Bump the npm-dependencies group across 1 directory with 32 updates by dependabot[bot] · Pull Request #55073 · keycloak/keycloak

dependabot · 2026-11-12T03:18:38Z

Bumps the npm-dependencies group with 32 updates in the /js directory:

Package	From	To
@eslint/compat	`2.0.0`	`2.1.1`
@eslint/eslintrc	`3.3.5`	`3.3.7`
@types/node	`26.1.0`	`26.6.6`
eslint-plugin-lodash	`8.0.0`	`8.1.0`
eslint-plugin-playwright	`2.4.0`	`2.12.2`
eslint-plugin-prettier	`5.5.4`	`5.5.7`
prettier	`3.6.2`	`3.9.10`
tslib	`2.8.1`	`2.9.1`
typescript-eslint	`8.42.0`	`8.72.1`
keycloak-js	`26.2.2`	`26.2.5`
react-hook-form	`7.70.0`	`7.91.0`
react-router-dom	`7.18.2`	`7.18.5`
@playwright/test	`1.64.1`	`1.65.0`
@vitejs/plugin-react-swc	`4.2.2`	`4.3.3`
lightningcss	`1.30.2`	`1.33.0`
@uiw/react-textarea-code-editor	`3.1.1`	`3.1.3`
jszip	`3.10.1`	`3.10.2`
yaml	`2.8.3`	`2.9.1`
@axe-core/playwright	`4.11.0`	`4.14.0`
@testing-library/dom	`10.4.1`	`10.4.2`
@testing-library/react	`16.3.1`	`16.3.3`
@types/dagre	`0.7.53`	`0.7.54`
properties-file	`5.0.5`	`5.0.7`
uuid	`14.0.1`	`14.0.3`
fs-extra	`11.3.3`	`11.4.1`
tar-fs	`3.1.1`	`3.1.3`
@faker-js/faker	`10.5.0`	`10.6.0`
chai	`6.2.2`	`6.3.0`
@noble/hashes	`2.0.1`	`2.4.0`
@rollup/plugin-commonjs	`29.0.0`	`29.0.3`
@rollup/plugin-terser	`1.0.0`	`1.0.2`
rollup	`4.59.0`	`4.68.0`

Updates @eslint/compat from 2.0.0 to 2.1.1

Release notes

Sourced from @eslint/compat's releases.

compat: v2.1.1

2.1.1 (2026-09-01)

Bug Fixes

preserve markVariableAsUsed return value in compat context (#503) (66d9790)

compat: v2.1.0

2.1.0 (2026-05-08)

Features

Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

migrate-config: v2.1.0

2.1.0 (2026-05-08)

Features

Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/config-helpers bumped from ^0.5.5 to ^0.6.0

migrate-config: v2.0.7

2.0.7 (2026-05-01)

Bug Fixes

update espree to the latest (#437) (a8ff72f)

migrate-config: v2.0.6

2.0.6 (2026-04-08)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/compat bumped from ^2.0.4 to ^2.0.5

devDependencies

@eslint/core bumped from ^1.2.0 to ^1.2.1

... (truncated)

Changelog

Sourced from @eslint/compat's changelog.

2.1.1 (2026-09-01)

Bug Fixes

preserve markVariableAsUsed return value in compat context (#503) (66d9790)

2.1.0 (2026-05-08)

Features

Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

2.0.5 (2026-04-08)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/core bumped from ^1.2.0 to ^1.2.1

2.0.4 (2026-04-03)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/core bumped from ^1.1.1 to ^1.2.0

2.0.3 (2026-03-06)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/core bumped from ^1.1.0 to ^1.1.1

2.0.2 (2026-01-29)

Bug Fixes

add eslint 10 as peer dependency (#361) (ecb37dc)

Dependencies

... (truncated)

Commits

a4466ca chore: release main (#504)
714ffde docs: Update README sponsors
66d9790 fix: preserve markVariableAsUsed return value in compat context (#503)
caffae7 docs: Update README sponsors
ae1ba25 docs: Update README sponsors
50051c6 docs: Update README sponsors
ea83524 docs: Update README sponsors
29956ae docs: Update README sponsors
f6d5bdf docs: Update README sponsors
8b71ed3 chore: restore eslint-plugin-jsdoc rules (#316)
Additional commits viewable in compare view

Updates @eslint/eslintrc from 3.3.5 to 3.3.7

Release notes

Sourced from @eslint/eslintrc's releases.

eslintrc: v3.3.7

3.3.7 (2026-09-01)

Bug Fixes

Bump js-yaml to 4.3.1 (#239) (f27e7c9)

update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Changelog

Sourced from @eslint/eslintrc's changelog.

3.3.7 (2026-09-01)

Bug Fixes

Bump js-yaml to 4.3.1 (#239) (f27e7c9)

update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

3.3.6 (2026-07-10)

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Commits

7943fa6 chore: release 3.3.7 🚀 (#240)
bb0d97a fix: update js-yaml to 4.3.2 to address security vulnerability (#243)
5b4abc9 docs: Update README sponsors
f27e7c9 fix: Bump js-yaml to 4.3.1 (#239)
b75e1d2 docs: Update README sponsors
302c133 docs: Update README sponsors
e62e766 docs: Update README sponsors
cf27f9f docs: Update README sponsors
c7f4cdf docs: Update README sponsors
3319822 docs: Update README sponsors
Additional commits viewable in compare view

Updates @types/node from 26.1.0 to 26.6.6

Commits

See full diff in compare view

Updates eslint-plugin-lodash from 8.0.0 to 8.1.0

Changelog

Sourced from eslint-plugin-lodash's changelog.

v8.1.0

[prop-shorthand] fix ESLint v9 incompatibility [#1](https://github.com/idok/eslint-plugin-lodash/issues/1)

upgrade yarn d16fe8d

update node actions 8e2c2d2

fix package json 8b024d1

Commits

7db5933 8.1.0
e834f03 update change log
6b5ae1d add email
5017d3e update change log
987ecf9 update dependencies and yarn
64bc32d Merge pull request #1 from ThisIsManta/master
84e7754 [prop-shorthand] fix ESLint v9 incompatibility
4009722 update build status badge
97a6f4d upgrade yarn actions
d16fe8d upgrade yarn
Additional commits viewable in compare view

Updates eslint-plugin-playwright from 2.4.0 to 2.12.2

Release notes

Sourced from eslint-plugin-playwright's releases.

v2.12.2

2.12.2 (2026-11-02)

Bug Fixes

accept expect.soft.poll as a valid assertion (#524) (d499b63), closes #519

v2.12.1

2.12.1 (2026-10-05)

Bug Fixes

replace unsupported json schema contains with enum in rule option schema (#514) (4f35eb6)

v2.12.0

2.12.0 (2026-09-14)

Bug Fixes

no-skipped-test: detect testInfo annotations and split allowConditional (#490) (93d788e)

Features

no-action-timeout: disallow per-call timeouts on actions (#492) (fec2902)

no-export: disallow exports in files containing tests (#493) (eb6fc1c)

no-identical-title: disallow identical test and describe titles (#494) (7ec68e7)

no-magic-timeouts: add minOccurrences and document adoption (a7542ce)

no-magic-timeouts: flag inline numeric timeout values (29de919)

no-template-literal-title: disallow template literals in titles (f9a6e86)

no-test-return-statement: disallow returning from a test body (#495) (a447de8)

prefer-ending-with-an-expect: require tests to end in an assertion (#496) (d31d3cc)

require-annotation-reason: require a reason on skip and fixme (#497) (0164432)

v2.11.0

2.11.0 (2026-07-27)

Features

no-unnecessary-assertions: flag always-passing assertions on a Locator (#470) (b6d3e5d), closes #463

v2.10.5

2.10.5 (2026-07-06)

Bug Fixes

... (truncated)

Commits

d499b63 fix: accept expect.soft.poll as a valid assertion (#524)
9559ed0 chore(deps): Bump handlebars from 4.7.9 to 4.7.10 (#521)
4295837 chore(deps): Bump source-map-js from 1.2.1 to 1.2.2 (#520)
e3eaf6c chore(deps): Bump brace-expansion from 2.1.4 to 2.1.7 (#515)
9e5fb46 chore(deps-dev): Bump vitest from 4.1.9 to 4.1.11 (#509)
d89f4b3 chore(deps): Bump js-yaml from 4.3.1 to 4.3.2 (#510)
99e1e66 chore(deps): Bump ip-address from 10.4.0 to 10.7.2 (#513)
4f35eb6 fix: replace unsupported json schema contains with enum in rule option sc...
8db1443 Merge pull request #498 from unlikelyzero/feat/no-magic-timeouts
1259cbb Merge pull request #500 from unlikelyzero/feat/no-template-literal-title
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-playwright since your current version.

Updates eslint-plugin-prettier from 5.5.4 to 5.5.7

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.7

Patch Changes

#796 7e53ecd Thanks @OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

#805 1b7c433 Thanks @JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

New Contributors

@truongbo17 made their first contribution in prettier/eslint-plugin-prettier#798

@OskarEichler made their first contribution in prettier/eslint-plugin-prettier#796

Full Changelog: prettier/eslint-plugin-prettier@v5.5.6...v5.5.7

v5.5.6

Patch Changes

#791 b5c96a3 Thanks @JounQin! - chore: bump all (dev)Dependencies

v5.5.5

Patch Changes

#772 7264ed0 Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1

#776 77651a3 Thanks @aswils! - fix: bump synckit for yarn PnP ESM issue

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.7

Patch Changes

#796 7e53ecd Thanks @OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

#805 1b7c433 Thanks @JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

5.5.6

Patch Changes

#791 b5c96a3 Thanks @JounQin! - chore: bump all (dev)Dependencies

5.5.5

Patch Changes

#772 7264ed0 Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1

#776 77651a3 Thanks @aswils! - fix: bump synckit for yarn PnP ESM issue

Commits

e6dd27a chore: keep packageManager when cleaning package.json for release (#808)
7544956 chore: release eslint-plugin-prettier (#799)
e3e5238 ci: enable npm publish provenance for changesets v3 (#807)
7c923c4 build(deps): Bump http-cache-semantics from 4.2.0 to 4.3.0 (#806)
1b7c433 fix: bump synckit to surface worker failures instead of hanging (#805)
a6b3feb docs: explain line endings and endOfLine behavior (#804)
2f6ba1d ci: exercise the getLocFromIndex ponyfill on ESLint 9 (#803)
cf1d2c5 chore(deps): update (#802)
9f14a55 chore(deps): update all dependencies (#788)
7e53ecd fix: map fallback source locations to actual line starts (#796)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-prettier since your current version.

Updates prettier from 3.6.2 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @fisker)

🔗 Changelog

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

3.9.8

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @seiyab)

🔗 Changelog

3.9.7

Support Angular 22.2

Fix regressions in v3.9

🔗 Changelog

3.9.6

What's Changed

Preserve quotes for methods named new (prettier/prettier#19621 by @kovsu)

Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @fisker)

Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @fisker)

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @fisker)

🔗 Changelog

3.9.3

Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @seiyab)

TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @evoactivity)

🔗 Changelog

3.9.1

CLI: Fix ignored file has been cached incorrectly (#19483 by @kovsu)

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update `micromark-extension-gfm-table` to fix the table parse issue on performance (#20266 by `@fisker`)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by `@seiyab`)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

... (truncated)

Commits

1172b82 Release 3.9.10
d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
953b908 Bump Prettier dependency to 3.9.9
ad8a6bf Clean changelog_unreleased
cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier since your current version.

Updates tslib from 2.8.1 to 2.9.1

Release notes

Sourced from tslib's releases.

tslib 2.9.1

What's Changed

Update dependencies by @jakebailey in microsoft/tslib#283

Switch to new release pipeline by @jakebailey in microsoft/tslib#289

Port content mapper changes to rewriteRelativeImportExtension by @andrewbranch in microsoft/tslib#295

Stop requiring an ignored lockfile in release workflows by @jakebailey in microsoft/tslib#296

Bump tslib to 2.9.0 by @typescript-automation[bot] in microsoft/tslib#297

Stop running tests in the Azure release pipeline by @jakebailey in microsoft/tslib#298

Bump tslib to 2.9.1 by @typescript-automation[bot] in microsoft/tslib#299

Full Changelog: microsoft/tslib@v2.8.1...v2.9.1

Commits

f167789 Bump tslib to 2.9.1 (#299)
5d4a32e Stop running tests in the Azure release pipeline (#298)
8d6f9cd Bump tslib to 2.9.0 (#297)
8fe15be Stop requiring an ignored lockfile in release workflows (#296)
430ef31 Port content mapper changes to rewriteRelativeImportExtension (#295)
6ac5f2b Switch to new release pipeline (#289)
12bd8a7 Update dependencies (#283)
See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for tslib since your current version.

Updates typescript-eslint from 8.42.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)

typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

eslint-plugin: lazy load rules (#13010)

eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)

typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)

eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)

eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)

eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)

eslint-plugin: [require-array-sort-compare] check tuples (#13058)

eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)

type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)

typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

Evyatar Daud @StyleShit

Junichiro Kasuya @jksy

Mitch Fultz @fitchmultz

Shaan GS @ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.0 (2026-09-07)

... (truncated)

Commits

4ad6b75 chore(release): publish 8.72.1
7757694 chore: cleanup typecheck & build and fix race condition (#13071)
a4c2603 chore(release): publish 8.72.0
7488d68 chore(release): publish 8.71.2
d57b8da chore(release): publish 8.71.1
8695664 chore(release): publish 8.71.0
23d38ce chore(release): publish 8.70.1
eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
8c80531 chore: fix typos in comments and docs (#12846)
b6b86a1 chore: migrate to nx 23.2.0 (#12843)
Additional commits viewable in compare view

Updates keycloak-js from 26.2.2 to 26.2.5

Release notes

Sourced from keycloak-js's releases.

26.2.5

Highlights

Features

DPoP support for Keycloak-JS

DPoP is a mechanism that prevents token theft and replay attacks by generating sender-constrained access and refresh tokens. It allows a client to cryptographically prove possession of the private key bound to a token, provided the resource server supports the DPoP standard.

[!NOTE] See the documentation for more information.

Bug Fixes

Cordova/cordova-native adapters skip OAuth state validation on login callback

The cordova and cordova-native adapter login callback paths in keycloak-js process OAuth callback data without consistently validating the stored state parameter before applying token-derived authentication state.

keycloak/keycloak-js#306

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

26.2.4

... (truncated)

Commits

931caa7 Set version to 26.2.5
be42d6a Bump @keycloak/keycloak-admin-client from 26.8.0 to 26.8.1 (#369)
69cec6d Remove ts-standard from the project (#358)
f53a656 Bump actions/checkout from 6 to 7 (#316)
2ee3f72 Bump @playwright/test from 1.62.1 to 1.64.0 (#354)
6a55cb7 Bump express from 5.2.1 to 5.3.0 (#356)
5ac4e09 Bump jszip from 3.10.1 to 3.10.2 (#344)
2994182 Bump @keycloak/keycloak-admin-client from 26.7.0 to 26.8.0 (#352)
dfb74a2 Bump @types/node from 26.1.2 to 26.6.5 (#357)
8803e6b Add DPoP support to keycloak-js (#253)
Additional commits viewable in compare view

Updates react-hook-form from 7.70.0 to 7.91.0

Release notes

Sourced from react-hook-form's releases.

Version 7.91.0

🐞 Fixes

Fix useFieldArray not updating rows when using setValue or setValues (#13842, #13939)

Fix useFieldArray not unregistering values correctly on unmount (#13843)

Fix field registration without a value incorrectly adding array rows (#13846, #13849)

Fix useFieldArray reindexing fields incorrectly when array rules are registered (#13873)

Fix useFieldArray losing validation rules after reset() (#13940)

Fix stale field array validation results after array changes (#13888)

Fix useFieldArray validation after submission in onBlur mode (#13867)

Fix dirty state updates when setValues changes field arrays (#13870)

Fix stale asynchronous validation results after reset() and unregister() (#13908, #13912, #13934)

Fix Controller validation using stale DOM values (#13880)

Fix Description has been truncated

Bumps the npm-dependencies group with 32 updates in the /js directory: | Package | From | To | | --- | --- | --- | | [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.0` | `2.1.1` | | [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.5` | `3.3.7` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.6.6` | | [eslint-plugin-lodash](https://github.com/idok/eslint-plugin-lodash) | `8.0.0` | `8.1.0` | | [eslint-plugin-playwright](https://github.com/mskelton/eslint-plugin-playwright) | `2.4.0` | `2.12.2` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.7` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.10` | | [tslib](https://github.com/Microsoft/tslib) | `2.8.1` | `2.9.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.42.0` | `8.72.1` | | [keycloak-js](https://github.com/keycloak/keycloak-js) | `26.2.2` | `26.2.5` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.70.0` | `7.91.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.5` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` | | [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react-swc) | `4.2.2` | `4.3.3` | | [lightningcss](https://github.com/parcel-bundler/lightningcss) | `1.30.2` | `1.33.0` | | [@uiw/react-textarea-code-editor](https://github.com/uiwjs/react-textarea-code-editor) | `3.1.1` | `3.1.3` | | [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` | | [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.1` | | [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.11.0` | `4.14.0` | | [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.1` | `16.3.3` | | [@types/dagre](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dagre) | `0.7.53` | `0.7.54` | | [properties-file](https://github.com/properties-file/properties-file) | `5.0.5` | `5.0.7` | | [uuid](https://github.com/uuidjs/uuid) | `14.0.1` | `14.0.3` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.3` | `11.4.1` | | [tar-fs](https://github.com/mafintosh/tar-fs) | `3.1.1` | `3.1.3` | | [@faker-js/faker](https://github.com/faker-js/faker) | `10.5.0` | `10.6.0` | | [chai](https://github.com/chaijs/chai) | `6.2.2` | `6.3.0` | | [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.0.1` | `2.4.0` | | [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) | `29.0.0` | `29.0.3` | | [@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser) | `1.0.0` | `1.0.2` | | [rollup](https://github.com/rollup/rollup) | `4.59.0` | `4.68.0` | Updates `@eslint/compat` from 2.0.0 to 2.1.1 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.1/packages/compat) Updates `@eslint/eslintrc` from 3.3.5 to 3.3.7 - [Release notes](https://github.com/eslint/eslintrc/releases) - [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md) - [Commits](eslint/eslintrc@eslintrc-v3.3.5...eslintrc-v3.3.7) Updates `@types/node` from 26.1.0 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-plugin-lodash` from 8.0.0 to 8.1.0 - [Changelog](https://github.com/idok/eslint-plugin-lodash/blob/master/CHANGELOG.md) - [Commits](idok/eslint-plugin-lodash@v8.0.0...v8.1.0) Updates `eslint-plugin-playwright` from 2.4.0 to 2.12.2 - [Release notes](https://github.com/mskelton/eslint-plugin-playwright/releases) - [Changelog](https://github.com/mskelton/eslint-plugin-playwright/blob/main/CHANGELOG.md) - [Commits](mskelton/eslint-plugin-playwright@v2.4.0...v2.12.2) Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.7 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.7) Updates `prettier` from 3.6.2 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.9.10) Updates `tslib` from 2.8.1 to 2.9.1 - [Release notes](https://github.com/Microsoft/tslib/releases) - [Commits](microsoft/tslib@v2.8.1...v2.9.1) Updates `typescript-eslint` from 8.42.0 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint) Updates `keycloak-js` from 26.2.2 to 26.2.5 - [Release notes](https://github.com/keycloak/keycloak-js/releases) - [Changelog](https://github.com/keycloak/keycloak-js/blob/main/RELEASE-CHECKLIST.md) - [Commits](keycloak/keycloak-js@26.2.2...26.2.5) Updates `react-hook-form` from 7.70.0 to 7.91.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.70.0...v7.91.0) Updates `react-router-dom` from 7.18.2 to 7.18.5 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.5/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.5/packages/react-router-dom) Updates `@playwright/test` from 1.64.1 to 1.65.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.64.1...v1.65.0) Updates `@vitejs/plugin-react-swc` from 4.2.2 to 4.3.3 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/v4.3.3/packages/plugin-react-swc) Updates `lightningcss` from 1.30.2 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.30.2...v1.33.0) Updates `@uiw/react-textarea-code-editor` from 3.1.1 to 3.1.3 - [Release notes](https://github.com/uiwjs/react-textarea-code-editor/releases) - [Commits](uiwjs/react-textarea-code-editor@v3.1.1...v3.1.3) Updates `jszip` from 3.10.1 to 3.10.2 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.10.1...v3.10.2) Updates `yaml` from 2.8.3 to 2.9.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.3...v2.9.1) Updates `@axe-core/playwright` from 4.11.0 to 4.14.0 - [Release notes](https://github.com/dequelabs/axe-core-npm/releases) - [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md) - [Commits](dequelabs/axe-core-npm@v4.11.0...v4.14.0) Updates `@testing-library/dom` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/testing-library/dom-testing-library/releases) - [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2) Updates `@testing-library/react` from 16.3.1 to 16.3.3 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.1...v16.3.3) Updates `@types/dagre` from 0.7.53 to 0.7.54 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dagre) Updates `properties-file` from 5.0.5 to 5.0.7 - [Release notes](https://github.com/properties-file/properties-file/releases) - [Changelog](https://github.com/properties-file/properties-file/blob/main/CHANGELOG.md) - [Commits](properties-file/properties-file@v5.0.5...v5.0.7) Updates `uuid` from 14.0.1 to 14.0.3 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v14.0.1...v14.0.3) Updates `fs-extra` from 11.3.3 to 11.4.1 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.3...11.4.1) Updates `tar-fs` from 3.1.1 to 3.1.3 - [C 8BD0 ommits](mafintosh/tar-fs@v3.1.1...v3.1.3) Updates `@faker-js/faker` from 10.5.0 to 10.6.0 - [Release notes](https://github.com/faker-js/faker/releases) - [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md) - [Commits](faker-js/faker@v10.5.0...v10.6.0) Updates `chai` from 6.2.2 to 6.3.0 - [Release notes](https://github.com/chaijs/chai/releases) - [Changelog](https://github.com/chaijs/chai/blob/main/History.md) - [Commits](chaijs/chai@v6.2.2...v6.3.0) Updates `@noble/hashes` from 2.0.1 to 2.4.0 - [Release notes](https://github.com/paulmillr/noble-hashes/releases) - [Changelog](https://github.com/paulmillr/noble-hashes/blob/main/CHANGELOG.md) - [Commits](paulmillr/noble-hashes@2.0.1...2.4.0) Updates `@rollup/plugin-commonjs` from 29.0.0 to 29.0.3 - [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.3/packages/commonjs) Updates `@rollup/plugin-terser` from 1.0.0 to 1.0.2 - [Changelog](https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/beep-v1.0.2/packages/terser) Updates `rollup` from 4.59.0 to 4.68.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.59.0...v4.68.0) --- updated-dependencies: - dependency-name: "@eslint/compat" dependency-version: 2.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@eslint/eslintrc" dependency-version: 3.3.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint-plugin-lodash dependency-version: 8.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint-plugin-playwright dependency-version: 2.12.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint-plugin-prettier dependency-version: 5.5.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: tslib dependency-version: 2.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript-eslint dependency-version: 8.72.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: keycloak-js dependency-version: 26.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: react-hook-form dependency-version: 7.91.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react-router-dom dependency-version: 7.18.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@playwright/test" dependency-version: 1.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@vitejs/plugin-react-swc" dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: lightningcss dependency-version: 1.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@uiw/react-textarea-code-editor" dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: jszip dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: yaml dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@axe-core/playwright" dependency-version: 4.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@testing-library/dom" dependency-version: 10.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@testing-library/react" dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/dagre" dependency-version: 0.7.54 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: properties-file dependency-version: 5.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: uuid dependency-version: 14.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: fs-extra dependency-version: 11.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: tar-fs dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@faker-js/faker" dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: chai dependency-version: 6.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@noble/hashes" dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@rollup/plugin-commonjs" dependency-version: 29.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@rollup/plugin-terser" dependency-version: 1.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: rollup dependency-version: 4.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-12T03:18:43Z

Labels

The following labels could not be found: team/ui. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Copilot

🔵 Needs a closer look

The 32-package upgrade spans authentication, form state, and lint tooling, but unavailable CI outcomes and upstream implementations leave login/form E2E tests and lint/build results needing maintainer verification.

No open issues 🎉

What changed in this PR

Updates 32 dependencies across Keycloak’s JavaScript workspace, covering the Admin and Account consoles, shared libraries, theme tooling, and development tools. Changes are limited to dependency versions in eight package manifests.

Changes:

Updates UI runtime dependencies, including keycloak-js, React Hook Form, and React Router.
Refreshes linting, formatting, build, and testing dependencies.
Updates utility packages used by theme generation and local server tooling.

File	Description
`js/themes-vendor/package.json`	Updates hashing and Rollup dependencies for theme bundles.
`js/package.json`	Updates workspace linting, formatting, Node types, and TypeScript helpers.
`js/libs/ui-shared/package.json`	Updates shared UI authentication, forms, testing, and build dependencies.
`js/libs/keycloak-admin-client/package.json`	Updates test data generation, assertions, and Node types.
`js/apps/keycloak-server/package.json`	Updates the archive extraction dependency.
`js/apps/create-keycloak-theme/package.json`	Updates the filesystem utility dependency.
`js/apps/admin-ui/package.json`	Updates console runtime, testing, and build dependencies.
`js/apps/account-ui/package.json`	Updates authentication, forms, routing, and development dependencies.

_{Review effort: Balanced}

dependabot Bot requested review from a team as code owners November 12, 2026 03:18

dependabot Bot added the area/dependencies Dependency updates, CVE reports for third-party libraries, version bumps label Nov 12, 2026

Copilot AI balanced review requested due to automatic review settings November 12, 2026 03:18

Copilot started reviewing November 12, 2026 03:19

View session

Copilot AI reviewed Nov 12, 2026

View reviewed changes

Navigation Menu

Repository navigation

Bump the npm-dependencies group across 1 directory with 32 updates - #55073

Bump the npm-dependencies group across 1 directory with 32 updates#55073
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js/npm-dependencies-32532f8796

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

compat: v2.1.1

2.1.1 (2026-09-01)

Bug Fixes

compat: v2.1.0

2.1.0 (2026-05-08)

Features

migrate-config: v2.1.0

2.1.0 (2026-05-08)

Features

Dependencies

migrate-config: v2.0.7

2.0.7 (2026-05-01)

Bug Fixes

migrate-config: v2.0.6

2.0.6 (2026-04-08)

Dependencies

2.1.1 (2026-09-01)

Bug Fixes

2.1.0 (2026-05-08)

Features

2.0.5 (2026-04-08)

Dependencies

2.0.4 (2026-04-03)

Dependencies

2.0.3 (2026-03-06)

Dependencies

2.0.2 (2026-01-29)

Bug Fixes

Dependencies

eslintrc: v3.3.7

3.3.7 (2026-09-01)

Bug Fixes

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

3.3.7 (2026-09-01)

Bug Fixes

3.3.6 (2026-07-10)

Bug Fixes

v8.1.0

v2.12.2

2.12.2 (2026-11-02)

Bug Fixes

v2.12.1

2.12.1 (2026-10-05)

Bug Fixes

v2.12.0

2.12.0 (2026-09-14)

Bug Fixes

Features

v2.11.0

2.11.0 (2026-07-27)

Features

v2.10.5

2.10.5 (2026-07-06)

Bug Fixes

v5.5.7

Patch Changes

New Contributors

v5.5.6

Patch Changes

v5.5.5

Patch Changes

5.5.7

Patch Changes

5.5.6

Patch Changes

5.5.5

Patch Changes

3.9.10

3.9.9

3.9.8

3.9.7

3.9.6

What's Changed

3.9.5

3.9.4

3.9.3

3.9.1

Markdown: Update `micromark-extension-gfm-table` to fix the table parse issue on performance (#20266 by `@fisker`)

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by `@seiyab`)