deps: bump the safe-app-dependencies group across 1 directory with 23 updates #484

dependabot · 2025-07-30T14:45:53Z

Bumps the safe-app-dependencies group with 23 updates in the / directory:

Package	From	To
@tanstack/react-query	`5.75.5`	`5.83.0`
downshift	`9.0.9`	`9.0.10`
esri-leaflet	`3.0.16`	`3.0.17`
firebase	`11.7.1`	`11.10.0`
ky	`1.8.1`	`1.8.2`
papaparse	`5.5.2`	`5.5.3`
proj4	`2.15.0`	`2.19.7`
@playwright/test	`1.52.0`	`1.54.1`
@storybook/addon-essentials	`8.6.12`	`8.6.14`
@types/node	`22.15.17`	`22.16.4`
@ugrc/eslint-config	`1.2.1`	`1.2.3`
@vitejs/plugin-react	`4.4.1`	`4.6.0`
concurrently	`9.1.2`	`9.2.0`
esbuild	`0.25.4`	`0.25.8`
eslint	`9.26.0`	`9.31.0`
firebase-tools	`14.3.0`	`14.10.1`
globals	`16.1.0`	`16.3.0`
prettier	`3.5.3`	`3.6.2`
sass	`1.87.0`	`1.89.2`
vitest	`3.1.3`	`3.2.4`
dotenv	`16.5.0`	`16.6.1`
firebase-admin	`13.3.0`	`13.4.0`
firebase-functions	`6.3.2`	`6.4.0`

Updates @tanstack/react-query from 5.75.5 to 5.83.0

Release notes

Sourced from @tanstack/react-query's releases.

v5.83.0

Version 5.83.0 - 7/11/25, 5:00 PM

Changes

Feat

core: QueryObserver returns isEnabled flag (#9408) (23c8908) by Dominik Dorfmeister

Test

solid-query/suspense: remove "vi.waitFor", and add "advanceTimersByTimeAsync", "expect" (#9407) (0569891) by @sukvvon

svelte-query/createMutation: switch to fake timers, replace "waitFor" with "vi.waitFor", and add "expect" (#9382) (d6930fd) by @sukvvon

svelte-query/createQueries: switch to fake timers, and replace "waitFor" with "vi.waitFor" (#9383) (ab7fd72) by @sukvvon

svelte-query/createQuery: switch to fake timers, replace "waitFor" with "vi.waitFor", and add "expect" (#9384) (2212fff) by @sukvvon

svelte-query/useIsFetching: switch to fake timers, add "expect", "vi.waitFor", and replace "findByText" with "getByText" (#9386) (06cb8eb) by @sukvvon

solid-query/useIsMutating: remove "vi.waitFor", and add "advanceTimersByTimeAsync" (#9404) (9ecfbf7) by @sukvvon

solid-query/useMutationState: remove "vi.waitFor", and add "advanceTimersByTimeAsync", "expect" (#9405) (89f9483) by @sukvvon

solid-query/useQueries: remove "vi.waitFor", and add "advanceTimersByTimeAsync", "expect" (#9406) (daad8e3) by @sukvvon

svelte-query/createInfiniteQuery: switch to fake timers, and replace "waitFor" with "vi.waitFor" (#9381) (b32904c) by @sukvvon

solid-query/useIsFetching: remove "vi.waitFor", and add "advanceTimersByTimeAsync", "expect" (#9403) (e2bcbe8) by @sukvvon

solid-query/transition: remove "vi.waitFor", and add "advanceTimersByTimeAsync" (#9402) (eb1cab7) by @sukvvon

solid-query/QueryClientProvider: remove "vi.waitFor", and add "advanceTimersByTimeAsync", "expect" (#9401) (93978d3) by @sukvvon

svelte-query/useMutationState: switch to fake timers, and replace "waitFor" with "vi.waitFor" (#9388) (32467aa) by @sukvvon

svelte-query/useIsMutating: switch to fake timers, add "expect", "vi.waitFor", and replace "findByText" with "getByText" (#9387) (c597f76) by @sukvvon

solid-query/useIsFetching: switch to fake timers, replace "waitFor" with "vi.waitFor" and "findByText" with "getByText" (#9377) (bce4d7e) by @sukvvon

svelte-query/QueryClientProvider: switch to fake timers, replace "waitFor" with "vi.waitFor", and add "expect" (#9385) (c0fd94e) by @sukvvon

solid-query/useQueries: switch to fake timers and replace "waitFor" with "vi.waitFor" (#9380) (f7c83c2) by @sukvvon

solid-query/suspense: switch to fake timers and replace "waitFor" with "vi.waitFor" (#9375) (d1c8cff) by @sukvvon

solid-query/useMutationState: switch to fake timers and replace "waitFor" with "vi.waitFor" (#9379) (94f2150) by @sukvvon

solid-query/useIsMutating: switch to fake timers and replace "waitFor" with "vi.waitFor" (#9378) (509064a) by @sukvvon

solid-query/transition: switch to fake timers and replace "waitFor" with "vi.waitFor" (#9376) (27d82a7) by @sukvvon

solid-query/useInfiniteQuery: switch to fake timers, and replace "waitFor" with "vi.waitFor" (#9391) (a0aeac0) by @sukvvon

solid-query/QueryClientProvider: switch to fake timers and replace "waitFor" with "vi.waitFor" (#9374) (c66af8a) by @sukvvon

vue-query/vueQueryPlugin: switch to fake timers and replace "sleep" with "advanceTimersByTimeAsync" (#9372) (8c79719) by @sukvvon

vue-query/useIsMutating: switch to fake timers and replace "sleep" with "advanceTimersByTimeAsync" (#9373) (47f7e86) by @sukvvon

vue-query/useIsFetching: switch to fake timers and replace "sleep" with "advanceTimersByTimeAsync" (#9370) (367a96e) by @sukvvon

vue-query/useQueries: switch to fake timers and replace "sleep" with "advanceTimersByTimeAsync" (#9369) (fc0b23e) by @sukvvon

vue-query/queryClient: switch to fake timers and replace "sleep" with "advanceTimersByTimeAsync" (#9371) (79893c8) by @sukvvon

vue-query/useInfiniteQuery: switch to fake timers and replace "sleep" with "advanceTimersByTimeAsync" (#9368) (fc2a95c) by @sukvvon

react-query/usePrefetchQuery: remove "vi.waitFor" and add "advanceTimersByTimeAsync" (#9355) (c9daf2c) by @sukvvon

react-query/useQueries: remove "waitFor" and add "advanceTimersByTimeAsync" (#9367) (fd7c655) by @sukvvon

react-query/useInfiniteQuery: remove "vi.waitFor" and add "advanceTimersByTimeAsync" (#9366) (f6085d0) by @sukvvon

react-query/useMutation: remove "vi.waitFor", add "advanceTimersByTimeAsync" and replace "findByText" with "getByText" (#9352) (c680879) by @sukvvon

react-query/mutationOptions: switch to fake timers, remove "vi.waitFor", and add "advanceTimersByTimeAsync" (#9397) (5765378) by @sukvvon

react-query/suspense: remove "vi.waitFor" and add "advanceTimersByTime" (#9350) (f580f08) by @sukvvon

react-query/useQuery: remove "vi.waitFor", add "advanceTimersByTimeAsync" and replace "findByText" with "getByText" (#9363) (eaf768b) by @sukvvon

react-query/useSuspenseQueries: remove "waitFor" and add "advanceTimersByTimeAsync" (#9356) (a0a0812) by @sukvvon

Packages

... (truncated)

Commits

390424b release: v5.83.0
23c8908 feat(core): QueryObserver returns isEnabled flag (#9408)
c9daf2c test(react-query/usePrefetchQuery): remove 'vi.waitFor' and add 'advanceTimer...
fd7c655 test(react-query/useQueries): remove 'waitFor' and add 'advanceTimersByTimeAs...
f6085d0 test(react-query/useInfiniteQuery): remove 'vi.waitFor' and add 'advanceTimer...
c680879 test(react-query/useMutation): remove 'vi.waitFor', add 'advanceTimersByTimeA...
5765378 test(react-query/mutationOptions): switch to fake timers, remove 'vi.waitFor'...
f580f08 test(react-query/suspense): remove 'vi.waitFor' and add 'advanceTimersByTime'...
eaf768b test(react-query/useQuery): remove 'vi.waitFor', add 'advanceTimersByTimeAsyn...
a0a0812 test(react-query/useSuspenseQueries): remove 'waitFor' and add 'advanceTimers...
Additional commits viewable in compare view

Updates downshift from 9.0.9 to 9.0.10

Release notes

Sourced from downshift's releases.

v9.0.10

9.0.10 (2025-07-21)

Bug Fixes

add package exports field for correct interop and bundler support (#1653) (1743dfd)

Commits

1743dfd fix: add package exports field for correct interop and bundler support (#1653)
See full diff in compare view

Updates esri-leaflet from 3.0.16 to 3.0.17

Release notes

Sourced from esri-leaflet's releases.

v3.0.17

Fixed

Wrong initial tile set zoom level for tileLayer with custom LODs (#1400)

Changelog

Sourced from esri-leaflet's changelog.

[3.0.17] - 2025-06-25

Fixed

Wrong initial tile set zoom level for tileLayer with custom LODs (#1400)

Commits

796c186 build 3.0.17
0fe05a9 📦 3.0.17
202e125 fix LODmap issue (#1400)
See full diff in compare view

Updates firebase from 11.7.1 to 11.10.0

Release notes

Sourced from firebase's releases.

firebase@11.10.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

firebase@11.10.0

Minor Changes

86155b3 #9115 - Added support for Firestore result types to be serialized with toJSON and then deserialized with fromJSON methods on the objects.

Addeed support to resume onSnapshot listeners in the CSR phase based on serialized DataSnapshots and QuerySnapshots built in the SSR phase.

Patch Changes

13e6cce #9085 - Add rollup config to generate modular typings for google3

Updated dependencies [13e6cce, 42ac401, bb57947, f73e08b, 86155b3, b97eab3]:

@firebase/remote-config@0.6.5

@firebase/analytics@0.10.17

@firebase/storage@0.13.14

@firebase/util@1.12.1

@firebase/app@0.13.2

@firebase/firestore@4.8.0

@firebase/ai@1.4.1

@firebase/remote-config-compat@0.2.18

@firebase/analytics-compat@0.2.23

@firebase/storage-compat@0.3.24

@firebase/app-check@0.10.1

@firebase/app-check-compat@0.3.26

@firebase/app-compat@0.4.2

@firebase/auth@1.10.8

@firebase/auth-compat@0.5.28

@firebase/data-connect@0.3.10

@firebase/database@1.0.20

@firebase/database-compat@2.0.11

@firebase/firestore-compat@0.3.53

@firebase/functions@0.12.9

@firebase/functions-compat@0.3.26

@firebase/installations@0.6.18

@firebase/installations-compat@0.2.18

@firebase/messaging@0.12.22

@firebase/messaging-compat@0.2.22

@firebase/performance@0.7.7

@firebase/performance-compat@0.2.20

@firebase/firestore@4.8.0

Minor Changes

... (truncated)

Commits

3c759f0 Version Packages (#9126)
bd06146 Merge main into release
86155b3 chore(Firestore) add changeset for PR #8926 (#9115)
7ae5b12 Feat(Firestore) JSON serialization of types to improve SSR support. (#8926)
bb57947 fix: Add "react-native" entry point to @firebase/app (#9112)
42ac401 Fixed issue where storage wasn't passing cookies when using firebase Studio (...
f73e08b firestore: minor refactor of listener registration of "versionchange" indexed...
41e3c4c test(ai): Add gemini-2.5-flash to integration tests (#9110)
b97eab3 fix(ai): Add deprecation tag to totalBillableCharacters (#9090)
13e6cce Feat/google3 typings support (#9085)
Additional commits viewable in compare view

Updates ky from 1.8.1 to 1.8.2

Release notes

Sourced from ky's releases.

v1.8.2

Gracefully handle AbortSignal.any() not being available (#711) 24eec6f

sindresorhus/ky@v1.8.1...v1.8.2

Commits

d5710c4 1.8.2
24eec6f Test support of AbortSignal.any() (#711)
3207ecc Update readme on got differences (#704)
916f824 Meta tweaks
See full diff in compare view

Updates papaparse from 5.5.2 to 5.5.3

Commits

See full diff in compare view

Updates proj4 from 2.15.0 to 2.19.7

Release notes

Sourced from proj4's releases.

v2.19.7

What's Changed

Fix index.d.ts by @ahocevar in proj4js/proj4js#522

Full Changelog: proj4js/proj4js@v2.19.6...v2.19.7

v2.19.6

What's Changed

Re-export types for convenience by @ahocevar in proj4js/proj4js#520

Full Changelog: proj4js/proj4js@v2.19.5...v2.19.6

v2.19.5

What's Changed

Add names to Proj by @ahocevar in proj4js/proj4js#518

Full Changelog: proj4js/proj4js@v2.19.4...v2.19.5

v2.19.4

What's Changed

Make geotiff a dev depencency again by @ahocevar in proj4js/proj4js#517

Full Changelog: proj4js/proj4js@v2.19.3...v2.19.4

v2.19.3

What's Changed

Bump tar-fs from 3.0.8 to 3.0.9 by @dependabot in proj4js/proj4js#506

Fix exported types namespace by @ahocevar in proj4js/proj4js#513

Full Changelog: proj4js/proj4js@v2.19.2...v2.19.3

v2.19.2

What's Changed

Fix type imports for mgrs and geotiff by @ahocevar in proj4js/proj4js#511

Full Changelog: proj4js/proj4js@v2.19.1...v2.19.2

v2.19.1

What's Changed

Fix types by @ahocevar in proj4js/proj4js#509

Full Changelog: proj4js/proj4js@v2.19.0...v2.19.1

... (truncated)

Commits

2d603b9 build 2.19.7
9dfc6c6 Merge pull request #522 from proj4js/dts-fix
b47858c Fix index.d.ts
d896b88 Update version to 2.17.7-alpha
d1143af Merge pull request #520 from proj4js/re-export-types
343dbfb Re-export types for convenience
b457546 update version to 2.19.6-alpha
a1e2d53 Merge pull request #518 from proj4js/more-types
e82f2c3 Add names to Proj
72a3b32 update version to 2.19.5-alpha
Additional commits viewable in compare view

Updates @playwright/test from 1.52.0 to 1.54.1

Release notes

Sourced from @playwright/test's releases.

v1.54.1

Highlights

microsoft/playwright#36650 - [Regression]: 1.54.0 breaks downloading browsers when an HTTP(S) proxy is used

Browser Versions

Chromium 139.0.7258.5

Mozilla Firefox 140.0.2

WebKit 26.0

This version was also tested against the following stable channels:

Google Chrome 140

Microsoft Edge 140

v1.54.0

Highlights
New cookie property partitionKey in browserContext.cookies() and browserContext.addCookies(). This property allows to save and restore partitioned cookies. See CHIPS MDN article for more information. Note that browsers have different support and defaults for cookie partitioning.
New option noSnippets to disable code snippets in the html report.
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [['html', { noSnippets: true }]]
});
New property location in test annotations, for example in testResult.annotations and testInfo.annotations. It shows where the annotation like test.skip or test.fixme was added.
Command Line
New option --user-data-dir in multiple commands. You can specify the same user data dir to reuse browsing state, like authentication, between sessions.
npx playwright codegen --user-data-dir=./user-data
Option -gv has been removed from the npx playwright test command. Use --grep-invert instead.

npx playwright open does not open the test recorder anymore. Use npx playwright codegen instead.
Miscellaneous

Support for Node.js 16 has been removed.

Support for Node.js 18 has been deprecated, and will be removed in the future.

Browser Versions

Chromium 139.0.7258.5

Mozilla Firefox 140.0.2

WebKit 26.0

This version was also tested against the following stable channels:

... (truncated)

Commits

97b6b88 chore: mark 1.54.1 (#36655)
0071756 cherry-pick(#36654): Revert "fix: get rid of url.parse in network code" (#36654)
3da07a7 cherry-pick(#36625): chore: render overlay on top of modal dom content
b01d0d1 chore: mark v1.54.0 (#36626)
12834b0 cherry-pick(#36624): chore: update v1.54 release notes
82ce736 test: remove stale fixme/skips in capabilities spec (#36617)
fab3043 chore: v1.54 release notes (#36620)
ba32a24 chore: push action in context to the recorder app (#36611)
090e5aa chore: update WebKit version to 26.0 (#36619)
2edbe25 chore: update browser_patches to 9638cca873674fdb6c97a524be0d3ae4874f805a (#3...
Additional commits viewable in compare view

Updates @storybook/addon-essentials from 8.6.12 to 8.6.14

Release notes

Sourced from @storybook/addon-essentials's releases.

v8.6.14

8.6.14

CLI: Add skip onboarding, recommended/minimal config - #30930, thanks @shilman!

Core: Fix using dates in expect statements - #28413, thanks @yann-combarnous!

React Native Web: Fix expo router by setting JSX to automatic - #31484, thanks @dannyhw!

Test: Make sure that lit arrays are not cloned - #31435, thanks @kasperpeulen!

v8.6.13

8.6.13

Controls: Fix boxShadow on empty controls - #27193, thanks @H0onnn!

React Native Web: Update react-native-web - #31324, thanks @ndelangen!

Changelog

Sourced from @storybook/addon-essentials's changelog.

8.6.14

CLI: Add skip onboarding, recommended/minimal config - #30930, thanks @shilman!

Core: Fix using dates in expect statements - #28413, thanks @yann-combarnous!

React Native Web: Fix expo router by setting JSX to automatic - #31484, thanks @dannyhw!

Test: Make sure that lit arrays are not cloned - #31435, thanks @kasperpeulen!

8.6.13

Controls: Fix boxShadow on empty controls - #27193, thanks @H0onnn!

React Native Web: Update react-native-web - #31324, thanks @ndelangen!

Commits

ab87178 Bump version from "8.6.13" to "8.6.14" [skip ci]
8fa9049 Bump version from "8.6.12" to "8.6.13" [skip ci]
See full diff in compare view

Updates @types/node from 22.15.17 to 22.16.4

Commits

See full diff in compare view

Updates @ugrc/eslint-config from 1.2.1 to 1.2.3

Release notes

Sourced from @ugrc/eslint-config's releases.

eslint-config: v1.2.3

1.2.3 (2025-07-01)

Bug Fixes

eslint-config: update packages to work with storybook 9 (726b0f3)

eslint-config: v1.2.2

1.2.2 (2025-05-08)

Bug Fixes

eslint-config: correct server export name (e723e4d)

Commits

cec25ef chore: release main
70b5396 chore(monorepo): ignore log file
e25569a chore(monorepo): formatting
cf8efd4 feat(dart-board): deprecate dartboard
af6e541 deps: update packages
c54997d chore(tsconfig): update dev deps
6e88212 deps(uds): update packages
726b0f3 fix(eslint-config): update packages to work with storybook 9
a82c23a style: formatting
1878770 fix(layer-selector): handle view.map becoming nullish
Additional commits viewable in compare view

Updates @vitejs/plugin-react from 4.4.1 to 4.6.0

Release notes

Sourced from @vitejs/plugin-react's releases.

plugin-react@4.6.0

Add raw Rolldown support

This plugin only worked with Vite. But now it can also be used with raw Rolldown. The main purpose for using this plugin with Rolldown is to use react compiler.

plugin-react@4.5.2

Suggest @vitejs/plugin-react-oxc if rolldown-vite is detected #491

Emit a log which recommends @vitejs/plugin-react-oxc when rolldown-vite is detected to improve performance and use Oxc under the hood. The warning can be disabled by setting disableOxcRecommendation: false in the plugin options.

Use optimizeDeps.rollupOptions instead of optimizeDeps.esbuildOptions for rolldown-vite #489

This suppresses the warning about optimizeDeps.esbuildOptions being deprecated in rolldown-vite.

Add Vite 7-beta to peerDependencies range #497

React plugins are compatible with Vite 7, this removes the warning when testing the beta.

plugin-react@4.5.1

Add explicit semicolon in preambleCode #485

This fixes an edge case when using HTML minifiers that strips line breaks aggressively.

plugin-react@4.5.0

Add filter for rolldown-vite #470

Added filter so that it is more performant when running this plugin with rolldown-powered version of Vite.

Skip HMR for JSX files with hooks #480

This removes the HMR warning for hooks with JSX.

Changelog

Sourced from @vitejs/plugin-react's changelog.

4.6.0 (2025-06-23)

Add raw Rolldown support

This plugin only worked with Vite. But now it can also be used with raw Rolldown. The main purpose for using this plugin with Rolldown is to use react compiler.

4.5.2 (2025-06-10)

Suggest @vitejs/plugin-react-oxc if rolldown-vite is detected #491

Emit a log which recommends @vitejs/plugin-react-oxc when rolldown-vite is detected to improve performance and use Oxc under the hood. The warning can be disabled by setting disableOxcRecommendation: true in the plugin options.

Use optimizeDeps.rollupOptions instead of optimizeDeps.esbuildOptions for rolldown-vite #489

This suppresses the warning about optimizeDeps.esbuildOptions being deprecated in rolldown-vite.

Add Vite 7-beta to peerDependencies range #497

React plugins are compatible with Vite 7, this removes the warning when testing the beta.

4.5.1 (2025-06-03)

Add explicit semicolon in preambleCode #485

This fixes an edge case when using HTML minifiers that strips line breaks aggressively.

4.5.0 (2025-05-23)

Add filter for rolldown-vite #470

Added filter so that it is more performant when running this plugin with rolldown-powered version of Vite.

Skip HMR for JSX files with hooks #480

This removes the HMR warning for hooks with JSX.

Commits

12bd153 release: plugin-react@4.6.0
572bb94 fix(deps): update all non-major dependencies (#515)
552af8f feat(react): add raw rolldown support (#513)
dd5bd78 fix(deps): update all non-major dependencies (#498)
4951c90 docs: typo in CHANGELOG.md (#504)
bfb45ad release: plugin-react@4.5.2
6ea9398 feat: add Vite 7-beta to peerDependencies range (#497)
6db7e7c fix(deps): update all non-major dependencies (#469)
c450133 feat: suggest vite-plugin-react-oxc when using rolldown-vite (#491)
4bec551 fix: use optimizeDeps.rollupOptions for rolldown-vite (#489)
Additional commits viewable in compare view

Updates concurrently from 9.1.2 to 9.2.0

Release notes

Sourced from concurrently's releases.

v9.2.0

What's Changed

Bump esbuild from 0.23.1 to 0.25.0 in the npm_and_yarn group by @dependabot in open-cli-tools/concurrently#528

fix: don't throw when there are no commands by @gustavohenke in open-cli-tools/concurrently#532

docs: nicer quotes by @IsaacLeeWebDev in open-cli-tools/concurrently#537

Add --kill-timeout by @gustavohenke in open-cli-tools/concurrently#540

docs: fix typo by @ldeveber in open-cli-tools/concurrently#542

fix: correct typos in comments and documentation by @noritaka1166 in open-cli-tools/concurrently#544

refactor: use startsWith & simplify boolean expression by @noritaka1166 in open-cli-tools/concurrently#543

refactor: use optional chaining by @noritaka1166 in open-cli-tools/concurrently#545

Handle SIGPIPEs by @gustavohenke in open-cli-tools/concurrently#547

refactor: fix map and reduce as return values are not used by @noritaka1166 in open-cli-tools/concurrently#546

docs: fix typos in docs by @noritaka1166 in open-cli-tools/concurrently#548

chore: update jest from v29 to v30 by @noritaka1166 in open-cli-tools/concurrently#549

chore: update @types/jest from v29 to v30 by @noritaka1166 in open-cli-tools/concurrently#550

New Contributors

@IsaacLeeWebDev made their first contribution in open-cli-tools/concurrently#537

@ldeveber made their first contribution in open-cli-tools/concurrently#542

@noritaka1166 made their first contribution in open-cli-tools/concurrently#544

Full Changelog: open-cli-tools/concurrently@v9.1.2...v9.2.0

Commits

ef4bc2f 9.2.0
2458453 chore: update @types/jest from v29 to v30 (#550)
0994b38 chore: update jest from v29 to v30 (#549)
b87c0bf docs: fix typos (#548)
d8e922f Refactor map and reduce as return values are not used (#546)
97fdd54 Handle SIGPIPEs (#547)
b2cfc4f Use optional chaining (#545)
5ed21af Use startsWith & simplify boolean expression (#543)
041bcd9 correct typos in comments and documentation (#544)
d001333 docs: fix typo (#542)
Additional commits viewable in compare view

Updates esbuild from 0.25.4 to 0.25.8

Release notes

Sourced from esbuild's releases.

v0.25.8
Fix another TypeScript parsing edge case (#4248)

This fixes a regression with a change in the previous release that tries to more accurately parse TypeScript arrow functions inside the ?: operator. The regression specifically involves parsing an arrow function containing a #private identifier inside the middle of a ?: ternary operator inside a class body. This was fixed by propagating private identifier state into the parser clone used to speculatively parse the arrow function body. Here is an example of some affected code:
class CachedDict {
  #has = (a: string) => dict.has(a);
  has = window
    ? (word: string): boolean => this.#has(word)
    : this.#has;
}
Fix a regression with the parsing of source phase imports

The change in the previous release to parse source phase imports failed to properly handle the following cases:
import source from 'bar'
import source from from 'bar'
import source type foo from 'bar'
Parsing for these cases should now be fixed. The first case was incorrectly treated as a syntax error because esbuild was expecting the second case. And the last case was previously allowed but is now forbidden. TypeScript hasn't added this feature yet so it remains to be seen whether the last case will be allowed, but it's safer to disallow it for now. At least Babel doesn't allow the last case when parsing TypeScript, and Babel was involved with the source phase import specification.
v0.25.7
Parse and print JavaScript imports with an explicit phase (#4238)

This release adds basic syntax support for the defer and source import phases in JavaScript:
defer

This is a stage 3 proposal for an upcoming JavaScript feature that will provide one way to eagerly load but lazily initialize imported modules. The imported module is automatically initialized on first use. Support for this syntax will also be part of the upcoming release of TypeScript 5.9. The syntax looks like this:
import defer * as foo from "<specifier>";
const bar = await import.defer("<specifier>");
Note that this feature deliberately cannot be used with the syntax import defer foo from "<specifier>" or import defer { foo } from "<specifier>".
source

This is a stage 3 proposal for an upcoming JavaScript feature that will provide another way to eagerly load but lazily initialize imported modules. The imported module is returned in an uninitialized state. Support for this syntax may or may not be a part of TypeScript 5.9 (see this issue for details). The syntax looks like this:
import source foo from "<specifier>...
Description has been truncated

… updates Bumps the safe-app-dependencies group with 23 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.75.5` | `5.83.0` | | [downshift](https://github.com/downshift-js/downshift) | `9.0.9` | `9.0.10` | | [esri-leaflet](https://github.com/Esri/esri-leaflet) | `3.0.16` | `3.0.17` | | [firebase](https://github.com/firebase/firebase-js-sdk) | `11.7.1` | `11.10.0` | | [ky](https://github.com/sindresorhus/ky) | `1.8.1` | `1.8.2` | | [papaparse](https://github.com/mholt/PapaParse) | `5.5.2` | `5.5.3` | | [proj4](https://github.com/proj4js/proj4js) | `2.15.0` | `2.19.7` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.52.0` | `1.54.1` | | [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials) | `8.6.12` | `8.6.14` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.15.17` | `22.16.4` | | [@ugrc/eslint-config](https://github.com/agrc/kitchen-sink) | `1.2.1` | `1.2.3` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.4.1` | `4.6.0` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `9.1.2` | `9.2.0` | | [esbuild](https://github.com/evanw/esbuild) | `0.25.4` | `0.25.8` | | [eslint](https://github.com/eslint/eslint) | `9.26.0` | `9.31.0` | | [firebase-tools](https://github.com/firebase/firebase-tools) | `14.3.0` | `14.10.1` | | [globals](https://github.com/sindresorhus/globals) | `16.1.0` | `16.3.0` | | [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.6.2` | | [sass](https://github.com/sass/dart-sass) | `1.87.0` | `1.89.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.1.3` | `3.2.4` | | [dotenv](https://github.com/motdotla/dotenv) | `16.5.0` | `16.6.1` | | [firebase-admin](https://github.com/firebase/firebase-admin-node) | `13.3.0` | `13.4.0` | | [firebase-functions](https://github.com/firebase/firebase-functions) | `6.3.2` | `6.4.0` | Updates `@tanstack/react-query` from 5.75.5 to 5.83.0 - [Release notes](https://github.com/TanStack/query/releases) - [Commits](https://github.com/TanStack/query/commits/v5.83.0/packages/react-query) Updates `downshift` from 9.0.9 to 9.0.10 - [Release notes](https://github.com/downshift-js/downshift/releases) - [Changelog](https://github.com/downshift-js/downshift/blob/master/CHANGELOG.md) - [Commits](downshift-js/downshift@v9.0.9...v9.0.10) Updates `esri-leaflet` from 3.0.16 to 3.0.17 - [Release notes](https://github.com/Esri/esri-leaflet/releases) - [Changelog](https://github.com/Esri/esri-leaflet/blob/master/CHANGELOG.md) - [Commits](Esri/esri-leaflet@v3.0.16...v3.0.17) Updates `firebase` from 11.7.1 to 11.10.0 - [Release notes](https://github.com/firebase/firebase-js-sdk/releases) - [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@11.7.1...firebase@11.10.0) Updates `ky` from 1.8.1 to 1.8.2 - [Release notes](https://github.com/sindresorhus/ky/releases) - [Commits](sindresorhus/ky@v1.8.1...v1.8.2) Updates `papaparse` from 5.5.2 to 5.5.3 - [Release notes](https://github.com/mholt/PapaParse/releases) - [Commits](https://github.com/mholt/PapaParse/commits) Updates `proj4` from 2.15.0 to 2.19.7 - [Release notes](https://github.com/proj4js/proj4js/releases) - [Changelog](https://github.com/proj4js/proj4js/blob/master/changelog.md) - [Commits](proj4js/proj4js@v2.15.0...v2.19.7) Updates `@playwright/test` from 1.52.0 to 1.54.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.52.0...v1.54.1) Updates `@storybook/addon-essentials` from 8.6.12 to 8.6.14 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.14/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.6.14/code/addons/essentials) Updates `@types/node` from 22.15.17 to 22.16.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@ugrc/eslint-config` from 1.2.1 to 1.2.3 - [Release notes](https://github.com/agrc/kitchen-sink/releases) - [Changelog](https://github.com/agrc/kitchen-sink/blob/main/release-please-config.json) - [Commits](agrc/kitchen-sink@eslint-config-v1.2.1...eslint-config-v1.2.3) Updates `@vitejs/plugin-react` from 4.4.1 to 4.6.0 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@4.6.0/packages/plugin-react) Updates `concurrently` from 9.1.2 to 9.2.0 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v9.1.2...v9.2.0) Updates `esbuild` from 0.25.4 to 0.25.8 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.25.4...v0.25.8) Updates `eslint` from 9.26.0 to 9.31.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v9.26.0...v9.31.0) Updates `firebase-tools` from 14.3.0 to 14.10.1 - [Release notes](https://github.com/firebase/firebase-tools/releases) - [Changelog](https://github.com/firebase/firebase-tools/blob/master/CHANGELOG.md) - [Commits](firebase/firebase-tools@v14.3.0...v14.10.1) Updates `globals` from 16.1.0 to 16.3.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.1.0...v16.3.0) Updates `prettier` from 3.5.3 to 3.6.2 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.5.3...3.6.2) Updates `sass` from 1.87.0 to 1.89.2 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.87.0...1.89.2) Updates `vitest` from 3.1.3 to 3.2.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.4/packages/vitest) Updates `dotenv` from 16.5.0 to 16.6.1 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.5.0...v16.6.1) Updates `firebase-admin` from 13.3.0 to 13.4.0 - [Release notes](https://github.com/firebase/firebase-admin-node/releases) - [Changelog](https://github.com/firebase/firebase-admin-node/blob/master/CHANGELOG.md) - [Commits](firebase/firebase-admin-node@v13.3.0...v13.4.0) Updates `firebase-functions` from 6.3.2 to 6.4.0 - [Release notes](https://github.com/firebase/firebase-functions/releases) - [Changelog](https://github.com/firebase/firebase-functions/blob/master/tsconfig.release.json) - [Commits](firebase/firebase-functions@v6.3.2...v6.4.0) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: downshift dependency-version: 9.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-app-dependencies - dependency-name: esri-leaflet dependency-version: 3.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-app-dependencies - dependency-name: firebase dependency-version: 11.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: ky dependency-version: 1.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-app-dependencies - dependency-name: papaparse dependency-version: 5.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-app-dependencies - dependency-name: proj4 dependency-version: 2.19.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: "@playwright/test" dependency-version: 1.54.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: "@storybook/addon-essentials" dependency-version: 8.6.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe-app-dependencies - dependency-name: "@types/node" dependency-version: 22.16.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: "@ugrc/eslint-config" dependency-version: 1.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe-app-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 4.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: concurrently dependency-version: 9.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: esbuild dependency-version: 0.25.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe-app-dependencies - dependency-name: eslint dependency-version: 9.31.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: firebase-tools dependency-version: 14.10.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: globals dependency-version: 16.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: prettier dependency-version: 3.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: sass dependency-version: 1.89.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: vitest dependency-version: 3.2.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: dotenv dependency-version: 16.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: firebase-admin dependency-version: 13.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-app-dependencies - dependency-name: firebase-functions dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-app-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-07-30T14:55:03Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 30, 2025

dependabot bot had a problem deploying to dev July 30, 2025 14:46 Failure

dependabot bot closed this Jul 30, 2025

dependabot bot deleted the dependabot/npm_and_yarn/safe-app-dependencies-d0776002f1 branch July 30, 2025 14:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the safe-app-dependencies group across 1 directory with 23 updates #484

deps: bump the safe-app-dependencies group across 1 directory with 23 updates #484

Uh oh!

dependabot bot commented on behalf of github Jul 30, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jul 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

deps: bump the safe-app-dependencies group across 1 directory with 23 updates #484

deps: bump the safe-app-dependencies group across 1 directory with 23 updates #484

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.83.0

Changes

Feat

Test

Packages

v9.0.10

9.0.10 (2025-07-21)

Bug Fixes

v3.0.17

Fixed

[3.0.17] - 2025-06-25

Fixed

firebase@11.10.0

What's Changed

firebase@11.10.0

Minor Changes

Patch Changes

@​firebase/firestore@​4.8.0

Minor Changes

v1.8.2

v2.19.7

What's Changed

v2.19.6

What's Changed

v2.19.5

What's Changed

v2.19.4

What's Changed

v2.19.3

What's Changed

v2.19.2

What's Changed

v2.19.1

What's Changed

v1.54.1

Highlights

Browser Versions

v1.54.0

Highlights

Command Line

Miscellaneous

Browser Versions

v8.6.14

8.6.14

v8.6.13

8.6.13

8.6.14

8.6.13

eslint-config: v1.2.3

1.2.3 (2025-07-01)

Bug Fixes

eslint-config: v1.2.2

1.2.2 (2025-05-08)

Bug Fixes

plugin-react@4.6.0

Add raw Rolldown support

plugin-react@4.5.2

Suggest @vitejs/plugin-react-oxc if rolldown-vite is detected #491

Use optimizeDeps.rollupOptions instead of optimizeDeps.esbuildOptions for rolldown-vite #489

Add Vite 7-beta to peerDependencies range #497

plugin-react@4.5.1

Add explicit semicolon in preambleCode #485

plugin-react@4.5.0

Add filter for rolldown-vite #470

Skip HMR for JSX files with hooks #480

4.6.0 (2025-06-23)

Add raw Rolldown support

4.5.2 (2025-06-10)

Suggest @vitejs/plugin-react-oxc if rolldown-vite is detected #491

Use optimizeDeps.rollupOptions instead of optimizeDeps.esbuildOptions for rolldown-vite #489

Add Vite 7-beta to peerDependencies range #497

4.5.1 (2025-06-03)

Add explicit semicolon in preambleCode #485

4.5.0 (2025-05-23)

dependabot bot commented on behalf of github Jul 30, 2025 •

edited

Loading

`@firebase/firestore@4`.8.0

Suggest `@vitejs/plugin-react-oxc` if rolldown-vite is detected #491

Use `optimizeDeps.rollupOptions` instead of `optimizeDeps.esbuildOptions` for rolldown-vite #489

Add `filter` for rolldown-vite #470

Suggest `@vitejs/plugin-react-oxc` if rolldown-vite is detected #491

Use `optimizeDeps.rollupOptions` instead of `optimizeDeps.esbuildOptions` for rolldown-vite #489

Add `filter` for rolldown-vite #470