Skip to content

chore(deps): bump react-toastify from 10.0.6 to 11.1.0 in /frontend#47

Open
dependabot[bot] wants to merge 1 commit into
1.0.0from
dependabot/npm_and_yarn/frontend/react-toastify-11.1.0
Open

chore(deps): bump react-toastify from 10.0.6 to 11.1.0 in /frontend#47
dependabot[bot] wants to merge 1 commit into
1.0.0from
dependabot/npm_and_yarn/frontend/react-toastify-11.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 30, 2026

Copy link
Copy Markdown

Bumps react-toastify from 10.0.6 to 11.1.0.

Release notes

Sourced from react-toastify's releases.

v11.1.0

Release Notes

Features

  • CSP nonce support. <ToastContainer nonce={...}> applies the nonce to the injected <style> tag. Closes #1209.

Fixes

  • onChange fires status: 'removed' synchronously on toast.dismiss() instead of after the exit animation — observers (incl. useNotificationCenter) now see correctly ordered events. Also guards against double-onClose. Closes #1275.
  • Touch drag no longer re-pauses the toast on release — the old check compared a PointerEvent against 'touchend', which never matched. Closes #1217.
  • Vertical drag now visually moves the toast (--y gets a unit). Thanks @​janpaepke, #1277.
  • Stacked scale is clamped at 0.5, preventing zero/negative scale in deep stacks. Closes #1171, #1174.
  • Stacked container respects mobile 100vw again. Closes #1234.

Accessibility

Internal

  • Migrated to a pnpm workspace (pnpm link . no longer required for contributors). Publish layout unchanged — addon still ships inside the main package.
  • CSS now injected at mount via useStyleSheet (prerequisite for nonce).
  • Dep bumps: TypeScript 6, Vite 8, Cypress 15, React 19.2, plus the rest.
  • CI: upload-artifact v3 → v4.

Thanks to @​janpaepke, @​singhankit001, and reporters of the fixed issues.

v11.0.3

  • fix: remove margin on mobile
  • export ToastIcon type

v11.0.2

  • fix: export unstyled

v11.0.1

  • fix: width on mobile #1187

v11

What is new in v11

... (truncated)

Commits
  • 769ce82 11.1.0
  • de21958 remove year from license
  • c800992 fix: add unit to --y CSS variable to fix vertical drag
  • e4ab712 fix chicken and egg issue
  • b3bbab5 bump artifact action
  • 6d58ce4 fix: stacked toast invert size, when used as stacked
  • 50e8e42 fix: stacked container on mobile not 100vw
  • 1b2ee17 fix: dispatch 'removed' onChange event synchronously on dismiss
  • a2d376b feat: add ARIA accessibility attributes to ProgressBar
  • 8375ace fix: touch bug in onDragTransitionEnd, closes #1217
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [react-toastify](https://github.com/fkhadra/react-toastify) from 10.0.6 to 11.1.0.
- [Release notes](https://github.com/fkhadra/react-toastify/releases)
- [Commits](fkhadra/react-toastify@v10.0.6...v11.1.0)

---
updated-dependencies:
- dependency-name: react-toastify
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 30, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​react-toastify@​10.0.6 ⏵ 11.1.0100 +1100100 +183100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants