8000 Bump the npm-dependencies group across 1 directory with 32 updates by dependabot[bot] · Pull Request #54664 · keycloak/keycloak · GitHub
[go: up one dir, main page]
Skip to content

Bump the npm-dependencies group across 1 directory with 32 updates - #54664

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js/npm-dependencies-e4e42c8a04
Closed

Bump the npm-dependencies group across 1 directory with 32 updates#54664
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js/npm-dependencies-e4e42c8a04

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Nov 5, 2026 •
edited
Loading
Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 32 updates in the /js directory:

Package From To
@eslint/compat 2.0.0 2.1.1
@eslint/eslintrc 3.3.5 3.3.7
@types/node 26.1.0 26.6.6
eslint-plugin-lodash 8.0.0 8.1.0
eslint-plugin-playwright 2.4.0 2.12.1
eslint-plugin-prettier 5.5.4 5.5.7
prettier 3.6.2 3.9.10
tslib 2.8.1 2.9.1
typescript-eslint 8.42.0 8.72.1
keycloak-js 26.2.2 26.2.5
react-hook-form 7.70.0 7.91.0
react-router-dom 7.18.2 7.18.5
@vitejs/plugin-react-swc 4.2.2 4.3.3
lightningcss 1.30.2 1.33.0
vite-plugin-checker 0.12.0 0.14.5
@uiw/react-textarea-code-editor 3.1.1 3.1.2
jszip 3.10.1 3.10.2
yaml 2.8.3 2.9.1
@axe-core/playwright 4.11.0 4.14.0
@testing-library/dom 10.4.1 10.4.2
@testing-library/react 16.3.1 16.3.3
@types/dagre 0.7.53 0.7.54
properties-file 5.0.5 5.0.7
uuid 14.0.1 14.0.3
fs-extra 11.3.3 11.4.1
tar-fs 3.1.1 3.1.3
@faker-js/faker 10.5.0 10.6.0
chai 6.2.2 6.3.0
@noble/hashes 2.0.1 2.4.0
@rollup/plugin-commonjs 29.0.0 29.0.3
@rollup/plugin-terser 1.0.0 1.0.2
rollup 4.59.0 4.67.4

Updates @eslint/compat from 2.0.0 to 2.1.1

Release notes

Sourced from @​eslint/compat's releases.

compat: v2.1.1

2.1.1 (2026-09-01)

Bug Fixes

  • preserve markVariableAsUsed return value in compat context (#503) (66d9790)

compat: v2.1.0

2.1.0 (2026-05-08)

Features

  • Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

migrate-config: v2.1.0

2.1.0 (2026-05-08)

Features

  • Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/config-helpers bumped from ^0.5.5 to ^0.6.0

migrate-config: v2.0.7

2.0.7 (2026-05-01)

Bug Fixes

migrate-config: v2.0.6

2.0.6 (2026-04-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/compat bumped from ^2.0.4 to ^2.0.5
    • devDependencies
      • @​eslint/core bumped from ^1.2.0 to ^1.2.1

... (truncated)

Changelog

Sourced from @​eslint/compat's changelog.

2.1.1 (2026-09-01)

Bug Fixes

  • preserve markVariableAsUsed return value in compat context (#503) (66d9790)

2.1.0 (2026-05-08)

Features

  • Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

2.0.5 (2026-04-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.2.0 to ^1.2.1

2.0.4 (2026-04-03)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.1.1 to ^1.2.0

2.0.3 (2026-03-06)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.1.0 to ^1.1.1

2.0.2 (2026-01-29)

Bug Fixes

Dependencies

... (truncated)

Commits
  • a4466ca chore: release main (#504)
  • 714ffde docs: Update README sponsors
  • 66d9790 fix: preserve markVariableAsUsed return value in compat context (#503)
  • caffae7 docs: Update README sponsors
  • ae1ba25 docs: Update README sponsors
  • 50051c6 docs: Update README sponsors
  • ea83524 docs: Update README sponsors
  • 29956ae docs: Update README sponsors
  • f6d5bdf docs: Update README sponsors
  • 8b71ed3 chore: restore eslint-plugin-jsdoc rules (#316)
  • Additional commits viewable in compare view

Updates @eslint/eslintrc from 3.3.5 to 3.3.7

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.7

3.3.7 (2026-09-01)

Bug Fixes

  • Bump js-yaml to 4.3.1 (#239) (f27e7c9)
  • update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

  • update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)
Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.7 (2026-09-01)

Bug Fixes

  • Bump js-yaml to 4.3.1 (#239) (f27e7c9)
  • update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

3.3.6 (2026-07-10)

Bug Fixes

  • update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)
Commits

Updates @types/node from 26.1.0 to 26.6.6

Commits

Updates eslint-plugin-lodash from 8.0.0 to 8.1.0

Changelog

Sourced from eslint-plugin-lodash's changelog.

v8.1.0

Commits

Updates eslint-plugin-playwright from 2.4.0 to 2.12.1

Release notes

Sourced from eslint-plugin-playwright's releases.

v2.12.1

2.12.1 (2026-10-05)

Bug Fixes

  • replace unsupported json schema contains with enum in rule option schema (#514) (4f35eb6)

v2.12.0

2.12.0 (2026-09-14)

Bug Fixes

  • no-skipped-test: detect testInfo annotations and split allowConditional (#490) (93d788e)

Features

  • no-action-timeout: disallow per-call timeouts on actions (#492) (fec2902)
  • no-export: disallow exports in files containing tests (#493) (eb6fc1c)
  • no-identical-title: disallow identical test and describe titles (#494) (7ec68e7)
  • no-magic-timeouts: add minOccurrences and document adoption (a7542ce)
  • no-magic-timeouts: flag inline numeric timeout values (29de919)
  • no-template-literal-title: disallow template literals in titles (f9a6e86)
  • no-test-return-statement: disallow returning from a test body (#495) (a447de8)
  • prefer-ending-with-an-expect: require tests to end in an assertion (#496) (d31d3cc)
  • require-annotation-reason: require a reason on skip and fixme (#497) (0164432)

v2.11.0

2.11.0 (2026-07-27)

Features

  • no-unnecessary-assertions: flag always-passing assertions on a Locator (#470) (b6d3e5d), closes #463

v2.10.5

2.10.5 (2026-07-06)

Bug Fixes

  • handle optional chaining in missing-playwright-await (#472) (c02becc)

v2.10.4

2.10.4 (2026-05-19)

Bug Fixes

... (truncated)

Commits
  • e3eaf6c chore(deps): Bump brace-expansion from 2.1.4 to 2.1.7 (#515)
  • 9e5fb46 chore(deps-dev): Bump vitest from 4.1.9 to 4.1.11 (#509)
  • d89f4b3 chore(deps): Bump js-yaml from 4.3.1 to 4.3.2 (#510)
  • 99e1e66 chore(deps): Bump ip-address from 10.4.0 to 10.7.2 (#513)
  • 4f35eb6 fix: replace unsupported json schema contains with enum in rule option sc...
  • 8db1443 Merge pull request #498 from unlikelyzero/feat/no-magic-timeouts
  • 1259cbb Merge pull request #500 from unlikelyzero/feat/no-template-literal-title
  • a7542ce feat(no-magic-timeouts): add minOccurrences and document adoption
  • 29de919 feat(no-magic-timeouts): flag inline numeric timeout values
  • f9a6e86 feat(no-template-literal-title): disallow template literals in titles
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-playwright since your current version.


Updates eslint-plugin-prettier from 5.5.4 to 5.5.7

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.7

Patch Changes

  • #796 7e53ecd Thanks @​OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

  • #805 1b7c433 Thanks @​JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

New Contributors

Full Changelog: prettier/eslint-plugin-prettier@v5.5.6...v5.5.7

v5.5.6

Patch Changes

v5.5.5

Patch Changes

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.7

Patch Changes

  • #796 7e53ecd Thanks @​OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

  • #805 1b7c433 Thanks @​JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

5.5.6

Patch Changes

5.5.5

Patch Changes

Commits
  • e6dd27a chore: keep packageManager when cleaning package.json for release (#808)
  • 7544956 chore: release eslint-plugin-prettier (#799)
  • e3e5238 ci: enable npm publish provenance for changesets v3 (#807)
  • 7c923c4 build(deps): Bump http-cache-semantics from 4.2.0 to 4.3.0 (#806)
  • 1b7c433 fix: bump synckit to surface worker failures instead of hanging (#805)
  • a6b3feb docs: explain line endings and endOfLine behavior (#804)
  • 2f6ba1d ci: exercise the getLocFromIndex ponyfill on ESLint 9 (#803)
  • cf1d2c5 chore(deps): update (#802)
  • 9f14a55 chore(deps): update all dependencies (#788)
  • 7e53ecd fix: map fallback source locations to actual line starts (#796)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-prettier since your current version.


Updates prettier from 3.6.2 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier since your current version.


Updates tslib from 2.8.1 to 2.9.1

Release notes

Sourced from tslib's releases.

tslib 2.9.1

What's Changed

Full Changelog: microsoft/tslib@v2.8.1...v2.9.1

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for tslib since your current version.


Updates typescript-eslint from 8.42.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.0 (2026-09-07)

... (truncated)

Commits

Updates keycloak-js from 26.2.2 to 26.2.5

Release notes

Sourced from keycloak-js's releases.

26.2.5

Highlights

Features

DPoP support for Keycloak-JS

DPoP is a mechanism that prevents token theft and replay attacks by generating sender-constrained access and refresh tokens. It allows a client to cryptographically prove possession of the private key bound to a token, provided the resource server supports the DPoP standard.

[!NOTE] See the documentation for more information.

Bug Fixes

Cordova/cordova-native adapters skip OAuth state validation on login callback

The cordova and cordova-native adapter login callback paths in keycloak-js process OAuth callback data without consistently validating the stored state parameter before applying token-derived authentication state.

keycloak/keycloak-js#306

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

26.2.4

... (truncated)

Commits
  • 931caa7 Set version to 26.2.5
  • be42d6a Bump @​keycloak/keycloak-admin-client from 26.8.0 to 26.8.1 (#369)
  • 69cec6d Remove ts-standard from the project (#358)
  • f53a656 Bump actions/checkout from 6 to 7 (#316)
  • 2ee3f72 Bump @​playwright/test from 1.62.1 to 1.64.0 (#354)
  • 6a55cb7 Bump express from 5.2.1 to 5.3.0 (#356)
  • 5ac4e09 Bump jszip from 3.10.1 to 3.10.2 (#344)
  • 2994182 Bump @​keycloak/keycloak-admin-client from 26.7.0 to 26.8.0 (#352)
  • dfb74a2 Bump @​types/node from 26.1.2 to 26.6.5 (#357)
  • 8803e6b Add DPoP support to keycloak-js (#253)
  • Additional commits viewable in compare view

Updates react-hook-form from 7.70.0 to 7.91.0

Release notes

Sourced from react-hook-form's releases.

Version 7.91.0

🐞 Fixes

  • Fix useFieldArray not updating rows when using setValue or setValues (#13842, #13939)
  • Fix useFieldArray not unregistering values correctly on unmount (#13843)
  • Fix field registration without a value incorrectly adding array rows (#13846, #13849)
  • Fix useFieldArray reindexing fields incorrectly when array rules are registered (#13873)
  • Fix useFieldArray losing validation rules after reset() (#13940)
  • Fix stale field array validation results after array changes (#13888)
  • Fix useFieldArray validation after submission in onBlur mode (#13867)
  • Fix dirty state updates when setValues changes field arrays (#13870)
  • Fix stale asynchronous validation results after reset() and unregister() (#13908, #13912, #13934)
  • Fix Controller validation using stale DOM values (#13880)
  • Fix isValid not updating correctly after reset() and subsequent changes (#13847, #13930)
  • Fix handleSubmitDescription has been truncated

@dependabot
Bump the npm-dependencies group across 1 directory with 32 updates
8801d46 
Bumps the npm-dependencies group with 32 updates in the /js directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.0` | `2.1.1` |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.5` | `3.3.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.6.6` |
| [eslint-plugin-lodash](https://github.com/idok/eslint-plugin-lodash) | `8.0.0` | `8.1.0` |
| [eslint-plugin-playwright](https://github.com/mskelton/eslint-plugin-playwright) | `2.4.0` | `2.12.1` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.7` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.10` |
| [tslib](https://github.com/Microsoft/tslib) | `2.8.1` | `2.9.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.42.0` | `8.72.1` |
| [keycloak-js](https://github.com/keycloak/keycloak-js) | `26.2.2` | `26.2.5` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.70.0` | `7.91.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.5` |
| [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react-swc) | `4.2.2` | `4.3.3` |
| [lightningcss](https://github.com/parcel-bundler/lightningcss) | `1.30.2` | `1.33.0` |
| [vite-plugin-checker](https://github.com/fi3ework/vite-plugin-checker) | `0.12.0` | `0.14.5` |
| [@uiw/react-textarea-code-editor](https://github.com/uiwjs/react-textarea-code-editor) | `3.1.1` | `3.1.2` |
| [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.1` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.11.0` | `4.14.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.1` | `16.3.3` |
| [@types/dagre](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dagre) | `0.7.53` | `0.7.54` |
| [properties-file](https://github.com/properties-file/properties-file) | `5.0.5` | `5.0.7` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.1` | `14.0.3` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.3` | `11.4.1` |
| [tar-fs](https://github.com/mafintosh/tar-fs) | `3.1.1` | `3.1.3` |
| [@faker-js/faker](https://github.com/faker-js/faker) | `10.5.0` | `10.6.0` |
| [chai](https://github.com/chaijs/chai) | `6.2.2` | `6.3.0` |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.0.1` | `2.4.0` |
| [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) | `29.0.0` | `29.0.3` |
| [@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser) | `1.0.0` | `1.0.2` |
| [rollup](https://github.com/rollup/rollup) | `4.59.0` | `4.67.4` |



Updates `@eslint/compat` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.1/packages/compat)

Updates `@eslint/eslintrc` from 3.3.5 to 3.3.7
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](eslint/eslintrc@eslintrc-v3.3.5...eslintrc-v3.3.7)

Updates `@types/node` from 26.1.0 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-plugin-lodash` from 8.0.0 to 8.1.0
- [Changelog](https://github.com/idok/eslint-plugin-lodash/blob/master/CHANGELOG.md)
- [Commits](idok/eslint-plugin-lodash@v8.0.0...v8.1.0)

Updates `eslint-plugin-playwright` from 2.4.0 to 2.12.1
- [Release notes](https://github.com/mskelton/eslint-plugin-playwright/releases)
- [Changelog](https://github.com/mskelton/eslint-plugin-playwright/blob/main/CHANGELOG.md)
- [Commits](mskelton/eslint-plugin-playwright@v2.4.0...v2.12.1)

Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.7
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.7)

Updates `prettier` from 3.6.2 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.9.10)

Updates `tslib` from 2.8.1 to 2.9.1
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](microsoft/tslib@v2.8.1...v2.9.1)

Updates `typescript-eslint` from 8.42.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

Updates `keycloak-js` from 26.2.2 to 26.2.5
- [Release notes](https://github.com/keycloak/keycloak-js/releases)
- [Changelog](https://github.com/keycloak/keycloak-js/blob/main/RELEASE-CHECKLIST.md)
- [Commits](keycloak/keycloak-js@26.2.2...26.2.5)

Updates `react-hook-form` from 7.70.0 to 7.91.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.70.0...v7.91.0)

Updates `react-router-dom` from 7.18.2 to 7.18.5
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.5/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.5/packages/react-router-dom)

Updates `@vitejs/plugin-react-swc` from 4.2.2 to 4.3.3
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/v4.3.3/packages/plugin-react-swc)

Updates `lightningcss` from 1.30.2 to 1.33.0
- [Release notes](https://github.com/parcel-bundler/lightningcss/releases)
- [Commits](parcel-bundler/lightningcss@v1.30.2...v1.33.0)

Updates `vite-plugin-checker` from 0.12.0 to 0.14.5
- [Release notes](https://github.com/fi3ework/vite-plugin-checker/releases)
- [Commits](https://github.com/fi3ework/vite-plugin-checker/compare/vite-plugin-checker@0.12.0...v0.14.5)

Updates `@uiw/react-textarea-code-editor` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/uiwjs/react-textarea-code-editor/releases)
- [Commits](uiwjs/react-textarea-code-editor@v3.1.1...v3.1.2)

Updates `jszip` from 3.10.1 to 3.10.2
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](Stuk/jszip@v3.10.1...v3.10.2)

Updates `yaml` from 2.8.3 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.3...v2.9.1)

Updates `@axe-core/playwright` from 4.11.0 to 4.14.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/
8BD0
CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.11.0...v4.14.0)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/react` from 16.3.1 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.1...v16.3.3)

Updates `@types/dagre` from 0.7.53 to 0.7.54
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dagre)

Updates `properties-file` from 5.0.5 to 5.0.7
- [Release notes](https://github.com/properties-file/properties-file/releases)
- [Changelog](https://github.com/properties-file/properties-file/blob/main/CHANGELOG.md)
- [Commits](properties-file/properties-file@v5.0.5...v5.0.7)

Updates `uuid` from 14.0.1 to 14.0.3
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.1...v14.0.3)

Updates `fs-extra` from 11.3.3 to 11.4.1
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.3...11.4.1)

Updates `tar-fs` from 3.1.1 to 3.1.3
- [Commits](mafintosh/tar-fs@v3.1.1...v3.1.3)

Updates `@faker-js/faker` from 10.5.0 to 10.6.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v10.5.0...v10.6.0)

Updates `chai` from 6.2.2 to 6.3.0
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v6.2.2...v6.3.0)

Updates `@noble/hashes` from 2.0.1 to 2.4.0
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Changelog](https://github.com/paulmillr/noble-hashes/blob/main/CHANGELOG.md)
- [Commits](paulmillr/noble-hashes@2.0.1...2.4.0)

Updates `@rollup/plugin-commonjs` from 29.0.0 to 29.0.3
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.3/packages/commonjs)

Updates `@rollup/plugin-terser` from 1.0.0 to 1.0.2
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/beep-v1.0.2/packages/terser)

Updates `rollup` from 4.59.0 to 4.67.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.67.4)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-lodash
  dependency-version: 8.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-playwright
  dependency-version: 2.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tslib
  dependency-version: 2.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: keycloak-js
  dependency-version: 26.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.91.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@vitejs/plugin-react-swc"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lightningcss
  dependency-version: 1.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: vite-plugin-checker
  dependency-version: 0.14.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@uiw/react-textarea-code-editor"
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: jszip
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/dagre"
  dependency-version: 0.7.54
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: properties-file
  dependency-version: 5.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: uuid
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fs-extra
  dependency-version: 11.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tar-fs
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@faker-js/faker"
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: chai
  dependency-version: 6.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@noble/hashes"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@rollup/plugin-commonjs"
  dependency-version: 29.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@rollup/plugin-terser"
  dependency-version: 1.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: rollup
  dependency-version: 4.67.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team as code owners November 5, 2026 03:14
@dependabot dependabot Bot added the area/dependencies Dependency updates, CVE reports for third-party libraries, version bumps label Nov 5, 2026
Copilot AI balanced review requested due to automatic review settings November 5, 2026 03:14
@dependabot @github
dependabot Bot commented on behalf of github Nov 5, 2026
Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: team/ui. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Copilot AI reviewed Nov 5, 2026
View reviewed changes
Copilot AI left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The 32-package update spans authentication, hashing, forms, and lint rules, with compatibility requiring CI validation because build/lint and UI regression results are unavailable here.

No open issues 🎉

What changed in this PR

Updates 32 npm dependencies across Keycloak’s JavaScript workspace, covering the admin and account consoles, shared libraries, and supporting tools. Changes are limited to dependency versions in eight package manifests.

Changes:

  • Updates UI runtime dependencies, including keycloak-js, React Hook Form, and React Router.
  • Refreshes linting, formatting, build, and test tooling.
  • Updates theme-generation, server-helper, and vendor-bundling dependencies.
File Description
js/​themes-vendor/​package.json Updates hashing and Rollup bundling dependencies.
js/​package.json Updates workspace linting, formatting, and TypeScript tooling dependencies.
js/​libs/​ui-shared/​package.json Updates shared UI runtime, testing, and build dependencies.
js/​libs/​keycloak-admin-client/​package.json Updates test-data, assertion, and Node.js type dependencies.
js/​apps/​keycloak-server/​package.json Updates the tar-fs archive dependency.
js/​apps/​create-keycloak-theme/​package.json Updates the fs-extra filesystem dependency.
js/​apps/​admin-ui/​package.json Updates admin console runtime, testing, and build dependencies.
js/​apps/​account-ui/​package.json Updates account console runtime and build dependencies.

Review effort: Balanced

@dependabot @github
dependabot Bot commented on behalf of github Nov 12, 2026
Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 12, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/js/npm-dependencies-e4e42c8a04 branch November 12, 2026 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

Assignees

No one assigned

Labels

area/dependencies Dependency updates, CVE reports for third-party libraries, version bumps

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

0