Update Javascript

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@hookform/resolvers (source)	5.4.0 → 5.7.1
@radix-ui/react-accordion (source)	1.2.16 → 1.2.20
@radix-ui/react-alert-dialog (source)	1.1.19 → 1.1.23
@radix-ui/react-aspect-ratio (source)	1.1.11 → 1.1.15
@radix-ui/react-avatar (source)	1.2.2 → 1.2.6
@radix-ui/react-checkbox (source)	1.3.7 → 1.3.11
@radix-ui/react-collapsible (source)	1.1.16 → 1.1.20
@radix-ui/react-context-menu (source)	2.3.3 → 2.3.7
@radix-ui/react-dialog (source)	1.1.19 → 1.1.23
@radix-ui/react-dropdown-menu (source)	2.1.20 → 2.1.24
@radix-ui/react-hover-card (source)	1.1.19 → 1.1.23
@radix-ui/react-label (source)	2.1.11 → 2.1.15
@radix-ui/react-menubar (source)	1.1.20 → 1.1.24
@radix-ui/react-navigation-menu (source)	1.2.18 → 1.2.22
@radix-ui/react-popover (source)	1.1.19 → 1.1.23
@radix-ui/react-progress (source)	1.1.12 → 1.1.16
@radix-ui/react-radio-group (source)	1.4.3 → 1.4.7
@radix-ui/react-scroll-area (source)	1.2.14 → 1.2.18
@radix-ui/react-select (source)	2.3.3 → 2.3.7
@radix-ui/react-separator (source)	1.1.11 → 1.1.15
@radix-ui/react-slider (source)	1.4.3 → 1.4.7
@radix-ui/react-slot (source)	1.3.0 → 1.3.3
@radix-ui/react-switch (source)	1.3.3 → 1.3.7
@radix-ui/react-tabs (source)	1.1.17 → 1.1.21
@radix-ui/react-toast (source)	1.2.19 → 1.2.23
@radix-ui/react-toggle (source)	1.1.14 → 1.1.18
@radix-ui/react-toggle-group (source)	1.1.15 → 1.1.19
@radix-ui/react-tooltip (source)	1.2.12 → 1.2.16
@tailwindcss/postcss (source)	4.3.2 → 4.3.3
@tanstack/react-query (source)	5.101.2 → 5.101.4
@types/react (source)	19.2.17 → 19.2.18
@types/react-dom (source)	19.2.3 → 19.2.4
@vitejs/plugin-react-swc (source)	4.3.1 → 4.3.3
autoprefixer	10.5.2 → 10.5.4
eslint (source)	10.6.0 → 10.8.1
globals	17.7.0 → 17.11.0
lovable-tagger (source)	1.3.1 → 1.3.3
lucide-react (source)	1.23.0 → 1.31.0
postcss (source)	8.5.16 → 8.5.26
react (source)	19.2.7 → 19.2.8
react-dom (source)	19.2.7 → 19.2.8
react-hook-form (source)	7.81.0 → 7.85.0
react-resizable-panels (source)	4.12.1 → 4.12.2
react-router-dom (source)	7.18.1 → 7.18.2
recharts	3.9.2 → 3.10.1
sonner (source)	2.0.7 → 2.0.8
tailwindcss (source)	4.3.2 → 4.3.3
typescript-eslint (source)	8.63.0 → 8.67.0
vite (source)	8.1.3 → 8.2.1

---

Release Notes

react-hook-form/resolvers (@​hookform/resolvers)

v5.7.1

Compare Source

v5.7.0

Compare Source

Features

• support vine v4 (#​867) (4cfba18)

v5.6.0

Compare Source

v5.5.8

Compare Source

Bug Fixes

• Zod resolver drops validation errors for special root field names (#​869) (2f28787)

v5.5.7

Compare Source

v5.5.6

Compare Source

v5.5.5

Compare Source

Bug Fixes

• yup resolver overrides ref property in errors object with validation metadata when using checkbox input (#​863) (0f70063)

v5.5.4

Compare Source

Bug Fixes

• AJV Resolver - When ajv schema contains default for certain properties, getValues() returns the form data with properties overwritten (#​862) (c4b6aab)

v5.5.3

Compare Source

Bug Fixes

• Conditional/dynamic schema resolution no longer working (#​861) (f8d6533)

v5.5.2

Compare Source

v5.5.1

Compare Source

Bug Fixes

• [zod v4][zod resolver] error on nested discriminated unions (#​858) (4d01d01)

v5.5.0

Compare Source

Features

• typescript 6 & upgrade lib dev deps (#​856) (9968959)

v5.4.3

Compare Source

Bug Fixes

• Zod resolver does not respect union error (#​855) (4e56b2b)

v5.4.2

Compare Source

Bug Fixes

• preserve standard schema root errors (#​853) (08f25e9)

• fix #​842 zodResolver() type overload fails with Zod v4.3.x due to branded version mismatch (https://redirect.github.com/react-hook-form/resolvers/pull/852[)](a21e723)
• fix #​844 yupResolver: Control incompatible with optional fields when passed to custom component (https://redirect.github.com/react-hook-form/resolvers/pull/851[)](b7bb3f9)

v5.4.1

Compare Source

Bug Fixes

• declare validation libraries as optional peerDependencies (#​850) (d5e5134)

radix-ui/primitives (@​radix-ui/react-accordion)

v1.2.20

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-collapsible@1.1.20, @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-id@1.1.4, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6

v1.2.19

• Updated dependencies: @radix-ui/react-collection@1.1.14, @radix-ui/react-primitive@2.1.9, @radix-ui/react-collapsible@1.1.19

v1.2.18

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collapsible@1.1.18, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-id@1.1.3, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5

v1.2.17

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-collapsible@1.1.17, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7

radix-ui/primitives (@​radix-ui/react-alert-dialog)

v1.1.23

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dialog@1.1.23, @radix-ui/react-primitive@2.1.10

v1.1.22

• Updated dependencies: @radix-ui/react-dialog@1.1.22, @radix-ui/react-primitive@2.1.9

v1.1.21

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dialog@1.1.21, @radix-ui/react-primitive@2.1.8

v1.1.20

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-dialog@1.1.20, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7

radix-ui/primitives (@​radix-ui/react-aspect-ratio)

v1.1.15

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-primitive@2.1.10

v1.1.14

• Updated dependencies: @radix-ui/react-primitive@2.1.9

v1.1.13

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/react-primitive@2.1.8

v1.1.12

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-primitive@2.1.7

radix-ui/primitives (@​radix-ui/react-avatar)

v1.2.6

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-context@1.2.2, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-callback-ref@1.1.4, @radix-ui/react-use-is-hydrated@0.1.3, @radix-ui/react-use-layout-effect@1.1.4

v1.2.5

• Updated dependencies: @radix-ui/react-primitive@2.1.9

v1.2.4

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-context@1.2.1, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-callback-ref@1.1.3, @radix-ui/react-use-is-hydrated@0.1.2, @radix-ui/react-use-layout-effect@1.1.3

v1.2.3

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Fix dev-only checks with conditional exports to drop dev-warnings from production builds.
• Updated dependencies: @radix-ui/primitive@1.1.6, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2

radix-ui/primitives (@​radix-ui/react-checkbox)

v1.3.11

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-size@1.1.4

v1.3.10

• Updated dependencies: @radix-ui/react-primitive@2.1.9

v1.3.9

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-size@1.1.3

v1.3.8

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Fixed a bug where updating a Checkbox, Switch, or RadioGroup value programmatically (eg. a "select all" control) while inside a <form> would dispatch a click event from the hidden bubble input that propagated to ancestor onClick handlers.
• Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-size@1.1.2

radix-ui/primitives (@​radix-ui/react-collapsible)

v1.1.20

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-id@1.1.4, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4

v1.1.19

• Updated dependencies: @radix-ui/react-primitive@2.1.9

v1.1.18

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-id@1.1.3, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

v1.1.17

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-layout-effect@1.1.2

radix-ui/primitives (@​radix-ui/react-context-menu)

v2.3.7

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-context@1.2.2, @radix-ui/react-menu@2.1.24, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6

v2.3.6

• Updated dependencies: @radix-ui/react-menu@2.1.23, @radix-ui/react-primitive@2.1.9

v2.3.5

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-context@1.2.1, @radix-ui/react-menu@2.1.22, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5

v2.3.4

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Fix dev-only checks with conditional exports to drop dev-warnings from production builds.
• Updated dependencies: @radix-ui/react-menu@2.1.21, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7

radix-ui/primitives (@​radix-ui/react-dialog)

v1.1.23

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-focus-guards@1.1.6, @radix-ui/react-focus-scope@1.1.16, @radix-ui/react-id@1.1.4, @radix-ui/react-portal@1.1.17, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-slot@1.3.3, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4

v1.1.22

• Updated dependencies: @radix-ui/react-slot@1.3.2, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-focus-scope@1.1.15, @radix-ui/react-portal@1.1.16

v1.1.21

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-focus-guards@1.1.5, @radix-ui/react-focus-scope@1.1.14, @radix-ui/react-id@1.1.3, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

v1.1.20

• Fixed broken ARIA references in Dialogs where a title or description elements are not rendered.
• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

radix-ui/primitives (@​radix-ui/react-dropdown-menu)

v2.1.24

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-id@1.1.4, @radix-ui/react-menu@2.1.24, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6

v2.1.23

• Updated dependencies: @radix-ui/react-menu@2.1.23, @radix-ui/react-primitive@2.1.9

v2.1.22

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-id@1.1.3, @radix-ui/react-menu@2.1.22, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5

v2.1.21

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-menu@2.1.21, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7

radix-ui/primitives (@​radix-ui/react-hover-card)

v1.1.23

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-popper@1.3.7, @radix-ui/react-portal@1.1.17, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6

v1.1.22

• Updated dependencies: @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-focus-scope@1.1.15, @radix-ui/react-popper@1.3.6, @radix-ui/react-portal@1.1.16

v1.1.21

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-popper@1.3.5, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5

v1.1.20

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-popper@1.3.4, @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7

radix-ui/primitives (@​radix-ui/react-label)

v2.1.15

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-primitive@2.1.10

v2.1.14

• Updated dependencies: @radix-ui/react-primitive@2.1.9

v2.1.13

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/react-primitive@2.1.8

v2.1.12

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-primitive@2.1.7

radix-ui/primitives (@​radix-ui/react-menubar)

v1.1.24

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-id@1.1.4, @radix-ui/react-menu@2.1.24, @radix-ui/react-primitive@2.1.10, @radix-ui/react-roving-focus@1.1.19, @radix-ui/react-use-controllable-state@1.2.6

v1.1.23

• Updated dependencies: @radix-ui/react-collection@1.1.14, @radix-ui/react-menu@2.1.23, @radix-ui/react-primitive@2.1.9, @radix-ui/react-roving-focus@1.1.18

v1.1.22

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-id@1.1.3, @radix-ui/react-menu@2.1.22, @radix-ui/react-primitive@2.1.8, @radix-ui/react-roving-focus@1.1.17, @radix-ui/react-use-controllable-state@1.2.5

v1.1.21

• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Updated dependencies: @radix-ui/react-menu@2.1.21, @radix-ui/react-roving-focus@1.1.16, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7

radix-ui/primitives (@​radix-ui/react-navigation-menu)

v1.2.22

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-id@1.1.4, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-callback-ref@1.1.4, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4, @radix-ui/react-use-previous@1.1.4, @radix-ui/react-visually-hidden@1.2.11

v1.2.21

• Updated dependencies: @radix-ui/react-collection@1.1.14, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-visually-hidden@1.2.10

v1.2.20

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-id@1.1.3, @radix-ui/react-presence@1.1.9, `@ra

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "before 10am on friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Caution

[High Risk] Singleton instance replacements will cause endpoint interruption and backend downtime

This change replaces several standalone compute instances by changing their AMIs or boot images, including the AWS core-api and api_server hosts and the GCP inventory-api and payments-api VMs. These are not in rolling groups or multi-instance pools in the plan; they are single instances with auto-delete root disks, so Terraform will terminate the current VM and bring up a new one from a fresh image before the workload can start and pass health checks.

For 540044833068.eu-west-2.ec2-instance.i-0bf4039822e01f430, the blast radius shows it is currently the only healthy target in ALB target group api-207c90ee-tg. Replacing it will temporarily leave that target group with no healthy backend, causing core-api downtime. 540044833068.eu-west-2.ec2-instance.i-0cff13d553da3fe3a also currently owns Elastic IP 13.134.236.98, so clients using that endpoint will see a cutover interruption while the EIP is detached from the old instance and attached to the new one. The GCP inventory-api and payments-api instances will likewise go down during replacement and come back only after the new Debian-based instances finish booting and rerun their startup scripts.
_{View reasoning tree here.}

Caution

[High Risk] Single-backend target group replacement will create a traffic outage window

Both load-balanced services are replacing their only registered backend at the same time the corresponding aws_lb_target_group_attachment resources are being replaced. The ALB listener for api-207c90ee-alb forwards only to target group api-207c90ee-tg, which currently has a single healthy instance target i-0bf4039822e01f430 on port 80. The NLB listener for fraud-ingest-terraform-example forwards only to target group txn-feed-terraform-example, which currently has a single healthy IP target 10.0.101.34 on port 9090.

When Terraform replaces those instances and attachments, the old targets will be deregistered and the replacements must boot, reattach, and pass load balancer health checks before traffic is served normally again. Because there is no second healthy target in either group, clients using the ALB DNS name, the NLB path to port 9090, or the EIP 13.134.236.98 will see an outage window during replacement if registration or readiness takes even briefly longer than the detach/register sequence.
_{View reasoning tree here.}

Warning

[Medium Risk] Instance-scoped alert rewrites during server replacement will create rollout monitoring blind spots

The payments-api, inventory-api, and AWS api_server instances are all being replaced while their health alarms are tied to per-instance identifiers rather than stable service labels. The two GCP uptime policies currently filter on fixed resource.labels.instance_id values, and the AWS CloudWatch CPU alarm currently filters on InstanceId = i-0bf4039822e01f430; all three alert resources are being updated in the same apply to values that are only known after the replacement instances exist.

That means the primary monitoring for these services is being retargeted during the exact rollout window when failures are most likely. If the replacement instances fail to start cleanly or flap during registration, the old instance-scoped alerts stop describing the live service before the new instance-scoped alerts have stable data, creating blind spots or alert churn. At the same time, the new production-api-alerts email subscription is not auto-confirming, so it will not deliver notifications until someone confirms the SNS email subscription manually.
_{View reasoning tree here.}

Signals

Routine → Multiple compute and infrastructure resources showing unusual and infrequent routine changes at 1 event/week for the last 2-5 months, with other API-related resources changing only 2-3 events/week for the last 5 months.

_{Additional Change Details:} Items 66 Edges 153 model|risks_v6 ✨Encryption Key State Risk ✨KMS Key Creation