Skip to content

Bump the minor-and-patch group with 6 updates - #48

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-408e882626
Open

Bump the minor-and-patch group with 6 updates#48
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-408e882626

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 6 updates:

Package From To
@uwdata/mosaic-core 0.34.1 0.34.2
@uwdata/mosaic-sql 0.34.1 0.34.2
framer-motion 14.6.0 14.7.1
lucide-react 1.61.0 1.62.0
react-redux 9.3.0 9.3.1
react-window 2.5.0 2.5.1

Updates @uwdata/mosaic-core from 0.34.1 to 0.34.2

Release notes

Sourced from @​uwdata/mosaic-core's releases.

v0.34.2

What's Changed

Full Changelog: uwdata/mosaic@v0.34.1...v0.34.2

Commits

Updates @uwdata/mosaic-sql from 0.34.1 to 0.34.2

Release notes

Sourced from @​uwdata/mosaic-sql's releases.

v0.34.2

What's Changed

Full Changelog: uwdata/mosaic@v0.34.1...v0.34.2

Commits

Updates framer-motion from 14.6.0 to 14.7.1

Changelog

Sourced from framer-motion's changelog.

[14.7.1] 2026-10-27

Fixed

  • Demote transforms to CPU when interrupted by layout animations.

[14.7.0] 2026-10-27

Added

  • animate: Mutable timeline sequences.
  • animate: Relative label offsets for timeline sequences.
  • useScroll: Returns scrollXLength and scrollYLength.
  • Reorder: Add LazyMotion-compatible import.
  • motion: transition.out prop for transitions when exiting a state.

Fixed

  • Fix one flash when changing playback speed of accelerated independent transform.
  • AnimatePresence: Improved positioning of popped elements.
  • spring: Fix overdamped springs snapping to target.
  • drag: Ref-constraints kept up-to-date after scroll.
  • motion: Animate layoutId elements relative to layoutRoot container.
  • motion: Bundle size reductions.
  • Moving background-color animations back to main thread for improved interpolation.
  • drag: Fix drag inertia stopping dead after a fast flick from a standstill.
  • layout: layoutId elements now animate relative to their closest layoutRoot ancestor, if any.
  • layout: layoutId may be changed after mount.
  • useScroll: Fix tracking in horizontal containers.
  • useSpring: Reduced bundle size by 30%.
Commits
  • 9ba8846 v14.7.1
  • ed82763 Updating changelog
  • da6d6d3 Merge pull request #4023 from motiondivision/claude/project-thread-silaya
  • 4e72d8d Say what demote() returning true means
  • 075a6a7 Test a child measured inside an ancestor rotating on the compositor (#4022)
  • 6c6edff Reset rotations again after moving them off the compositor for measuring (#4022)
  • 11f01c5 Test that layout measurements don't distort a rotation on the compositor (#4022)
  • 734d2f6 Merge pull request #4021 from motiondivision/claude/project-thread-2690wu
  • 320342f Say why holding with pause() leaves WebKit a ready time
  • dc23e95 Hold transform WAAPI animations by clearing startTime, not pause()
  • Additional commits viewable in compare view

Updates lucide-react from 1.61.0 to 1.62.0

Release notes

Sourced from lucide-react's releases.

Version 1.62.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.61.0...1.62.0

Commits
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • See full diff in compare view

Updates react-redux from 9.3.0 to 9.3.1

Release notes

Sourced from react-redux's releases.

v9.3.1

This bugfix release fixes connect type inference under TS 7, fixes several connect and Provider runtime bugs, adds dev-mode logging for errors thrown in mapStateToProps, and updates our build tooling and TypeScript support matrix.

[!WARNING] While connect is still published and technically supported, we officially deprecated connect in 9.3.0 and strongly recommend migrating to use the hooks APIs instead.

Changelog

connect Types and TS 7

We had reports that connect sometimes inferred the wrong props when mapStateToProps or mapDispatchToProps was a factory function. The connected component's props would collapse to {}, and a required prop would show up as "missing" at the call site.

Turns out the connect overloads typed those arguments as unions of the factory form (() => (state) => props) and the plain form. TS7 changed the ordering of which union member got selected, so this broke.

As Anders suggested in microsoft/typescript-go#977, we've split those unions into separate overloads listed in order of preference, factory form first. Overload matching no longer depends on how the compiler orders a union. We then applied the same fix to the mergeProps overloads, which still failed under TS 7.

Bug Fixes

Provider now uses serverState when it's a falsy value like 0, false, or ''. Previously it checked for truthiness, so a falsy root state fell back to the client store's state during SSR and hydration. null and undefined are still treated as "no server state".

A connected component's context prop is now honored in production. The assignment that picked up the custom context sat inside the development-only validation block. In production, a component with only a custom provider would throw, and one rendered under both providers would read the default provider's store.

connect no longer overrides a ref passed as a regular prop when forwardRef isn't enabled (#2251). With React 19's ref-as-prop, the wrapper was always passing its own ref (undefined without forwardRef), which replaced the one you passed in.

An explicit dependsOnOwnProps = false on a mapStateToProps or mapDispatchToProps function is now respected. We had been ignoring it for functions declared with two parameters, even though the option exists specifically for functions whose length isn't reliable.

Rendering <Provider> in a React Server Component without "use client" now throws a clear dev-mode error that tells you what's wrong, instead of failing with "useIsomorphicLayoutEffect is not a function" (#2082). Setups that resolve the react-server export condition already got a clear error. This covers the setups that don't.

mapStateToProps Error Logging

Since v8, an error thrown in mapStateToProps during a store update has been caught in the subscription callback and then effectively swallowed. The component just kept rendering its previous props (#1942). connect now logs those errors to console.error in development, so they show up in DevTools. Production behavior is unchanged.

TypeScript Support

The internal NoInfer helper type has been replaced with TypeScript's built-in NoInfer, which was added in TS 5.4. That makes TS 5.4 the minimum version for React-Redux's types. Our CI matrix now covers TS 5.6 through 5.9, 6.0, 7.0, and next.

Build Tooling

We've moved the repo to pnpm, Oxlint, and Oxfmt, and switched the library build from tsup to tsdown. The package exports layout is unchanged, but the build output comes from a different bundler. If you see any packaging or import problems with this release, please file an issue.

What's Changed

... (truncated)

Commits
  • 8e54f5b Release 9.3.1
  • 14ef3ca Merge pull request #2331 from JSap0914/fix/getDependsOnOwnProps-explicit-false
  • ff05531 Merge pull request #2252 from PSpSynedra/master
  • b591c94 Merge pull request #2389 from OskarEichler/codex/provider-state-selection
  • 7bb3092 Merge pull request #2342 from veksa/fix/provider-rsc-dev-check
  • 19e1f83 Merge pull request #2408 from reduxjs/ci/release-commit-skip-forks
  • 99b0bc2 Skip Release Commit workflow in forks
  • 0187826 Remove any casts from wrapMapToProps tests
  • d23a336 Merge remote-tracking branch 'origin/master' into pr-2331
  • 8705869 Trim Provider RSC check comments
  • Additional commits viewable in compare view

Updates react-window from 2.5.0 to 2.5.1

Release notes

Sourced from react-window's releases.

2.5.1

  • scrollToRow (and useVirtualizer's scrollToIndex) supports behavior: "smooth" for dynamic row heights. The scroll is animated by the list so that its destination can be corrected as rows are measured along the way. Corrections for a scroll requested while the page is hidden no longer time out before the page is visible again.
Changelog

Sourced from react-window's changelog.

2.5.1

  • scrollToRow (and useVirtualizer's scrollToIndex) supports behavior: "smooth" for dynamic row heights. The scroll is animated by the list so that its destination can be corrected as rows are measured along the way. Corrections for a scroll requested while the page is hidden no longer time out before the page is visible again.
Commits
  • dfbfc50 2.5.0 -> 2.5.1
  • 4cdbc2c Support smooth scrolling for dynamic height lists (#926)
  • 99cab89 Spruced up images route
  • cd2cee0 Update react-lib-tools to 0.0.70; support light theme
  • 5649dc3 Update react-lib-tools to 0.0.69
  • a62785b Add pin-to-bottom example
  • f5b5441 Update react-lib-tools dev dependency; remove local Param component
  • 6235be3 Fix <dd>+<dt> issue
  • 048d0fe Fix flaky WebKit e2e tests (#925)
  • 129e26a Spruced up the horizontal scrolling demo
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group with 6 updates
118fc6c 
Bumps the minor-and-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@uwdata/mosaic-core](https://github.com/uwdata/mosaic) | `0.34.1` | `0.34.2` |
| [@uwdata/mosaic-sql](https://github.com/uwdata/mosaic) | `0.34.1` | `0.34.2` |
| [framer-motion](https://github.com/motiondivision/motion) | `14.6.0` | `14.7.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.61.0` | `1.62.0` |
| [react-redux](https://github.com/reduxjs/react-redux) | `9.3.0` | `9.3.1` |
| [react-window](https://github.com/bvaughn/react-window) | `2.5.0` | `2.5.1` |


Updates `@uwdata/mosaic-core` from 0.34.1 to 0.34.2
- [Release notes](https://github.com/uwdata/mosaic/releases)
- [Commits](uwdata/mosaic@v0.34.1...v0.34.2)

Updates `@uwdata/mosaic-sql` from 0.34.1 to 0.34.2
- [Release notes](https://github.com/uwdata/mosaic/releases)
- [Commits](uwdata/mosaic@v0.34.1...v0.34.2)

Updates `framer-motion` from 14.6.0 to 14.7.1
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.6.0...v14.7.1)

Updates `lucide-react` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.62.0/packages/lucide-react)

Updates `react-redux` from 9.3.0 to 9.3.1
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](reduxjs/react-redux@v9.3.0...v9.3.1)

Updates `react-window` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/bvaughn/react-window/releases)
- [Changelog](https://github.com/bvaughn/react-window/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-window@2.5.0...2.5.1)

---
updated-dependencies:
- dependency-name: "@uwdata/mosaic-core"
  dependency-version: 0.34.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@uwdata/mosaic-sql"
  dependency-version: 0.34.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: framer-motion
  dependency-version: 14.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-redux
  dependency-version: 9.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-window
  dependency-version: 2.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automerge, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from iLevyTate as a code owner October 30, 2026 23:39
@iLevyTate
Regenerate commercial inventory for dependency updates
3b3a03a
@iLevyTate
Merge current main and refresh dependency compliance inventory
244b53f 
Resolve the generated-inventory conflict by regenerating the report from
the merged package manifest, lockfile, and current main inputs. Preserve
the six dependency updates and all changes already on main.

Validation: commercial compliance verification passes with no high-risk
or unknown entries, and repeated generation preserves identical bytes.
The resulting tree differs from main only in package.json,
package-lock.json, and the generated inventory. Full CI remains required.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@iLevyTate iLevyTate Awaiting requested review from iLevyTate iLevyTate is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@iLevyTate