Skip to content

Bump the dependencies group across 1 directory with 14 updates - #323

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-b702503c5b
Open

Bump the dependencies group across 1 directory with 14 updates#323
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-b702503c5b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 14 updates in the / directory:

Package From To
@fortawesome/fontawesome-svg-core 7.3.0 7.3.1
@fortawesome/react-fontawesome 3.3.1 3.5.0
@mui/x-date-pickers 8.29.0 8.29.2
axios 1.18.1 1.19.0
ip-range-check 0.2.0 0.2.1
postcss 8.5.16 8.5.26
react-colorful 5.7.0 5.8.0
react-hook-form 7.80.0 7.85.0
recharts 3.9.1 3.10.1
systeminformation 5.31.11 5.33.1
tar 7.5.19 7.5.22
@testing-library/user-event 14.6.1 14.6.3
prettier 3.9.4 3.9.6
vitest 3.2.6 3.2.7

Updates @fortawesome/fontawesome-svg-core from 7.3.0 to 7.3.1

Release notes

Sourced from @​fortawesome/fontawesome-svg-core's releases.

Release 7.3.1

Change log available at https://fontawesome.com/docs/changelog/

Commits
Maintainer changes

This version was pushed to npm by fortawesome-admin, a new releaser for @​fortawesome/fontawesome-svg-core since your current version.


Updates @fortawesome/react-fontawesome from 3.3.1 to 3.5.0

Release notes

Sourced from @​fortawesome/react-fontawesome's releases.

v3.5.0

3.5.0 (2026-07-20)

Features

Chores

  • deps: roll back commitlint to fix release notes generation (d5f3376)
  • fix missing changelog for 3.4.0 (e33cff5)

v3.4.0

3.4.0 (2026-07-08)

Features

  • Support for new animations introduced in FontAwesome v7.3.0 (#651)

Chores

Full Changelog: FortAwesome/react-fontawesome@v3.3.1...v3.4.0

Changelog

Sourced from @​fortawesome/react-fontawesome's changelog.

3.5.0 (2026-07-20)

Features

Chores

  • deps: roll back commitlint to fix release notes generation (d5f3376)
  • fix missing changelog for 3.4.0 (e33cff5)

3.4.0 (2026-07-08)

Features

  • Support for new animations introduced in FontAwesome v7.3.0 (#651)

Chores

  • deps: bump fast-uri from 3.1.0 to 3.1.2 (a193c11)
  • deps-dev: bump dev dependencies to use FA 7.3.0 (cc540d8)
Commits
  • 162b1cd chore(release): 3.5.0 [skip ci]
  • d5f3376 chore(deps): roll back commitlint to fix release notes generation
  • 94a3d3e Merge pull request #652 from FortAwesome/new-7-3-canvas-options
  • c5333b9 feat: add new canvas options
  • e33cff5 chore: fix missing changelog for 3.4.0
  • 814990b chore(release): 3.4.0 [skip ci]
  • cc540d8 chore(deps): bump dev to FA 7.3.0
  • 949c7a1 Merge pull request #651 from FortAwesome/new-7-3-animations
  • 3dfea93 fix: more accurate links to animations
  • 4415c9e feat: new animations to support 7.3.0
  • Additional commits viewable in compare view

Updates @mui/x-date-pickers from 8.29.0 to 8.29.2

Release notes

Sourced from @​mui/x-date-pickers's releases.

v8.29.2

We'd like to extend a big thank you to the 8 contributors who made this release possible. Here are some highlights ✨:

  • 🐞 Bugfixes

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​timbuckley

The following team members contributed to this release: @​alexfauquette, @​arminmeh, @​brijeshb42, @​cherniavskii, @​LukasTy, @​MBilalShafi

Data Grid

@mui/x-data-grid@8.29.2

@mui/x-data-grid-pro@8.29.2 pro

Same changes as in @mui/x-data-grid@8.29.2.

@mui/x-data-grid-premium@8.29.2 premium

Same changes as in @mui/x-data-grid-pro@8.29.2, plus:

  • [DataGridPremium] Escape singleSelect values in Excel export with escapeFormulas enabled (#22966) @​Anexus5919

Date and Time Pickers

@mui/x-date-pickers@8.29.2

@mui/x-date-pickers-pro@8.29.2 pro

Same changes as in @mui/x-date-pickers@8.29.2.

Charts

@mui/x-charts@8.29.2

Internal changes.

@mui/x-charts-pro@8.29.2 pro

... (truncated)

Changelog

Sourced from @​mui/x-date-pickers's changelog.

8.29.2

Jul 2, 2026

We'd like to extend a big thank you to the 8 contributors who made this release possible. Here are some highlights ✨:

  • 🐞 Bugfixes

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​timbuckley

The following team members contributed to this release: @​alexfauquette, @​arminmeh, @​brijeshb42, @​cherniavskii, @​LukasTy, @​MBilalShafi

Data Grid

@mui/x-data-grid@8.29.2

@mui/x-data-grid-pro@8.29.2 pro

Same changes as in @mui/x-data-grid@8.29.2.

@mui/x-data-grid-premium@8.29.2 premium

Same changes as in @mui/x-data-grid-pro@8.29.2, plus:

  • [DataGridPremium] Escape singleSelect values in Excel export with escapeFormulas enabled (#22966) @​Anexus5919

Date and Time Pickers

@mui/x-date-pickers@8.29.2

@mui/x-date-pickers-pro@8.29.2 pro

Same changes as in @mui/x-date-pickers@8.29.2.

Charts

@mui/x-charts@8.29.2

Internal changes.

... (truncated)

Commits

Updates axios from 1.18.1 to 1.19.0

Release notes

Sourced from axios's releases.

v1.19.0 - July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

  • Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

  • Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)
  • Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)
  • HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

  • Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)
  • Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)
  • Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)
  • Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)
  • URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11024, #11038)
  • Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)
  • Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)
  • Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)
  • Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

  • Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)
  • Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)
  • Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)
  • Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)
  • Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)
  • Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

... (truncated)

Changelog

Sourced from axios's changelog.

v1.19.0 — July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

  • Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

  • Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)
  • Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)
  • HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

  • Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

  • Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

  • Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

  • Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

  • URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11008, #11038)

  • Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

  • Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

  • Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

  • Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

  • Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)
  • Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)
  • Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)
  • Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)
  • Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)
  • Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

... (truncated)

Commits
  • 311fcc5 chore(release): prepare release 1.19.0 (#11095)
  • cb4fd74 chore(deps): bump axios from 1.16.1 to 1.18.1 in /docs (#11088)
  • 004c93a chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in the github-action...
  • 122edde chore(deps-dev): bump the development_dependencies group with 3 updates (#11089)
  • c44f8d0 ci: use bundled npm for v1 publish (#11083)
  • 878bb29 fix(sandbox): resolve TypeError on constant variable path assignment (#11073)
  • a092bae fix(core): synchronous interceptors swallow errors and proceed with request (...
  • 3041b8f feat(HttpStatusCode): add missing 520 status code (#11067)
  • 58b16c8 refactor(helpers): extract duplicated setFormDataHeaders into a shared helper...
  • 3077e62 feat(types): Allow the Params property to be typed, instead of any (#11081)
  • Additional commits viewable in compare view

Updates ip-range-check from 0.2.0 to 0.2.1

Changelog

Sourced from ip-range-check's changelog.

0.2.1

Security fix: SSRF filter bypass via abbreviated IPv4 notation

GHSA-87xc-4hwr-pxf6

ipRangeCheck previously treated any unparseable address as "not in range" (false). Abbreviated IPv4 forms such as "127.1", "0177.1", and "127.0x1" failed to parse under ipaddr.js 1.x, so a denylist check like ipRangeCheck(host, ["127.0.0.0/8", ...]) returned false for them — even though Node, browsers, curl, and most OS resolvers connect these forms to 127.0.0.1. An application using this library to block requests to private IP ranges (a common SSRF defense) could be bypassed by an attacker supplying one of these forms as the target host. See the security advisory for full details, including which usage patterns are and aren't affected.

Behavior change: short/hex/octal IPv4 notations are now accepted

Upgrading ipaddr.js from 1.x to 2.x changed how non-standard IPv4 notations are handled. Previously they failed to parse, so ipRangeCheck returned false for any check involving them. They now parse using the classic inet_aton rules — the same rules the OS, browsers, and curl apply when connecting:

  • Shorthand: "127.1" → 127.0.0.1 (the final part fills the remaining bytes), so ipRangeCheck("127.1", "127.0.0.0/8") is now true (was false).
  • Hexadecimal octets: "0x7f.1" → 127.0.0.1.
  • Octal octets: a leading zero means octal, so "010.1" → 8.0.0.1, not 10.0.0.1.

This matches what those inputs actually resolve to on a real network stack, which is generally what you want when checking whether an address falls in a range (e.g. blocking 127.0.0.0/8 now correctly catches "127.1"). However, if you were relying on these notations failing validation, you must now validate input format separately (e.g. with ipaddr.IPv4.isValidFourPartDecimal() from ipaddr.js).

Dependencies

  • Upgraded ipaddr.js 1.9.1 → 2.5.0.
  • Removed mocha in favour of Node's built-in test runner (node --test). The package now has zero dev dependencies and a single runtime dependency, and npm audit reports zero vulnerabilities.
  • Committed package-lock.json.

Running the tests now requires Node.js 22 or newer. This does not affect consumers of the library — the shipped code is unchanged and its supported Node versions are unaffected.

... (truncated)

Commits
  • 77e5e80 Release 0.2.1: fix SSRF filter bypass via abbreviated IPv4 notation
  • c13d325 Drop end-of-life Node 20 from CI matrix
  • 4ebfdd7 Test on Node 26 in CI
  • 83cd85c Replace mocha with Node's built-in test runner
  • 64ea943 Bump checkout and setup-node actions to v7
  • e09491b Revert version bump; hold 1.0.0 changelog as unreleased
  • f0ced78 Add inet_aton notation tests, changelog, and bump to 1.0.0
  • 673e4b6 Upgrade ipaddr.js to 2.5.0 and mocha to 11.8.0
  • a7aca1c Use npm ci with caching in CI
  • 9b88851 Commit package-lock.json
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by danielcompton, a new releaser for ip-range-check since your current version.


Updates postcss from 8.5.16 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
Commits

Updates react-colorful from 5.7.0 to 5.8.0

Release notes

Sourced from react-colorful's releases.

v5.8.0 (Shadow DOM support)

The picker now works inside Shadow DOM. When mounted inside a shadow tree, the component injects its styles into the closest ShadowRoot instead of the document <head>, so it renders correctly in web components and other shadow-DOM-based setups. No API changes required — it just works. (via #232)

Changelog

Sourced from react-colorful's changelog.

5.8.0

  • Shadow DOM support: the picker now injects its styles into the closest ShadowRoot when rendered inside one (via #232)
Commits

Updates react-hook-form from 7.80.0 to 7.85.0

Release notes

Sourced from react-hook-form's releases.

Version 7.85.0

✨ Improvements

  • support React <Activity /> (#13633)

🐞 Fixes

  • fix min/max validation being skipped for valueAsDate fields (#13646)
  • fix field array root errors being lost during append, prepend, insert, and remove (#13645)
  • fix stale renders recreating field array paths after field array actions (#13644)
  • fix useWatch preferring form defaultValues over the hook's own defaultValue (#13635)
  • fix setValue emitting duplicate values state notifications (#13637)
  • fix TypeScript getFieldState error resolution for field paths (#13632)

🏗️ Chores

  • remove tinybench (#13647)
  • remove dead code and stale API Extractor report (#13643)

Thanks to @​zigzagdev, @​bluebill1049, @​anshusaurav, @​saulo-silva, @​EduardF1, and @​candymask0712 for their contributions! 🎉

Version 7.84.0

✨ Improvements

  • enhance <Form /> submit behavior (#13605)
  • improve performance and reduce bundle size (#13591)

🐞 Fixes

  • fix: values + keepDirtyValues silently corrupting arrays and freezing objects on refetch (#13628)
  • fix: setValue not updating FieldArray values correctly (#13623)
  • fix: FormState type definitions (#13620)
  • fix: FieldArray and FormState exports (#13619)

🧪 Tests

  • add Blob coverage for FieldErrors type tests (#13624)

♻️ Refactors

  • extract shared ErrorNamespacePath type (#13615)

🏗️ Chores

  • rename <FormStateSubscribe /> back to <FormState /> (#13602)
  • bump @babel/core from 7.26.0 to 7.29.7 (#13614)

Thanks to @​candymask0712, @​EduardF1, @​in-ch, @​johnstrand, @​wanxiankai, @​nobu-da, and @​bluebill1049 for their contributions! 🎉

Version 7.83.0

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.85.0] - 2026-08-08

Added

  • Support <Activity />

Fixed

  • getFieldState error resolution from a field path
  • useWatch discarding useForm({ defaultValues }) in favor of its own defaultValue before the form mounts
  • setValue emitting a duplicate values state notification for fields without a native input ref
  • Stale render re-creating a field array path vacated by an array action
  • useFieldArray root-level error (errors.name.root) being lost on append/prepend/insert/remove
  • min/max validation being skipped for valueAsDate fields

[7.84.0] - 2026-08-01

Improvements

  • handleSubmit returns the typed result of the onValid callback instead of discarding it
  • <Form /> supports a function-based action (Server Action style) in addition to URL-string actions
  • Improve performance and reduce bundle size

Fixed

  • reset() with resetOptions.keepDirtyValues freezing clean sibling fields in a nested object when another field in that object is dirty
  • Restore missing FieldArray and FormState type exports
  • setValues not notifying useFieldArray subscribers, leaving rendered fields stale

[7.83.0] - 2026-07-25

Improvements

  • Enhance getEventValue to handle file inputs
  • Improve TypeScript performance with a hard cap at 10 levels of recursive type depth

Fixed

  • Clear internal errors state on argument-less clearErrors()
  • Preserve dirtyFields reference stability
  • Old checkbox/radio elements polluting internal field state
  • useController not re-subscribing onChange/onBlur when control changes
  • Allow validation messages to be defined even if their related value is undefined

[7.82.0] - 2026-07-18

Added

  • Opt-in delayError option for setValue to delay validation error updates

... (truncated)

Commits
  • 371432c 7.85.0
  • d7118f4 🐞 fix: min/max validation being skipped for valueAsDate fields (#13646)
  • 47546bb 🐞 fix: field array root error being lost on append/prepend/insert/remove (#13...
  • c96ab19 🚮 chore: remove tinybench (#13647)
  • 5e9e024 🐞 fix #13641 stale render re-creating field array path vacated by array actio...
  • 6a77f43 🧹 chore: remove dead code and stale api-extractor report (#13643)
  • 9fde5f3 🛹 feat: support \<Activity /> (#13633)
  • f634d24 🐞 fix #13636 emit values state only once per setValue (#13637)
  • 4e83cf7 🐞 fix(useWatch): prefer form defaultValues over the hook's own defaultValue (...
  • 6994484 ⌨️ fix(types): resolve getFieldState error from field path (#13632)
  • Additional commits viewable in compare view

Updates recharts from 3.9.1 to 3.10.1

Release notes

Sourced from recharts's releases.

v3.10.1

What's Changed

New Contributors

Full Changelog: https://github.com/recharts/recharts/compare/v3.10....

Description has been truncated

@dependabot
Bump the dependencies group across 1 directory with 14 updates
7ae9b77 
Bumps the dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fortawesome/fontawesome-svg-core](https://github.com/FortAwesome/Font-Awesome) | `7.3.0` | `7.3.1` |
| [@fortawesome/react-fontawesome](https://github.com/FortAwesome/react-fontawesome) | `3.3.1` | `3.5.0` |
| [@mui/x-date-pickers](https://github.com/mui/mui-x/tree/HEAD/packages/x-date-pickers) | `8.29.0` | `8.29.2` |
| [axios](https://github.com/axios/axios) | `1.18.1` | `1.19.0` |
| [ip-range-check](https://github.com/danielcompton/ip-range-check) | `0.2.0` | `0.2.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.16` | `8.5.26` |
| [react-colorful](https://github.com/omgovich/react-colorful) | `5.7.0` | `5.8.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.80.0` | `7.85.0` |
| [recharts](https://github.com/recharts/recharts) | `3.9.1` | `3.10.1` |
| [systeminformation](https://github.com/sebhildebrandt/systeminformation) | `5.31.11` | `5.33.1` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.19` | `7.5.22` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.3` |
| [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.6` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.6` | `3.2.7` |



Updates `@fortawesome/fontawesome-svg-core` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md)
- [Commits](FortAwesome/Font-Awesome@7.3.0...7.3.1)

Updates `@fortawesome/react-fontawesome` from 3.3.1 to 3.5.0
- [Release notes](https://github.com/FortAwesome/react-fontawesome/releases)
- [Changelog](https://github.com/FortAwesome/react-fontawesome/blob/main/CHANGELOG.md)
- [Commits](FortAwesome/react-fontawesome@v3.3.1...v3.5.0)

Updates `@mui/x-date-pickers` from 8.29.0 to 8.29.2
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/v8.29.2/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v8.29.2/packages/x-date-pickers)

Updates `axios` from 1.18.1 to 1.19.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.18.1...v1.19.0)

Updates `ip-range-check` from 0.2.0 to 0.2.1
- [Changelog](https://github.com/danielcompton/ip-range-check/blob/master/CHANGELOG.md)
- [Commits](danielcompton/ip-range-check@v0.2.0...v0.2.1)

Updates `postcss` from 8.5.16 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.16...8.5.26)

Updates `react-colorful` from 5.7.0 to 5.8.0
- [Release notes](https://github.com/omgovich/react-colorful/releases)
- [Changelog](https://github.com/omgovich/react-colorful/blob/master/CHANGELOG.md)
- [Commits](omgovich/react-colorful@5.7.0...v5.8.0)

Updates `react-hook-form` from 7.80.0 to 7.85.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.80.0...v7.85.0)

Updates `recharts` from 3.9.1 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.9.1...v3.10.1)

Updates `systeminformation` from 5.31.11 to 5.33.1
- [Release notes](https://github.com/sebhildebrandt/systeminformation/releases)
- [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md)
- [Commits](sebhildebrandt/systeminformation@v5.31.11...v5.33.1)

Updates `tar` from 7.5.19 to 7.5.22
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.19...v7.5.22)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.3
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.3)

Updates `prettier` from 3.9.4 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.4...3.9.6)

Updates `vitest` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.7/packages/vitest)

---
updated-dependencies:
- dependency-name: "@fortawesome/fontawesome-svg-core"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@fortawesome/react-fontawesome"
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@mui/x-date-pickers"
  dependency-version: 8.29.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: axios
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ip-range-check
  dependency-version: 0.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-colorful
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: react-hook-form
  dependency-version: 7.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: systeminformation
  dependency-version: 5.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: vitest
  dependency-version: 3.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
github-actions[bot]
github-actions Bot approved these changes Aug 11, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved because this is a Dependabot semver minor/patch update.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants