Skip to content

Update npm dependencies - #884

Merged
renovate[bot] merged 1 commit into
react-rewritefrom
renovate/npm-dependencies
Sep 14, 2026
Merged

Update npm dependencies#884
renovate[bot] merged 1 commit into
react-rewritefrom
renovate/npm-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@tanstack/react-router (source) 1.170.341.170.35 age confidence
lucide-react (source) 1.44.01.45.0 age confidence
oxlint-plugin-react-doctor (source) 0.9.130.9.14 age confidence
tailwind-merge (source) 3.6.03.7.0 age confidence
temporal-polyfill (source) 1.0.41.0.5 age confidence
zod (source) 4.6.14.6.4 age confidence

Release Notes

TanStack/router (@​tanstack/react-router)

v1.170.35

Compare Source

Patch Changes
  • #​7824 8c43c71 - Upgrade TanStack Store to 0.11 and migrate router subscriptions to useSelector, preserving selector comparisons and Vue subscription cleanup.
lucide-icons/lucide (lucide-react)

v1.45.0: Version 1.45.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

millionco/react-doctor (oxlint-plugin-react-doctor)

v0.9.14

Compare Source

Patch Changes
  • #​1783 1239043 Thanks @​aidenybai! - Upgrade oxlint to 1.81 and oxc-parser to 0.148.

  • #​1762 ff7dd67 Thanks @​skoshx! - Avoid effect-needs-cleanup diagnostics for owned chained timers, guarded post-await timers, and listeners released through an abort handler.

  • #​1763 0fbef9b Thanks @​skoshx! - Fix an async-defer-await false positive on exact live and isLive liveness guards without exempting unrelated names that only contain the same text.

  • #​1761 6ac8b71 Thanks @​skoshx! - Fix false positive in nextjs-no-side-effect-in-get-handler when locally-built Headers object is passed to a same-file helper that mutates it.

    The rule now transfers locally-created response object safety through the exact same-file helper call. Calls that pass external state to the same helper remain reportable.

    Fixes #​1757

  • #​1781 dfcde10 Thanks @​aidenybai! - Speed up large-repository scans: reuse warm oxlint worker processes across projects, overlap project discovery with linting, and trim rule hot paths (2.4–5.5x faster wall-clock on the large-repo corpus).

  • #​1801 fd64d26 Thanks @​aidenybai! - Stop reporting local service .use() methods as React hooks. Preserve diagnostics for React namespace calls, including aliases and CommonJS imports.

    Only recommend setAnimationLoop when a recursive animation frame callback renders through a known Three.js renderer. Leave independent 2D canvas and DOM loops alone, including files that also import Three.js.

  • #​1750 576d756 Thanks @​skoshx! - fix: respect "use no memo" directive in react-compiler-no-manual-memoization rule

    When a function or module has a React Compiler opt-out directive, the compiler skips optimization, so manual memoization can still be necessary. The rule now respects "use no memo", its "use no forget" alias, and local components passed to memo.

    Fixes #​1749

  • #​1760 2e3f6eb Thanks @​skoshx! - Exempt magic-link delivery mutations from query-mutation-missing-invalidation while keeping generic send, notification, and email mutations reportable.

  • #​1802 c9e3e15 Thanks @​aidenybai! - Retire 33 low-value rule IDs while keeping them registered as silent compatibility entries. Make 26 cleanup, migration, performance, and security-review rules opt-in. Existing rule configurations still load; default scans no longer report these recommendations as defects.

dcastil/tailwind-merge (tailwind-merge)

v3.7.0

Compare Source

fullcalendar/temporal-polyfill (temporal-polyfill)

v1.0.5

Compare Source

📉 Size Wins
  • Smaller global IIFE bundles after min+gzip:
    • Basic (global.js): 19,532 → 19,433 bytes (−0.5%)
    • Full (full/global.js): 23,378 → 23,276 bytes (−0.4%)
  • Tree-shakeable API imports are 27.30% smaller on average after min+gzip. Highlights:
    • DurationFns.sign: 880 → 186 bytes (−79%)
    • ZonedDateTimeFns.compare: 950 → 268 bytes (−72%)
    • PlainDateFns.toPlainYearMonth: 2,808 → 1,194 bytes (−57%)
🐛 Tree-Shakeable API Correctness Fixes
  • FIX: Tree-shakeable API year/month rounding and alignment helpers use correct non-ISO calendar boundaries instead of mixing calendar year/month values with ISO fields
  • FIX: ZonedDateTimeFns.getTimeZoneTransition preserves transitions at epoch nanoseconds 0n instead of returning null, in both class-based and tree-shakeable APIs
  • FIX: Improve behavioral parity between the tree-shakeable and class-based APIs:
    • diffYears/Months/Weeks/Days:
      • ZonedDateTime handles equal instants, fractional units, DST transitions, skipped dates, rounding, and calendar validation (#​103, #​104), thx @​Pawel-IT
      • PlainDateTime includes time remainders and uses correct relative calendar-unit rounding, floating-point precision, calendar validation, and range validation
      • PlainDate uses correct relative calendar-unit rounding, floating-point precision, calendar validation, and range validation
      • PlainYearMonth ignores the internal reference ISO day, uses month precision, and handles rounding and range boundaries correctly
    • diffHours/Minutes/Seconds/Milliseconds/Microseconds/Nanoseconds
      • PlainTime preserves fractional precision and return positive zero for results that round to zero
colinhacks/zod (zod)

v4.6.4

Compare Source

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#​6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#​6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#​6153)

v4.6.3

Compare Source

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#​6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

Compare Source

Commits:


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) September 14, 2026 02:05
@netlify

netlify Bot commented Sep 14, 2026

Copy link
Copy Markdown

Deploy Preview for ucmacm ready!

Name Link
🔨 Latest commit 946cf60
🔍 Latest deploy log https://app.netlify.com/projects/ucmacm/deploys/6aa7565092e31d00086eb1d6
😎 Deploy Preview https://deploy-preview-884--ucmacm.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 83
Accessibility: 97
Best Practices: 92
SEO: 83
PWA: 100
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@sonarqubecloud

Copy link
Copy Markdown

@renovate
renovate Bot merged commit 28f0678 into react-rewrite Sep 14, 2026
10 checks passed
@renovate
renovate Bot deleted the renovate/npm-dependencies branch September 14, 2026 02:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants