to a range that is compatible with the extractor plugin (#2389) (a37d8aa) – by @​amannn

v4.13.6

4.13.6 (2026-08-10)

... (truncated)

Changelog

Sourced from next-intl's changelog.

4.14.4 (2026-09-11)

Bug Fixes

• Improve base path detection for setting a cookie (#2410) (f04681d) – by @​soroush5

4.14.3 (2026-09-10)

Bug Fixes

• Keep $ patterns in route param values literally (#2406) (a97b35e) – by @​soroush5

4.14.2 (2026-09-01)

Bug Fixes

• Allow @eloqnt/* patches to resolve by moving to ^0.1.0 ranges (#2398) (4d18120) – by @​amannn

4.14.1 (2026-08-28)

Bug Fixes

• Unbreak experimental.messages without a messages.sourceLocale (#2395) (67fca94) – by @​amannn

4.14.0 (2026-08-27)

Features

• useExtracted improvements (#2346) (4ccf3b8) – by @​amannn

4.13.7 (2026-08-17)

Bug Fixes

• Pin @swc/core to a range that is compatible with the extractor plugin (#2389) (a37d8aa) – by @​amannn

4.13.6 (2026-08-10)

Bug Fixes

• Deprecate requestLocale param of getRequestConfig (#2380) (ae770af) – by @​amannn

4.13.5 (2026-08-04)

Bug Fixes

• Deprecate setRequestLocale and add blog post on next/root-params (#1632) (1446d0d) – by @​amannn

4.13.4 (2026-07-23)

... (truncated)

Commits

• 8267c8f v4.14.4
• f04681d fix: Improve base path detection for setting a cookie (#2410)
• e9b1637 v4.14.3
• a97b35e fix: Keep $ patterns in route param values literally (#2406)
• ddb378d docs: Lint messages with @eloqnt/cli in example-app-router (#2403)
• a388bd5 docs: Add a "Lint your messages" section to the README (#2404)
• 3259beb v4.14.2
• 4d18120 fix: Allow @eloqnt/* patches to resolve by moving to ^0.1.0 ranges (#2398)
• 58b9222 v4.14.1
• 67fca94 fix: Unbreak experimental.messages without a messages.sourceLocale (#2395)
• Additional commits viewable in compare view

Updates papaparse from 5.5.4 to 5.7.0

Release notes

Sourced from papaparse's releases.

5.7.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

Add the `downloadTimeout` option to abort slow remote requests after a configurable duration (https://github.com/mholt/PapaParse/pull/1138)

Thanks @​Kocayilmaz for contributing it

5.6.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

• Remove jQuery as dependency (#1137)

Thanks @​Kocayilmaz for contributing it

Changelog

Sourced from papaparse's changelog.

5.7.0

Features

• Add the downloadTimeout option to abort slow remote requests after a configurable duration (#1138, #786)

5.6.1

Bug Fixes

• Call transformHeader only once per header in streaming mode (#1130)
• Prevent header de-duplication from running again after resuming parsing (#1135)

5.6.0

Features

• Remove the optional jQuery plugin integration (#1137)

5.5.5

Bug Fixes

• Improve automatic delimiter detection by prioritizing row consistency over field count (#1128, #1077)
• Serialize dates with Date.toISOString(), preserving expanded years and writing invalid dates as empty fields (#1140)

Commits

• 555c1c1 Minor version bump
• a5cc2dc Patch version bump
• 29e3a09 Add downloadTimeout option to abort slow remote requests (#1138)
• 2e20001 Use tabs for identation on comment
• b98bd0e Simplify comments
• a869cd9 Fix header de-duplication re-running on every resumed row (#1135)
• b3b6a64 Remove coment describing old behaviour
• 8dd3318 call transformHeader once per header in streaming mode (#1130)
• e6c2b7b Update CHANGELOG
• bc382b7 Minor version bump
• Additional commits viewable in compare view

Updates react from 19.2.4 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651,

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.

[github-actions]

⚠️ Issue Reference Missing

This pull request does not include a reference to an issue. To ensure Drips Wave points are credited upon merge, please update the PR description to link the issue it resolves.

Add one of the following to your PR description:

• Closes #123
• Fixes #123
• Resolves #123

This check is informational and will not block merging — maintenance PRs are exempt.