Skip to content

build(deps): bump the client group in /client with 5 updates - #1654

Merged
jtojnar merged 1 commit into
masterfrom
dependabot/npm_and_yarn/client/client-d9a7c86b36
Oct 25, 2026
Merged

build(deps): bump the client group in /client with 5 updates#1654
jtojnar merged 1 commit into
masterfrom
dependabot/npm_and_yarn/client/client-d9a7c86b36

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the client group in /client with 5 updates:

Package From To
core-js 3.50.0 3.51.0
dexie 4.4.6 4.4.7
react-router 8.4.0 8.5.0
postcss 8.5.30 8.5.31
typescript-eslint 8.71.2 8.72.0

Updates core-js from 3.50.0 to 3.51.0

Release notes

Sourced from core-js's releases.

3.51.0 - 2026.10.19

Changelog

Sourced from core-js's changelog.

3.51.0 - 2026.10.19

Commits
  • 633931a v3.51.0
  • 1dfe94e add missed detection of imprecise native Math.{ asinh, cbrt }
  • e1ecf25 fix Promise.{ allKeyed, allSettledKeyed } algorithm for sync promises
  • 9b69e68 add detection / fix of Math.sumPrecise V8 bugs
  • bb0a65f add detection / fix of Math.sumPrecise negative numbers handling WebKit bug
  • b70f13b update eslint-plugin-unicorn
  • e6d323a add detection / fix of RegExp.escape code points handling WebKit bug
  • d6561e3 move Iterator chunking to stable ES
  • ce38a98 move Iterator.prototype.includes to stable ES
  • bceffe8 move Iterator.prototype.join to stable ES
  • See full diff in compare view

Updates dexie from 4.4.6 to 4.4.7

Release notes

Sourced from dexie's releases.

Dexie v4.4.7

This maintenance release fixes query, live-query, bulk-update, and database lifecycle edge cases; improves production bundler compatibility; makes Dexie Cloud sync retries recover faster; and restores compatibility with legacy Dexie exports.

Related Package Releases

Package Version
dexie 4.4.7
dexie-cloud-addon 4.4.16
dexie-react-hooks 4.4.0 (no change)
y-dexie 4.4.0 (no change)
dexie-export-import 4.4.2
dexie-cloud-common 1.0.60

Bug Fixes

dexie@4.4.7

  • Fix empty query branches in unions — Empty anyOf() and reversed between() clauses no longer suppress matches from other branches in an or() query; a standalone empty clause still returns no results. (#2319)
  • Fix live-query change detection and cancellation — Mutations for valid falsy primary keys such as 0 and the empty string now trigger matching live queries, and late errors from superseded runs are ignored. (#2324, #2353)
  • Harden bulkUpdate() — Changes to nested or compound primary keys now throw ConstraintError, and bulkUpdate() works when called before the database has opened. (#2320, #2334)
  • Fix database lifecycle and opening edge cases — hasBeenClosed() now reports the closed state correctly; Safari-like environments without a global indexedDB get a clear missing-API error, while an explicitly supplied indexedDB implementation can still be opened. (#2340, #2342)
  • Improve production bundle compatibility — Package exports now resolve to the unminified build in production, avoiding downstream double-minification issues. The minified bundle remains in the package, but production exports may now select the unminified distribution. (#2344)

dexie-cloud-addon@4.4.16

  • Wake local sync retries on reconnect or foregrounding — A scheduled retry can resume promptly when connectivity returns or the app becomes visible, rather than waiting through the remaining backoff; retry behavior avoids overlapping requests and clears stale worker state on close. (#2351)

dexie-export-import@4.4.2

  • Import legacy hidden-primary-key exports — Legacy exports that encode the schema as the string "null" are normalized and imported instead of being rejected as a primary-key mismatch. (#2329)

Contributors

Release coordination: @​dfahlander. Thanks to @​buildwithakhila, @​chatman-media, @​claude, @​cpruijsen, @​liz709, @​morgan-coded, @​ShangYJQ, @​tarann26, @​theblang, and @​zzoraemon043 for code, documentation, sample-app, and package changes. Automated dependency updates were contributed by @​dependabot[bot].

Commits
  • da6b2b8 fix: add repository metadata for cloud common publish
  • aadf00a chore: prepare coordinated Dexie release
  • d31ca47 fix(WhereClause): empty anyOf()/between() no longer empties an or()-union (#1...
  • ff98f7e fix(live-query): react on mutations of falsy but valid primary keys (issue #2...
  • 84fd2cf Reject bulkUpdate changes to nested and compound primary keys (#2320)
  • 4fae8d4 fix: db.hasBeenClosed() never returned true (#2340)
  • b21d7d4 fix(dexie-export-import): tolerate legacy schema:"null" when importing a hidd...
  • c376e46 fix(open): skip the Safari 14 workaround when the global indexedDB is missing...
  • c8b2eb5 Fix todo app navbar dropdown button nesting (#2343)
  • dccc3c5 fix(dexie-cloud): wake local sync retries on reconnect (#2350) (#2351)
  • Additional commits viewable in compare view

Updates react-router from 8.4.0 to 8.5.0

Release notes

Sourced from react-router's releases.

v8.5.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v850

Changelog

Sourced from react-router's changelog.

v8.5.0

Minor Changes

  • Deprecate React Router's view transition APIs in favor of React's <ViewTransition> component, available in React 19.3 and later (#15493)
    • Deprecate the viewTransition props/options, useViewTransitionState, and NavLink's isTransitioning render prop and transitioning class
    • Preserve existing behavior, including support for older React versions
    • See the migration guide for a navigation example and compatibility considerations

Patch Changes

  • Fix <Await> failing to server render promises decoded from an RSC payload, which caused the Suspense boundary to switch to client rendering (#15597)
  • Declare @types/react and @types/react-dom as optional peer dependencies so the shipped type definitions resolve React types under strict (non-hoisted) node_modules layouts (#15528)
  • Fix the unstable_useRouterState documentation example to call the imported alias (#15535)
  • Render the HydrateFallback of a route discovered through patchRoutesOnNavigation during initial hydration (#15537)
    • Routes discovered during initial hydration are now exposed in state.matches while their loaders run, so <RouterProvider> renders down to the discovered route's HydrateFallback instead of rendering nothing
  • Fix router state recovery when updates occur before RouterProvider subscribes, including when other subscribers are already attached, and report current client errors once without replaying server errors during hydration (#15637)
  • Fix matchPath not treating a static segment as optional when it contains characters outside [\w-] (#15425)
  • Fix an RSC server crash when a client aborts a document request while the HTML stream waits for the RSC payload (#15612)
  • Stop revalidating a fetcher after fetcher.reset(), so its cleared data no longer comes back on the next revalidation (#15633)

Unstable Changes

⚠️ Unstable features are not recommended for production use

  • Add an unstable_fetch prop to <HydratedRouter> to customize JavaScript-issued manifest and server data requests in conventional Framework Mode (#15586)
    • The function receives the intended request as well as context identifying the type of request
    • Data request context includes navigationType ("PUSH", "REPLACE", or "POP" for navigation-initiated requests, including reloaded fetchers; null otherwise)
      • Data strategies receive equivalent metadata through unstable_initiator and unstable_navigationType
    • The custom fetch context is a discriminated union, so narrowing type to "navigation" guarantees a non-null navigationType, while other data requests have a null navigationType
      • Fetchers reloaded after an initialization redirect retain the "initialization" type and include their fetcher key
    • Like other router initialization options, the implementation is captured when the singleton router is created and thus subsequent prop changes are ignored
    • Browser-managed data prefetches from <Link prefetch> use native <link rel="prefetch"> elements and do not call the custom implementation
    • Use the callback for custom fetch options, custom headers, safe request retries, or response header inspection
    • Return response bodies unchanged so React Router can decode its manifest and Turbo Stream data protocols
  • Support API-only Framework Mode with runtime server data loading, actions, revalidation, and lazy route discovery (#15601)
    • Hydrate prerendered pages from build-time data and fetch server loader data when hydrating a SPA fallback
    • Preserve normal loader revalidation and server-action support for eagerly loaded and lazily discovered routes, and honor loader opt-outs when making server data requests
  • Add unstable_useRouteDiscovery for application-controlled route discovery in conventional Framework Mode (#15602)
    • Discover selected destinations or load the running client's full route manifest without loading route modules
    • Compose manifest-mismatch handlers, with shared recovery and cancellation that preserves application state
    • Keep full-manifest failures catchable without rendering error boundaries, whether mismatch handlers use the hook or event's loadAllRoutes()
    • Cancel pending revalidation alongside a canceled navigation, retaining existing data and settling interrupted fetchers before restoring Back/Forward history
    • Enable future.unstable_customRouteDiscovery to opt in
      • Apps without the flag retain existing discovery behavior
    • Call event.defaultBehavior() from a custom mismatch handler to explicitly run built-in recovery
  • Return middleware short-circuit responses as-is for document requests in RSC modes, including resource routes, instead of decoding non-RSC bodies as Flight (#15628)
    • Include server middleware in both eager and lazy RSC route configuration types
    • Preserve HTML rendering for cached Flight responses returned by middleware, and pass through raw responses that replace the result of next()
Commits
  • 4fe4525 Release v8.5.0 (#15515)
  • 358001c docs: prepare v8.5.0 release notes
  • 5ff8294 Fix RouterProvider initialization recovery with existing subscribers (#15637)
  • d86f6b4 Add opt-in application-controlled route discovery (#15602)
  • 19f75c0 Default single-fetch data strategy to native fetch (#15638)
  • 5e94053 Fix \<Await> server rendering for RSC promises (#15597)
  • 843230c fix(react-router): stop the RSC HTML stream when it is cancelled during flush...
  • 08ee782 fix(react-router): stop revalidating a fetcher after reset (#15633)
  • 6549ab0 fix(rsc): tag middleware short-circuit responses as React-Router-Resource (#1...
  • a1422f1 fix: render HydrateFallback of routes discovered during initial hydration (#1...
  • Additional commits viewable in compare view

Updates postcss from 8.5.30 to 8.5.31

Release notes

Sourced from postcss's releases.

8.5.31

Changelog

Sourced from postcss's changelog.

8.5.31

Commits

Updates typescript-eslint from 8.71.2 to 8.72.0

Release notes

Sourced from typescript-eslint's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the client group in /client with 5 updates
f6cf8d5 
Bumps the client group in /client with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.50.0` | `3.51.0` |
| [dexie](https://github.com/dexie/Dexie.js) | `4.4.6` | `4.4.7` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `8.4.0` | `8.5.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.30` | `8.5.31` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.2` | `8.72.0` |


Updates `core-js` from 3.50.0 to 3.51.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.51.0/packages/core-js)

Updates `dexie` from 4.4.6 to 4.4.7
- [Release notes](https://github.com/dexie/Dexie.js/releases)
- [Commits](dexie/Dexie.js@v4.4.6...v4.4.7)

Updates `react-router` from 8.4.0 to 8.5.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@8.5.0/packages/react-router)

Updates `postcss` from 8.5.30 to 8.5.31
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.30...8.5.31)

Updates `typescript-eslint` from 8.71.2 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: core-js
  dependency-version: 3.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: client
- dependency-name: dexie
  dependency-version: 4.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: client
- dependency-name: react-router
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: client
- dependency-name: postcss
  dependency-version: 8.5.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: client
- dependency-name: typescript-eslint
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: client
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 24, 2026
@netlify

netlify Bot commented Oct 24, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for selfoss canceled.

Name Link
🔨 Latest commit f6cf8d5
🔍 Latest deploy log https://app.netlify.com/projects/selfoss/deploys/6add34a1dde296c4f7946245

@jtojnar
jtojnar merged commit 6e4e917 into master Oct 25, 2026
12 checks passed
@jtojnar jtojnar added this to the 2.20 milestone Oct 25, 2026
@jtojnar
jtojnar deleted the dependabot/npm_and_yarn/client/client-d9a7c86b36 branch October 25, 2026 09:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

2.20

Development

Successfully merging this pull request may close these issues.

1 participant

@jtojnar