Skip to content

build(deps): bump the frontend-minor-patch group across 1 directory with 20 updates - #12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/frontend-minor-patch-dfb0a92707
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/frontend-minor-patch-dfb0a92707

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown

Bumps the frontend-minor-patch group with 20 updates in the / directory:

Package From To
@azure/msal-browser 5.6.3 5.28.0
@mui/x-tree-view 9.1.0 9.17.0
allotment 1.20.5 1.20.6
canvas 3.2.2 3.2.3
chart.js 4.5.1 4.6.1
d3 7.9.0 7.9.2
dompurify 3.4.5 3.4.17
echarts 6.0.0 6.1.0
i18next 26.0.1 26.7.2
i18next-browser-languagedetector 8.2.1 8.3.0
katex 0.16.42 0.19.1
react-animate-height 3.2.3 3.2.4
react-virtuoso 4.18.3 4.18.20
validator 13.15.26 13.15.35
vega 6.2.0 6.4.0
vega-lite 6.4.1 6.5.0
@testing-library/dom 10.4.1 10.4.2
@testing-library/react 16.3.2 16.3.3
@types/lodash 4.17.24 4.17.27
electron-builder 26.15.3 26.18.0

Updates @azure/msal-browser from 5.6.3 to 5.28.0

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.28.0

5.28.0

Thu, 05 Nov 2026 01:03:50 GMT

Minor changes

  • Support Native Auth V2 JIT email and SMS enrollment during sign-in, sign-up, and password reset. #8927 (undefined)
  • Implement extension-only WAM DPoP routing outcomes, MSAL-managed request keys, and proof cache policy #8789 (hectormmg@microsoft.com)
  • Bump @​azure/msal-common to v16.16.0 (beachball)

@​azure/msal-browser v5.27.0

5.27.0

Tue, 27 Oct 2026 18:15:10 GMT

Minor changes

  • Add the pocd (popup origin check done) parameter to authorize and end-session requests, preserving computed parameter precedence #8793 (kshabelko@microsoft.com)
  • Bump @​azure/msal-common to v16.15.0 (beachball)

Patches

@​azure/msal-browser v5.26.0

5.26.0

Wed, 21 Oct 2026 18:37:16 GMT

Minor changes

Patches

@​azure/msal-browser v5.25.1

5.25.1

Tue, 13 Oct 2026 19:04:35 GMT

Patches

... (truncated)

Commits
  • a8a8141 Upgrade compatible dependencies to address security advisories (#8965)
  • fd18de7 AB#3715428: WI-2 Implement WAM DPoP routing outcome handling and cache policy...
  • e554958 Fix device-code approval prompt handling in E2E tests (#8964)
  • 32368ef Document Markdown link rules for Git submodule boundaries (#8922)
  • 306f818 Bind interactive browser authorization responses to per-request state (#8952)
  • 6d1e176 build(deps): bump benchmark-action/github-action-benchmark from 1.22.1 to 1.2...
  • ee1fa0f Add weekly npm updates with a seven-day cooldown (#8949)
  • c432013 build(deps-dev): bump electron from 42.11.4 to 42.11.18 (#8950)
  • 83edb9d KMSI broker E2E corrections and NAA coverage (2 PBIs) (#8924)
  • 11bbd90 build(deps): bump ip-address from 10.7.3 to 10.7.5 in /samples/e2eTestUtils (...
  • Additional commits viewable in compare view

Updates @mui/x-tree-view from 9.1.0 to 9.17.0

Release notes

Sourced from @​mui/x-tree-view's releases.

v9.17.0

We'd like to extend a big thank you to the 20 contributors who made this release possible. Here are some highlights ✨:

  • 🧮 Computed columns in the Data Grid Premium

    computed-columns-demo.mp4
  • 👆 Data Grid column reordering on touch and pen devices

  • ↔️ Right-to-left (RTL) support in the Event Calendar and the Event Timeline

  • 🕒 Fix recurring events, drag and drop, and the time axis of the Scheduler across DST transitions

  • ⚠️ Recurring events and dependencies are now opt-in in the Event Timeline

  • 🌍 The Scheduler formats dates with Intl: dateLocale takes a locale string like "fr-FR"

  • 🐞 Bugfixes

  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​adamowski10, @​Anexus5919, @​b84330808, @​chanellebingham, @​costajohnt, @​dasjideepak, @​mateuseap, @​minwookshin, @​mustafajw07

The following team members contributed to this release: @​flaviendelangle, @​hasdfa, @​Janpot, @​JCQuintas, @​LukasTy, @​MBilalShafi, @​michelengelen, @​noraleonte, @​rita-codes, @​romgrk, @​ZeeshanTamboli

Data Grid

@mui/x-data-grid@9.17.0

@mui/x-data-grid-pro@9.17.0 pro

Same changes as in @mui/x-data-grid@9.17.0, plus:

@mui/x-data-grid-premium@9.17.0 premium

Same changes as in @mui/x-data-grid-pro@9.17.0, plus:

Date and Time Pickers

... (truncated)

Changelog

Sourced from @​mui/x-tree-view's changelog.

9.17.0

Oct 30, 2026

We'd like to extend a big thank you to the 20 contributors who made this release possible. Here are some highlights ✨:

  • 🧮 Computed columns in the Data Grid Premium

    computed-columns-demo.mp4
  • 👆 Data Grid column reordering on touch and pen devices

  • ↔️ Right-to-left (RTL) support in the Event Calendar and the Event Timeline

  • 🕒 Fix recurring events, drag and drop, and the time axis of the Scheduler across DST transitions

  • ⚠️ Recurring events and dependencies are now opt-in in the Event Timeline

  • 🌍 The Scheduler formats dates with Intl: dateLocale takes a locale string like "fr-FR"

  • 🐞 Bugfixes

  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​adamowski10, @​Anexus5919, @​b84330808, @​chanellebingham, @​costajohnt, @​dasjideepak, @​mateuseap, @​minwookshin, @​mustafajw07

The following team members contributed to this release: @​flaviendelangle, @​hasdfa, @​Janpot, @​JCQuintas, @​LukasTy, @​MBilalShafi, @​michelengelen, @​noraleonte, @​rita-codes, @​romgrk, @​ZeeshanTamboli

Data Grid

@mui/x-data-grid@9.17.0

@mui/x-data-grid-pro@9.17.0 pro

Same changes as in @mui/x-data-grid@9.17.0, plus:

@mui/x-data-grid-premium@9.17.0 premium

Same changes as in @mui/x-data-grid-pro@9.17.0, plus:

... (truncated)

Commits
  • 73d4cf2 [release] v9.17.0 (#24054)
  • f97ab25 [tree view][scheduler] Document undocumented props (#24036)
  • 3766c82 [release] v9.16.0 (#23901)
  • 78fcfbd [x-internals] Restore removed exports and pin internal dependencies (#23907)
  • c1aa6b7 [TreeView] Fix infinite recursion when a mounted item suspends (#23668)
  • 67d2869 [infra] Remove engines.node from UI packages (#23786)
  • dd81f1a [release] v9.15.0 (#23777)
  • 03d2f6d [code-infra] Widen @​babel/runtime range and stop emitting empty class fields ...
  • ba99ac8 [tree view] Use aria-selected instead of aria-checked when `checkboxSelec...
  • 9b7842c [x-internals] Import Base UI utils directly instead of re-exporting them (#23...
  • Additional commits viewable in compare view

Updates allotment from 1.20.5 to 1.20.6

Release notes

Sourced from allotment's releases.

v1.20.6

1.20.6 (2026-10-12)

Bug Fixes

  • call the latest onReset when double-clicking a sash (#904) (b4d9fca), closes #901
  • sash: end in-progress drags cleanly on dispose and view changes (#898) (b307433)
  • split-view: resize() no longer crashes when given extra sizes (#914) (2b547d3)
Changelog

Sourced from allotment's changelog.

1.20.6 (2026-10-12)

Bug Fixes

  • call the latest onReset when double-clicking a sash (#904) (b4d9fca), closes #901
  • sash: end in-progress drags cleanly on dispose and view changes (#898) (b307433)
  • split-view: resize() no longer crashes when given extra sizes (#914) (2b547d3)
Commits
  • fddd29d chore(main): release 1.20.6 (#895)
  • 1737285 chore(deps): update dependency @​rollup/plugin-babel to v7.1.0 (#896)
  • 2ac7dca docs: explain drag vs layout changes, what visible remembers, and known limit...
  • bf2554d chore(deps): update actions/setup-node action to v7 (#927)
  • 82ff665 docs: reorganise guides, complete the API overview and trim the FAQ (#928)
  • 3c3fdb4 chore(deps): update actions/checkout action to v7 (#924)
  • d67bd89 docs: add live styling and container resize examples (#926)
  • 3902bf5 docs: tidy up the getting started guide and Pane API page (#925)
  • daf6430 chore(deps): update docusaurus monorepo to v3.10.2 (#922)
  • 55eb86a chore(website): use clsx instead of classnames in the hero demo (#923)
  • Additional commits viewable in compare view

Updates canvas from 3.2.2 to 3.2.3

Release notes

Sourced from canvas's releases.

v3.2.3

Fixed

  • Fix building with gcc (#2559)
Changelog

Sourced from canvas's changelog.

3.2.3

Fixed

  • Fix building with gcc (#2559)
Commits

Updates chart.js from 4.5.1 to 4.6.1

Release notes

Sourced from chart.js's releases.

v4.6.1

Essential Links

  • #12355 fix: trusted publishing fix + version 4.6.1 bump

Thanks to @​etimberg

v4.6.0

Essential Links

  • #12354 chore: version bump to 4.6.0 to prepare for release
  • #12328 test: stabilize overlapping polar-area label fixture

Enhancements

  • #12238 Corrected spacing in pie/doughnut/polarArea (Fixes #10059)
  • #12130 Enable scale title stroke (12092)

Bugs Fixed

  • #12283 filler plugin fill extends past line when offset: true + index scale min/max
  • #12155 Fix early exit from clearStacks
  • #12142 Use integer canvas dimensions

Types

  • #12321 fix(types): allow scriptable and indexed grid tick widths

Documentation

  • #12258 Add a note that axis labels can span lines
  • #12134 docs: Add note about flexbox/grid layout responsivity issue
  • #12139 Fix amount of category scales count in docs

Development

  • #12306 Bump actions/setup-node from 6 to 7
  • #12303 Bump actions/checkout from 6 to 7

... (truncated)

Commits
  • 76d8cf8 fix: trusted publishing fix + version 4.6.1 bump (#12355)
  • 4e5443d chore: version bump to 4.6.0 to prepare for release (#12354)
  • 7169e65 fix(types): allow scriptable and indexed grid tick widths (#12321)
  • 714b48c test: stabilize overlapping polar-area labels across browsers (#12328)
  • 6a86e23 Bump actions/setup-node from 6 to 7 (#12306)
  • afb3d64 Bump actions/checkout from 6 to 7 (#12303)
  • 0db976c Bump pnpm/action-setup from 4.2.0 to 6.1.0 (#12307)
  • d2ddcf9 Specify build script for compressed size (#12310)
  • b972574 filler plugin fill extends past line when offset: true + index scale min/max ...
  • 0ad783f Use node 24 for CI (#12309)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chart.js since your current version.


Updates d3 from 7.9.0 to 7.9.2

Release notes

Sourced from d3's releases.

v7.9.2

  • Revert d3-delaunay’s fix for collinear diagrams.

v7.9.1

  • Update dependencies.
  • Adopt pnpm and vitest.
  • Adopt npm trusted publishing.
  • Publish an ES module bundle instead of separate source files.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for d3 since your current version.


Updates dompurify from 3.4.5 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions

DOMPurify 3.4.13

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible

DOMPurify 3.4.12

  • Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
  • Hardened the handling of hooks removing elements, @​mkrause-bee360
  • Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
  • Hardened the handling of declarative partial updates
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible

DOMPurify 3.4.11

  • Fixed an issue with a leaky config for hooks via setConfig, thanks @​trace37labs
  • Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
  • Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
  • Updated up the linting tool-chain and removed now-redundant lint directives
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible

... (truncated)

Commits

Updates echarts from 6.0.0 to 6.1.0

Release notes

Sourced from echarts's releases.

6.1.0

  • [Feature] [axis] Support dataMin and dataMax option for calculating a nice axis extent. #20838 (Justin-ZS, Ovilia)
  • [Feature] [axis] Comprehensively enable all types of axis (i.e., "value"/"time"/"category"/"log") to render series (typically "bar"/"pictorialBar"/"candlestick"/"boxplot") without overflow (including the case "category" axis with boundaryGap: false); provide containShape option; provide some corresponding clip option. dbfaf6a73 fe932a2aa 3973b21ee (100pah) #21511 (Akash Sonune)
  • [Feature] [axis] Automatically exclude non-positive series data values on "log" axis. dedc5dc18 (100pah)
  • [Feature] [axis] Enable axisLabel.formatter to receive its index for working with customValues. #21220 #21432 (Szymon Pachucki, Ovilia, plainheart)
  • [Feature] [line] Add triggerEvent option for more control over mouse event. #21001 (Steven Cobb, plainheart)
  • [Feature] [pie] Add tangential-noflip rotation mode to keep labels tangential without flipping. #21258 (春秋半夏, Ovilia)
  • [Feature] [gauge] progress.color supports 'auto'. #21224 (StNimmerlein, Ovilia)
  • [Feature] [radar] Add clockwise option. #21143 (Dai Xuezhou, Ovilia)
  • [Feature] [candlestick] [dataZoom] Add cursor option for candlestick series and add cursorGrab option & cursorGrabbing for 'inside' dataZoom. #21558 (zuming, Ovilia, 100pah)
  • [Feature] [scatter] [effectScatter] [geo] Enable clip option on "scatter"/"effectScatter" on geo. 417592289 (100pah)
  • [Feature] [visualMap] Add seriesTargets option for multiple series-dimension mappings. #20703 (Justin-ZS, plainheart)
  • [Feature] [matrix] Support matrix.x/y.length for conveniently creating a headless matrix without composing an array. #21191 (100pah, plainheart)
  • [Feature] [matrix] Add triggerEvent option to support triggering event on matrix cells. #21390 (Natsuo Kawai, 100pah)
  • [Feature] [i18n] add Latvian(LV) translation. #21546 (EPoikans)
  • [Fix] [axis] Change and clarify the rounding error and auto-precision utils and solutions. 479dcd454 (100pah)
  • [Fix] [axis] Fix chart does not work when using customValues with formatter in time axis (axis.type: 'time') label. #21352 (Srajan Sanjay Saxena, plainheart)
  • [Fix] [axis] Fix and clarify alignTick strategy, and fix LogScale precision. a6ab2458f ffcc636fb (100pah)
  • [Fix] [axis] Fix duplicate ticks when using time axis (axis.type: 'time') or customValues, which causes jitter of splitArea; fix the showMin/MaxLabel handling of a category axis (axis.type: 'category'); enable a uniform bandWidth calculation in numeric axis (axis.type: 'value' | 'time' | 'log'). 8de2b64fa 15af0db02 8ddaa5c69 (100pah)
  • [Fix] [axis] Fix time axis (axis.type: 'time') bug when value scale is in millisecond. 40b77b464 (100pah)
  • [Fix] [bar] Fix wrong label position when bar series has a 0 width/height. #21218 (Justin-ZS, Ovilia)
  • [Fix] [scatter] Fix jitter layout does not support progressive rendering and cause chart to be frozen and potential NPE. #21436 (plainheart)
  • [Fix] [lines] Fix effect symbol flip on unidirectional loop end when roundTrip is not enabled. #21320 (Mayank Mehta, plainheart)
  • [Fix] [candlestick] Fix candlestick render error with series.encode on horizontal layout. #21325 (Purbayan Pramanik, 100pah)
  • [Fix] [parallel] Fix incorrect axis extent when any subsequent series has a larger value than the first. #21387 (jackhickson, 100pah)
  • [Fix] [pie] Support axes extent union pie center automatically when pie is laid out on Cartesian (grid component). 18a23a875 (100pah)
  • [Fix] [treemap] Fix treemap can not be zoomed out after a zoom-in when scaleLimit is specified #21427 (TateLiu, 100pah)
  • [Fix] [lines] Fix potential tooltip XSS vulnerability in lines series (series.type: 'lines'). #21608 (plainheart)
  • [Fix] [map] [geo] Fix the failed synchronization and visual artifacts on geo roaming and animation. 417592289 (100pah)
  • [Fix] [tooltip] Fix tooltip content does not refresh when changing tooltip trigger from 'axis' to 'item'. #20710 (Justin-ZS, plainheart)
  • [Fix] [tooltip] valueFormatter callback param dataIndex should be rawDataIndex rather than dataZoom filtered dataIndex. #21479 (100pah, plainheart)
  • [Fix] [axisPointer] Fix axisPointer shadow and enable clipping - it is previously only applicable to "category" axis, but is buggy in numeric axis with "bar" series. 8de2b64fa (100pah)
  • [Fix] [axisPointer] Fix visual artifacts caused by failed axisPointer restoration. 56a32c0bb (100pah)
  • [Fix] [hoverLayer] Fix visual artifacts arisen on hover layer. zrender#1151 933585126 (100pah)
  • [Fix] [marker] Fix marker fails to render with dataset and encode. #21439 (plainheart, 100pah).
  • [Fix] [dataZoom] Fix wrong position of the dataZoom when the series has only one data point. #21196 (alesmit, Ovilia)
  • [Fix] [dataZoom] Fix dataZoom bug that data info disappears when dragging released; fix dataZoom dragging cursor style. 64305a4b8 (100pah)
  • [Fix] [dataZoom] Apply a better auto-precision method; fix unexpected behaviors when dataZoom controls axes with alignTicks: true. d168bf237 (100pah)
  • [Fix] [dataZoom] Fix AxisProxy can not be cleared when dataZoom option changed; fix related onZero behaviors. 52ceb924a 2e82d33c3 (100pah)
  • [Fix] [areaStyle] Fix areaStyle render error when dimension name is empty string. #21219 (Justin-ZS, Ovilia)
  • [Fix] [sunburst] Fix root node label may not be centered. #21306 (Akash Sonune, Ovilia)
  • [Fix] [matrix] Fix matrix label formatter does not work. #21410 (Justin-ZS, Ovilia)
  • [Fix] [toolbox] Fix emphasis color is the same as the default color. #21384 (Ovilia) b094f987d (100pah)
  • [Fix] [toolbox] Fix the dataView component does not fit the dark mode. #21176 (notthistrain, Ovilia)
  • [Fix] [progressive] Fix progressive rendering issues. 91a60fc76 (100pah)
  • [Fix] [labelLine] Fix labelLine.smooth can not be reset. #21425 (fanwww, plainheart)
  • [Fix] [graphic] Fix stroke corner gap due to not closing path in roundRect helper. zrender#1155 (plainheart)
  • [Fix] [svg] Enhance SVG encodeBase64 compatibility to make it available in more environments like Web Worker/NodeJS/Bun. zrender#1145 (plainheart)
  • [Fix] [core] Mark echarts instance object as raw in Vue. #21293 (plainheart)
  • [Fix] [chord] Add the missing export entry for chord chart. #21197 (plainheart, Ovilia)

... (truncated)

Commits
  • c5a48f5 Merge pull request #21612 from apache/release-dev
  • 77e5222 release 6.1.0-rc.2
  • 21f17be fixRegression(map,geo): Resolve circular dependencies introduced by this vers...
  • 830e8b6 chore: Supplement package.json (for module cjs declaration) to source release.
  • ed0e210 chore: Fix addHeader tool and add missing license headers.
  • cc78ada Merge pull request #21611 from apache/release-dev
  • 3f6e012 release: Build release.
  • d69405f chore: Add missing headers.
  • 6998ed0 release: Upgrade npm version.
  • 8cb374b fix(build): Fix build commands.
  • Additional commits viewable in compare view

Updates i18next from 26.0.1 to 26.7.2

Release notes

Sourced from i18next's releases.

v26.7.2

  • fix: the debug-mode deprecation warning for a language code without a region no longer says that v27 replaces aliases. 26.7.0 and 26.7.1 warned that v27 turns 'iw' into 'he' or 'tl' into 'fil' and asked you to rename them. v27 only gives such codes the...

    Description has been truncated

…ith 20 updates

Bumps the frontend-minor-patch group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.6.3` | `5.28.0` |
| [@mui/x-tree-view](https://github.com/mui/mui-x/tree/HEAD/packages/x-tree-view) | `9.1.0` | `9.17.0` |
| [allotment](https://github.com/johnwalley/allotment) | `1.20.5` | `1.20.6` |
| [canvas](https://github.com/Automattic/node-canvas) | `3.2.2` | `3.2.3` |
| [chart.js](https://github.com/chartjs/Chart.js) | `4.5.1` | `4.6.1` |
| [d3](https://github.com/d3/d3) | `7.9.0` | `7.9.2` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.5` | `3.4.17` |
| [echarts](https://github.com/apache/echarts) | `6.0.0` | `6.1.0` |
| [i18next](https://github.com/i18next/i18next) | `26.0.1` | `26.7.2` |
| [i18next-browser-languagedetector](https://github.com/i18next/i18next-browser-languageDetector) | `8.2.1` | `8.3.0` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.42` | `0.19.1` |
| [react-animate-height](https://github.com/Stanko/react-animate-height) | `3.2.3` | `3.2.4` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.3` | `4.18.20` |
| [validator](https://github.com/validatorjs/validator.js) | `13.15.26` | `13.15.35` |
| [vega](https://github.com/vega/vega) | `6.2.0` | `6.4.0` |
| [vega-lite](https://github.com/vega/vega-lite) | `6.4.1` | `6.5.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.24` | `4.17.27` |
| [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `26.15.3` | `26.18.0` |



Updates `@azure/msal-browser` from 5.6.3 to 5.28.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.6.3...msal-browser-v5.28.0)

Updates `@mui/x-tree-view` from 9.1.0 to 9.17.0
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v9.17.0/packages/x-tree-view)

Updates `allotment` from 1.20.5 to 1.20.6
- [Release notes](https://github.com/johnwalley/allotment/releases)
- [Changelog](https://github.com/johnwalley/allotment/blob/main/CHANGELOG.md)
- [Commits](johnwalley/allotment@v1.20.5...v1.20.6)

Updates `canvas` from 3.2.2 to 3.2.3
- [Release notes](https://github.com/Automattic/node-canvas/releases)
- [Changelog](https://github.com/Automattic/node-canvas/blob/master/CHANGELOG.md)
- [Commits](Automattic/node-canvas@v3.2.2...v3.2.3)

Updates `chart.js` from 4.5.1 to 4.6.1
- [Release notes](https://github.com/chartjs/Chart.js/releases)
- [Commits](chartjs/Chart.js@v4.5.1...v4.6.1)

Updates `d3` from 7.9.0 to 7.9.2
- [Release notes](https://github.com/d3/d3/releases)
- [Changelog](https://github.com/d3/d3/blob/main/CHANGES.md)
- [Commits](d3/d3@v7.9.0...v7.9.2)

Updates `dompurify` from 3.4.5 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.5...3.4.17)

Updates `echarts` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/apache/echarts/releases)
- [Commits](apache/echarts@6.0.0...6.1.0)

Updates `i18next` from 26.0.1 to 26.7.2
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.0.1...v26.7.2)

Updates `i18next-browser-languagedetector` from 8.2.1 to 8.3.0
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next-browser-languageDetector@v8.2.1...v8.3.0)

Updates `katex` from 0.16.42 to 0.19.1
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.42...v0.19.1)

Updates `react-animate-height` from 3.2.3 to 3.2.4
- [Changelog](https://github.com/Stanko/react-animate-height/blob/v3/CHANGELOG.md)
- [Commits](https://github.com/Stanko/react-animate-height/commits)

Updates `react-virtuoso` from 4.18.3 to 4.18.20
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.20/packages/react-virtuoso)

Updates `validator` from 13.15.26 to 13.15.35
- [Release notes](https://github.com/validatorjs/validator.js/releases)
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md)
- [Commits](validatorjs/validator.js@13.15.26...13.15.35)

Updates `vega` from 6.2.0 to 6.4.0
- [Release notes](https://github.com/vega/vega/releases)
- [Commits](vega/vega@v6.2.0...v6.4.0)

Updates `vega-lite` from 6.4.1 to 6.5.0
- [Release notes](https://github.com/vega/vega-lite/releases)
- [Changelog](https://github.com/vega/vega-lite/blob/main/CHANGELOG.md)
- [Commits](vega/vega-lite@v6.4.1...v6.5.0)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@types/lodash` from 4.17.24 to 4.17.27
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `electron-builder` from 26.15.3 to 26.18.0
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/electron-builder@26.18.0/packages/electron-builder/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-builder@26.18.0/packages/electron-builder)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@mui/x-tree-view"
  dependency-version: 9.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: allotment
  dependency-version: 1.20.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: canvas
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: chart.js
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: d3
  dependency-version: 7.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: echarts
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: i18next
  dependency-version: 26.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: i18next-browser-languagedetector
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: katex
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: react-animate-height
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: validator
  dependency-version: 13.15.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: vega
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: vega-lite
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@types/lodash"
  dependency-version: 4.17.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: electron-builder
  dependency-version: 26.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants