Skip to content

Javascript dependency: Bump the web-javascript-minor-and-patch group in /web with 8 updates - #10758

Merged
dpage merged 1 commit into
masterfrom
dependabot/npm_and_yarn/web/web-javascript-minor-and-patch-db4ca11dc3
Nov 6, 2026
Merged

Javascript dependency: Bump the web-javascript-minor-and-patch group in /web with 8 updates#10758
dpage merged 1 commit into
masterfrom
dependabot/npm_and_yarn/web/web-javascript-minor-and-patch-db4ca11dc3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-javascript-minor-and-patch group in /web with 8 updates:

Package From To
@mui/x-date-pickers 9.16.0 9.17.0
@tanstack/react-query 5.105.1 5.105.3
@tanstack/react-virtual 3.14.23 3.14.25
hotkeys-js 4.0.8 4.0.12
marked 18.1.2 18.1.3
globals 17.13.0 17.14.0
webpack-bundle-analyzer 5.4.0 5.4.1
webpack-cli 7.2.3 7.3.1

Updates @mui/x-date-pickers from 9.16.0 to 9.17.0

Release notes

Sourced from @​mui/x-date-pickers's releases.

v9.17.0

We'd like to extend a big thank you to the 20 contributors who made this release possible. Here are some highlights ✨:

  • 🧮 Computed columns in the Data Grid Premium

    computed-columns-demo.mp4

  • 👆 Data Grid column reordering on touch and pen devices

  • ↔️ Right-to-left (RTL) support in the Event Calendar and the Event Timeline

  • 🕒 Fix recurring events, drag and drop, and the time axis of the Scheduler across DST transitions

  • ⚠️ Recurring events and dependencies are now opt-in in the Event Timeline

  • 🌍 The Scheduler formats dates with Intl: dateLocale takes a locale string like "fr-FR"

  • 🐞 Bugfixes

  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​adamowski10, @​Anexus5919, @​b84330808, @​chanellebingham, @​costajohnt, @​dasjideepak, @​mateuseap, @​minwookshin, @​mustafajw07

The following team members contributed to this release: @​flaviendelangle, @​hasdfa, @​Janpot, @​JCQuintas, @​LukasTy, @​MBilalShafi, @​michelengelen, @​noraleonte, @​rita-codes, @​romgrk, @​ZeeshanTamboli

Data Grid

@mui/[email protected]

@mui/[email protected] pro

Same changes as in @mui/[email protected], plus:

@mui/[email protected] premium

Same changes as in @mui/[email protected], plus:

Date and Time Pickers

... (truncated)

Changelog

Sourced from @​mui/x-date-pickers's changelog.

9.17.0

Oct 30, 2026

We'd like to extend a big thank you to the 20 contributors who made this release possible. Here are some highlights ✨:

  • 🧮 Computed columns in the Data Grid Premium

    computed-columns-demo.mp4

  • 👆 Data Grid column reordering on touch and pen devices

  • ↔️ Right-to-left (RTL) support in the Event Calendar and the Event Timeline

  • 🕒 Fix recurring events, drag and drop, and the time axis of the Scheduler across DST transitions

  • ⚠️ Recurring events and dependencies are now opt-in in the Event Timeline

  • 🌍 The Scheduler formats dates with Intl: dateLocale takes a locale string like "fr-FR"

  • 🐞 Bugfixes

  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​adamowski10, @​Anexus5919, @​b84330808, @​chanellebingham, @​costajohnt, @​dasjideepak, @​mateuseap, @​minwookshin, @​mustafajw07

The following team members contributed to this release: @​flaviendelangle, @​hasdfa, @​Janpot, @​JCQuintas, @​LukasTy, @​MBilalShafi, @​michelengelen, @​noraleonte, @​rita-codes, @​romgrk, @​ZeeshanTamboli

Data Grid

@mui/[email protected]

@mui/[email protected] pro

Same changes as in @mui/[email protected], plus:

@mui/[email protected] premium

Same changes as in @mui/[email protected], plus:

... (truncated)

Commits

Updates @tanstack/react-query from 5.105.1 to 5.105.3

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.105.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.105.3
    • @​tanstack/react-query@​5.105.3

@​tanstack/react-query-next-experimental@​5.105.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.105.3

@​tanstack/react-query-persist-client@​5.105.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.105.3
    • @​tanstack/react-query@​5.105.3

@​tanstack/react-query@​5.105.3

Patch Changes

@​tanstack/react-query-devtools@​5.105.2

Patch Changes

@​tanstack/react-query-next-experimental@​5.105.2

Patch Changes

@​tanstack/react-query-persist-client@​5.105.2

Patch Changes

  • Updated dependencies [1e1caa5, 8d0dc27]:
    • @​tanstack/react-query@​5.105.2
    • @​tanstack/query-persist-client-core@​5.105.2

@​tanstack/react-query@​5.105.2

Patch Changes

  • #12230 1e1caa5 - Update the observer options before subscribing so revealing an <Activity> tree whose query key changed while hidden no longer fetches the previous key.

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.105.3

Patch Changes

5.105.2

Patch Changes

  • #12230 1e1caa5 - Update the observer options before subscribing so revealing an <Activity> tree whose query key changed while hidden no longer fetches the previous key.

  • #12480 8d0dc27 - Exclude status from the filters accepted by QueryClient.isMutating, useIsMutating, and injectIsMutating. These APIs always count mutations with status: 'pending'.

  • Updated dependencies [2ee2fd9, 8d0dc27, e69cac6, f2215d2, 86e7957, b6576b3, af0e0ef, 05d9b6a]:

    • @​tanstack/query-core@​5.105.2
Commits

Updates @tanstack/react-virtual from 3.14.23 to 3.14.25

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.25

Patch Changes

  • Updated dependencies [9d7ff67]:
    • @​tanstack/virtual-core@​3.19.10

@​tanstack/react-virtual@​3.14.24

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.25

Patch Changes

  • Updated dependencies [9d7ff67]:
    • @​tanstack/virtual-core@​3.19.10

3.14.24

Patch Changes

Commits

Updates hotkeys-js from 4.0.8 to 4.0.12

Release notes

Sourced from hotkeys-js's releases.

v4.0.12

Buy me a coffee npm bundle size npm version

Documentation v4.0.12: https://raw.githack.com/jaywcjlove/hotkeys/2f3498e/index.html
Comparing Changes: jaywcjlove/hotkeys-js@v4.0.12...v4.0.12

npm i [email protected]
  • 💄 chore(deps): update devDependencies db47a92
  • 🐞 fix: ignore text fields inside shadow roots in the default filter ref:0 (#555) dd0700f @​blueDaydreaming725
  • 🐞 fix: keep numpad key codes for num_* bindings (#554) 4379eeb @​nk-batman21

v4.0.11

Buy me a coffee npm bundle size npm version

Documentation v4.0.11: https://raw.githack.com/jaywcjlove/hotkeys/e6d2543/index.html
Comparing Changes: jaywcjlove/hotkeys-js@v4.0.11...v4.0.11

npm i [email protected]

v4.0.10

Buy me a coffee npm bundle size npm version

Documentation v4.0.10: https://raw.githack.com/jaywcjlove/hotkeys/d1c5859/index.html
Comparing Changes: jaywcjlove/hotkeys-js@v4.0.10...v4.0.10

npm i [email protected]

v4.0.9

Buy me a coffee npm bundle size npm version

Documentation v4.0.9: https://raw.githack.com/jaywcjlove/hotkeys/ece8cbd/index.html
Comparing Changes: jaywcjlove/hotkeys-js@v4.0.9...v4.0.9

npm i [email protected]
Commits

Updates marked from 18.1.2 to 18.1.3

Release notes

Sourced from marked's releases.

v18.1.3

18.1.3 (2026-11-02)

Bug Fixes

  • allow trailing tabs after a setext heading underline (#4152) (1f1b480)
  • avoid quadratic scan for unmatched emphasis delimiters (#4103) (eab1e48), closes #4099
  • await promise arrays from walkTokens extensions (#4153) (c38704c)
  • cli: honor defaults and config when outputting tokens (#4146) (9470e8f)
  • collapse internal whitespace when normalizing link labels (#4157) (02c73e8)
  • do not allow a blank line inside a link reference definition label (#4165) (f3d21af)
  • don't treat an escaped ) or quote as an inline link or title closer (#4151) (9cb84e0)
  • end a list item before a lazy line after an html block (#4159) (7ba42f4)
  • end blockquote before a lazy line after a table (#4161) (e7dcf52)
  • isolate extension names from Object.prototype (#4177) (5cb03bd)
  • keep a block quote open after a lazy line in a nested block quote (#4175) (1d7272f)
  • only close a code fence with the opening fence character (#4164) (1d4d8fe)
  • preserve zero-valued custom renderer results (#4162) (e43ceef)
  • recognize task list items when a tab follows the checkbox (#4163) (64a299d)
  • start a GFM www autolink only at a word boundary (#4166) (84beefb)

Performance Improvements

Commits
  • ba50aa9 chore(release): 18.1.3 [skip ci]
  • ec34be8 chore(deps-dev): bump eslint from 10.13.0 to 10.14.0 (#4182)
  • e4c7453 chore(deps-dev): bump recheck from 4.6.1 to 4.6.2 (#4181)
  • 1d7272f fix: keep a block quote open after a lazy line in a nested block quote (#4175)
  • 2d4a23c perf: fix backtracking in padantic html (#4173)
  • 5cb03bd fix: isolate extension names from Object.prototype (#4177)
  • f3d21af fix: do not allow a blank line inside a link reference definition label (#4165)
  • 1d4d8fe fix: only close a code fence with the opening fence character (#4164)
  • 64a299d fix: recognize task list items when a tab follows the checkbox (#4163)
  • e43ceef fix: preserve zero-valued custom renderer results (#4162)
  • Additional commits viewable in compare view

Updates globals from 17.13.0 to 17.14.0

Release notes

Sourced from globals's releases.

v17.14.0

  • Update globals (2026-11-01) (#355) 7abfb5d

sindresorhus/globals@v17.13.0...v17.14.0

Commits

Updates webpack-bundle-analyzer from 5.4.0 to 5.4.1

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.4.1

Patch Changes

  • Fix TypeError: Cannot read property 'forEach' of undefined when child compilations or entrypoints have undefined or missing assets. (by @​ronakmaheshwari in #741)

  • Fix context menu background and border colors in dark mode. (by @​ronakmaheshwari in #744)

  • Fix the search results total size counting modules twice when both a directory and modules inside it match the search. (by @​GM-Andy in #743)

  • Keep modules in the report when their names use Windows path separators, which happens when a module is resolved from another drive and Webpack keeps its absolute path as the module name. (by @​PerryLink in #745)

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.4.1

Patch Changes

  • Fix TypeError: Cannot read property 'forEach' of undefined when child compilations or entrypoints have undefined or missing assets. (by @​ronakmaheshwari in #741)

  • Fix context menu background and border colors in dark mode. (by @​ronakmaheshwari in #744)

  • Fix the search results total size counting modules twice when both a directory and modules inside it match the search. (by @​GM-Andy in #743)

  • Keep modules in the report when their names use Windows path separators, which happens when a module is resolved from another drive and Webpack keeps its absolute path as the module name. (by @​PerryLink in #745)

Commits
  • 9708edb chore(release): new release (#742)
  • 7eca787 fix: split module paths on both separators so Windows modules are not dropped...
  • d5f8eea Fix/context menu theme (#744)
  • 077aa1f fix: don't count modules inside found directories twice in search total (#743)
  • 0ebe1e5 test: add coverage for generateStatsFile and statsFilename (#735)
  • c6f85b2 fix: prevent TypeError when child compilations have missing assets (#741)
  • 6046503 test: add test coverage for analyzerMode (#740)
  • See full diff in compare view

Updates webpack-cli from 7.2.3 to 7.3.1

Release notes

Sourced from webpack-cli's releases.

[email protected]

Patch Changes

  • fix: detect missing package managers and failed installations, without a lock file the CLI chose npm even when it wasn't installed instead of yarn or pnpm, and it continued after a package failed to install (by @​alexander-akait in #4889)

  • chore: replace the import-local and cross-spawn dependencies with Node.js built-ins (by @​alexander-akait in #4889)

  • chore: load configuration files with import() instead of eval (by @​alexander-akait in #4893)

[email protected]

Minor Changes

  • feat: run webpack-dev-server@6 as a compiler plugin. The CLI drives watch compilation, prints build stats and closes the compiler on shutdown. Older dev servers continue to manage their own compilation. (by @​bjohansebas in #4847)

    In multi-compiler mode, every dev server serves all compilers by default. Use the new --dev-server-per-compiler option of webpack serve to serve each compiler only by the dev server from its own configuration.

  • feat: add shell completions for zsh, bash, fish and powershell through the complete command (by @​alexander-akait in #4840)

Patch Changes

  • fix: keep multi-compiler options such as parallelism and plugins set on a configuration array when --config-name or extends rebuild it (by @​alexander-akait in #4871)

  • perf: share the compile cache with child processes and worker threads, such as minimizer workers, so they start warm too (by @​alexander-akait in #4872)

  • fix: assign distinct ports to dev servers of configurations that share the same devServer object. (by @​alexander-akait in #4886)

Changelog

Sourced from webpack-cli's changelog.

7.3.1

Patch Changes

  • fix: detect missing package managers and failed installations, without a lock file the CLI chose npm even when it wasn't installed instead of yarn or pnpm, and it continued after a package failed to install (by @​alexander-akait in #4889)

  • chore: replace the import-local and cross-spawn dependencies with Node.js built-ins (by @​alexander-akait in #4889)

  • chore: load configuration files with import() instead of eval (by @​alexander-akait in #4893)

7.3.0

Minor Changes

  • feat: run webpack-dev-server@6 as a compiler plugin. The CLI drives watch compilation, prints build stats and closes the compiler on shutdown. Older dev servers continue to manage their own compilation. (by @​bjohansebas in #4847)

    In multi-compiler mode, every dev server serves all compilers by default. Use the new --dev-server-per-compiler option of webpack serve to serve each compiler only by the dev server from its own configuration.

  • feat: add shell completions for zsh, bash, fish and powershell through the complete command (by @​alexander-akait in #4840)

Patch Changes

  • fix: keep multi-compiler options such as parallelism and plugins set on a configuration array when --config-name or extends rebuild it (by @​alexander-akait in #4871)

  • perf: share the compile cache with child processes and worker threads, such as minimizer workers, so they start warm too (by @​alexander-akait in #4872)

  • fix: assign distinct ports to dev servers of configurations that share the same devServer object. (by @​alexander-akait in #4886)

Commits
  • 3a695da chore(release): new release (#4891)
  • 4a88999 chore: load configuration files without eval (#4893)
  • 02a85ac chore(deps): bump the dependencies group across 1 directory with 5 updates (#...
  • 3942417 chore: replace import-local and cross-spawn with Node.js built-ins (#4889)
  • 349b660 chore(release): new release (#4841)
  • d4ee8bd fix: assign distinct ports to dev servers sharing devServer options (#4886)
  • 9bcb6d5 feat: run webpack-dev-server as a compiler plugin (#4847)
  • b32b0c9 test: make the generator and dev server tests stable (#4885)
  • 351f1c9 chore(deps): bump the dependencies group across 1 directory with 9 updates (#...
  • 701e74b chore(deps-dev): bump del-cli from 7.0.0 to 8.0.1 (#4880)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Javascript dependency: Bump the web-javascript-minor-and-patch group
e5006fa 
Bumps the web-javascript-minor-and-patch group in /web with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@mui/x-date-pickers](https://github.com/mui/mui-x/tree/HEAD/packages/x-date-pickers) | `9.16.0` | `9.17.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.105.1` | `5.105.3` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.23` | `3.14.25` |
| [hotkeys-js](https://github.com/jaywcjlove/hotkeys-js) | `4.0.8` | `4.0.12` |
| [marked](https://github.com/markedjs/marked) | `18.1.2` | `18.1.3` |
| [globals](https://github.com/sindresorhus/globals) | `17.13.0` | `17.14.0` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.4.0` | `5.4.1` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.3` | `7.3.1` |


Updates `@mui/x-date-pickers` from 9.16.0 to 9.17.0
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v9.17.0/packages/x-date-pickers)

Updates `@tanstack/react-query` from 5.105.1 to 5.105.3
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query)

Updates `@tanstack/react-virtual` from 3.14.23 to 3.14.25
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/[email protected]/packages/react-virtual)

Updates `hotkeys-js` from 4.0.8 to 4.0.12
- [Release notes](https://github.com/jaywcjlove/hotkeys-js/releases)
- [Commits](jaywcjlove/hotkeys-js@v4.0.8...v4.0.12)

Updates `marked` from 18.1.2 to 18.1.3
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.1.2...v18.1.3)

Updates `globals` from 17.13.0 to 17.14.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.13.0...v17.14.0)

Updates `webpack-bundle-analyzer` from 5.4.0 to 5.4.1
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.4.0...v5.4.1)

Updates `webpack-cli` from 7.2.3 to 7.3.1
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/[email protected]@7.3.1)

---
updated-dependencies:
- dependency-name: "@mui/x-date-pickers"
  dependency-version: 9.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.105.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: hotkeys-js
  dependency-version: 4.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: marked
  dependency-version: 18.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: globals
  dependency-version: 17.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: webpack-cli
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Nov 6, 2026
@coderabbitai

coderabbitai Bot commented Nov 6, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@dpage
dpage merged commit 40ba48d into master Nov 6, 2026
18 checks passed
@dpage
dpage deleted the dependabot/npm_and_yarn/web/web-javascript-minor-and-patch-db4ca11dc3 branch November 6, 2026 14:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dpage