build(deps): bump the frontend group in /src/ResQ.Viz.Web with 5 updates

[dependabot]

Bumps the frontend group in /src/ResQ.Viz.Web with 5 updates:

Package	From	To
effect	4.0.0-beta.60	4.0.0-beta.65
posthog-js	1.372.9	1.372.10
@types/node	25.6.0	25.6.2
@types/three	0.184.0	0.184.1
vite	8.0.10	8.0.12

Updates effect from 4.0.0-beta.60 to 4.0.0-beta.65

Commits

• See full diff in compare view

Updates posthog-js from 1.372.9 to 1.372.10

Release notes

Sourced from posthog-js's releases.

posthog-js@1.372.10

1.372.10

Patch Changes

• #3544 d120042 Thanks @​ksvat! - fix: stop session recording before destroying sessionManager in opt_out_capturing() with cookieless_mode: "on_reject". Previously, queued/throttled rrweb events (e.g. mousemove) could fire after the sessionManager was set to undefined and throw [SessionRecording] must be started with a valid sessionManager. Also adds a defensive early-return in onRRwebEmit so any remaining late events bail out instead of throwing. (2026-05-07)

• #3542 94a5ba0 Thanks @​TueHaulund! - Preserve <style> textContent when the browser's CSSOM serialization would emit empty longhands from var() inside a shorthand. When a stylesheet has e.g. padding: var(--p); padding-bottom: var(--pb);, browsers store the shorthand's longhands with empty token lists per the CSS Custom Properties spec, and CSSStyleRule.cssText re-emits them as padding-top: ; padding-right: ; padding-left: ;. The previous behavior replaced the <style> text with that corrupted output, silently dropping layout rules on replay. We now detect the empty-longhand pattern and keep the original textContent in that case. Affects users of any CSS-in-JS framework that combines var() with shorthands (Chakra UI v3, Panda CSS, Emotion, etc.). Same class of bug as rrweb-io/rrweb#1667. (2026-05-07)

• Updated dependencies []:

  • @​posthog/types@​1.372.10
  • @​posthog/core@​1.28.4

Commits

• 550b3bd chore: update versions and lockfile [version bump]
• 94a5ba0 fix(replay): preserve <style> textContent on var-shorthand CSS (#3542)
• d120042 fix(replay): stop rrweb before destroying sessionManager on cookieless opt-ou...
• 38accb9 chore: update versions and lockfile [version bump]
• ece3097 fix(release): publish @​posthog/next with catch-up changeset (#3543)
• b431d10 chore: update versions and lockfile [version bump]
• 6b23fd3 feat(llma): unify provider sanitisation under a generic binary content redact...
• 58cb972 chore: update versions and lockfile [version bump]
• eb546b4 fix: next/pages server-only components from being imported in the client (#3533)
• See full diff in compare view

Updates @types/node from 25.6.0 to 25.6.2

Commits

• See full diff in compare view

Updates @types/three from 0.184.0 to 0.184.1

Commits

• See full diff in compare view

Updates vite from 8.0.10 to 8.0.12

Release notes

Sourced from vite's releases.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.12 (2026-05-11)

Features

• update rolldown to 1.0.0 (#22401) (cf0ff41)

Bug Fixes

• create-vite: pass react framework to TanStack CLI (#22397) (18f0f90)
• deps: update all non-major dependencies (#22420) (2be6000)
• module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#22369) (f5a22e6)
• refer to rolldownOptions instead of deprecated rollupOptions in messages (#22400) (b675c7b)
• worker: apply build.target to worker bundle (#22404) (3c93fde)
• worker: forward define to worker bundle transform (#22408) (d4838a0)

Miscellaneous Chores

• deps: update dependency eslint-plugin-n to v18 (#22423) (2fe7bd2)
• deps: update rolldown-related dependencies (#22421) (66b9eb3)

8.0.11 (2026-05-07)

Features

• update rolldown to 1.0.0-rc.18 (#22360) (3f80524)

Bug Fixes

• deps: update all non-major dependencies (#22334) (672c962)
• deps: update all non-major dependencies (#22382) (5c0cfcb)
• glob: align hmr matcher options with glob enumeration (#22306) (30028f9)
• make separate object instance for each environment (#22276) (7c2aa3b)

Documentation

• create-vite: list react-compiler templates in README (#22347) (7c3a61f)
• explain mergeConfig skips null/undefined (#22325) (2151f70)
• mention native config loader in CLI options (#22348) (0420c5d)
• update evan's x handle (640202a)

Miscellaneous Chores

• deps: update dependency tsdown to ^0.21.10 (#22333) (3b51e05)
• deps: update rolldown-related dependencies (#22383) (555ff36)
• deps: update transitive packages to fix npm audit alerts (#22316) (86aee62)

Code Refactoring

• devtools integration (#22312) (3c8bf06)
• remove unnecessary async (#22296) (b31fd35)
• show direct path type in bad character warning (#22339) (0c162e9)

Tests

... (truncated)

Commits

• 4dce8b4 release: v8.0.12
• b675c7b fix: refer to rolldownOptions instead of deprecated rollupOptions in mess...
• 66b9eb3 chore(deps): update rolldown-related dependencies (#22421)
• 2fe7bd2 chore(deps): update dependency eslint-plugin-n to v18 (#22423)
• 2be6000 fix(deps): update all non-major dependencies (#22420)
• d4838a0 fix(worker): forward define to worker bundle transform (#22408)
• cf0ff41 feat: update rolldown to 1.0.0 (#22401)
• 3c93fde fix(worker): apply build.target to worker bundle (#22404)
• f5a22e6 fix(module-runner): prevent partial-exports race on concurrent imports of in-...
• 66f3194 release: v8.0.11
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: chore, deps. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​posthog-js@​1.372.9 ⏵ 1.372.10	-9		+1	+1
	npm/​@​types/​three@​0.184.0 ⏵ 0.184.1
	npm/​@​types/​node@​25.6.0 ⏵ 25.6.2	+1		+1
	npm/​vite@​8.0.10 ⏵ 8.0.12			+1
	npm/​effect@​4.0.0-beta.60 ⏵ 4.0.0-beta.65	+1		+1	+1

View full report

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.