chore(deps): bump the dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #548 · AxisCommunications/fluent-components

dependabot · 2026-03-11T05:10:57Z

Bumps the dependencies group with 8 updates in the / directory:

Package	From	To
react	`19.2.0`	`19.2.4`
react-dom	`19.2.0`	`19.2.4`
react-router-dom	`6.30.0`	`6.30.3`
react-syntax-highlighter	`15.6.1`	`15.6.6`
scheduler	`0.26.0`	`0.27.0`
@griffel/react	`1.5.32`	`1.6.1`
cmd-ts	`0.13.0`	`0.15.0`
semver	`7.7.3`	`7.7.4`

Updates react from 19.2.0 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
See full diff in compare view

Updates react-dom from 19.2.0 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
See full diff in compare view

Updates react-router-dom from 6.30.0 to 6.30.3

Changelog

Sourced from react-router-dom's changelog.

v6.30.3

Date: 2026-01-07

Security Notice

This release addresses 1 security vulnerability:

XSS via Open Redirects

Patch Changes

Validate redirect locations (#14707)

Full Changelog: v6.30.2...v6.30.3

v6.30.2

Date: 2025-11-13

Security Notice

This release addresses 1 security vulnerability:

Unexpected external redirect via untrusted paths

Patch Changes

Normalize double-slashes in resolvePath (#14537)

Full Changelog: v6.30.1...v6.30.2

v6.30.1

Date: 2025-05-20

Patch Changes

Partially revert optimization added in 6.29.0 to reduce calls to matchRoutes because it surfaced other issues (#13623)

Stop logging invalid warning when v7_relativeSplatPath is set to false (#13502)

Full Changelog: v6.30.0...v6.30.1

Commits

c662ca3 chore: Update version for release (#14713)
98ad691 chore: Update version for release (pre-v6) (#14710)
26b5d45 chore: Update version for release (#14541)
919f8a8 chore: Update version for release (pre-v6) (#14540)
3f2400e chore: Update version for release (#13647)
25a264d chore: Update version for release (pre-v6) (#13638)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-router-dom since your current version.

Updates react-syntax-highlighter from 15.6.1 to 15.6.6

Release notes

Sourced from react-syntax-highlighter's releases.

v15.6.6

Updated overrides block attempting to solve transitive prismjs dependency issue:
"overrides": {
    "prismjs": "^1.30.0",
    "refractor": {
      "prismjs": "^1.30.0"
    }
  }
Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.5...v15.6.6

v15.6.5

What's Changed

Bump elliptic from 6.5.5 to 6.6.0 by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#576

Bump ws from 6.2.2 to 6.2.3 by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#574

Bump express from 4.19.2 to 4.21.1 by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#572

Bump send and express by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#571

Bump cookie and express by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#570

Bump serve-static and express by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#569

Bump body-parser and express by @dependabot[bot] in react-syntax-highlighter/react-syntax-highlighter#568

Add Boemly to the built with section of the readme by @lukasbals in react-syntax-highlighter/react-syntax-highlighter#467

New Contributors

@lukasbals made their first contribution in react-syntax-highlighter/react-syntax-highlighter#467

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.4...v15.6.5

v15.6.4

What's Changed

Override refractor 3.6.0's prismjs dependency by @simmerer in react-syntax-highlighter/react-syntax-highlighter#605

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.3...v15.6.4

v15.6.3

What's Changed

fix line count error by @bbbert in react-syntax-highlighter/react-syntax-highlighter#583

fix spelling error by @BrianHung in react-syntax-highlighter/react-syntax-highlighter#579

New Contributors

@bbbert made their first contribution in react-syntax-highlighter/react-syntax-highlighter#583

@BrianHung made their first contribution in react-syntax-highlighter/react-syntax-highlighter#579

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.2...v15.6.3

v15.6.2

What's Changed

... (truncated)

Changelog

Sourced from react-syntax-highlighter's changelog.

Changelog

Commits

56a1b0f add top-level override for prismjs, bump to 15.6.6
a169285 bump to 15.6.5
5d507f0 Add Boemly to the built with section of the readme (#467)
0bda769 Bump body-parser and express (#568)
9fb3f73 Bump serve-static and express (#569)
5f0dbfc Bump cookie and express (#570)
53e6607 Bump send and express (#571)
130c9c3 Bump express from 4.19.2 to 4.21.1 (#572)
9382590 Bump ws from 6.2.2 to 6.2.3 (#574)
7ecf606 Bump elliptic from 6.5.5 to 6.6.0 (#576)
Additional commits viewable in compare view

Updates scheduler from 0.26.0 to 0.27.0

Commits

See full diff in compare view

Updates @griffel/react from 1.5.32 to 1.6.1

Commits

See full diff in compare view

Updates cmd-ts from 0.13.0 to 0.15.0

Release notes

Sourced from cmd-ts's releases.

v0.15.0

Minor Changes

0366d4f: Add pluggable help formatters with HelpFormatter interface and setDefaultHelpFormatter() API. This allows customizing how CLI help is rendered. Also adds:

examples option to commands and subcommands for documenting usage examples

cmd-ts/batteries/vercelFormatter - a Vercel-style help formatter with column-aligned output

v0.14.3

Patch Changes

e0afa2f: handle circuit breaker (--help and --version) before parsing arguments

v0.14.2

Patch Changes

87565b2: Added onMissing callback support to flags, options, and custom types

That allows providing dynamic fallback values when command-line arguments are not provided, This enables:

Hiding default values from help output

Interactive prompts: Ask users for input when flags/options are missing

Environment-based defaults: Check environment variables or config files dynamically

Auto-discovery: Automatically find files or resources when not specified

Async support: Handle both synchronous and asynchronous fallback logic

The onMissing callback is used as a fallback when defaultValue is not provided, following the precedence order: environment variables → defaultValue → onMissing → type defaults.

New APIs:

flag({ onMissing: () => boolean | Promise })

option({ onMissing: () => T | Promise })

multioption({ onMissing: () => T[] | Promise<T[]> })

Custom Type interface now supports onMissing property

v0.14.1

Patch Changes

46bf4a7: fix: properly reconstruct original argument strings in rest combinator

Changelog

Sourced from cmd-ts's changelog.

0.15.0

Minor Changes

0366d4f: Add pluggable help formatters with HelpFormatter interface and setDefaultHelpFormatter() API. This allows customizing how CLI help is rendered. Also adds:

examples option to commands and subcommands for documenting usage examples

cmd-ts/batteries/vercelFormatter - a Vercel-style help formatter with column-aligned output

0.14.4

Patch Changes

bcd5d02: better multiline error formatting

0.14.3

Patch Changes

e0afa2f: handle circuit breaker (--help and --version) before parsing arguments

0.14.2

Patch Changes

87565b2: Added onMissing callback support to flags, options, and custom types

That allows providing dynamic fallback values when command-line arguments are not provided, This enables:

Hiding default values from help output

Interactive prompts: Ask users for input when flags/options are missing

Environment-based defaults: Check environment variables or config files dynamically

Auto-discovery: Automatically find files or resources when not specified

Async support: Handle both synchronous and asynchronous fallback logic

The onMissing callback is used as a fallback when defaultValue is not provided, following the precedence order: environment variables → defaultValue → onMissing → type defaults.

New APIs:

flag({ onMissing: () => boolean | Promise })

option({ onMissing: () => T | Promise })

multioption({ onMissing: () => T[] | Promise<T[]> })

Custom Type interface now supports onMissing property

0.14.1

Patch Changes

46bf4a7: fix: properly reconstruct original argument strings in rest combinator

0.14.0

... (truncated)

Commits

bbe4691 chore: add repository field to package.json
0bf5c59 Version Packages (#256)
89a5045 fix: grant write permissions to release workflow
0366d4f feat: Pluggable help formatters (#255)
04968ae schniz/upgrade node24 (#254)
8b40df7 Revert "update node maybe?"
4ba5748 update node maybe?
5a0ef6f Version Packages (#253)
1d4cfa7 use oidc to publish
bcd5d02 support multiline error formatting (#252)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for cmd-ts since your current version.

Updates semver from 7.7.3 to 7.7.4

Release notes

Sourced from semver's releases.

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@mldangelo)

Documentation

1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@mldangelo)

Dependencies

120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

44d7130 #824 bump @npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@dependabot[bot])

7073576 #820 reorder parameters in invalid-versions.js test (#820) (@reggi)

5816d4c #829 bump @npmcli/template-oss from 4.28.0 to 4.28.1 (#829) (@dependabot[bot], @npm-cli-bot)

Changelog

Sourced from semver's changelog.

7.7.4 (2026-01-16)

Bug Fixes

a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@mldangelo)

Documentation

1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@mldangelo)

Dependencies

120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

44d7130 #824 bump @npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@dependabot[bot])

7073576 #820 reorder parameters in invalid-versions.js test (#820) (@reggi)

5816d4c #829 bump @npmcli/template-oss from 4.28.0 to 4.28.1 (#829) (@dependabot[bot], @npm-cli-bot)

Commits

5993c2e chore: release 7.7.4 (#839)
120968b deps: @npmcli/template-oss@4.29.0 (#840)
a29faa5 fix(cli): pass options to semver.valid() for loose version validation (#835)
1d28d5e docs: fix typos and update -n CLI option documentation (#836)
5816d4c chore: bump @npmcli/template-oss from 4.28.0 to 4.28.1 (#829)
ab9e28a chore: bump @npmcli/template-oss from 4.27.1 to 4.28.0 (#827)
44d7130 chore: bump @npmcli/eslint-config from 5.1.0 to 6.0.0 (#824)
7073576 chore: reorder parameters in invalid-versions.js test (#820)
16a35f5 chore: bump @npmcli/template-oss from 4.26.0 to 4.27.1 (#823)
3a3459d chore: bump @npmcli/template-oss from 4.25.1 to 4.26.0 (#818)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

socket-security · 2026-03-11T05:11:47Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
react-router-dom@6.30.0 ⏵ 6.30.3
@types/react@19.2.6 ⏵ 19.2.14	⁺¹	⁺¹	^-1
react@19.2.0 ⏵ 19.2.4
cmd-ts@0.13.0 ⏵ 0.15.0	⁺¹	⁺¹	⁺²
react-syntax-highlighter@15.6.1 ⏵ 15.6.6	⁺¹	⁺¹	^-1
react-dom@19.2.0 ⏵ 19.2.4
@griffel/react@1.6.1

View full report

axis-d0op · 2026-03-12T09:36:29Z

@dependabot recreate

…dates Bumps the dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.4` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.4` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `6.30.0` | `6.30.3` | | [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `15.6.1` | `15.6.6` | | [scheduler](https://github.com/facebook/react/tree/HEAD/packages/scheduler) | `0.26.0` | `0.27.0` | | [@griffel/react](https://github.com/microsoft/griffel) | `1.5.32` | `1.6.1` | | [cmd-ts](https://github.com/Schniz/cmd-ts) | `0.13.0` | `0.15.0` | | [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.7.4` | Updates `react` from 19.2.0 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react) Updates `react-dom` from 19.2.0 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom) Updates `react-router-dom` from 6.30.0 to 6.30.3 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@6.30.3/packages/react-router-dom) Updates `react-syntax-highlighter` from 15.6.1 to 15.6.6 - [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases) - [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD) - [Commits](react-syntax-highlighter/react-syntax-highlighter@v15.6.1...v15.6.6) Updates `scheduler` from 0.26.0 to 0.27.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/HEAD/packages/scheduler) Updates `@griffel/react` from 1.5.32 to 1.6.1 - [Commits](https://github.com/microsoft/griffel/commits) Updates `cmd-ts` from 0.13.0 to 0.15.0 - [Release notes](https://github.com/Schniz/cmd-ts/releases) - [Changelog](https://github.com/Schniz/cmd-ts/blob/main/CHANGELOG.md) - [Commits](Schniz/cmd-ts@v0.13.0...v0.15.0) Updates `semver` from 7.7.3 to 7.7.4 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.7.3...v7.7.4) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-dom dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-router-dom dependency-version: 6.30.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-syntax-highlighter dependency-version: 15.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: scheduler dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@griffel/react" dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: cmd-ts dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: semver dependency-version: 7.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

axis-d0op

OK

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 11, 2026

dependabot bot requested a review from a team as a code owner March 11, 2026 05:10

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 11, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-0867f8324c branch from 91a776b to b9f2a94 Compare March 11, 2026 09:43

dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-0867f8324c branch from b9f2a94 to 2c6674a Compare March 12, 2026 09:40

axis-d0op approved these changes Mar 13, 2026

View reviewed changes

axis-d0op merged commit 186c19e into main Mar 13, 2026
10 checks passed

axis-d0op deleted the dependabot/npm_and_yarn/dependencies-0867f8324c branch March 13, 2026 14:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the dependencies group across 1 directory with 8 updates#548

chore(deps): bump the dependencies group across 1 directory with 8 updates#548
axis-d0op merged 1 commit intomainfrom
dependabot/npm_and_yarn/dependencies-0867f8324c

dependabot bot commented on behalf of github Mar 11, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 11, 2026 •

edited

Loading

Uh oh!

axis-d0op commented Mar 12, 2026

Uh oh!

axis-d0op left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

v6.30.3

Security Notice

Patch Changes

v6.30.2

Security Notice

Patch Changes

v6.30.1

Patch Changes

v15.6.6

v15.6.5

What's Changed

New Contributors

v15.6.4

What's Changed

v15.6.3

What's Changed

New Contributors

v15.6.2

What's Changed

Changelog

v0.15.0

Minor Changes

v0.14.3

Patch Changes

v0.14.2

Patch Changes

v0.14.1

Patch Changes

0.15.0

Minor Changes

0.14.4

Patch Changes

0.14.3

Patch Changes

0.14.2

Patch Changes

0.14.1

Patch Changes

0.14.0

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

Uh oh!

socket-security bot commented Mar 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

axis-d0op commented Mar 12, 2026

Uh oh!

axis-d0op left a comment

dependabot bot commented on behalf of github Mar 11, 2026 •

edited

Loading

socket-security bot commented Mar 11, 2026 •

edited

Loading