chore(deps): bump the npm-deps group across 1 directory with 22 updates by dependabot[bot] · Pull Request #777 · tempoxyz/mpp

dependabot · 2026-07-07T16:14:06Z

Bumps the npm-deps group with 22 updates in the / directory:

Package	From	To
@base-ui/react	`1.5.0`	`1.6.0`
@stripe/stripe-js	`9.7.0`	`9.8.0`
@vercel/blob	`2.4.0`	`2.5.0`
mermaid	`11.15.0`	`11.16.0`
stripe	`22.2.0`	`22.3.0`
tailwindcss	`4.3.0`	`4.3.2`
viem	`2.53.1`	`2.54.0`
wagmi	`3.6.16`	`3.6.21`
waku	`1.0.0-beta.1`	`1.0.0-beta.6`
@biomejs/biome	`2.4.16`	`2.5.1`
@iconify/json	`2.2.482`	`2.2.493`
@playwright/test	`1.60.0`	`1.61.1`
@types/node	`25.9.1`	`26.0.1`
@types/react	`19.2.16`	`19.2.17`
@vitejs/plugin-react	`6.0.2`	`6.0.3`
happy-dom	`20.9.0`	`20.10.6`
playwright	`1.60.0`	`1.61.1`
shiki	`4.1.0`	`4.3.0`
vite	`8.0.16`	`8.1.1`
vite-plugin-mkcert	`2.0.0`	`2.1.0`
vitest	`4.1.8`	`4.1.9`
wrangler	`4.101.0`	`4.105.0`

Updates @base-ui/react from 1.5.0 to 1.6.0

Release notes

Sourced from @base-ui/react's releases.

v1.6.0

General changes

Correct inaccurate prop JSDoc (#5036) by @atomiks

Update the hook value when store/arguments change (#4866) by @chuganzy

Restore viewport morphing after reopen for kept-mounted popups (#5010) by @atomiks

Fix pseudo-element bounds in dev mode (#5000) by @atomiks

Accordion

Fix trigger behavior bugs (#4833) by @atomiks

Remove region role from Accordion.Root (#4961) by @chuganzy

Align keyboard navigation with APG (#4965) by @chuganzy

Alert Dialog

Fix programmatic focus return (#4849) by @atomiks

Autocomplete

Keep ArrowLeft/ArrowRight on the input caret in grid mode (#4948) by @spokodev

Document open requirement for the inline prop (#5069) by @atomiks

Avatar

Fix image status edge cases (#4835) by @atomiks

Checkbox

Fix parent group cancellation and indeterminate state (#4941) by @atomiks

Ignore data-focused Field attribute when disabled (#4998) by @atomiks

Fix extra validate fn calls (#4911) by @mj12albert

Checkbox Group

Fix parent group cancellation and indeterminate state (#4941) by @atomiks

Fix parent checkbox with custom validate fn (#4912) by @mj12albert

Fix validation with multiple required checkboxes (#4958) by @atomiks

Forward group ids (#4997) by @atomiks

Collapsible

Fix trigger and panel state bugs (#4848) by @atomiks

Combobox

Fix chip context error (#4877) by @lyzno1

Keep ArrowLeft/ArrowRight on the input caret in grid mode (#4948) by @spokodev

Avoid re-rendering every item on each keystroke (#4964) by @flaviendelangle

Fix autofill and selected state edge cases (#4972) by @atomiks

... (truncated)

Changelog

Sourced from @base-ui/react's changelog.

v1.6.0

Jun 18, 2026

General changes

Correct inaccurate prop JSDoc (#5036) by @atomiks

Update the hook value when store/arguments change (#4866) by @chuganzy

Restore viewport morphing after reopen for kept-mounted popups (#5010) by @atomiks

Fix pseudo-element bounds in dev mode (#5000) by @atomiks

Accordion

Fix trigger behavior bugs (#4833) by @atomiks

Remove region role from Accordion.Root (#4961) by @chuganzy

Align keyboard navigation with APG (#4965) by @chuganzy

Alert Dialog

Fix programmatic focus return (#4849) by @atomiks

Autocomplete

Keep ArrowLeft/ArrowRight on the input caret in grid mode (#4948) by @spokodev

Document open requirement for the inline prop (#5069) by @atomiks

Avatar

Fix image status edge cases (#4835) by @atomiks

Checkbox

Fix parent group cancellation and indeterminate state (#4941) by @atomiks

Ignore data-focused Field attribute when disabled (#4998) by @atomiks

Fix extra validate fn calls (#4911) by @mj12albert

Checkbox Group

Fix parent group cancellation and indeterminate state (#4941) by @atomiks

Fix parent checkbox with custom validate fn (#4912) by @mj12albert

Fix validation with multiple required checkboxes (#4958) by @atomiks

Forward group ids (#4997) by @atomiks

Collapsible

Fix trigger and panel state bugs (#4848) by @atomiks

Combobox

Fix chip context error (#4877) by @lyzno1

... (truncated)

Commits

b34551d [code-infra] Fix package publishing (#5074)
615b0e8 [release] v1.6.0 (#5064)
8b7ca5d [test] Restore slider listener spies (#5072)
2502524 [combobox][autocomplete] Document open requirement for the inline prop (#...
4c33d74 [slider] Fix touchend listener accumulation leak (#5070)
d169cd5 [combobox] Fix autofill and selected state edge cases (#4972)
2d8b8f6 [avatar] Fix image status edge cases (#4835)
ee3c13a [select] Skip disabled items in typeahead and fix multiple-mode serialization...
b167c85 [drawer] Commit swipe on primary-button release (#5057)
e972d74 [combobox] Avoid re-rendering every item on each keystroke (#4964)
Additional commits viewable in compare view

Updates @stripe/stripe-js from 9.7.0 to 9.8.0

Release notes

Sourced from @stripe/stripe-js's releases.

v9.8.0

Changed

Add CurrencySelector element definitions for getElement and create (#930)

Add new appearance API variable types (#931)

add unit label to checkout.d.ts (#929)

Commits

e5654a3 v9.8.0
6753d06 Add CurrencySelector element definitions for getElement and create (#930)
bd1be88 Add new appearance API variable types (#931)
730dbdb add unit label to checkout.d.ts (#929)
See full diff in compare view

Updates @vercel/blob from 2.4.0 to 2.5.0

Release notes

Sourced from @vercel/blob's releases.

@vercel/blob@2.5.0

Minor Changes

31a8b8f: Deprecate the useCache option on get(). The backend no longer honors the cache=0 query parameter it produced, so the option is now a no-op — reads always go through the standard caching path. The option is still accepted (and ignored) to avoid breaking existing callers, and will be removed in a future major version.

Patch Changes

9ac2586: Read the Vercel OIDC token via @vercel/oidc's refreshing getVercelOidcToken instead of the non-refreshing getVercelOidcTokenSync. This refreshes an expired token in development environments. In production with a valid token, behavior is unchanged. If a refresh is needed but fails, the token is treated as absent so callers still fall back to BLOB_READ_WRITE_TOKEN.

@vercel/blob@2.4.1

Patch Changes

b7027de: Read the Vercel OIDC token via the @vercel/oidc package (getVercelOidcTokenSync) instead of an inlined copy. This makes the dependency explicit and discoverable, and matches how other Vercel packages consume OIDC. Behavior is unchanged except for one edge case: a blank x-vercel-oidc-token request-context header now resolves to no token rather than falling back to VERCEL_OIDC_TOKEN.

Changelog

Sourced from @vercel/blob's changelog.

2.5.0

Minor Changes

31a8b8f: Deprecate the useCache option on get(). The backend no longer honors the cache=0 query parameter it produced, so the option is now a no-op — reads always go through the standard caching path. The option is still accepted (and ignored) to avoid breaking existing callers, and will be removed in a future major version.

Patch Changes

9ac2586: Read the Vercel OIDC token via @vercel/oidc's refreshing getVercelOidcToken instead of the non-refreshing getVercelOidcTokenSync. This refreshes an expired token in development environments. In production with a valid token, behavior is unchanged. If a refresh is needed but fails, the token is treated as absent so callers still fall back to BLOB_READ_WRITE_TOKEN.

2.4.1

Patch Changes

b7027de: Read the Vercel OIDC token via the @vercel/oidc package (getVercelOidcTokenSync) instead of an inlined copy. This makes the dependency explicit and discoverable, and matches how other Vercel packages consume OIDC. Behavior is unchanged except for one edge case: a blank x-vercel-oidc-token request-context header now resolves to no token rather than falling back to VERCEL_OIDC_TOKEN.

Commits

bb04f82 Version Packages (#1077)
9ac2586 [@vercel/blob] Use refreshing getVercelOidcToken from @vercel/oidc (#1076)
31a8b8f [@vercel/blob] Deprecate useCache option on get() to a no-op (#1075)
0232533 ci: enable npm provenance attestation on publish (#1074)
63b87d6 Version Packages (#1073)
b7027de [@vercel/blob] Read OIDC token via @vercel/oidc instead of inlined copy (#1072)
See full diff in compare view

Updates mermaid from 11.15.0 to 11.16.0

Release notes

Sourced from mermaid's releases.

mermaid@11.16.0

Minor Changes

#7535 ea1c48f Thanks @ragelink! - feat(cynefin): Adds the Cynefin framework as a new diagram type (beta) to Mermaid (available as cynefin-beta). The Cynefin framework, created by Dave Snowden, is a decision-making framework that categorizes problems into five complexity domains, widely used in agile, incident management, strategy, and organizational design.

#7721 f45cc2c Thanks @notionparallax! - feat(treeView): add box-drawing character input support for treeView diagrams

#7550 f1f4d45 Thanks @DominicBurkart! - feat(xychart): add per-point text labels for xychart line plots

#7527 b4d0442 Thanks @notionparallax! - feat(treeView): Extends the existing treeView-beta diagram with features useful for representing file/directory structures.

#7793 a6f097d Thanks @SSDWGG! - feat(er): support optional ER attribute types with a ? suffix

#7772 37f2e36 Thanks @devareddy05! - feat(gantt): support multiple excludes / includes lines so long exclusion lists can be split into commented groups (#6270)

#7708 4e63e9d Thanks @txmxthy! - feat(architecture): add align row|column {ids…} directive to architecture-beta diagrams so authors can declare horizontal or vertical alignment of services explicitly.

#7760 05223be Thanks @ngdaniels! - feat(pie): Enhance Pie Chart - Enable donut chart, Set legend position, and highlight slice

#7251 216e4e9 Thanks @ydah! - feat(railroad): Add support for Railroad Diagrams (Syntax Diagrams) with four input syntaxes: IR (railroad-beta), EBNF (railroad-ebnf-beta), ABNF (railroad-abnf-beta), and PEG (railroad-peg-beta).

#7774 e5c75e6 Thanks @ngdaniels! - feat(xychart): enable rotate label on X-axis

#7791 974fa7b Thanks @knsv-bot! - feat(swimlane): add swimlane as a standalone diagram type with a dedicated layered orthogonal layout algorithm

Patch Changes

#7744 633c261 Thanks @ashishjain0512! - fix(architecture): add architecture.seed config option to make architecture diagrams render deterministically. Resolves #7729.

#7732 c8ba156 Thanks @rkdfx! - fix: tolerate leading horizontal whitespace before YAML frontmatter delimiters. Closes mermaid-js/mermaid#7613

#7314 4e4e6c4 Thanks @darshanr0107! - fix(flowchart): Prevent crash when flowchart node shape is undefined

#7762 cfd2391 Thanks @Dharya-dev! - fix(class): support styling and callbacks for generic classes

#7284 c1f116d Thanks @darshanr0107! - fix(gantt): Render gantt vertical markers without affecting row layout or chart height

#7786 72fbab1 Thanks @knsv-bot! - fix(er): allow special characters (e.g. dots) in ER diagram attribute names and types by escaping them with backticks

#7672 4887e97 Thanks @sjackson0109! - fix(flowchart): respect per-subgraph direction keyword in Dagre layout. Fixes #4648

#7734 a4c1e50 Thanks @OfirHaf! - fix(block): read block padding and sanitize config dynamically instead of at module load time

#7674 cc75089 Thanks @cyphercodes! - fix(block): respect current DOMPurify config when sanitizing labels

#7711 be2e282 Thanks @Jinacker! - fix(flowchart): render flowchart and state self-loop edges as a single SVG path.

#7781 d945968 Thanks @Dharya-dev! - fix(radar): align axis labels based on angular position to prevent clipping

#7661 2f5e9e8 Thanks @nabila401! - fix(venn): fix 3-circle venn diagram union rendering

... (truncated)

Commits

7c0cafc Version Packages: v11.16.0 (#7916)
26acd1a Merge pull request #7915 from mermaid-js/release/11.16.0
5a8eae7 Merge branch 'master' into release/11.16.0
dd5ea77 Merge pull request #7913 from mermaid-js/pebr/fix-changesets
658ee66 docs: fix missing bumps of @mermaid-js/parser
04259a1 docs: fix author and commit on examples changeset
c9dcfb1 docs: update changeset diagram scopes
a34dab9 docs: remove swimlane/cynefin bugfix changesets
e81f31f docs: remove local-editor changeset
7223f03 Minor correction
Additional commits viewable in compare view

Updates stripe from 22.2.0 to 22.3.0

Release notes

Sourced from stripe's releases.

v22.3.0

This release changes the pinned API version to 2026-06-24.dahlia.

#2748 Update generated code

Add support for release_details on Reserve.Hold

⚠️ Add support for new value tax_fund on enum BalanceTransaction.type

Change Billing.CreditGrant.priority to be required

Add support for buyer_id on Charge.payment_method_details.bizum, ConfirmationToken.payment_method_preview.bizum, ConfirmationToken.payment_method_preview.blik, PaymentAttemptRecord.payment_method_details.bizum, PaymentMethod.bizum, PaymentMethod.blik, and PaymentRecord.payment_method_details.bizum

Add support for transaction_link_id on Charge.payment_method_details.card

⚠️ Add support for new value sui on enums Charge.payment_method_details.crypto.network, PaymentAttemptRecord.payment_method_details.crypto.network, and PaymentRecord.payment_method_details.crypto.network

⚠️ Add support for new value usdsui on enums Charge.payment_method_details.crypto.token_currency, PaymentAttemptRecord.payment_method_details.crypto.token_currency, and PaymentRecord.payment_method_details.crypto.token_currency

Add support for fingerprint on Charge.payment_method_details.pix, ConfirmationToken.payment_method_preview.pix, PaymentMethod.pix, and SetupAttempt.payment_method_details.pix

Add support for sunbit on Checkout.Session.payment_method_options, Checkout.SessionCreateParams.payment_method_options, PaymentIntent.payment_method_options, PaymentIntentConfirmParams.payment_method_options, PaymentIntentCreateParams.payment_method_options, and PaymentIntentUpdateParams.payment_method_options

Add support for billing_cycle_anchor_config on Checkout.SessionCreateParams.subscription_data

Add support for wechat_pay on Checkout.Session.payment_method_options

Add support for mastercard_compliance on Dispute.evidence.enhanced_evidence, Dispute.evidence_details.enhanced_eligibility, and DisputeUpdateParams.evidence.enhanced_evidence

⚠️ Add support for new value mastercard_compliance on enum Dispute.enhanced_eligibility_types

Add support for status_details on FinancialConnections.Account

⚠️ Add support for new value validated on enum Identity.VerificationSession.redaction.status

Add support for new value satispay on enums InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types

⚠️ Add support for new value satispay on enums Invoice.payment_settings.payment_method_types and Subscription.payment_settings.payment_method_types

⚠️ Remove support for stored_credential_usage on PaymentAttemptRecord.payment_method_details.card and PaymentRecord.payment_method_details.card

⚠️ Change PaymentAttemptRecord.payment_method_details.card.description and PaymentRecord.payment_method_details.card.description to be optional

⚠️ Change PaymentAttemptRecord.payment_method_details.card.iin and PaymentRecord.payment_method_details.card.iin to be optional

⚠️ Change PaymentAttemptRecord.payment_method_details.card.issuer and PaymentRecord.payment_method_details.card.issuer to be optional

Add support for setup_future_usage on PaymentIntent.payment_method_options.satispay, PaymentIntentConfirmParams.payment_method_options.satispay, PaymentIntentCreateParams.payment_method_options.satispay, and PaymentIntentUpdateParams.payment_method_options.satispay

Change PaymentRecordReportRefundParams.refunded to be optional

Add support for satispay on SetupAttempt.payment_method_details

Add support for custom_fields, description, and footer on Subscription.invoice_settings, SubscriptionCreateParams.invoice_settings, and SubscriptionUpdateParams.invoice_settings

Add support for payment_method_options and payment_method on TopupCreateParams

Add support for new value 2026-06-24.dahlia on enum WebhookEndpointCreateParams.api_version

Add support for mode on V2.Commerce.ProductCatalogImport

⚠️ Add support for new value promotion on enum V2.Commerce.ProductCatalogImport.feed_type

Add support for sunbit_payments on V2.Core.Account.configuration.merchant.capabilities, V2.Core.AccountCreateParams.configuration.merchant.capabilities, and V2.Core.AccountUpdateParams.configuration.merchant.capabilities

Add support for crypto_money_manager and money_manager on V2.Core.AccountUpdateParams.identity.attestations.terms_of_service

⚠️ Remove support for crypto_storer and storer on V2.Core.AccountUpdateParams.identity.attestations.terms_of_service

Add support for new value promotion on enum V2.Commerce.ProductCatalogImportCreateParams.feed_type

⚠️ Add support for new value sunbit_payments on enum EventsV2CoreAccountIncludingConfigurationMerchantCapabilityStatusUpdatedEvent.updated_capability

Add support for error codes anomalous_money_movement_request, failed_tax_calculation, financial_account_balance_does_not_support_currency, financial_account_capability_not_enabled, and financial_account_capability_restricted on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, StripeError, and Terminal.Reader.action.api_error

#2765 fix: CJS companion namespace access for resource types at all depths

Fixes TypeScript type access for nested namespaces in CJS mode (e.g. Stripe.Price.Recurring, Stripe.Subscription.BillingMode)

Fixes TypeScript type access for nested resource types e.g. Stripe.Billing.Alert.Status, Stripe.Terminal.Configuration.Tipping in both ESM and CJS modes.

See the changelog for more details.

v22.3.0-beta.1

This release changes the pinned API version to 2026-05-27.private.

#2720 Update generated code for beta

... (truncated)

Changelog

Sourced from stripe's changelog.

22.3.0 - 2026-06-24

This release changes the pinned API version to 2026-06-24.dahlia.

#2748 Update generated code

Add support for release_details on Reserve.Hold

⚠️ Add support for new value tax_fund on enum BalanceTransaction.type

Change Billing.CreditGrant.priority to be required

Add support for buyer_id on Charge.payment_method_details.bizum, ConfirmationToken.payment_method_preview.bizum, ConfirmationToken.payment_method_preview.blik, PaymentAttemptRecord.payment_method_details.bizum, PaymentMethod.bizum, PaymentMethod.blik, and PaymentRecord.payment_method_details.bizum

Add support for transaction_link_id on Charge.payment_method_details.card

⚠️ Add support for new value sui on enums Charge.payment_method_details.crypto.network, PaymentAttemptRecord.payment_method_details.crypto.network, and PaymentRecord.payment_method_details.crypto.network

⚠️ Add support for new value usdsui on enums Charge.payment_method_details.crypto.token_currency, PaymentAttemptRecord.payment_method_details.crypto.token_currency, and PaymentRecord.payment_method_details.crypto.token_currency

Add support for fingerprint on Charge.payment_method_details.pix, ConfirmationToken.payment_method_preview.pix, PaymentMethod.pix, and SetupAttempt.payment_method_details.pix

Add support for sunbit on Checkout.Session.payment_method_options, Checkout.SessionCreateParams.payment_method_options, PaymentIntent.payment_method_options, PaymentIntentConfirmParams.payment_method_options, PaymentIntentCreateParams.payment_method_options, and PaymentIntentUpdateParams.payment_method_options

Add support for billing_cycle_anchor_config on Checkout.SessionCreateParams.subscription_data

Add support for wechat_pay on Checkout.Session.payment_method_options

Add support for mastercard_compliance on Dispute.evidence.enhanced_evidence, Dispute.evidence_details.enhanced_eligibility, and DisputeUpdateParams.evidence.enhanced_evidence

⚠️ Add support for new value mastercard_compliance on enum Dispute.enhanced_eligibility_types

Add support for status_details on FinancialConnections.Account

⚠️ Add support for new value validated on enum Identity.VerificationSession.redaction.status

Add support for new value satispay on enums InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types

⚠️ Add support for new value satispay on enums Invoice.payment_settings.payment_method_types and Subscription.payment_settings.payment_method_types

⚠️ Remove support for stored_credential_usage on PaymentAttemptRecord.payment_method_details.card and PaymentRecord.payment_method_details.card

⚠️ Change PaymentAttemptRecord.payment_method_details.card.description and PaymentRecord.payment_method_details.card.description to be optional

⚠️ Change PaymentAttemptRecord.payment_method_details.card.iin and PaymentRecord.payment_method_details.card.iin to be optional

⚠️ Change PaymentAttemptRecord.payment_method_details.card.issuer and PaymentRecord.payment_method_details.card.issuer to be optional

Add support for setup_future_usage on PaymentIntent.payment_method_options.satispay, PaymentIntentConfirmParams.payment_method_options.satispay, PaymentIntentCreateParams.payment_method_options.satispay, and PaymentIntentUpdateParams.payment_method_options.satispay

Change PaymentRecordReportRefundParams.refunded to be optional

Add support for satispay on SetupAttempt.payment_method_details

Add support for custom_fields, description, and footer on Subscription.invoice_settings, SubscriptionCreateParams.invoice_settings, and SubscriptionUpdateParams.invoice_settings

Add support for payment_method_options and payment_method on TopupCreateParams

Add support for new value 2026-06-24.dahlia on enum WebhookEndpointCreateParams.api_version

Add support for mode on V2.Commerce.ProductCatalogImport

⚠️ Add support for new value promotion on enum V2.Commerce.ProductCatalogImport.feed_type

Add support for sunbit_payments on V2.Core.Account.configuration.merchant.capabilities, V2.Core.AccountCreateParams.configuration.merchant.capabilities, and V2.Core.AccountUpdateParams.configuration.merchant.capabilities

Add support for crypto_money_manager and money_manager on V2.Core.AccountUpdateParams.identity.attestations.terms_of_service

⚠️ Remove support for crypto_storer and storer on V2.Core.AccountUpdateParams.identity.attestations.terms_of_service

Add support for new value promotion on enum V2.Commerce.ProductCatalogImportCreateParams.feed_type

⚠️ Add support for new value sunbit_payments on enum EventsV2CoreAccountIncludingConfigurationMerchantCapabilityStatusUpdatedEvent.updated_capability

Add support for error codes anomalous_money_movement_request, failed_tax_calculation, financial_account_balance_does_not_support_currency, financial_account_capability_not_enabled, and financial_account_capability_restricted on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, StripeError, and Terminal.Reader.action.api_error

#2765 fix: CJS companion namespace access for resource types at all depths

Fixes TypeScript type access for nested namespaces in CJS mode (e.g. Stripe.Price.Recurring, Stripe.Subscription.BillingMode)

Fixes TypeScript type access for nested resource types e.g. Stripe.Billing.Alert.Status, Stripe.Terminal.Configuration.Tipping in both ESM and CJS modes.

22.2.3 - 2026-06-22

#2761 Encode URI path params in accounts.retrieve

22.2.2 - 2026-06-18

#2725 Fixes CJS type exports for stripe package (reported in #2683)

#2758 Fix Stripe.ErrorType.StripeError incorrectly being usable as a runtime class (reported in #2661)

... (truncated)

Commits

3c5c172 Bump version to 22.3.0
bd959e8 Update generated code (#2748)
4e6309e fix: use --loglevel error instead of silent for prettier format (#2767)
f96a3a0 alias Stripe as Stripe_ and updated manual code, regenerated from spec (#2766)
4c5c311 fix: CJS companion namespace access for resource types at all depths (#2765)
b8e8c23 Bump version to 22.2.3
10442be Pin @types/node to ~22.19 in CJS type test projects (#2762)
9c2d10c Encode URI path params in accounts.retrieve (#2761)
4073ccf re-add missing comments
9be501c Bump version to 22.2.2
Additional commits viewable in compare view

Updates tailwindcss from 4.3.0 to 4.3.2

Release notes

Sourced from tailwindcss's releases.

v4.3.2

Fixed

Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)

Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)

Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)

Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)

Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)

Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)

Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)

Prevent @source patterns from scanning unrelated sibling files and folders (#20263)

Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)

Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)

Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)

Support class suggestions for named opacity modifiers from --opacity theme values (#20287)

Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

v4.3.1

Added

Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)

Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)

Allow @apply to be used with CSS mixins (#19427)

Ensure not-* correctly negates @container queries, including style(…) queries (#20059)

Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#20080)

Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#20103)

Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#20027)

Canonicalization: don't suggest invalid calc(…) expressions (e.g. px-[calc(1rem+0px)] → px-[calc(1rem+0)]) (#20127)

Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. left-[99999px] → left-[99999px], not left-24999.75) (#20130)

Ensure @tailwindcss/cli in --watch mode recovers when a tracked dependency is deleted and restored (#20137)

Ensure standalone @tailwindcss/cli binaries are ignored when scanning for class candidates (#20139)

Ensure class candidates are extracted from Twig addClass(…) and removeClass(…) calls (#20198)

Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (#19588)

Allow @variant to be used inside addBase (#19480)

Ensure @source globs with symlinks are preserved (#20203)

Ensure later @source rules can re-include files excluded by earlier @source not rules (#20203)

Upgrade: don't migrate empty class rules to invalid @utility rules (#20205)

Ensure transitions between inset-shadow-none and other inset shadows work correctly (#20208)

Ensure explicitly referenced @source directories are scanned even when ignored by git (#20214)

Ensure @source globs ending in **/* preserve dynamic path segments to avoid scanning too many files (#20217)

Canonicalization: don't fold calc(…) divisions when the result would require high precision (e.g. w-[calc(100%/3.5)] → w-[calc(100%/3.5)], not w-[28.571428571428573%]) (#20221)

Serve ESM type declarations to ESM importers of @tailwindcss/postcss (#20228)

Changed

Generate 0 instead of calc(var(--spacing) * 0) for spacing utilities like m-0 and left-0 (#20196)

... (truncated)

Changelog

Sourced from tailwindcss's changelog.

[4.3.2] - 2026-06-26

Fixed

Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)

Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)

Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)

Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)

Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)

Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)

Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)

Prevent @source patterns from scanning unrelated sibling files and folders (#20263)

Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)

Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)

Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)

Support class suggestions for named opacity modifiers from --opacity theme values (#20287)

Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

[4.3.1] - 2026-06-12

Added

Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)

Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)

Allow @apply to be used with CSS mixins (#19427)

Ensure not-*Description has been truncated

Bumps the npm-deps group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.5.0` | `1.6.0` | | [@stripe/stripe-js](https://github.com/stripe/stripe-js) | `9.7.0` | `9.8.0` | | [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.4.0` | `2.5.0` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.15.0` | `11.16.0` | | [stripe](https://github.com/stripe/stripe-node) | `22.2.0` | `22.3.0` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.0` | `4.3.2` | | [viem](https://github.com/wevm/viem) | `2.53.1` | `2.54.0` | | [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react) | `3.6.16` | `3.6.21` | | [waku](https://github.com/wakujs/waku/tree/HEAD/packages/waku) | `1.0.0-beta.1` | `1.0.0-beta.6` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.16` | `2.5.1` | | [@iconify/json](https://github.com/iconify/icon-sets) | `2.2.482` | `2.2.493` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `26.0.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.16` | `19.2.17` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.2` | `6.0.3` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `20.9.0` | `20.10.6` | | [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.1.0` | `4.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.1` | | [vite-plugin-mkcert](https://github.com/liuweiGL/vite-plugin-mkcert) | `2.0.0` | `2.1.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.9` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.101.0` | `4.105.0` | Updates `@base-ui/react` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/mui/base-ui/releases) - [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/base-ui/commits/v1.6.0/packages/react) Updates `@stripe/stripe-js` from 9.7.0 to 9.8.0 - [Release notes](https://github.com/stripe/stripe-js/releases) - [Commits](stripe/stripe-js@v9.7.0...v9.8.0) Updates `@vercel/blob` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/vercel/storage/releases) - [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md) - [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.5.0/packages/blob) Updates `mermaid` from 11.15.0 to 11.16.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.15.0...mermaid@11.16.0) Updates `stripe` from 22.2.0 to 22.3.0 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.2.0...v22.3.0) Updates `tailwindcss` from 4.3.0 to 4.3.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/tailwindcss) Updates `viem` from 2.53.1 to 2.54.0 - [Release notes](https://github.com/wevm/viem/releases) - [Commits](https://github.com/wevm/viem/compare/viem@2.53.1...viem@2.54.0) Updates `wagmi` from 3.6.16 to 3.6.21 - [Release notes](https://github.com/wevm/wagmi/releases) - [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/wevm/wagmi/commits/wagmi@3.6.21/packages/react) Updates `waku` from 1.0.0-beta.1 to 1.0.0-beta.6 - [Release notes](https://github.com/wakujs/waku/releases) - [Changelog](https://github.com/wakujs/waku/blob/main/CHANGELOG.md) - [Commits](https://github.com/wakujs/waku/commits/v1.0.0-beta.6/packages/waku) Updates `@biomejs/biome` from 2.4.16 to 2.5.1 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.1/packages/@biomejs/biome) Updates `@iconify/json` from 2.2.482 to 2.2.493 - [Commits](iconify/icon-sets@2.2.482...2.2.493) Updates `@playwright/test` from 1.60.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.61.1) Updates `@types/node` from 25.9.1 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.16 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@vitejs/plugin-react` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react) Updates `happy-dom` from 20.9.0 to 20.10.6 - [Release notes](https://github.com/capricorn86/happy-dom/releases) - [Commits](capricorn86/happy-dom@v20.9.0...v20.10.6) Updates `playwright` from 1.60.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.61.1) Updates `shiki` from 4.1.0 to 4.3.0 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.3.0/packages/shiki) Updates `vite` from 8.0.16 to 8.1.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.1/packages/vite) Updates `vite-plugin-mkcert` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/liuweiGL/vite-plugin-mkcert/releases) - [Changelog](https://github.com/liuweiGL/vite-plugin-mkcert/blob/main/CHANGELOG.md) - [Commits](liuweiGL/vite-plugin-mkcert@v2.0.0...v2.1.0) Updates `vitest` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest) Updates `wrangler` from 4.101.0 to 4.105.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.105.0/packages/wrangler) --- updated-dependencies: - dependency-name: "@base-ui/react" dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: "@stripe/stripe-js" dependency-version: 9.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: "@vercel/blob" dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: mermaid dependency-version: 11.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: stripe dependency-version: 22.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: tailwindcss dependency-version: 4.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: viem dependency-version: 2.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: wagmi dependency-version: 3.6.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: waku dependency-version: 1.0.0-beta.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@biomejs/biome" dependency-version: 2.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: "@iconify/json" dependency-version: 2.2.493 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@playwright/test" dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: happy-dom dependency-version: 20.10.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: playwright dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: shiki dependency-version: 4.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: vite dependency-version: 8.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: vite-plugin-mkcert dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: vitest dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: wrangler dependency-version: 4.105.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-07-07T16:14:10Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mpp	Ready	Preview, Comment	Jul 7, 2026 4:15pm

socket-security · 2026-07-07T16:15:23Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	happy-dom@20.10.6
	@base-ui/react@1.6.0
	@vercel/blob@2.5.0
	shiki@4.3.0
	@types/react@19.2.17
	vitest@4.1.9
	wagmi@3.6.21
	playwright@1.61.1
	@types/node@26.1.0
	stripe@22.3.0
	vite@8.1.1
	tailwindcss@4.3.2
	waku@1.0.0-beta.6
	mermaid@11.16.0
	vite-plugin-mkcert@2.1.0
	wrangler@4.105.0
	@vitejs/plugin-react@6.0.3
	viem@2.54.0
	@iconify/json@2.2.493
	@biomejs/biome@2.5.1
	@playwright/test@1.61.1

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 7, 2026

github-actions Bot added the config label Jul 7, 2026

vercel Bot deployed to Preview July 7, 2026 16:15 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm-deps group across 1 directory with 22 updates#777

chore(deps): bump the npm-deps group across 1 directory with 22 updates#777
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-deps-f1c37f9854

dependabot Bot commented on behalf of github Jul 7, 2026

Uh oh!

vercel Bot commented Jul 7, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 7, 2026

v1.6.0

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Collapsible

Combobox

v1.6.0

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Collapsible

Combobox

v9.8.0

Changed

@​vercel/blob@​2.5.0

Minor Changes

Patch Changes

@​vercel/blob@​2.4.1

Patch Changes

2.5.0

Minor Changes

Patch Changes

2.4.1

Patch Changes

mermaid@11.16.0

Minor Changes

Patch Changes

v22.3.0

v22.3.0-beta.1

22.3.0 - 2026-06-24

22.2.3 - 2026-06-22

22.2.2 - 2026-06-18

v4.3.2

Fixed

v4.3.1

Added

Fixed

Changed

[4.3.2] - 2026-06-26

Fixed

[4.3.1] - 2026-06-12

Added

Fixed

Uh oh!

vercel Bot commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@vercel/blob@2`.5.0

`@vercel/blob@2`.4.1

vercel Bot commented Jul 7, 2026 •

edited

Loading