Skip to content

[security](deps): bump react-day-picker from 9.13.0 to 9.14.0#123

Merged
jscraik merged 1 commit intomainfrom
dependabot/npm_and_yarn/react-day-picker-9.14.0
Mar 19, 2026
Merged

[security](deps): bump react-day-picker from 9.13.0 to 9.14.0#123
jscraik merged 1 commit intomainfrom
dependabot/npm_and_yarn/react-day-picker-9.14.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps react-day-picker from 9.13.0 to 9.14.0.

Release notes

Sourced from react-day-picker's releases.

v9.14.0

This release introduces a new resetOnSelect prop and adds support for the Hijri calendar.

Resetting Selections in Range Mode

When in range selection mode, use the new resetOnSelect prop to start a new range when a full range is already selected.

Hijri Calendar

To use the Hijri (Umm al-Qura) calendar, import DayPicker from react-day-picker/hijri:

import { DayPicker } from "react-day-picker/hijri";
export function HijriCalendar() {
return <DayPicker />;
}

Read more in the documentation and play with it in playground.

What's Changed

New Contributors

Full Changelog: gpbl/react-day-picker@v9.13.2...v9.14.0

v9.13.2

What's Changed

New Contributors

Full Changelog: gpbl/react-day-picker@v9.13.1...v9.13.2

v9.13.1

Persian calendar improvements.

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from react-day-picker's changelog.

v9.14.0

Release date: 2026-02-26

This release introduces a new resetOnSelect prop and adds support for the Hijri calendar.

Resetting Selections in Range Mode

When in range selection mode, use the resetOnSelect prop to start a new range when a full range is already selected.

Hijri Calendar

To use the Hijri (Umm al-Qura) calendar, import DayPicker from react-day-picker/hijri:

import { DayPicker } from "react-day-picker/hijri";
export function HijriCalendar() {
return <DayPicker />;
}

Read more in the documentation and play with it in playground.

What's Changed

  • feat: add Hijri calendar support (Umm al-Qura) by @​ws-rush in #2904
  • feat: add resetOnSelect prop to reset date range when selecting date with completed range by @​rodgobbi in #2906
  • feat: add default lang prop to DayPicker root element by @​gpbl in #2907

v9.13.2

Release date: 2026-02-10

This release fixes the style.css type declaration export and corrects labels for Northern Sami (se) and Japanese Hiragana (ja-Hira) locales.

What's Changed

  • fix(build): add correct type declaration for style.css export by @​NotNestor in #2897
  • fix(locale): correct Northern Sami (se) and Japanese Hiragana (ja-Hira) labels by @​gpbl in #2898
Commits
  • a5b0c43 Prepare 9.14.0 package metadata
  • 758f604 feat: add lang attribute to DayPicker root (#2907)
  • 0893c96 feat: New resetOnSelect prop to reset date range when selecting date with com...
  • 8e69eb1 feat: Add Hijri calendar support (Umm al-Qura) (#2904)
  • 091ca6f chore: remove performance-tests project (#2902)
  • 6df3193 chore: update workspace dependencies (#2901)
  • 5208d3f chore: update workspace dependencies (#2900)
  • 38e1b27 fix(locale): correct Northern Sami (se). and Japanese Hiragana (ja-Hira) labe...
  • d68dc63 build: bump v9.13.2
  • 12cf80b fix: add correct type declaration for style.css export (#2897)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Dependency updates label Mar 16, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 16, 2026

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot requested a review from jscraik as a code owner March 16, 2026 06:13
@dependabot dependabot bot added the dependencies Dependency updates label Mar 16, 2026
@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Mar 16, 2026

Required keyword not found in PR title or description.

@socket-security
Copy link
Copy Markdown

socket-security bot commented Mar 16, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedtypescript@​5.9.31001009010090

View full report

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e248c43223

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

"motion": "^11.0.0",
"next-themes": "0.4.6",
"react-day-picker": "^9.13.0",
"react-day-picker": "^9.14.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Update FORJAMIE.md for dependency/tooling changes

This commit changes runtime/tooling inputs by bumping react-day-picker, but it does not update FORJAMIE.md in the same change-set. The repo rule in /workspace/Design-System/AGENTS.md marks this as a hard requirement for any behavior/structure/config/tooling change, so leaving it out makes the required project “living map” inaccurate for future maintenance.

Useful? React with 👍 / 👎.

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@codex fix

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

  • Updated FORJAMIE.md status metadata so the living-map reflects the current dependency follow-up context (Last updated, tests note, and open PR status). FORJAMIE.mdL19-L28
  • Updated the dependency hygiene section to explicitly track the react-day-picker 9.14.0 PR context, matching the reviewer’s request about doc parity for tooling/runtime-input changes. FORJAMIE.mdL70-L76
  • Added a learning note that Dependabot-only dependency bumps still require FORJAMIE.md updates in the same change stream. FORJAMIE.mdL103-L107
  • Added a new dated “Recent changes” entry documenting what changed, why, and impact for this follow-up fix. FORJAMIE.mdL115-L119
  • Synced machine-readable metadata (last_updated, open_prs) to keep the structured footer consistent with the human-readable status block. FORJAMIE.mdL144-L150
  • Committed the change on the current branch (1139399) and created the follow-up PR via the make_pr tool.

Testing

  • curl -s https://api.github.com/repos/gpbl/react-day-picker/releases/tags/v9.14.0 | jq -r '.tag_name, .published_at'
  • ⚠️ source scripts/codex-preflight.sh && preflight_repo (preflight passed, but emitted mise trust warnings before trust was applied)
  • mise trust /workspace/Design-System/mise.toml && mise list | head -n 20
  • git diff -- FORJAMIE.md | sed -n '1,220p'
  • git add FORJAMIE.md && git commit --amend --no-edit

View task →

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/react-day-picker-9.14.0 branch from e248c43 to 17b6ee3 Compare March 17, 2026 20:34
@jscraik
Copy link
Copy Markdown
Owner

jscraik commented Mar 18, 2026

@dependabot rebase

Bumps [react-day-picker](https://github.com/gpbl/react-day-picker) from 9.13.0 to 9.14.0.
- [Release notes](https://github.com/gpbl/react-day-picker/releases)
- [Changelog](https://github.com/gpbl/react-day-picker/blob/main/CHANGELOG.md)
- [Commits](gpbl/react-day-picker@v9.13.0...v9.14.0)

---
updated-dependencies:
- dependency-name: react-day-picker
  dependency-version: 9.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/react-day-picker-9.14.0 branch from 17b6ee3 to 733416c Compare March 18, 2026 03:10
@jscraik jscraik merged commit 67dae07 into main Mar 19, 2026
10 checks passed
@jscraik jscraik deleted the dependabot/npm_and_yarn/react-day-picker-9.14.0 branch March 19, 2026 00:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant