Skip to content

Bump the frontends-prod group across 1 directory with 5 updates#187

Merged
oharsta merged 1 commit intomainfrom
dependabot/npm_and_yarn/client/frontends-prod-484e80038e
Sep 19, 2025
Merged

Bump the frontends-prod group across 1 directory with 5 updates#187
oharsta merged 1 commit intomainfrom
dependabot/npm_and_yarn/client/frontends-prod-484e80038e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Sep 18, 2025

Bumps the frontends-prod group with 5 updates in the /client directory:

Package From To
dompurify 3.2.6 3.2.7
isomorphic-dompurify 2.26.0 2.27.0
luxon 3.7.1 3.7.2
react-router-dom 7.8.1 7.9.1
use-debounce 10.0.5 10.0.6

Updates dompurify from 3.2.6 to 3.2.7

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.7

  • Added new attributes and elements to default allow-list, thanks @​elrion018
  • Added tagName parameter to custom element attributeNameCheck, thanks @​nelstrom
  • Added better check for animated href attributes, thanks @​llamakko
  • Updated and improved the bundled types, thanks @​ssi02014
  • Updated several tests to better align with new browser encoding behaviors
  • Improved the handling of potentially risky content inside CDATA elements, thanks @​securityMB & @​terjanq
  • Improved the regular expression for raw-text elements to cover textareas, thanks @​securityMB & @​terjanq
Commits
  • eaa0bdb Merge pull request #1144 from cure53/main
  • f712593 fix: removed a possibly dossy regex
  • eb9b3b6 Merge branch 'main' of github.com:cure53/DOMPurify
  • ce006f7 chore: Preparing 3.2.7 release
  • ef0e0cb chore: Preparing 3.2.6 release
  • 2f09cd3 Update README.md
  • 6a795bc Merge pull request #1142 from cure53/dependabot/github_actions/actions/setup-...
  • 2458bbd build(deps): bump actions/setup-node from 4 to 5
  • e43d3f3 Merge pull request #1136 from cure53/dependabot/github_actions/actions/checko...
  • 6f5be37 build(deps): bump actions/checkout from 4 to 5
  • Additional commits viewable in compare view

Updates isomorphic-dompurify from 2.26.0 to 2.27.0

Release notes

Sourced from isomorphic-dompurify's releases.

2.27.0: Updated jsdom dependency and dropped support for Node < 20

Changelog

  • Updated jsdom which dropped support for Node < 20.
  • Updated dev deps.

See the complete changelog for more details.

Release

2.27.0

Commits
  • a667dd5 chore: Updated deps. Dropped support for Node > 20 (by jsdom). Incremented pr...
  • 35f934b Merge pull request #352 from kkomelin/dependabot/npm_and_yarn/jsdom-27.0.0
  • bd4b650 chore(deps): bump jsdom from 26.1.0 to 27.0.0
  • d549d39 Merge pull request #351 from kkomelin/dependabot/npm_and_yarn/terser-5.44.0
  • 9d34d9d chore(deps-dev): bump terser from 5.43.1 to 5.44.0
  • aaa9cbe Removed bundlephobia badge from reamde because it's not been working for a wh...
  • See full diff in compare view

Updates luxon from 3.7.1 to 3.7.2

Changelog

Sourced from luxon's changelog.

3.7.2 (2025-07-09)

  • Fix ES6 packaging
Commits
  • 4262a38 Version 3.7.2
  • 738144d Fix the build ES6 code having the wrong file extension and use it in package....
  • See full diff in compare view

Updates react-router-dom from 7.8.1 to 7.9.1

Release notes

Sourced from react-router-dom's releases.

react-router-dom-v5-compat@6.4.0-pre.15

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.15
    • react-router-dom@6.4.0-pre.15

react-router-dom-v5-compat@6.4.0-pre.11

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.11
    • react-router-dom@6.4.0-pre.11

react-router-dom-v5-compat@6.4.0-pre.10

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.10
    • react-router-dom@6.4.0-pre.10
Changelog

Sourced from react-router-dom's changelog.

7.9.1

Patch Changes

  • Updated dependencies:
    • react-router@7.9.1

7.9.0

Patch Changes

  • Updated dependencies:
    • react-router@7.9.0

7.8.2

Patch Changes

  • Updated dependencies:
    • react-router@7.8.2
Commits

Updates use-debounce from 10.0.5 to 10.0.6

Release notes

Sourced from use-debounce's releases.

10.0.6

What's Changed

Full Changelog: xnimorz/use-debounce@10.0.5...10.0.6

Commits
  • d2481ea Merge pull request #199 from elrion018/fix/cancel-ispending-ui-update
  • 309dcc8 refactor: simplify cancel() logic in useDebouncedCallback
  • f4bcd87 test: add test for cancel() triggering UI update
  • 86da92f fix: trigger UI update when cancel() is called
  • f1c7511 Merge pull request #198 from xnimorz/dependabot/npm_and_yarn/form-data-4.0.4
  • 46085fa Bump form-data from 4.0.0 to 4.0.4
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the frontends-prod group across 1 directory with 5 updates
5ff6152 
Bumps the frontends-prod group with 5 updates in the /client directory:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.2.6` | `3.2.7` |
| [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `2.26.0` | `2.27.0` |
| [luxon](https://github.com/moment/luxon) | `3.7.1` | `3.7.2` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.8.1` | `7.9.1` |
| [use-debounce](https://github.com/xnimorz/use-debounce) | `10.0.5` | `10.0.6` |



Updates `dompurify` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.2.6...3.2.7)

Updates `isomorphic-dompurify` from 2.26.0 to 2.27.0
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@2.26.0...2.27.0)

Updates `luxon` from 3.7.1 to 3.7.2
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](moment/luxon@3.7.1...3.7.2)

Updates `react-router-dom` from 7.8.1 to 7.9.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.9.1/packages/react-router-dom)

Updates `use-debounce` from 10.0.5 to 10.0.6
- [Release notes](https://github.com/xnimorz/use-debounce/releases)
- [Changelog](https://github.com/xnimorz/use-debounce/blob/master/CHANGELOG.md)
- [Commits](xnimorz/use-debounce@10.0.5...10.0.6)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontends-prod
- dependency-name: isomorphic-dompurify
  dependency-version: 2.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontends-prod
- dependency-name: luxon
  dependency-version: 3.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontends-prod
- dependency-name: react-router-dom
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontends-prod
- dependency-name: use-debounce
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontends-prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 18, 2025
@oharsta oharsta merged commit be09b28 into main Sep 19, 2025
4 checks passed
@oharsta oharsta deleted the dependabot/npm_and_yarn/client/frontends-prod-484e80038e branch September 19, 2025 08:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@oharsta