Skip to content

Bump the npm-routine group across 3 directories with 17 updates - #17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-routine-86110125e7
Open

Bump the npm-routine group across 3 directories with 17 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-routine-86110125e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the npm-routine group with 4 updates in the / directory: @playwright/test, @typescript-eslint/parser, concurrently and eslint.
Bumps the npm-routine group with 8 updates in the /apps/api directory:

Package From To
@fastify/cookie 11.0.0 11.1.5
@fastify/cors 11.3.0 11.4.1
@fastify/multipart 10.1.6 10.1.8
csv-stringify 6.8.3 6.9.0
fastify 5.12.7 5.12.8
nodemailer 10.2.1 10.4.0
playwright-core 1.63.0 1.65.0
tsx 4.23.9 4.23.15

Bumps the npm-routine group with 5 updates in the /apps/web directory:

Package From To
@tanstack/react-query 5.101.4 5.107.1
react 19.2.8 19.3.1
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.1
@types/react-dom 19.2.4 19.3.0
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.4 19.3.0

Updates @playwright/test from 1.64.1 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
  // No other test runs while this one is running.
});

  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
  test.skip('Not implemented yet');
});

... (truncated)

Commits
  • a1f35e1 chore: mark v1.65.0 (#43925)
  • a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
  • 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
  • daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
  • 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
  • 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
  • 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
  • d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
  • 6e3f5ff docs: release notes for v1.65 (#43874)
  • aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.72.0 to 8.72.2

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.2

8.72.2 (2026-11-09)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] parse RegExps with the v flag in unicode sets mode (#13102)
  • eslint-plugin: [no-deprecated] stop on circular alias chains (#13117)
  • eslint-plugin: [no-unnecessary-type-assertion] don't report number to enum assertions (#13104)
  • eslint-plugin: [prefer-nullish-coalescing] treat unconstrained type parameters as possibly nullish (#12994)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.2 (2026-11-09)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates concurrently from 10.0.6 to 10.0.7

Release notes

Sourced from concurrently's releases.

v10.0.7

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v10.0.6...v10.0.7

Commits

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
  • 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
  • 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
  • cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
  • 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
Commits
  • 12cbff4 10.14.0
  • 6b696e7 Build: changelog update for 10.14.0
  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
  • dab466e docs: Update README
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419)
  • Additional commits viewable in compare view

Updates @fastify/cookie from 11.0.0 to 11.1.5

Release notes

Sourced from @​fastify/cookie's releases.

v11.1.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.4...v11.1.5

v11.1.4

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.3...v11.1.4

v11.1.3

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.2...v11.1.3

v11.1.2

What's Changed

Full Changelog: fastify/fastify-cookie@v11.1.1...v11.1.2

v11.1.1

What's Changed

New Contributors

... (truncated)

Commits
  • a96460b Bumped v11.1.5
  • 7f9551e fix: forward custom encode option to cookie serializer (#377)
  • 4f47cf1 Bumped v11.1.4
  • c07e472 fix: forward encode option to cookie serializer (#374)
  • d27beb4 perf(signer): add early delimiter check in unsign to avoid redundant HMAC com...
  • 576e0dd Bumped v11.1.3
  • 19a1307 ci: enable trusted publishing releases
  • 104aca7 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#368)
  • c838334 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#369)
  • 916538c chore(.npmrc): add min-release-age
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/cookie since your current version.


Updates @fastify/cors from 11.3.0 to 11.4.1

Release notes

Sourced from @​fastify/cors's releases.

v11.4.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.4.0...v11.4.1

v11.4.0

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-cors@v11.3.1...v11.4.0

v11.3.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.3.0...v11.3.1

Commits
  • 33424f5 Bumped v11.4.1
  • 115ff7c fix: preserve header tokens with whitespace preceding commas in vary parser (...
  • a84d816 Bumped v11.4.0
  • 32cf1c2 Merge commit from fork
  • d1dfe62 docs: clarify that RegExp origins are not anchored (#424)
  • 94eba39 chore: bump fastify/workflows/.github/workflows/reusable-release.yml
  • a4fb482 Bumped v11.3.1
  • 4627a17 ci: enable trusted publishing releases
  • 7670483 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#418)
  • d03ec98 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#417)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/cors since your current version.


Updates @fastify/multipart from 10.1.6 to 10.1.8

Release notes

Sourced from @​fastify/multipart's releases.

v10.1.8

What's Changed

Full Changelog: fastify/fastify-multipart@v10.1.7...v10.1.8

v10.1.7

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fastify-multipart@v10.1.6...v10.1.7

Commits
  • cd2e7c0 Bumped v10.1.8
  • d80d6b2 test: wait for temp file cleanup before asserting tmpdir is empty (#654)
  • 30fbc96 fix: sanitize temp file extension from uploaded filename
  • 3978273 Bumped v10.1.7
  • 437d3e7 Merge commit from fork
  • a3d5814 chore: bump fastify/workflows/.github/workflows/reusable-release.yml
  • 39d1579 docs: clarify multipart array validation (#627)
  • See full diff in compare view

Updates csv-stringify from 6.8.3 to 6.9.0

Changelog

Sourced from csv-stringify's changelog.

6.9.0 (2026-09-25)

Features

  • csv-stringify: expose csv error and normalize_options (963388d)

Bug Fixes

  • csv-stringify: do not alter the source record when columns is set (#504) (041deff)
  • csv-stringify: preserve header cast context when eof is false (#505) (a38ef06)
  • csv-stringify: preserve negative numeric values (#510) (0002d56)
  • csv-stringify: preserve objects returned by cast functions (#509) (1742c9f)
  • csv-stringify: quote fields containing a carriage return (#485) (d64d410)
Commits
  • 594c646 chore(release): publish
  • 9f04145 build: latest dependencies
  • d64d410 fix(csv-stringify): quote fields containing a carriage return (#485)
  • 963388d feat(csv-stringify): expose csv error and normalize_options
  • 041deff fix(csv-stringify): do not alter the source record when columns is set (#504)
  • a38ef06 fix(csv-stringify): preserve header cast context when eof is false (#505)
  • 8d4173d build: latest dev dependencies
  • c8caa1c build: generate latest dist
  • 3433750 test: eslint format
  • 6c45c9b build: remove npx usage in package scripts
  • Additional commits viewable in compare view

Updates fastify from 5.12.7 to 5.12.8

Release notes

Sourced from fastify's releases.

v5.12.8

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify@v5.12.7...v5.12.8

Commits
  • 0c7413a Bumped v5.12.8
  • 0ffe18f test: make handlerTimeout ended-but-not-finished test deterministic
  • 8e7c2b7 test: restore 100% coverage for handlerTimeout abort paths
  • 15fbadf [Backport 5.x] fix: abort streaming response when handlerTimeout fires after ...
  • 18a7049 docs: fix syntax errors in code examples (#7159)
  • c410867 docs: clarify that maxParamLength does not prevent ReDoS (#7140)
  • 0fa6bc2 [Backport 5.x] fix(decorators): evaluate instance getters once in getDecorato...
  • 0873d55 perf(request): hoist port regex to module level (#7110)
  • 25cd11e [Backport 5.x] docs: remove plugins that do not support Fastify v5 (#7152)
  • d60a57b [Backport 5.x] docs(reply): reorganize Reply reference by properties and meth...
  • Additional commits viewable in compare view

Updates nodemailer from 10.2.1 to 10.4.0

Release notes

Sourced from nodemailer's releases.

v10.4.0

10.4.0 (2026-11-07)

Summary

The pooled SMTP transport can now be closed with close({ force: true }), which also ends connections that are in the middle of delivering a message. A plain close() behaves as before.

Who should upgrade

No hurry for most users. Upgrade if you use pool: true and need to abandon a delivery that a server is stalling, for example one that trickles its replies so no socket timeout ever fires.

Highlights

  • transporter.close({ force: true }) closes busy pooled connections as well as idle ones. The messages they were delivering fail at once with an error instead of being queued again, and messages still waiting in the queue fail as they do on a plain close().
  • close() without arguments is unchanged: idle connections close immediately and a connection in the middle of a delivery finishes it first.

Features

  • let close({ force: true }) end pooled connections that are delivering a message (aba943c)

v10.3.1

10.3.1 (2026-10-29)

Bug Fixes

  • apply the otp option in MailComposer too (1d4087f)

v10.3.0

10.3.0 (2026-10-29)

Summary

This release adds support for the OTP-Token header from the IETF draft draft-goto-otp-token, which lets mail clients and browsers offer a one-time passcode for autofill on the site it belongs to. It also fixes how a Content-ID header is encoded.

Who should upgrade

  • Anyone sending one-time passcodes by email who wants them to be machine-readable.
  • Anyone already setting an OTP-Token header through headers: before this release it went out MIME encoded and could not be parsed.
  • Anyone embedding images with a cid that holds a non-ASCII character or a quote.

Highlights

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.4.0 (2026-11-07)

Features

  • let close({ force: true }) end pooled connections that are delivering a message (aba943c)

10.3.1 (2026-10-29)

Bug Fixes

  • apply the otp option in MailComposer too (1d4087f)

10.3.0 (2026-10-29)

Features

  • add the otp option for the OTP-Token header (7789e15)

Bug Fixes

  • encode a Content-ID header as a message id (#1904) (47f2b25)
Commits
  • 3b5cf1e chore(master): release 10.4.0 (#1909)
  • aba943c feat: let close({ force: true }) end pooled connections that are delivering a...
  • 00d70cf chore(deps): update development dependencies
  • f090da2 chore(deps): update development dependencies
  • d3aa27e chore(deps): update development dependencies
  • 26555d0 Merge pull request #1906 from nodemailer/release-please--branches--master--co...
  • 3e5bb55 chore(master): release 10.3.1
  • 1d4087f fix: apply the otp option in MailComposer too
  • 488ce9c chore(deps): update development dependencies
  • 41eda65 chore(deps): update development dependencies
  • Additional commits viewable in compare view

Updates playwright-core from 1.63.0 to 1.65.0

Release notes

Sourced from playwright-core's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],...
Description has been truncated

@dependabot
Bump the npm-routine group across 3 directories with 17 updates
70b74fd 
Bumps the npm-routine group with 4 updates in the / directory: [@playwright/test](https://github.com/microsoft/playwright), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser), [concurrently](https://github.com/open-cli-tools/concurrently) and [eslint](https://github.com/eslint/eslint).
Bumps the npm-routine group with 8 updates in the /apps/api directory:

| Package | From | To |
| --- | --- | --- |
| [@fastify/cookie](https://github.com/fastify/fastify-cookie) | `11.0.0` | `11.1.5` |
| [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.3.0` | `11.4.1` |
| [@fastify/multipart](https://github.com/fastify/fastify-multipart) | `10.1.6` | `10.1.8` |
| [csv-stringify](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify) | `6.8.3` | `6.9.0` |
| [fastify](https://github.com/fastify/fastify) | `5.12.7` | `5.12.8` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.2.1` | `10.4.0` |
| [playwright-core](https://github.com/microsoft/playwright) | `1.63.0` | `1.65.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.9` | `4.23.15` |

Bumps the npm-routine group with 5 updates in the /apps/web directory:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.4` | `5.107.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |



Updates `@playwright/test` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `@typescript-eslint/parser` from 8.72.0 to 8.72.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.2/packages/parser)

Updates `concurrently` from 10.0.6 to 10.0.7
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v10.0.6...v10.0.7)

Updates `eslint` from 10.13.0 to 10.14.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.13.0...v10.14.0)

Updates `@fastify/cookie` from 11.0.0 to 11.1.5
- [Release notes](https://github.com/fastify/fastify-cookie/releases)
- [Commits](fastify/fastify-cookie@v11.0.0...v11.1.5)

Updates `@fastify/cors` from 11.3.0 to 11.4.1
- [Release notes](https://github.com/fastify/fastify-cors/releases)
- [Commits](fastify/fastify-cors@v11.3.0...v11.4.1)

Updates `@fastify/multipart` from 10.1.6 to 10.1.8
- [Release notes](https://github.com/fastify/fastify-multipart/releases)
- [Commits](fastify/fastify-multipart@v10.1.6...v10.1.8)

Updates `csv-stringify` from 6.8.3 to 6.9.0
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-stringify/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-stringify@6.9.0/packages/csv-stringify)

Updates `fastify` from 5.12.7 to 5.12.8
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.7...v5.12.8)

Updates `nodemailer` from 10.2.1 to 10.4.0
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.2.1...v10.4.0)

Updates `playwright-core` from 1.63.0 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.65.0)

Updates `tsx` from 4.23.9 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.9...v4.23.15)

Updates `@tanstack/react-query` from 5.101.4 to 5.107.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.107.1/packages/react-query)

Updates `react` from 19.2.8 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-routine
- dependency-name: concurrently
  dependency-version: 10.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-routine
- dependency-name: eslint
  dependency-version: 10.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: "@fastify/cookie"
  dependency-version: 11.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: "@fastify/cors"
  dependency-version: 11.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: "@fastify/multipart"
  dependency-version: 10.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-routine
- dependency-name: csv-stringify
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: fastify
  dependency-version: 5.12.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-routine
- dependency-name: nodemailer
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: playwright-core
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-routine
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.107.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-routine
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-routine
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants