[dependabot]

Bumps the minor-and-patch group with 30 updates in the / directory:

Package	From	To
@base-ui/react	1.6.0	1.9.0
@fontsource-variable/geist	5.2.9	5.3.0
@hookform/resolvers	5.4.0	5.9.2
@tailwindcss/vite	4.3.2	4.3.3
react	19.2.7	19.3.1
@types/react	19.2.17	19.3.0
react-dom	19.2.7	19.3.1
@types/react-dom	19.2.3	19.3.0
react-hook-form	7.81.0	7.90.0
react-router	8.3.0	8.4.0
recharts	3.9.2	3.10.1
tailwind-merge	3.6.0	3.7.0
zod	4.4.3	4.6.7
zustand	5.0.14	5.0.15
@axe-core/playwright	4.12.1	4.14.0
@playwright/test	1.60.0	1.64.1
@testing-library/dom	10.4.1	10.4.2
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.1	14.6.8
@types/node	26.6.2	26.6.5
@types/react	19.2.17	19.3.0
@types/react-dom	19.2.3	19.3.0
eslint	10.6.0	10.13.0
eslint-plugin-react-refresh	0.5.3	0.5.7
globals	17.6.0	17.13.0
jsdom	30.1.1	30.1.3
prettier	3.8.4	3.9.10
shadcn	4.16.1	4.22.0
tailwindcss	4.3.2	4.3.3
tsx	4.22.4	4.23.15
typescript-eslint	8.63.0	8.71.2
vitest	5.0.1	5.0.5

Updates @base-ui/react from 1.6.0 to 1.9.0

Release notes

Sourced from @​base-ui/react's releases.

v1.9.0

General changes

• Export CssVariables and DataAttributes types (#5243) by @​superhooman
• Fix stale focused field state (#5345) by @​atomiks
• Fix animation waits retaining detached elements (#5719) by @​flaviendelangle
• Keep item registration in sync when items change under Strict Mode (#5862) by @​atomiks
• Avoid re-rendering inactive triggers on open and close (#5865) by @​atomiks

Accordion

• Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
• Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
• Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

• Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

• Fix autoHighlight for asynchronous results (#5818) by @​atomiks
• Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
• Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

• Prefer aria-label over associated labels (#5787) by @​atomiks

Collapsible

• Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @​atomiks
• Finish closing when the render function removes the panel (#5890) by @​michaldudak
• Restore animations when a removed panel reopens (#5891) by @​michaldudak
• Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Combobox

• Fix stale chip focus after returning to the input (#5879) by @​mdm317
• Fix autoHighlight for asynchronous results (#5818) by @​atomiks
• Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak
• Fix label focus in Shadow DOM (#5871) by @​lyzno1
• Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
• Reset typeahead state when closing without moving focus (#5816) by @​mdm317
• Accept readonly arrays for multiple values (#5710) by @​MonstraG
• Share item indicator implementation (#5728) by @​flaviendelangle
• Improve mount performance of large lists (#5819) by @​atomiks
• Combine item store subscriptions (#5863) by @​atomiks

Dialog

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.9.0

Oct 9, 2026

General changes

• Export CssVariables and DataAttributes types (#5243) by @​superhooman
• Fix stale focused field state (#5345) by @​atomiks
• Fix animation waits retaining detached elements (#5719) by @​flaviendelangle
• Keep item registration in sync when items change under Strict Mode (#5862) by @​atomiks
• Avoid re-rendering inactive triggers on open and close (#5865) by @​atomiks

Accordion

• Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
• Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
• Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

• Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

• Fix autoHighlight for asynchronous results (#5818) by @​atomiks
• Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
• Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

• Prefer aria-label over associated labels (#5787) by @​atomiks

Collapsible

• Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @​atomiks
• Finish closing when the render function removes the panel (#5890) by @​michaldudak
• Restore animations when a removed panel reopens (#5891) by @​michaldudak
• Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Combobox

• Fix stale chip focus after returning to the input (#5879) by @​mdm317
• Fix autoHighlight for asynchronous results (#5818) by @​atomiks
• Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak
• Fix label focus in Shadow DOM (#5871) by @​lyzno1
• Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
• Reset typeahead state when closing without moving focus (#5816) by @​mdm317
• Accept readonly arrays for multiple values (#5710) by @​MonstraG

... (truncated)

Commits

• ad7ecda [release] v1.9.0 (#5906)
• 3296de3 [drawer] Avoid retaining unmounted drawers in DrawerProvider (#5921)
• 69c33b4 [drawer] Fix deferred touch swipes leaving the popup (#5922)
• 51b70db [menu] Strip internal filter components from public types (#5923)
• 8d8b98c [menu] Ignore filter input edits while the menu animates out (#5911)
• aeba3eb [combobox][menu][select] Revert highlightItem imperative action (#5910)
• ec6bf32 [field][select][combobox][slider] Fall back to the owner document when lookin...
• 1f112a5 [popups] Avoid re-rendering inactive triggers on open and close (#5865)
• bc53db6 [fieldset] Await render in Legend disabled-state test (#5909)
• 147092e [test] Strengthen tests, add test lint rules and share copied suites (#5892)
• Additional commits viewable in compare view

Updates @fontsource-variable/geist from 5.2.9 to 5.3.0

Commits

• See full diff in compare view

Updates @hookform/resolvers from 5.4.0 to 5.9.2

Release notes

Sourced from @​hookform/resolvers's releases.

v5.9.2

5.9.2 (2026-10-17)

Bug Fixes

• ajv: preserve escaped field names in validation errors (#879) (71e6052)

v5.9.1

5.9.1 (2026-08-17)

Bug Fixes

• isNameInFieldArray fails to recognise bracket-notation array paths causing nested errors overwriting (#876) (f18ddfb)

v5.9.0

5.9.0 (2026-08-15)

Features

• update joi to v18 (#873) (c8159ae)

v5.8.0

5.8.0 (2026-08-13)

Features

• support Vest 6 (a5100ab)

v5.7.1

5.7.1 (2026-08-02)

Bug Fixes

• ata-validator peer dependency version (#871) (827f20b)

v5.7.0

5.7.0 (2026-08-02)

Features

• support vine v4 (#867) (4cfba18)

v5.6.0

5.6.0 (2026-08-01)

... (truncated)

Commits

• 71e6052 fix(ajv): preserve escaped field names in validation errors (#879)
• 8d088d4 chore(deps): bump ata-validator to ^1.23.0 (#877)
• f18ddfb fix: isNameInFieldArray fails to recognise bracket-notation array paths causi...
• c8159ae feat: update joi to v18 (#873)
• a5100ab feat: support Vest 6
• 28ec539 fix(vest)!: support Vest 6 (#874)
• 827f20b fix: ata-validator peer dependency version (#871)
• 4cfba18 feat: support vine v4 (#867)
• 58d2e2d remove dead image
• b011a5f feat: improve all resovlers drops validation errors for special root field names
• Additional commits viewable in compare view

Updates @tailwindcss/vite from 4.3.2 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.3] - 2026-07-16

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Commits

• c2b24dd 4.3.3 (#20334)
• bdcd708 Don't trigger a full page reload for scanned files that Vite processes as mod...
• See full diff in compare view

Updates react from 19.2.7 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
easypiva	Ready	Preview	Oct 21, 2026 3:52pm UTC

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml