chore(deps): bump the frontend group across 1 directory with 10 updates by dependabot[bot] · Pull Request #684 · netresearch/timetracker

dependabot · 2026-08-27T11:45:12Z

Bumps the frontend group with 10 updates in the /frontend directory:

Package	From	To
@ark-ui/solid	`5.37.1`	`5.39.1`
@tanstack/solid-query	`5.101.4`	`5.102.8`
solid-js	`1.9.14`	`1.9.15`
@inlang/paraglide-js	`2.23.0`	`2.25.0`
@testing-library/jest-dom	`7.0.0`	`7.0.1`
eslint	`10.8.0`	`10.9.1`
eslint-plugin-solid	`0.14.5`	`0.17.0`
typescript-eslint	`8.65.0`	`8.68.0`
vite	`8.2.0`	`8.2.2`
vitest	`4.1.10`	`4.1.11`

Updates @ark-ui/solid from 5.37.1 to 5.39.1

Release notes

Sourced from @ark-ui/solid's releases.

@ark-ui/solid@5.39.1

@ark-ui/solid

[5.39.1] - 2026-08-28

Fixed

Fix NavigationMenu.Content throwing document is not defined during SSR.

[5.39.0] - 2026-08-21

Added
Toc [New]: Add a table of contents component that tracks which headings are in view as the reader scrolls. Pass the headings to Toc.Root as items, where each entry needs the heading element's id as value and its level as depth. Set scrollEl when the content scrolls inside a container rather than the page, so tracking observes that element instead of the viewport.
<Toc.Root items={items} scrollEl={() => contentRef.current}>
  <Toc.Content />
  <Toc.Nav>
    <Toc.Title />
    <Toc.List>
      <Toc.Indicator />
      <Toc.Item item={item}>
        <Toc.Link />
      </Toc.Item>
    </Toc.List>
  </Toc.Nav>
</Toc.Root>
More than one heading can be active at once, so Toc.Item carries data-first and data-last to mark the ends of the range, and Toc.Indicator spans it. Use useToc with Toc.RootProvider to reach activeItems and scrollTo from outside the tree. The API may still change while the component is in preview.
Hotkeys [New]: Add a hotkeys entrypoint with hooks for registering and inspecting keyboard shortcuts, built on @zag-js/hotkeys. useHotkey registers one command. useHotkeys registers several. mod+K resolves per platform, and sequences like G > H go through the same hook. Command ids are optional and generated when omitted.
useHotkey({ hotkey: 'mod+K', action: openSearch })
useHotkeys({
  commands: [
    { hotkey: 'mod+S', action: save, label: 'Save', category: 'File' },
    { hotkey: 'G > H', action: goHome, label: 'Home' },
  ],
})
useHotkeyRegistrations returns those commands with their metadata (label, description, category, keywords), so a command palette or shortcut dialog can render from the same registration that binds the key. Pass a store from createHotkeyStore to scope a set of commands. Without one, hooks share a default store.

... (truncated)

Changelog

Sourced from @ark-ui/solid's changelog.

[5.39.1] - 2026-08-28

Fixed

Fix NavigationMenu.Content throwing document is not defined during SSR.

[5.39.0] - 2026-08-21

Added
Toc [New]: Add a table of contents component that tracks which headings are in view as the reader scrolls. Pass the headings to Toc.Root as items, where each entry needs the heading element's id as value and its level as depth. Set scrollEl when the content scrolls inside a container rather than the page, so tracking observes that element instead of the viewport.
<Toc.Root items={items} scrollEl={() => contentRef.current}>
  <Toc.Content />
  <Toc.Nav>
    <Toc.Title />
    <Toc.List>
      <Toc.Indicator />
      <Toc.Item item={item}>
        <Toc.Link />
      </Toc.Item>
    </Toc.List>
  </Toc.Nav>
</Toc.Root>
More than one heading can be active at once, so Toc.Item carries data-first and data-last to mark the ends of the range, and Toc.Indicator spans it. Use useToc with Toc.RootProvider to reach activeItems and scrollTo from outside the tree. The API may still change while the component is in preview.
Hotkeys [New]: Add a hotkeys entrypoint with hooks for registering and inspecting keyboard shortcuts, built on @zag-js/hotkeys. useHotkey registers one command. useHotkeys registers several. mod+K resolves per platform, and sequences like G > H go through the same hook. Command ids are optional and generated when omitted.
useHotkey({ hotkey: 'mod+K', action: openSearch })
useHotkeys({
  commands: [
    { hotkey: 'mod+S', action: save, label: 'Save', category: 'File' },
    { hotkey: 'G > H', action: goHome, label: 'Home' },
  ],
})
useHotkeyRegistrations returns those commands with their metadata (label, description, category, keywords), so a command palette or shortcut dialog can render from the same registration that binds the key. Pass a store from createHotkeyStore to scope a set of commands. Without one, hooks share a default store.
const store = createHotkeyStore()
useHotkeys({ commands, store })
const registered = useHotkeyRegistrations({ store })

... (truncated)

Commits

f105a60 chore: release packages (#3989)
190f713 chore(deps): update all non-major dependencies (#3990)
0e64037 fix(navigation-menu): skip viewport lookup during SSR
e75b062 chore: release packages (#3981)
213ecac feat: expose DOM attribute utilities (#3987)
4f410b6 refactor(hotkeys): take object params and drop the provider
1a2e8f8 fix(hotkeys): give each example's commands a unique id
7dd9369 feat(hotkeys): add hotkeys primitive for react, solid, vue and svelte (#3985)
514dc2c feat: toc component implementation (#3850)
e15f8c4 chore(deps): update dependency @types/jsdom to v30 (#3970)
Additional commits viewable in compare view

Updates @tanstack/solid-query from 5.101.4 to 5.102.8

Release notes

Sourced from @tanstack/solid-query's releases.

@tanstack/solid-query-devtools@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.102.8

@tanstack/solid-query@5.102.8

@tanstack/solid-query-persist-client@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.102.8

@tanstack/solid-query@5.102.8

@tanstack/solid-query@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.8

@tanstack/solid-query-devtools@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.102.7

@tanstack/solid-query@5.102.7

@tanstack/solid-query-persist-client@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.102.7

@tanstack/solid-query@5.102.7

@tanstack/solid-query@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.7

@tanstack/solid-query-devtools@5.102.6

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.102.6

@tanstack/solid-query@5.102.6

@tanstack/solid-query-persist-client@5.102.6

Patch Changes

... (truncated)

Changelog

Sourced from @tanstack/solid-query's changelog.

5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.8

5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.7

5.102.6

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.6

5.102.5

Patch Changes

Updated dependencies [578e5c2]:

@tanstack/query-core@5.102.5

5.102.4

Patch Changes

Updated dependencies [a05df6a]:

@tanstack/query-core@5.102.4

5.102.3

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.3

5.102.2

Patch Changes

Updated dependencies [80fbf73]:

@tanstack/query-core@5.102.2

5.102.1

... (truncated)

Commits

2969edf ci: Version Packages (#11316)
2eb3c7c ci: Version Packages (#11313)
714df67 ci: Version Packages (#11306)
1836e61 ci: Version Packages (#11303)
51f12db ci: Version Packages (#11294)
730b3aa ci: Version Packages (#11276)
388bbaf ci: Version Packages (#11265)
bc423b3 ci: Version Packages (#11261)
be1352b test(*): add adapter-level type coverage for optional undefinable mutate vari...
5743468 ci: Version Packages (#11206)
Additional commits viewable in compare view

Updates solid-js from 1.9.14 to 1.9.15

Commits

See full diff in compare view

Updates @inlang/paraglide-js from 2.23.0 to 2.25.0

Changelog

Sourced from @inlang/paraglide-js's changelog.

2.25.0

Minor Changes

f719e1f: Expose cleanOutdir, experimentalStaticLocale, and disableAsyncLocalStorage as paraglide-js compile CLI flags.

5ed1745: Add support for a paraglide.config.js (or .mjs, .ts, .cjs) configuration file inside the inlang project directory.

The CLI and all bundler plugins now pick up compiler options from <project>/paraglide.config.*. The project directory comes from --project or the plugin's project option and defaults to the conventional ./project.inlang — which means every bundler plugin can now be instantiated without arguments. Since the config lives inside the project it configures, it cannot set project itself. Explicit flags and plugin options win over the config file, which wins over the built-in defaults. Existing setups keep working unchanged.

Also included:

A new defineConfig helper exported from @inlang/paraglide-js for type inference and autocompletion in config files.

Watch modes reload when the active config file changes, including renames between the supported file names. Deleting all config files falls back to the built-in defaults; an invalid config skips the compilation with an error — watch modes keep serving the previous output, production builds fail loudly. (esbuild does not support config watching.)

cleanOutdir is accepted but ignored: watch integrations always preserve the output directory for incremental compilation.

Patch Changes

aa4ffd3: Resolve references to earlier local variables correctly in message declarations and formatter options.

3634877: Fix experimentalMiddlewareLocaleSplitting corrupting the generated server file when a compiled message value contains a literal $ (e.g. a price or currency symbol) that forms a String.replace() special replacement pattern such as $`.

1bacc27: Fix experimentalMiddlewareLocaleSplitting keying compiledBundles by the raw bundle id instead of the safe module id, so every SSR message lookup missed and threw globalThis.__paraglide.ssr.<id> is not a function on hydration.

2.24.1

Patch Changes

d2aeb93: Update the inlang SDK dependency to 3.0.1, which includes the Lix WASM fallback for musl-based Node.js environments.

2.24.0

Minor Changes

7028c8a: Upgrade to @inlang/sdk v3 and remove obsolete local account migration code.

Patch Changes

0ac907e: Cache compiled URL patterns to speed up repeated localized-link generation.

fda90d2: Skip unchanged Vite compilations across dev-server restarts by persisting and validating the compiler input cache.

... (truncated)

Commits

See full diff in compare view

Updates @testing-library/jest-dom from 7.0.0 to 7.0.1

Release notes

Sourced from @testing-library/jest-dom's releases.

v7.0.1

7.0.1 (2026-08-09)

Bug Fixes

declare vitest as an optional peer dependency (#733) (3782c78)

Commits

3782c78 fix: declare vitest as an optional peer dependency (#733)
See full diff in compare view

Updates eslint from 10.8.0 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

3c3ae53 chore: update ecosystem plugins (#21249) (ESLint Bot)

v10.9.0

Features

08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)

55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)

8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)

684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))

87f66f4 docs: Update README (GitHub Actions Bot)

585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)

f3993b0 docs: Update README (GitHub Actions Bot)

ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)

1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)

4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)

510d1a2 docs: Update README (GitHub Actions Bot)

Chores

899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])

9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)

dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)

f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])

4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)

151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)

6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)

4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)

677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

7d0cbf8 docs: Update README (GitHub Actions Bot)

0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)

678c90b docs: Update README (GitHub Actions Bot)

8a10424 docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

5c8c241 10.9.1
a7f3b7d Build: changelog update for 10.9.1
1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251)
ad74a8d docs: add deprecation steps for EOL package versions (#21248)
3c3ae53 chore: update ecosystem plugins (#21249)
c27bc92 10.9.0
fa831d9 Build: changelog update for 10.9.0
899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243)
08de88e feat: handle underflow in no-loss-of-precision (#21218)
9ef407a docs: use eslint.config.* wherever config file names are listed (#21216)
Additional commits viewable in compare view

Updates eslint-plugin-solid from 0.14.5 to 0.17.0

Release notes

Sourced from eslint-plugin-solid's releases.

v0.17.0

Server functions are core in Solid 2.0, so the plugin now lints them. Four new rules cover the "use server" directive's silent failure modes — all enabled as errors in the v2 and v2-strict configs, and verified against the official Solid 2.0 templates (zero findings) and under Oxlint.

New Rules

solid/valid-use-server. The compiler only honors "use server" in specific positions and silently ignores it everywhere else — often shipping database access or secrets to the client without any error. Flags directives that aren't in the directive prologue (after other statements, inside plain blocks), template-literal "directives", and directives in positions the compiler never extracts (object methods, getters/setters, class methods). For module-level directive files, also flags non-function exports (which fail at server boot) and calls to client declaration wrappers (GET, live, withMeta from @solidjs/web; query, action, liveQuery from @solidjs/router), whose client-side behavior is silently compiled out in such files. A clientWrappers option adds project-specific wrapper names, with * wildcard and /regex/ support.

solid/require-async-server-function. On the client every server function call resolves a Promise, but during SSR the function is called in-process and returns synchronously — so a non-async server function observes two different return types, and TypeScript only sees one of them. Covers function-level directives and all exports of module-level directive files (including export { name } specifiers). Autofixes by inserting async.

solid/no-invalid-server-capture. An editor-time mirror of the compiler's closure-capture validation: server functions cannot capture variables from intermediate scopes (component state, enclosing function parameters), because the extracted function is hoisted to module level on the server and becomes a network proxy on the client. The compiler already rejects this at build time; the rule reports the same captures as you type. Module top-level bindings, imports, globals, own params/locals, named-function-expression self-references, and TS type-only references are all allowed.

solid/no-browser-globals-in-server-function. Flags unambiguous browser-only globals (window, document, localStorage, etc.) inside server functions, which only run on the server. The list is deliberately conservative — server runtimes provide fetch, crypto, URL, and even navigator, so those never warn — and shadowing bindings and typeof window guards are ignored. In module-level directive files, the whole module is checked.

Internal

customReactiveFunctions-style pattern matching (exact names, * wildcards, /regex/ strings) was extracted into a shared createNameMatcher utility, now used by both solid/reactivity and solid/valid-use-server.

Full Changelog: solidjs-community/eslint-plugin-solid@v0.16.1...v0.17.0

v0.16.1

A precision pass over solid/reactivity, driven by the longest-standing false-positive reports in the tracker. Every fix landed with a regression test reproducing the original issue, and the Solid 2.0 templates still lint clean.

Fixes

Context provider value gets a real explanation (#209). Passing a reactive expression to a provider's value prop previously produced the generic "should be used within JSX" message — nonsense for something that is in JSX. It now reports a dedicated message explaining that providers read value once, untracked, when created (true in both Solid 1.x and 2.0), and to pass the signal, memo, or store itself. Detection also now covers the Solid 2.0 form, where the context object is used directly as the provider (<MyContext value={...}>), by resolving JSX names to createContext() calls.

createResource argument shapes (#199, #195). createResource(fetcher, options) no longer treats the fetcher as a tracked scope (so async fetchers with an options object stop reporting noAsyncTrackedScope), and in createResource(source, fetcher) the fetcher is now correctly treated as an untracked called function that may be async and read current values. The source remains a synchronous tracked scope.

Destructuring props inside a tracked scope (#191). const { item } = props inside createMemo/createEffect re-runs on updates and no longer warns. Destructuring at component setup level still does.

window.setTimeout and friends (#194). Timer and scheduling callbacks prefixed with window., globalThis., or self. now get the same called-function treatment as the bare globals.

mergeProps/merge function arguments are tracked scopes (#179). Both wrap function sources in createMemo, so reactive reads inside them no longer warn.

Memos passed to functions are as safe as signals (#182). Passing a createMemo accessor to a create*/use*/custom reactive function no longer warns, matching the existing allowance for signals.

Directly-returned create* calls (#52). return createMemo(...) (or as an arrow body) no longer reports shouldAssign — the result is handed to the caller, like a custom primitive.

Functions passed to calls inside tracked scopes (#197). An inline function passed to an unknown call inside an effect (doSomething(() => props.toggle)) no longer warns, matching the existing behavior for named functions: synchronous calls still run tracked, and later calls poll current values.

Features

Patterns in customReactiveFunctions (#176). Entries now support * wildcards ("watch*") and regexes written as "/pattern/" strings, in addition to exact names.

v0.16.0

The complete Solid 2.0 lint surface: version-aware rules, new v2 / v2-strict configs, and a full set of 2.0-specific rules, all vetted against the official Solid 2.0 templates (which lint clean with zero errors and zero warnings under the v2 config).

Features

settings.solid.version. Rules can now read the targeted Solid major version from ESLint settings (settings: { solid: { version: 2 } }). Unset means the permissive dual-version behavior from 0.15. The new configs preset it; any custom config can opt in with one line.

New v2 config (eslint-plugin-solid/configs/v2, also solid.configs.v2): what the official Solid 2.0 templates ship. Sets the version setting, switches existing rules to strict 2.0 semantics, and enables the new 2.0 rules — errors are reserved for near-certain bugs, heuristics stay warnings.

New v2-strict config (eslint-plugin-solid/configs/v2-strict): everything in v2 plus

... (truncated)

Commits

85e168a Merge pull request #218 from solidjs-community/server-function-rules
07ebef6 v0.17.0
8e5dc00 feat: add server function rules for Solid 2.0
3c01fbd Merge pull request #217 from solidjs-community/reactivity-precision-0.16.1
a892c77 v0.16.1
0aa7bc8 fix(reactivity): precision pass over long-standing false positives
cbd3c8a Merge pull request #216 from solidjs-community/reactivity-object-destructuring
b123632 test: drop type assertion missing its import from object-destructuring cases
f1ba27b merge main
c608685 Merge pull request #215 from solidjs-community/rule-confidence-audit
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-solid since your current version.

Updates typescript-eslint from 8.65.0 to 8.68.0

Release notes

Sourced from typescript-eslint's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

Niki @phaux

Thiago Barbosa

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.68.0 (2026-08-24)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Claude Sonnet 5

Evyatar Daud @StyleShit

Josh Goldberg

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

8f4e00a chore(release): publish 8.68.0
55f6d5d chore: enable source maps (#12677)
20a261f chore(release): publish 8.67.0
c245fbb feat(typescript-eslint): export basic globs for using tseslint (#12105)
3b155bb chore: use typescript 7 for typechecking (#12601)
e51b11b chore(release): publish 8.66.0
See full diff in compare view

Updates vite from 8.2.0 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

bundled-dev: handle lazy request error (#23291) (3ba026d)

bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)

config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)

css: don't pass empty targets to lightningcss (#23295) (2804636)

define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)

deps: update all non-major dependencies (#23217) (ba958bd)

deps: update rolldown-related dependencies (#23218) (83ecb2c)

module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)

optimizer: close custom extension analysis bundles (#23207) (8fb7675)

reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)

respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)

ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)

vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)

use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

define: close rolldown bundler after generate (#23231) (b4d66fe)

module-runner: add TLA circular import case (#23299) (4a261f2)

module-runner: simplify server-hmr tests (#23300) (599b44b)

ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

8.2.1 (2026-08-06)

Bug Fixes

build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)

bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)

... (truncated)

Commits

de1111a release: v8.2.2
cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
2804636 fix(css): don't pass empty targets to lightningcss (#23295)
599b44b test(module-runner): simplify server-hmr tests (#23300)
4a261f2 test(module-runner): add TLA circular import case (#23299)
Additional commits viewable in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

🐞 Bug Fixes

Revive global concurrency limit for test lifecycle [backport to v4] - by @sheremet-va and @hi-ogawa in vitest-dev/vitest#10992 (5146d)

browser:

Encode iframeId in tester iframe URL [backport to v4] - by @sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)

Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 ...
Description has been truncated

Bumps the frontend group with 10 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@ark-ui/solid](https://github.com/chakra-ui/ark/tree/HEAD/packages/solid) | `5.37.1` | `5.39.1` | | [@tanstack/solid-query](https://github.com/TanStack/query/tree/HEAD/packages/solid-query) | `5.101.4` | `5.102.8` | | [solid-js](https://github.com/solidjs/solid) | `1.9.14` | `1.9.15` | | [@inlang/paraglide-js](https://github.com/opral/paraglide-js) | `2.23.0` | `2.25.0` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `7.0.0` | `7.0.1` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.9.1` | | [eslint-plugin-solid](https://github.com/solidjs-community/eslint-plugin-solid) | `0.14.5` | `0.17.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.68.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.2.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` | Updates `@ark-ui/solid` from 5.37.1 to 5.39.1 - [Release notes](https://github.com/chakra-ui/ark/releases) - [Changelog](https://github.com/chakra-ui/ark/blob/main/packages/solid/CHANGELOG.md) - [Commits](https://github.com/chakra-ui/ark/commits/@ark-ui/solid@5.39.1/packages/solid) Updates `@tanstack/solid-query` from 5.101.4 to 5.102.8 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/solid-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/solid-query@5.102.8/packages/solid-query) Updates `solid-js` from 1.9.14 to 1.9.15 - [Release notes](https://github.com/solidjs/solid/releases) - [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md) - [Commits](https://github.com/solidjs/solid/commits/solid-js@1.9.15) Updates `@inlang/paraglide-js` from 2.23.0 to 2.25.0 - [Changelog](https://github.com/opral/paraglide-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/opral/paraglide-js/commits) Updates `@testing-library/jest-dom` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v7.0.0...v7.0.1) Updates `eslint` from 10.8.0 to 10.9.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.9.1) Updates `eslint-plugin-solid` from 0.14.5 to 0.17.0 - [Release notes](https://github.com/solidjs-community/eslint-plugin-solid/releases) - [Commits](solidjs-community/eslint-plugin-solid@v0.14.5...v0.17.0) Updates `typescript-eslint` from 8.65.0 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/typescript-eslint) Updates `vite` from 8.2.0 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) Updates `vitest` from 4.1.10 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: "@ark-ui/solid" dependency-version: 5.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@inlang/paraglide-js" dependency-version: 2.24.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@tanstack/solid-query" dependency-version: 5.102.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@testing-library/jest-dom" dependency-version: 7.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: eslint dependency-version: 10.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: eslint-plugin-solid dependency-version: 0.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: solid-js dependency-version: 1.9.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: typescript-eslint dependency-version: 8.67.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-09-03T11:45:55Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 27, 2026

github-actions Bot approved these changes Aug 27, 2026

View reviewed changes

github-actions Bot enabled auto-merge August 27, 2026 11:45

dependabot Bot force-pushed the dependabot/bun/frontend/frontend-57ae296e4b branch from 09c8050 to 88fd334 Compare September 3, 2026 11:44

github-actions Bot approved these changes Sep 3, 2026

View reviewed changes

github-actions Bot disabled auto-merge September 3, 2026 11:46

github-actions Bot enabled auto-merge September 3, 2026 11:46

Navigation Menu

Uh oh!

chore(deps): bump the frontend group across 1 directory with 10 updates - #684

chore(deps): bump the frontend group across 1 directory with 10 updates#684
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/frontend/frontend-57ae296e4b

dependabot Bot commented on behalf of github Aug 27, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​ark-ui/solid@​5.39.1

@​ark-ui/solid

[5.39.1] - 2026-08-28

Fixed

[5.39.0] - 2026-08-21

Added

[5.39.1] - 2026-08-28

Fixed

[5.39.0] - 2026-08-21

Added

@​tanstack/solid-query-devtools@​5.102.8

Patch Changes

@​tanstack/solid-query-persist-client@​5.102.8

Patch Changes

@​tanstack/solid-query@​5.102.8

Patch Changes

@​tanstack/solid-query-devtools@​5.102.7

Patch Changes

@​tanstack/solid-query-persist-client@​5.102.7

Patch Changes

@​tanstack/solid-query@​5.102.7

Patch Changes

@​tanstack/solid-query-devtools@​5.102.6

Patch Changes

@​tanstack/solid-query-persist-client@​5.102.6

Patch Changes

5.102.8

Patch Changes

5.102.7

Patch Changes

5.102.6

Patch Changes

5.102.5

Patch Changes

5.102.4

Patch Changes

5.102.3

Patch Changes

5.102.2

Patch Changes

5.102.1

2.25.0

Minor Changes

Patch Changes

2.24.1

Patch Changes

2.24.0

Minor Changes

Patch Changes

v7.0.1

7.0.1 (2026-08-09)

Bug Fixes

v10.9.1

Bug Fixes

Documentation

Chores

v10.9.0

Features

Bug Fixes

Documentation

Chores

v10.8.1

Bug Fixes

Documentation

v0.17.0

New Rules

Internal

v0.16.1

Fixes

Features

v0.16.0

Features

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

dependabot Bot commented on behalf of github Aug 27, 2026 •

edited

Loading

`@ark-ui/solid@5`.39.1

`@ark-ui/solid`

`@tanstack/solid-query-devtools@5`.102.8

`@tanstack/solid-query-persist-client@5`.102.8

`@tanstack/solid-query@5`.102.8

`@tanstack/solid-query-devtools@5`.102.7

`@tanstack/solid-query-persist-client@5`.102.7

`@tanstack/solid-query@5`.102.7

`@tanstack/solid-query-devtools@5`.102.6

`@tanstack/solid-query-persist-client@5`.102.6