chore(deps): update javascript#513
Conversation
476d981 to
6b06671
Compare
|
Caution [High Risk] Target group replacement shifts backend traffic to port 9090 without matching ALB-to-target access The change is replacing the target groups behind The current API backend security group Warning [Medium Risk] New public-facing EC2 instance is being launched without an IAM instance profile The change creates a new production EC2 host for This does not prove an immediate architecture or AMI failure, but it does create a real security risk. Organizational policy says EC2 instances must not be directly reachable from the internet, and AWS Well-Architected guidance flags EC2 instances without IAM instance profiles as a risk because they push teams toward unmanaged access patterns and weaken instance hardening. If this host needs AWS API access later, the lack of an instance profile will force out-of-band credentials or manual exceptions, and the public endpoint increases the attack surface of a production instance that should be behind managed ingress only. Warning [Medium Risk] New production EC2 health endpoint bypasses managed service boundaries and weakens network segmentation The change creates a new production EC2 instance, The attached security groups give the instance effective inbound access on SignalsRoutine → Multiple AWS infrastructure resources showing unusual and infrequent routine changes at 1-2 events/week for the last 3 months, led by the api server instance changing only 1 event/week for the last 3 months. Additional Change Details: |
6b06671 to
b24b465
Compare
b24b465 to
0ca9be4
Compare
0ca9be4 to
b5b9bd9
Compare
b5b9bd9 to
b39d4fe
Compare
b39d4fe to
9ece352
Compare
9ece352 to
a7a8f6e
Compare
a7a8f6e to
516875a
Compare
516875a to
be444ed
Compare
be444ed to
70d47ee
Compare
70d47ee to
ed5a5d9
Compare
96efea5 to
2083710
Compare
c80da9e to
039d139
Compare
ed23a9e to
c5dc7a6
Compare

This PR contains the following updates:
4.2.2→4.3.05.95.2→5.100.1024.12.0→24.12.310.4.27→10.5.010.1.0→10.3.07.0.1→7.1.117.4.0→17.6.01.1.13→1.3.01.6.0→1.14.08.5.8→8.5.1419.2.4→19.2.619.2.4→19.2.67.72.0→7.75.04.7.5→4.11.07.13.2→7.15.03.8.0→3.8.13.5.0→3.6.04.2.2→4.3.06.0.2→6.0.38.57.2→8.59.28.0.2→8.0.124.3.6→4.4.3Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
tailwindlabs/tailwindcss (@tailwindcss/postcss)
v4.3.0Compare Source
Added
@container-sizeutility (#18901)scrollbar-{auto,thin,none}utilities forscrollbar-width, andscrollbar-thumb-*/scrollbar-track-*color utilities forscrollbar-color(#19981, #20019)scrollbar-gutter-*utilities (#20018)zoom-*utilities (#20020)tab-*utilities (#20022)@variantwith stacked variants (e.g.@variant hover:focus { … }) (#19996)@variantwith compound variants (e.g.@variant hover, focus { … }) (#19996)--default(…)in--value(…)and--modifier(…)for functional@utilitydefinitions (#19989)Fixed
@pluginresolves package JavaScript entries instead of browser CSS entries when using@tailwindcss/vite(#19949)@importand@pluginpaths resolving from the wrong directory when using@tailwindcss/vite(#19965)@variantare processed by@tailwindcss/vite(#19966)basewhenresult.opts.fromis not provided when using@tailwindcss/postcss(#19980)_whitespace in arbitrary values (#19986)w-[calc(100%---spacing(60))]→w-[calc(100%-(--spacing(60)))]) (#19986)-mt-[20in]→mt-[-20in], notmt-[-1920px]) (#19988):has()variants from[&:has(…)]tohas-[…](#19991)styleattributes (e.g.style="flex-grow: 1"→style="flex-grow: 1", notstyle="grow: 1") (#19918)@utilitydefinitions with the same name but different value types (#19777)PluginWithConfigtype fromtailwindcss/pluginto fix errors when inferring plugin config types (#19707)startandendlegacy utilities without values do not generate CSS (#20003)--value(…)is required in functional@utilitydefinitions (#20005)-left-[(var(--a)+var(--b))]) (#20011)v4.2.4Compare Source
Fixed
@importand@pluginstill resolve correctly when using Vite aliases in@tailwindcss/vite(#19947)v4.2.3Compare Source
Fixed
tracking-*utilities by preferring non-negative utilities (e.g.-tracking-tighter→tracking-wider) (#19827)@tailwindcss/webpack(#19723)px-[1.2rem] py-[1.2rem]→p-[1.2rem]) (#19837)border-{t,b}-*intoborder-y-*,border-{l,r}-*intoborder-x-*, andborder-{t,r,b,l}-*intoborder-*(#19842)scroll-m{t,b}-*intoscroll-my-*,scroll-m{l,r}-*intoscroll-mx-*, andscroll-m{t,r,b,l}-*intoscroll-m-*(#19842)scroll-p{t,b}-*intoscroll-py-*,scroll-p{l,r}-*intoscroll-px-*, andscroll-p{t,r,b,l}-*intoscroll-p-*(#19842)overflow-{x,y}-*intooverflow-*(#19842)overscroll-{x,y}-*intooverscroll-*(#19842)--placeholder-colorinstead of--background-colorforplaceholder-*utilities (#19843)config.contentwhen migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846).envand.env.*to default ignored content files (#19846)overflow-ellipsisintotext-ellipsis(#19849)start-full→inset-s-full,start-auto→inset-s-auto,start-px→inset-s-px, andstart-<number>→inset-s-<number>as well as negative versions (#19849)end-full→inset-e-full,end-auto→inset-e-auto,end-px→inset-e-px, andend-<number>→inset-e-<number>as well as negative versions (#19849)-sign inside the arbitrary value-left-[9rem]→left-[-9rem](#19858)-sign outside the arbitrary valueml-[calc(-1*var(--width))]→-ml-(--width)(#19858)NODE_PATHenvironment variable in standalone CLI (#19617)TanStack/query (@tanstack/react-query)
v5.100.10Patch Changes
v5.100.9Compare Source
Patch Changes
fcee7bd]:v5.100.8Compare Source
Patch Changes
v5.100.7Compare Source
Patch Changes
v5.100.6Compare Source
Patch Changes
v5.100.5Compare Source
Patch Changes
a53ef97]:v5.100.4Compare Source
Patch Changes
v5.100.3Compare Source
Patch Changes
fix(suspense): skip calling combine when queries would suspend (#10576)
Updated dependencies [
f85d825]:v5.100.2Patch Changes
ea4497e,d6a7bf3,645d5d1]:v5.100.1Patch Changes
1bb0d23]:v5.100.0Compare Source
Patch Changes
6540a41]:v5.99.2Compare Source
Patch Changes
v5.99.1Compare Source
Patch Changes
v5.99.0Compare Source
Patch Changes
v5.98.0Compare Source
Patch Changes
v5.97.0Compare Source
Patch Changes
2bfb12c]:v5.96.2Compare Source
Patch Changes
v5.96.1Compare Source
Patch Changes
v5.96.0Compare Source
Patch Changes
postcss/autoprefixer (autoprefixer)
v10.5.0Compare Source
mask-position-xandmask-position-ysupport (by @toporek).eslint/eslint (eslint)
v10.3.0Compare Source
v10.2.1Compare Source
v10.2.0Compare Source
Features
586ec2ffeat: Addmeta.languagessupport to rules (#20571) (Copilot)14207defeat: addTemporaltono-obj-calls(#20675) (Pixel998)bbb2c93feat: add Temporal to ES2026 globals (#20672) (Pixel998)Bug Fixes
542cb3efix: update first-party dependencies (#20714) (Francesco Trotta)Documentation
a2af743docs: addlanguageto configuration objects (#20712) (Francesco Trotta)845f23fdocs: Update README (GitHub Actions Bot)5fbcf59docs: removesourceTypefrom ts playground link (#20477) (Tanuj Kanti)8702a47docs: Update README (GitHub Actions Bot)ddeadeddocs: Update README (GitHub Actions Bot)2b44966docs: add Major Releases section to Manage Releases (#20269) (Milos Djermanovic)eab65c7docs: updateeslintversions in examples (#20664) (루밀LuMir)3e4a299docs: update ESM Dependencies policies with note for own-usage packages (#20660) (Milos Djermanovic)Chores
8120e30refactor: extract no unmodified loop condition (#20679) (kuldeep kumar)46e8469chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697) (renovate[bot])01ed3aatest: add unit tests for unicode utilities (#20622) (Manish chaudhary)811f493ci: remove--legacy-peer-depsfrom types integration tests (#20667) (Milos Djermanovic)6b86fcfchore: update dependency npm-run-all2 to v8 (#20663) (renovate[bot])632c4f8chore: addprettierupdate commit to.git-blame-ignore-revs(#20662) (루밀LuMir)b0b0f21chore: update dependency eslint-plugin-regexp to ^3.1.0 (#20659) (Milos Djermanovic)228a2ddchore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (#20661) (Milos Djermanovic)3ab4d7etest: Add tests for eslintrc-style keys (#20645) (kuldeep kumar)facebook/react (eslint-plugin-react-hooks)
v7.1.1Compare Source
Note: 7.1.0 accidentally removed the
component-hook-factoriesrule, causing errors for users who referenced it in their ESLint config. This is now fixed.component-hook-factoriesrule for backwards compatibility. (@mofeiZ in #36307)v7.1.0Compare Source
This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better
set-state-in-effectdetection, improved ref validation, and more helpful error reporting.useEffectEventchecks in component syntax. (@jbrown215 in #35041)set-state-in-effectvalidation with fewer false negatives. (@jorge-cab in #35134, @josephsavona in #35147, @jackpope in #35214, @chesnokov-tony in #35419, @jsleitor in #36107)sindresorhus/globals (globals)
v17.6.0Compare Source
v17.5.0Compare Source
lucide-icons/lucide (lucide-react)
v1.14.0: Version 1.14.0Compare Source
What's Changed
repeat-officon by @jguddas in #3102Full Changelog: lucide-icons/lucide@1.13.0...1.14.0
v1.13.0: Version 1.13.0Compare Source
What's Changed
waves-verticalicon by @jamiemlaw in #3867Full Changelog: lucide-icons/lucide@1.12.0...1.13.0
v1.12.0: Version 1.12.0Compare Source
What's Changed
astroidicon by @whoisBugsbunny in #4217Full Changelog: lucide-icons/lucide@1.10.0...1.12.0
v1.11.0: Version 1.11.0Compare Source
What's Changed
rotate-3dicon by @jamiemlaw in #4299layers-minusicon by @Spleefies in #4005bell-checkicon by @pettelau in #4152New Contributors
Full Changelog: lucide-icons/lucide@1.9.0...1.11.0
v1.10.0: Version 1.10.0Compare Source
What's Changed
rotate-3dicon by @jamiemlaw in #4299layers-minusicon by @Spleefies in #4005bell-checkicon by @pettelau in #4152New Contributors
Full Changelog: lucide-icons/lucide@1.9.0...1.10.0
v1.9.0: Version 1.9.0Compare Source
What's Changed
timelineicon by @jguddas in #4270New Contributors
Full Changelog: lucide-icons/lucide@1.8.0...1.9.0
v1.8.0: Version 1.8.0Compare Source
What's Changed
text-selecttosquare-dashed-textby @jguddas in #3943initOnMounted: trueforuseSessionStorageinCarbonAdOverlayby @karsa-mistmere in #4275bookmark-officon by @ZeenatLawal in #4283New Contributors
Full Changelog: lucide-icons/lucide@1.7.0...1.8.0
v1.7.0: Version 1.7.0Compare Source
What's Changed
map-pin-searchicon by @TonySullivan in #4125New Contributors
Full Changelog: lucide-icons/lucide@1.6.0...1.7.0
postcss/postcss (postcss)
v8.5.14Compare Source
v8.5.13Compare Source
postcss-scsscommend regression.v8.5.12Compare Source
opts.unsafeMapto disable checks.v8.5.11Compare Source
v8.5.10Compare Source
</style>in non-bundler cases (by @TharVid).v8.5.9Compare Source
facebook/react (react)
v19.2.6: 19.2.6 (May 6th, 2026)Compare Source
React Server Components
(by @eps1lon and @unstubbable)
v19.2.5: 19.2.5 (April 8th, 2026)Compare Source
React Server Components
react-hook-form/react-hook-form (react-hook-form)
v7.75.0: Version 7.75.0Compare Source
🦧 feat: improve get dirty fields prune empty fields (#13363)
🎹 typescript 6.0 (#13330)
🌡️ chore: minor improvement on setValue & reset (#13366)
🐞 fix #13403: include setValues in FormProvider context value (#13404)
🐞 fix: recompute isDirty after re-registering a previously unregistered field (#13399)
🐞 fix: preserve watch updates on field array unmount fixes #13375 (#13385)
🐞 fix: prevent useWatch re-render when unrelated field validation is … (#13398)
thanks to @dfedoryshchev, @cyky & @gkarabelos
v7.74.0: Version 7.74.0Compare Source
🪇 feat: setValues (#13201)
🐞 fix: preserve previous field value when useController name changes (#13395)
🐞 fix: handle null parent when unregistering nested field (#13396)
🐞 fix: treat NaN as empty when valueAsNumber is true in validateField (#13388)
🪢 fix build to exclude test files (#13387)
thanks to @Yihao-G & @mixelburg
v7.73.1Compare Source
v7.72.1Compare Source
bvaughn/react-resizable-panels (react-r
Configuration
📅 Schedule: (in timezone Europe/London)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.