Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 8 updates#369

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/production-dependencies-5d00073696
Open

chore(deps): bump the production-dependencies group across 1 directory with 8 updates#369
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/production-dependencies-5d00073696

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 27, 2026 •
edited
Loading

Bumps the production-dependencies group with 8 updates in the /frontend directory:

Package From To
bootstrap 5.3.7 5.3.8
phoenix 1.7.21 1.8.4
qr-code-styling 1.9.1 1.9.2
react 18.3.1 19.2.4
react-dom 18.3.1 19.2.4
react-intl 6.6.8 8.1.3
react-responsive-pagination 2.10.1 2.13.0
react-router-dom 7.13.0 7.13.1

Updates bootstrap from 5.3.7 to 5.3.8

Release notes

Sourced from bootstrap's releases.

v5.3.8

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/bootstrap@v5.3.7...v5.3.8

Commits

Updates phoenix from 1.7.21 to 1.8.4

Changelog

Sourced from phoenix's changelog.

1.8.4 (2026-2-23)

JavaScritp Client Bug Fixes

  • Fix bug reconnecting connections when close was gracefully initiated by server
  • Fix LongPoll transport name in sessionStorage and logs

Enhancements

  • Adds guards support in assert_push, assert_broadcast, and assert_reply
  • Enable purging in Phoenix code server for Elixir 1.20

1.8.3 (2025-12-8)

Enhancements

  • Add top-level phoenix config: sort_verified_routes_query_params to enable sorting query params in verified routes during tests

Bug fixes

  • Fix endpoint port config in an umbrella application. (#6549)
  • Drop incoming channel messages with stale join refs

1.8.2 (2025-11-26)

Bug fixes

  • [phoenix.js] fix issue where LongPoll can cause "unmatched topic" errors (observed on iOS only) (#6538)
  • [phx.gen.live] fix tests when schema and table names are equal (#6477)
  • [Verified Routes] do not add path prefixes for static routes
  • [Phoenix.Endpoint] fix LongPoll being active by default since 1.8.0 (#6487)

Enhancements

  • [phoenix.js] socket now stops reconnection attempts while the page is hidden (#6534)
  • [phx.new] (re-)add <.input field={@form[:foo]} type="hidden" /> support in core components
  • [phx.new] set force_ssl in prod.exs by default (#6435)
  • [phx.new] change --docker base image to debian trixie (#6521)
  • [Phoenix.Socket.assign/2] allow passing a function as second argument assign(socket, fn _existing_assigns -> %{this_gets: "merged"} end) (#6530)
  • [Phoenix.Controller.assign/2] allow passing a function as second argument (#6542)
  • [Phoenix.Controller.assign/2] support keyword lists and maps as second argument similar to LiveView (#6513)
  • [Presence] support custom dispatcher for presence_diff broadcast (#6500)
  • [AGENTS.md] add short test guidelines to usage rules

1.8.1 (2025-08-28)

Bug fixes

  • [phx.new] Fix AGENTS.md failing to include CSS and JavaScript sections

1.8.0 (2025-08-05)

Bug fixes

  • [phx.new] Don't include node_modules override in generated tsconfig.json

Enhancements

  • [phx.gen.live|html|json] - Make context argument optional. Defaults to the plural name.

... (truncated)

Commits

Updates qr-code-styling from 1.9.1 to 1.9.2

Release notes

Sourced from qr-code-styling's releases.

v1.9.2

What's Changed

Other Changes

New Contributors

Full Changelog: kozakdenys/qr-code-styling@v1.9.1...v1.9.2

Commits

Updates react from 18.3.1 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

... (truncated)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

... (truncated)

Commits

Updates react-dom from 18.3.1 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

... (truncated)

Commits

Updates react-intl from 6.6.8 to 8.1.3

Release notes

Sourced from react-intl's releases.

react-intl@8.1.3

8.1.3 (2026-02-03)

Bug Fixes

react-intl@8.1.0

8.1.0 (2026-01-15)

Features

  • @​formatjs/intl-segmenter: improve Unicode 17.0 Format/Extend transparency and upgrade deps (#5862) (effeb9c), closes #29 - by @​longlho
Commits
  • fe5613d build: publish
  • f76294c feat(formatjs_cli): bump version
  • 70e7ad3 fix(react-intl): update react/react-dom dep versions to 19 (#6015)
  • 41cbafc fix(@​formatjs/cli-lib): respect throws flag in extract() function (#6011)
  • 4cd8956 fix(formatjs_cli): match TypeScript CLI extract output format (#6010)
  • 4f1a1cf build: publish
  • 71e4c82 build: allow renovate and graphite-app bot for Claude
  • 1fbac61 build: rm tsx, use --experimental-transform-types (#6007)
  • 968b211 fix(@​formatjs/cli-lib): respect throws:false flag in extract() function (#6002)
  • c92c30b fix(@​formatjs/intl-datetimeformat): fix formatRange date duplication and h24 ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-intl since your current version.


Updates react-responsive-pagination from 2.10.1 to 2.13.0

Release notes

Sourced from react-responsive-pagination's releases.

v2.13.0

2.13.0 (2026-02-11)

Tailwind support 🎉

Features

  • css gap support (cd00429)
  • New classMerge prop to allow override of class string merging (d6d5272)
  • New props: containerClassName & inactiveItemClassName (fd18b25)

Bug Fixes

v2.13.0-beta.1

2.13.0-beta.1 (2026-02-10)

Bug Fixes

Features

  • css gap support (cd00429)
  • New classMerge prop to allow override of class string merging (d6d5272)
  • New props: containerClassName & inactiveItemClassName (fd18b25)

v2.12.0

2.12.0 (2025-12-09)

Bug Fixes

Features

  • New ariaPageLabel prop to add aria labels for links (d477579)

v2.11.4-beta.1

2.11.4-beta.1 (2025-12-05)

Bug Fixes

... (truncated)

Changelog

Sourced from react-responsive-pagination's changelog.

2.13.0 (2026-02-11)

Bug Fixes

Features

  • css gap support (cd00429)
  • New classMerge prop to allow override of class string merging (d6d5272)
  • New props: containerClassName & inactiveItemClassName (fd18b25)

2.12.0 (2025-12-09)

Bug Fixes

Features

  • New ariaPageLabel prop to add aria labels for links (d477579)

2.11.3 (2025-10-06)

Bug Fixes

2.11.2 (2025-10-04)

Bug Fixes

  • Component package updates (f001cb1)

2.11.1 (2025-06-01)

Bug Fixes

2.11.0 (2025-04-27)

... (truncated)

Commits
  • 2bcf968 chore(release): 2.13.0 [skip ci]
  • 74d9ad4 docs(readme): main branch for images
  • ecb413f docs(readme): edits & fixes
  • 9409299 docs(readme): edits for tailwind
  • 9de1055 fix: Package updates
  • d6d5272 feat: New classMerge prop to allow override of class string merging
  • fd18b25 feat: New props: containerClassName & inactiveItemClassName
  • cd00429 feat: css gap support
  • f994685 chore(release): 2.12.0 [skip ci]
  • d477579 feat: New ariaPageLabel prop to add aria labels for links
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-responsive-pagination since your current version.


Updates react-router-dom from 7.13.0 to 7.13.1

Changelog

Sourced from react-router-dom's changelog.

7.13.1

Patch Changes

  • Updated dependencies:
    • react-router@7.13.1
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
f83a5b4 
…y with 8 updates

Bumps the production-dependencies group with 8 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [bootstrap](https://github.com/twbs/bootstrap) | `5.3.7` | `5.3.8` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.7.21` | `1.8.4` |
| [qr-code-styling](https://github.com/kozakdenys/qr-code-styling) | `1.9.1` | `1.9.2` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.4` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.4` |
| [react-intl](https://github.com/formatjs/formatjs) | `6.6.8` | `8.1.3` |
| [react-responsive-pagination](https://github.com/jonelantha/react-responsive-pagination/tree/HEAD/packages/react-responsive-pagination) | `2.10.1` | `2.13.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.0` | `7.13.1` |



Updates `bootstrap` from 5.3.7 to 5.3.8
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v5.3.7...v5.3.8)

Updates `phoenix` from 1.7.21 to 1.8.4
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.7.21...v1.8.4)

Updates `qr-code-styling` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/kozakdenys/qr-code-styling/releases)
- [Commits](kozakdenys/qr-code-styling@v1.9.1...v1.9.2)

Updates `react` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react)

Updates `react-dom` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom)

Updates `react-intl` from 6.6.8 to 8.1.3
- [Release notes](https://github.com/formatjs/formatjs/releases)
- [Commits](https://github.com/formatjs/formatjs/compare/react-intl@6.6.8...react-intl@8.1.3)

Updates `react-responsive-pagination` from 2.10.1 to 2.13.0
- [Release notes](https://github.com/jonelantha/react-responsive-pagination/releases)
- [Changelog](https://github.com/jonelantha/react-responsive-pagination/blob/main/packages/react-responsive-pagination/CHANGELOG.md)
- [Commits](https://github.com/jonelantha/react-responsive-pagination/commits/v2.13.0/packages/react-responsive-pagination)

Updates `react-router-dom` from 7.13.0 to 7.13.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.13.1/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: bootstrap
  dependency-version: 5.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: phoenix
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: qr-code-styling
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-intl
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-responsive-pagination
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants