Skip to content

Bump the frontend-minor-patch group across 1 directory with 18 updates - #9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/frontend-minor-patch-a859b34f97
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/frontend-minor-patch-a859b34f97

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown

Bumps the frontend-minor-patch group with 18 updates in the / directory:

Package From To
@azure/msal-browser 5.6.3 5.26.0
@mui/x-tree-view 9.1.0 9.16.0
allotment 1.20.5 1.20.6
canvas 3.2.2 3.2.3
chart.js 4.5.1 4.6.1
dompurify 3.4.5 3.4.17
echarts 6.0.0 6.1.0
i18next 26.0.1 26.5.6
katex 0.16.42 0.19.0
react-animate-height 3.2.3 3.2.4
react-virtuoso 4.18.3 4.18.19
validator 13.15.26 13.15.35
vega 6.2.0 6.4.0
vega-lite 6.4.1 6.5.0
@testing-library/dom 10.4.1 10.4.2
@testing-library/react 16.3.2 16.3.3
@types/lodash 4.17.24 4.17.27
electron-builder 26.15.3 26.18.0

Updates @azure/msal-browser from 5.6.3 to 5.26.0

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.26.0

5.26.0

Wed, 21 Oct 2026 18:37:16 GMT

Minor changes

Patches

@​azure/msal-browser v5.25.1

5.25.1

Tue, 13 Oct 2026 19:04:35 GMT

Patches

@​azure/msal-browser v5.25.0

5.25.0

Tue, 06 Oct 2026 20:48:41 GMT

Minor changes

@​azure/msal-browser v5.24.0

5.24.0

Fri, 02 Oct 2026 19:03:42 GMT

Minor changes

  • Bump @​azure/msal-browser to match @​azure/msal-browser-1p (msaljsbuilds@microsoft.com)
  • Bump @​azure/msal-common to v16.14.2 (beachball)

Patches

... (truncated)

Commits
  • 16a4714 Fix web silent-request deduplication for refresh policies and extra parameter...
  • bd8b2cd Fallback from EAR to auth code flow in Safari (#8903)
  • a9a1221 Native Auth V2 entry and validation fixes (#8898)
  • 8bd17ff chore: update basic-ftp to patched 6.2.2 (#8915)
  • 4d1e6f9 build(deps): bump dorny/paths-filter from 3.0.4 to 4.0.3 (#8841)
  • 46ac334 chore: update handlebars and proxy-addr to fix security vulnerabilities (#8913)
  • ac3f4c7 build(deps): bump actions/setup-node from 6.5.0 to 7.1.0 (#8840)
  • b3c2d53 Post-release PR (#8910)
  • e70b750 Add NAA bridge type to performance telemetry (#8864)
  • c797825 build(deps): bump actions/checkout from 6.1.0 to 7.0.1 (#8676)
  • Additional commits viewable in compare view

Updates @mui/x-tree-view from 9.1.0 to 9.16.0

Release notes

Sourced from @​mui/x-tree-view's releases.

v9.16.0

We'd like to extend a big thank you to the 14 contributors who made this release possible. Here are some highlights ✨:

  • 📊 Excel export in the Charts Premium, with a toolbar entry
  • 👆 Data Grid row reordering on touch and pen devices
  • 🗑️ Confirmation dialog before deleting an event in the Scheduler
  • 🌍 Improve Romanian (ro-RO) locale on the Data Grid and the Date and Time Pickers
  • 🌍 Improve Turkish (tr-TR) locale on the Data Grid, the Date and Time Pickers, and the Scheduler
  • 🐞 Bugfixes
  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​aozmekik, @​cpruijsen, @​mustafajw07, @​reckter, @​vicuts

The following team members contributed to this release: @​arminmeh, @​brijeshb42, @​cherniavskii, @​Janpot, @​JCQuintas, @​LukasTy, @​michelengelen, @​noraleonte, @​rita-codes

Data Grid

@mui/x-data-grid@9.16.0

@mui/x-data-grid-pro@9.16.0 pro

Same changes as in @mui/x-data-grid@9.16.0, plus:

@mui/x-data-grid-premium@9.16.0 premium

Same changes as in @mui/x-data-grid-pro@9.16.0, plus:

Date and Time Pickers

@mui/x-date-pickers@9.16.0

... (truncated)

Changelog

Sourced from @​mui/x-tree-view's changelog.

9.16.0

Oct 20, 2026

We'd like to extend a big thank you to the 14 contributors who made this release possible. Here are some highlights ✨:

  • 📊 Excel export in the Charts Premium, with a toolbar entry
  • 👆 Data Grid row reordering on touch and pen devices
  • 🗑️ Confirmation dialog before deleting an event in the Scheduler
  • 🌍 Improve Romanian (ro-RO) locale on the Data Grid and the Date and Time Pickers
  • 🌍 Improve Turkish (tr-TR) locale on the Data Grid, the Date and Time Pickers, and the Scheduler
  • 🐞 Bugfixes
  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​aozmekik, @​cpruijsen, @​mustafajw07, @​reckter, @​vicuts

The following team members contributed to this release: @​arminmeh, @​brijeshb42, @​cherniavskii, @​Janpot, @​JCQuintas, @​LukasTy, @​michelengelen, @​noraleonte, @​rita-codes

Data Grid

@mui/x-data-grid@9.16.0

@mui/x-data-grid-pro@9.16.0 pro

Same changes as in @mui/x-data-grid@9.16.0, plus:

@mui/x-data-grid-premium@9.16.0 premium

Same changes as in @mui/x-data-grid-pro@9.16.0, plus:

Date and Time Pickers

... (truncated)

Commits
  • 3766c82 [release] v9.16.0 (#23901)
  • 78fcfbd [x-internals] Restore removed exports and pin internal dependencies (#23907)
  • c1aa6b7 [TreeView] Fix infinite recursion when a mounted item suspends (#23668)
  • 67d2869 [infra] Remove engines.node from UI packages (#23786)
  • dd81f1a [release] v9.15.0 (#23777)
  • 03d2f6d [code-infra] Widen @​babel/runtime range and stop emitting empty class fields ...
  • ba99ac8 [tree view] Use aria-selected instead of aria-checked when `checkboxSelec...
  • 9b7842c [x-internals] Import Base UI utils directly instead of re-exporting them (#23...
  • cf17872 [x-internals] Import the store from @​base-ui/utils directly (#23335)
  • c83b3dd [release] v9.14.0 (#23608)
  • Additional commits viewable in compare view

Updates allotment from 1.20.5 to 1.20.6

Release notes

Sourced from allotment's releases.

v1.20.6

1.20.6 (2026-10-12)

Bug Fixes

  • call the latest onReset when double-clicking a sash (#904) (b4d9fca), closes #901
  • sash: end in-progress drags cleanly on dispose and view changes (#898) (b307433)
  • split-view: resize() no longer crashes when given extra sizes (#914) (2b547d3)
Changelog

Sourced from allotment's changelog.

1.20.6 (2026-10-12)

Bug Fixes

  • call the latest onReset when double-clicking a sash (#904) (b4d9fca), closes #901
  • sash: end in-progress drags cleanly on dispose and view changes (#898) (b307433)
  • split-view: resize() no longer crashes when given extra sizes (#914) (2b547d3)
Commits
  • fddd29d chore(main): release 1.20.6 (#895)
  • 1737285 chore(deps): update dependency @​rollup/plugin-babel to v7.1.0 (#896)
  • 2ac7dca docs: explain drag vs layout changes, what visible remembers, and known limit...
  • bf2554d chore(deps): update actions/setup-node action to v7 (#927)
  • 82ff665 docs: reorganise guides, complete the API overview and trim the FAQ (#928)
  • 3c3fdb4 chore(deps): update actions/checkout action to v7 (#924)
  • d67bd89 docs: add live styling and container resize examples (#926)
  • 3902bf5 docs: tidy up the getting started guide and Pane API page (#925)
  • daf6430 chore(deps): update docusaurus monorepo to v3.10.2 (#922)
  • 55eb86a chore(website): use clsx instead of classnames in the hero demo (#923)
  • Additional commits viewable in compare view

Updates canvas from 3.2.2 to 3.2.3

Release notes

Sourced from canvas's releases.

v3.2.3

Fixed

  • Fix building with gcc (#2559)
Changelog

Sourced from canvas's changelog.

3.2.3

Fixed

  • Fix building with gcc (#2559)
Commits

Updates chart.js from 4.5.1 to 4.6.1

Release notes

Sourced from chart.js's releases.

v4.6.1

Essential Links

  • #12355 fix: trusted publishing fix + version 4.6.1 bump

Thanks to @​etimberg

v4.6.0

Essential Links

  • #12354 chore: version bump to 4.6.0 to prepare for release
  • #12328 test: stabilize overlapping polar-area label fixture

Enhancements

  • #12238 Corrected spacing in pie/doughnut/polarArea (Fixes #10059)
  • #12130 Enable scale title stroke (12092)

Bugs Fixed

  • #12283 filler plugin fill extends past line when offset: true + index scale min/max
  • #12155 Fix early exit from clearStacks
  • #12142 Use integer canvas dimensions

Types

  • #12321 fix(types): allow scriptable and indexed grid tick widths

Documentation

  • #12258 Add a note that axis labels can span lines
  • #12134 docs: Add note about flexbox/grid layout responsivity issue
  • #12139 Fix amount of category scales count in docs

Development

  • #12306 Bump actions/setup-node from 6 to 7
  • #12303 Bump actions/checkout from 6 to 7

... (truncated)

Commits
  • 76d8cf8 fix: trusted publishing fix + version 4.6.1 bump (#12355)
  • 4e5443d chore: version bump to 4.6.0 to prepare for release (#12354)
  • 7169e65 fix(types): allow scriptable and indexed grid tick widths (#12321)
  • 714b48c test: stabilize overlapping polar-area labels across browsers (#12328)
  • 6a86e23 Bump actions/setup-node from 6 to 7 (#12306)
  • afb3d64 Bump actions/checkout from 6 to 7 (#12303)
  • 0db976c Bump pnpm/action-setup from 4.2.0 to 6.1.0 (#12307)
  • d2ddcf9 Specify build script for compressed size (#12310)
  • b972574 filler plugin fill extends past line when offset: true + index scale min/max ...
  • 0ad783f Use node 24 for CI (#12309)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chart.js since your current version.


Updates dompurify from 3.4.5 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions

DOMPurify 3.4.13

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible

DOMPurify 3.4.12

  • Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
  • Hardened the handling of hooks removing elements, @​mkrause-bee360
  • Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
  • Hardened the handling of declarative partial updates
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible

DOMPurify 3.4.11

  • Fixed an issue with a leaky config for hooks via setConfig, thanks @​trace37labs
  • Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
  • Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
  • Updated up the linting tool-chain and removed now-redundant lint directives
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible

... (truncated)

Commits

Updates echarts from 6.0.0 to 6.1.0

Release notes

Sourced from echarts's releases.

6.1.0

  • [Feature] [axis] Support dataMin and dataMax option for calculating a nice axis extent. #20838 (Justin-ZS, Ovilia)
  • [Feature] [axis] Comprehensively enable all types of axis (i.e., "value"/"time"/"category"/"log") to render series (typically "bar"/"pictorialBar"/"candlestick"/"boxplot") without overflow (including the case "category" axis with boundaryGap: false); provide containShape option; provide some corresponding clip option. dbfaf6a73 fe932a2aa 3973b21ee (100pah) #21511 (Akash Sonune)
  • [Feature] [axis] Automatically exclude non-positive series data values on "log" axis. dedc5dc18 (100pah)
  • [Feature] [axis] Enable axisLabel.formatter to receive its index for working with customValues. #21220 #21432 (Szymon Pachucki, Ovilia, plainheart)
  • [Feature] [line] Add triggerEvent option for more control over mouse event. #21001 (Steven Cobb, plainheart)
  • [Feature] [pie] Add tangential-noflip rotation mode to keep labels tangential without flipping. #21258 (春秋半夏, Ovilia)
  • [Feature] [gauge] progress.color supports 'auto'. #21224 (StNimmerlein, Ovilia)
  • [Feature] [radar] Add clockwise option. #21143 (Dai Xuezhou, Ovilia)
  • [Feature] [candlestick] [dataZoom] Add cursor option for candlestick series and add cursorGrab option & cursorGrabbing for 'inside' dataZoom. #21558 (zuming, Ovilia, 100pah)
  • [Feature] [scatter] [effectScatter] [geo] Enable clip option on "scatter"/"effectScatter" on geo. 417592289 (100pah)
  • [Feature] [visualMap] Add seriesTargets option for multiple series-dimension mappings. #20703 (Justin-ZS, plainheart)
  • [Feature] [matrix] Support matrix.x/y.length for conveniently creating a headless matrix without composing an array. #21191 (100pah, plainheart)
  • [Feature] [matrix] Add triggerEvent option to support triggering event on matrix cells. #21390 (Natsuo Kawai, 100pah)
  • [Feature] [i18n] add Latvian(LV) translation. #21546 (EPoikans)
  • [Fix] [axis] Change and clarify the rounding error and auto-precision utils and solutions. 479dcd454 (100pah)
  • [Fix] [axis] Fix chart does not work when using customValues with formatter in time axis (axis.type: 'time') label. #21352 (Srajan Sanjay Saxena, plainheart)
  • [Fix] [axis] Fix and clarify alignTick strategy, and fix LogScale precision. a6ab2458f ffcc636fb (100pah)
  • [Fix] [axis] Fix duplicate ticks when using time axis (axis.type: 'time') or customValues, which causes jitter of splitArea; fix the showMin/MaxLabel handling of a category axis (axis.type: 'category'); enable a uniform bandWidth calculation in numeric axis (axis.type: 'value' | 'time' | 'log'). 8de2b64fa 15af0db02 8ddaa5c69 (100pah)
  • [Fix] [axis] Fix time axis (axis.type: 'time') bug when value scale is in millisecond. 40b77b464 (100pah)
  • [Fix] [bar] Fix wrong label position when bar series has a 0 width/height. #21218 (Justin-ZS, Ovilia)
  • [Fix] [scatter] Fix jitter layout does not support progressive rendering and cause chart to be frozen and potential NPE. #21436 (plainheart)
  • [Fix] [lines] Fix effect symbol flip on unidirectional loop end when roundTrip is not enabled. #21320 (Mayank Mehta, plainheart)
  • [Fix] [candlestick] Fix candlestick render error with series.encode on horizontal layout. #21325 (Purbayan Pramanik, 100pah)
  • [Fix] [parallel] Fix incorrect axis extent when any subsequent series has a larger value than the first. #21387 (jackhickson, 100pah)
  • [Fix] [pie] Support axes extent union pie center automatically when pie is laid out on Cartesian (grid component). 18a23a875 (100pah)
  • [Fix] [treemap] Fix treemap can not be zoomed out after a zoom-in when scaleLimit is specified #21427 (TateLiu, 100pah)
  • [Fix] [lines] Fix potential tooltip XSS vulnerability in lines series (series.type: 'lines'). #21608 (plainheart)
  • [Fix] [map] [geo] Fix the failed synchronization and visual artifacts on geo roaming and animation. 417592289 (100pah)
  • [Fix] [tooltip] Fix tooltip content does not refresh when changing tooltip trigger from 'axis' to 'item'. #20710 (Justin-ZS, plainheart)
  • [Fix] [tooltip] valueFormatter callback param dataIndex should be rawDataIndex rather than dataZoom filtered dataIndex. #21479 (100pah, plainheart)
  • [Fix] [axisPointer] Fix axisPointer shadow and enable clipping - it is previously only applicable to "category" axis, but is buggy in numeric axis with "bar" series. 8de2b64fa (100pah)
  • [Fix] [axisPointer] Fix visual artifacts caused by failed axisPointer restoration. 56a32c0bb (100pah)
  • [Fix] [hoverLayer] Fix visual artifacts arisen on hover layer. zrender#1151 933585126 (100pah)
  • [Fix] [marker] Fix marker fails to render with dataset and encode. #21439 (plainheart, 100pah).
  • [Fix] [dataZoom] Fix wrong position of the dataZoom when the series has only one data point. #21196 (alesmit, Ovilia)
  • [Fix] [dataZoom] Fix dataZoom bug that data info disappears when dragging released; fix dataZoom dragging cursor style. 64305a4b8 (100pah)
  • [Fix] [dataZoom] Apply a better auto-precision method; fix unexpected behaviors when dataZoom controls axes with alignTicks: true. d168bf237 (100pah)
  • [Fix] [dataZoom] Fix AxisProxy can not be cleared when dataZoom option changed; fix related onZero behaviors. 52ceb924a 2e82d33c3 (100pah)
  • [Fix] [areaStyle] Fix areaStyle render error when dimension name is empty string. #21219 (Justin-ZS, Ovilia)
  • [Fix] [sunburst] Fix root node label may not be centered. #21306 (Akash Sonune, Ovilia)
  • [Fix] [matrix] Fix matrix label formatter does not work. #21410 (Justin-ZS, Ovilia)
  • [Fix] [toolbox] Fix emphasis color is the same as the default color. #21384 (Ovilia) b094f987d (100pah)
  • [Fix] [toolbox] Fix the dataView component does not fit the dark mode. #21176 (notthistrain, Ovilia)
  • [Fix] [progressive] Fix progressive rendering issues. 91a60fc76 (100pah)
  • [Fix] [labelLine] Fix labelLine.smooth can not be reset. #21425 (fanwww, plainheart)
  • [Fix] [graphic] Fix stroke corner gap due to not closing path in roundRect helper. zrender#1155 (plainheart)
  • [Fix] [svg] Enhance SVG encodeBase64 compatibility to make it available in more environments like Web Worker/NodeJS/Bun. zrender#1145 (plainheart)
  • [Fix] [core] Mark echarts instance object as raw in Vue. #21293 (plainheart)
  • [Fix] [chord] Add the missing export entry for chord chart. #21197 (plainheart, Ovilia)

... (truncated)

Commits
  • c5a48f5 Merge pull request #21612 from apache/release-dev
  • 77e5222 release 6.1.0-rc.2
  • 21f17be fixRegression(map,geo): Resolve circular dependencies introduced by this vers...
  • 830e8b6 chore: Supplement package.json (for module cjs declaration) to source release.
  • ed0e210 chore: Fix addHeader tool and add missing license headers.
  • cc78ada Merge pull request #21611 from apache/release-dev
  • 3f6e012 release: Build release.
  • d69405f chore: Add missing headers.
  • 6998ed0 release: Upgrade npm version.
  • 8cb374b fix(build): Fix build commands.
  • Additional commits viewable in compare view

Updates i18next from 26.0.1 to 26.5.6

Release notes

Sourced from i18next's releases.

v26.5.6

  • fix: cloneInstance({ forkResourceStore: true }) now copies the resources at every level. It copied them only down to the namespace objects, so nested keys and arrays stayed shared with the original instance: addResource() with a nested key (fork.addResource('en', 'translation', 'greeting.hello', 'Hi')) or a deep addResourceBundle() on the fork also changed the original instance and every other fork. Flat keys were already isolated. Forking a large store takes a bit longer: with 300k keys in nested groups, about 11 ms instead of 3 ms per fork. Clones without forkResourceStore still share the store as before. Thanks @​nk-batman21 (#2456, follow-up to #2270).

v26.5.5

  • fix: with the default skipOnVariables: true, a {{placeholder}} inside a value inserted with an unescaped {{- var}} now stays literal, as it already did for {{var}}. The escape pass ran after the unescaped values were written and scanned them again, so t('{{- a}}', { a: '{{b}}', b: 'c' }) returned 'c' instead of '{{b}}'. With pre-built HTML that carries user text, like t('You may contact {{name}} at {{- emailHTML}}.', { name, emailHTML }), that text could pull another variable of the same t() call into the output. Results with skipOnVariables: false, and values without placeholders, are unchanged. Compatibility note: a {{- var}} value whose placeholders were meant to be filled from the same t() call now keeps them literally; skipOnVariables: false restores the old behavior. Thanks @​nk-batman21 (#2455, reported in #1595).

v26.5.4

  • fix: with the default skipOnVariables: true, a {{placeholder}} inside an interpolated value now stays literal also when the same placeholder appears later in the translation. Each value was written with String.replace, which replaces the first copy of the placeholder text, and that could be the copy inside an earlier value: t('{{name}} has {{count}} items', { name: '{{count}}', count: 5 }) returned '5 has {{count}} items' instead of '{{count}} has 5 items'. The value is now written at the position of the matched placeholder. Results with skipOnVariables: false are unchanged. Thanks @​nk-batman21 (#2454, reported in #1595).
  • fix: with useRawValueToEscape: true, a non-string value in an unescaped {{- var}} placeholder or with escapeValue: false no longer throws val.replace is not a function; it is converted to a string like any other value.

v26.5.3

  • fix(types): with the selector API, a plural key now requires count also when the call passes an explicit ns. t(($) => $.item) already failed without count, but t(($) => $.item, { ns: 'items' }) compiled, although at runtime it looks up item instead of item_one / item_other and returns the key. It now...

    Description has been truncated

Bumps the frontend-minor-patch group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.6.3` | `5.26.0` |
| [@mui/x-tree-view](https://github.com/mui/mui-x/tree/HEAD/packages/x-tree-view) | `9.1.0` | `9.16.0` |
| [allotment](https://github.com/johnwalley/allotment) | `1.20.5` | `1.20.6` |
| [canvas](https://github.com/Automattic/node-canvas) | `3.2.2` | `3.2.3` |
| [chart.js](https://github.com/chartjs/Chart.js) | `4.5.1` | `4.6.1` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.5` | `3.4.17` |
| [echarts](https://github.com/apache/echarts) | `6.0.0` | `6.1.0` |
| [i18next](https://github.com/i18next/i18next) | `26.0.1` | `26.5.6` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.42` | `0.19.0` |
| [react-animate-height](https://github.com/Stanko/react-animate-height) | `3.2.3` | `3.2.4` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.3` | `4.18.19` |
| [validator](https://github.com/validatorjs/validator.js) | `13.15.26` | `13.15.35` |
| [vega](https://github.com/vega/vega) | `6.2.0` | `6.4.0` |
| [vega-lite](https://github.com/vega/vega-lite) | `6.4.1` | `6.5.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.24` | `4.17.27` |
| [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `26.15.3` | `26.18.0` |



Updates `@azure/msal-browser` from 5.6.3 to 5.26.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.6.3...msal-browser-v5.26.0)

Updates `@mui/x-tree-view` from 9.1.0 to 9.16.0
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v9.16.0/packages/x-tree-view)

Updates `allotment` from 1.20.5 to 1.20.6
- [Release notes](https://github.com/johnwalley/allotment/releases)
- [Changelog](https://github.com/johnwalley/allotment/blob/main/CHANGELOG.md)
- [Commits](johnwalley/allotment@v1.20.5...v1.20.6)

Updates `canvas` from 3.2.2 to 3.2.3
- [Release notes](https://github.com/Automattic/node-canvas/releases)
- [Changelog](https://github.com/Automattic/node-canvas/blob/master/CHANGELOG.md)
- [Commits](Automattic/node-canvas@v3.2.2...v3.2.3)

Updates `chart.js` from 4.5.1 to 4.6.1
- [Release notes](https://github.com/chartjs/Chart.js/releases)
- [Commits](chartjs/Chart.js@v4.5.1...v4.6.1)

Updates `dompurify` from 3.4.5 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.5...3.4.17)

Updates `echarts` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/apache/echarts/releases)
- [Commits](apache/echarts@6.0.0...6.1.0)

Updates `i18next` from 26.0.1 to 26.5.6
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.0.1...v26.5.6)

Updates `katex` from 0.16.42 to 0.19.0
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.42...v0.19.0)

Updates `react-animate-height` from 3.2.3 to 3.2.4
- [Changelog](https://github.com/Stanko/react-animate-height/blob/v3/CHANGELOG.md)
- [Commits](https://github.com/Stanko/react-animate-height/commits)

Updates `react-virtuoso` from 4.18.3 to 4.18.19
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.19/packages/react-virtuoso)

Updates `validator` from 13.15.26 to 13.15.35
- [Release notes](https://github.com/validatorjs/validator.js/releases)
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md)
- [Commits](validatorjs/validator.js@13.15.26...13.15.35)

Updates `vega` from 6.2.0 to 6.4.0
- [Release notes](https://github.com/vega/vega/releases)
- [Commits](vega/vega@v6.2.0...v6.4.0)

Updates `vega-lite` from 6.4.1 to 6.5.0
- [Release notes](https://github.com/vega/vega-lite/releases)
- [Changelog](https://github.com/vega/vega-lite/blob/main/CHANGELOG.md)
- [Commits](vega/vega-lite@v6.4.1...v6.5.0)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@types/lodash` from 4.17.24 to 4.17.27
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `electron-builder` from 26.15.3 to 26.18.0
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/electron-builder@26.18.0/packages/electron-builder/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-builder@26.18.0/packages/electron-builder)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@mui/x-tree-view"
  dependency-version: 9.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: allotment
  dependency-version: 1.20.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: canvas
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: chart.js
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: echarts
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: i18next
  dependency-version: 26.5.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: katex
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: react-animate-height
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: validator
  dependency-version: 13.15.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: vega
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: vega-lite
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@types/lodash"
  dependency-version: 4.17.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: electron-builder
  dependency-version: 26.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants