Skip to content

deps: bump the dependency-updates group across 1 directory with 10 updates#2003

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/main/dependency-updates-64bd01a107
Open

deps: bump the dependency-updates group across 1 directory with 10 updates#2003
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/main/dependency-updates-64bd01a107

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependency-updates group with 10 updates in the / directory:

Package From To
@primer/octicons-react 19.28.1 19.29.2
@primer/react 38.27.0 38.31.0
downshift 9.3.6 9.4.0
framer-motion 12.40.0 12.42.2
postcss 8.5.15 8.5.18
@npmcli/template-oss 5.1.0 5.1.1
eslint-plugin-github 6.0.0 6.1.1
prettier 3.8.3 3.9.5
semver 7.8.2 7.8.5
tar 7.5.16 7.5.20

Updates @primer/octicons-react from 19.28.1 to 19.29.2

Release notes

Sourced from @​primer/octicons-react's releases.

v19.29.2

Patch Changes

v19.29.1

Patch Changes

v19.29.0

Minor Changes

Changelog

Sourced from @​primer/octicons-react's changelog.

19.29.2

Patch Changes

19.29.1

Patch Changes

19.29.0

Minor Changes

Commits

Updates @primer/react from 38.27.0 to 38.31.0

Release notes

Sourced from @​primer/react's releases.

@​primer/react@​38.31.0

Minor Changes

  • #8057 0b9c81e Thanks @​francinelucca! - ThemeProvider: Remove primer_react_theme_provider_remove_ssr_handoff feature flag.

  • #8105 be2950f Thanks @​joshblack! - React Compiler: Enable compiler output for Banner, ConfirmationDialog, PageLayout, Pagination, UnderlineNav, useMergedRefs, and useScrollFlash

Patch Changes

  • #8066 dd66aa2 Thanks @​janmaarten-a11y! - Fix invalid HTML nesting in ActionList.Heading by applying the visually-hidden styles directly to the heading element instead of wrapping it in a span.

  • #8054 1775f2e Thanks @​joshblack! - AvatarStack: Improve rendering performance with React Compiler support

  • #8053 b2151ae Thanks @​joshblack! - Checkbox, CheckboxGroup, and RadioGroup: Improve rendering performance with React Compiler support

  • #8052 a1b24cf Thanks @​joshblack! - Heading, Link, Pagehead, Portal, and SideNav: Improve rendering performance with React Compiler support

@​primer/react@​38.30.0

Minor Changes

  • #8048 0add561 Thanks @​copilot-swe-agent! - ActionBar: Add ActionBar.Button for rendering text buttons that overflow into the menu, alongside the existing ActionBar.IconButton

  • #8031 cb79351 Thanks @​janmaarten-a11y! - Add a NavList.Heading slot that names the navigation region. It renders an h2 by default (configurable to h3 via as), supports a visuallyHidden variant, labels the nav landmark via aria-labelledby, and makes NavList.Group headings default to one level deeper (h3, or h4 under an h3 heading) for a correct heading hierarchy.

  • #7991 b906268 Thanks @​llastflowers! - Add data-component attributes and associated tests for:

    Radio RadioGroup RelativeTime ScrollableRegion SegmentedControl Select SideNav SkeletonBox SkeletonAvatar SkeletonText Spinner

  • #8026 73a45df Thanks @​TylerJDev! - SelectPanel: Add cssAnchorPositioningSettings prop to customize CSS anchor positioning behavior

  • #7506 e58907c Thanks @​iansan5653! - Refactors UnderlineNav overflow handling to use CSS-based overflow detection instead of JavaScript width measurements, eliminating layout shift (CLS) issues and improving performance. The overflow menu is now implemented with ActionMenu, and item registration uses a descendant registry instead of the React.Children API. Consumer-facing changes: items can now be wrapped in fragments or wrapper components; the current item may appear in the overflow menu when the viewport is narrow; and the overflow menu button is right-aligned.

Patch Changes

  • #8021 6131a94 Thanks @​mattcosta7! - Announce, AriaStatus, AriaAlert: Avoid an extra React render on every content change (e.g. per keystroke when tied to an input)

... (truncated)

Commits
  • a360e09 Release tracking (#8085)
  • 7453077 ci: update check for changeset workflow with local bash script (#8084)
  • be2950f feat: enable React Compiler for no-error files (#8105)
  • dd66aa2 Fix invalid HTML nesting in ActionList.Heading (#8066)
  • 1cb6c2e chore(deps-dev): bump the eslint group across 1 directory with 11 updates (#8...
  • 7bcfd69 chore(deps): bump @​primer/octicons-react from 19.24.1 to 19.28.1 (#8104)
  • b272f55 ci: remove disabled workflows (#8103)
  • bd21da3 Forbid use no memo directive (#8079)
  • 8a4b81d chore(deps-dev): bump the storybook group across 1 directory with 5 updates (...
  • 7f13d30 chore(deps): bump actions/cache from 6 to 6.1.0 (#8099)
  • Additional commits viewable in compare view

Updates downshift from 9.3.6 to 9.4.0

Release notes

Sourced from downshift's releases.

v9.4.0

9.4.0 (2026-06-30)

Features

Commits

Updates framer-motion from 12.40.0 to 12.42.2

Changelog

Sourced from framer-motion's changelog.

[12.42.2] 2026-07-01

Fixed

  • animateView: Cropped group layers now animate border-radius from the old to new radius.

[12.42.1] 2026-06-30

Fixed

  • animateView: Old layer fade out now cancelled when defining .new().

[12.42.0] 2026-06-24

Changed

  • animateView: Layers are automatically grouped to match their DOM-hierarchy. New .group(false) method opts-out.

Fixed

  • animateView: Auto-crop is now aspect-ratio aware, disabling crops for matching aspect-ratios.
  • animateView: Disabled automatic border-radius animation.

[12.41.0] 2026-06-23

Added

  • animateView: Moves from Motion+ Early Access and alpha to main library.
  • animateView: .add() resolves a CSS selector or Element to automatically generate, apply and remove view-transition-name.
  • animateView: .new() and .old() configures values to animate on new and old layers.
  • animateView: .layout() can set a custom transition on the size/position animation of the currently selected elements.
  • animateView: Group layers now automatically crop with children set to cover, with border-radius animating from old radius to new. .crop(false) disables this behaviour.
  • animateView: .class(name) tags currently selected elements with a view-transition-class as a custom CSS hook.

Fixed

  • AnimatePresence: Prevent stuck exit animations when children interrupt.
  • drag: Child e.stopPropagation() no longer break drag end.
  • Fixing Next.js OOM on Windows when importing via motion package.
  • animateLayout: Improve handling of parallel/interleaved calls.

Changed

  • animateView: .enter() and .exit() now refer specifically to new and old layers where there are no matching old or new layers.
  • animateView: Interrupted transition setups now return resolved animation rather than throwing.
Commits
  • 40e8756 v12.42.2
  • 718ccc7 Merge pull request #3768 from motiondivision/view-cropped-corner-radius
  • 19195a4 Dedupe corner-radius longhands; merge crop box/radii measurements
  • 5299aa6 Resolve cropped-clip radius timing once; fix transition-option leak
  • 937cdf3 Animate cropped view-transition group corner radius
  • fd2d6f6 v12.42.1
  • 2223d87 Hold the old layer when only a non-opacity .new() is set
  • 9c84145 v12.42.0
  • 60d7c72 Add view-transition group nesting and aspect-aware cropping
  • 6437276 Updating
  • Additional commits viewable in compare view

Updates postcss from 8.5.15 to 8.5.18

Release notes

Sourced from postcss's releases.

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

Changelog

Sourced from postcss's changelog.

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates @npmcli/template-oss from 5.1.0 to 5.1.1

Release notes

Sourced from @​npmcli/template-oss's releases.

v5.1.1

5.1.1 (2026-06-16)

Dependencies

Changelog

Sourced from @​npmcli/template-oss's changelog.

5.1.1 (2026-06-16)

Dependencies

Commits

Updates eslint-plugin-github from 6.0.0 to 6.1.1

Release notes

Sourced from eslint-plugin-github's releases.

v6.1.1

Fixed

  • jsx-a11y recommended rules are now correctly applied in the flat React config. Previously, lib/configs/flat/react.js spread jsx-a11y's recommended config but then redefined its own rules object, which shallow-overwrote and silently dropped most of the recommended rule set — leaving only a handful of rules active. The recommended rules are now explicitly merged, so the full jsx-a11y/recommended baseline is enforced while GitHub-specific overrides are preserved.

v6.1.0

  • Expanded supported ESLint peer range Changed peerDependencies from ^8 || ^9 to ^8 || ^9 || ^10
  • Fixed flat recommended plugin wiring for compatibility Wrapped eslint-plugin-eslint-comments with @​eslint/compat

v6.1.0-alpha

  • Expanded supported ESLint peer range Changed peerDependencies from ^8 || ^9 to ^8 || ^9 || ^10
  • Fixed flat recommended plugin wiring for compatibility Wrapped eslint-plugin-eslint-comments with @​eslint/compat
Commits
  • 7a5567b Merge pull request #715 from github/alaingoga/714-adding-jsxA11y-plugin-suppo...
  • fa8eeb1 714 - Adding jsxA11y plugin support back
  • 3611a16 Merge pull request #713 from github/alaingoga/eslint10-compact
  • fe11575 Support ESLint 10: widen peer range and fix eslint-comments in flat recommend...
  • 2dcfb60 Merge pull request #706 from github/dependabot/npm_and_yarn/all-dependencies-...
  • e0b18e1 docs: regenerate rule docs for eslint-doc-generator v3
  • 2e8b012 chore(deps): bump the all-dependencies group across 1 directory with 14 updates
  • 2ebd311 Merge pull request #710 from github/dependabot/npm_and_yarn/test-examples/fla...
  • b5ef200 Merge pull request #709 from github/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 9a76848 Merge pull request #711 from github/dependabot/github_actions/actions/checkou...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-github since your current version.


Updates prettier from 3.8.3 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text
<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text
<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](https://github.com/prettier/prettier/blob/main/<> "title")
<!-- Prettier 3.9.4 -->
[link](https://github.com/prettier/prettier/blob/main/ "title")
<!-- Prettier 3.9.5 -->
</tr></table>

... (truncated)

Commits

Updates semver from 7.8.2 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

Chores

Changelog

Sourced from semver's changelog.

7.8.5 (2026-06-19)

Bug Fixes

7.8.4 (2026-06-09)

Bug Fixes

7.8.3 (2026-06-08)

Bug Fixes

Chores

Commits
  • 6e05b76 chore: release 7.8.5 (#879)
  • 9c8692a fix: include prereleases in tilde range lower bound with includePrerelease (#...
  • 8640bd6 chore: release 7.8.4 (#875)
  • e583226 fix: reject numeric segments after x-ranges
  • 6b77aa8 chore: release 7.8.3 (#873)
  • 3485dda chore: bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866)
  • 046da7f fix: align caret includePrerelease lower bounds (#872)
  • See full diff in compare view

Updates tar from 7.5.16 to 7.5.20

Commits
  • ebbb720 7.5.20
  • 2f27196 fix: fully disable and dispose of unzip when aborting parser
  • be440da 7.5.19
  • 2812e93 add maxDecompressionRatio guard against explosive decompression
  • 9ecd4d2 7.5.18
  • 9e78bf0 refuse to let header size be less than 0
  • e02a4e9 pax: parse values according to known types
  • 9cbdb31 7.5.17
  • 7a635c2 terminate pax strings on nul bytes
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the dependency-updates group across 1 directory with 10 up…
560888e 
…dates

Bumps the dependency-updates group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@primer/octicons-react](https://github.com/primer/octicons) | `19.28.1` | `19.29.2` |
| [@primer/react](https://github.com/primer/react) | `38.27.0` | `38.31.0` |
| [downshift](https://github.com/downshift-js/downshift) | `9.3.6` | `9.4.0` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.40.0` | `12.42.2` |
| [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.18` |
| [@npmcli/template-oss](https://github.com/npm/template-oss) | `5.1.0` | `5.1.1` |
| [eslint-plugin-github](https://github.com/github/eslint-plugin-github) | `6.0.0` | `6.1.1` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.5` |
| [semver](https://github.com/npm/node-semver) | `7.8.2` | `7.8.5` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.16` | `7.5.20` |



Updates `@primer/octicons-react` from 19.28.1 to 19.29.2
- [Release notes](https://github.com/primer/octicons/releases)
- [Changelog](https://github.com/primer/octicons/blob/main/CHANGELOG.md)
- [Commits](primer/octicons@v19.28.1...v19.29.2)

Updates `@primer/react` from 38.27.0 to 38.31.0
- [Release notes](https://github.com/primer/react/releases)
- [Commits](https://github.com/primer/react/compare/@primer/react@38.27.0...@primer/react@38.31.0)

Updates `downshift` from 9.3.6 to 9.4.0
- [Release notes](https://github.com/downshift-js/downshift/releases)
- [Changelog](https://github.com/downshift-js/downshift/blob/master/CHANGELOG.md)
- [Commits](downshift-js/downshift@v9.3.6...v9.4.0)

Updates `framer-motion` from 12.40.0 to 12.42.2
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.40.0...v12.42.2)

Updates `postcss` from 8.5.15 to 8.5.18
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.15...8.5.18)

Updates `@npmcli/template-oss` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/npm/template-oss/releases)
- [Changelog](https://github.com/npm/template-oss/blob/main/CHANGELOG.md)
- [Commits](npm/template-oss@v5.1.0...v5.1.1)

Updates `eslint-plugin-github` from 6.0.0 to 6.1.1
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](github/eslint-plugin-github@v6.0.0...v6.1.1)

Updates `prettier` from 3.8.3 to 3.9.5
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.5)

Updates `semver` from 7.8.2 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.2...v7.8.5)

Updates `tar` from 7.5.16 to 7.5.20
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.16...v7.5.20)

---
updated-dependencies:
- dependency-name: "@primer/octicons-react"
  dependency-version: 19.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: "@primer/react"
  dependency-version: 38.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: downshift
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: framer-motion
  dependency-version: 12.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: postcss
  dependency-version: 8.5.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: "@npmcli/template-oss"
  dependency-version: 5.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: eslint-plugin-github
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: prettier
  dependency-version: 3.9.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: tar
  dependency-version: 7.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Jul 13, 2026
@dependabot dependabot Bot requested a review from a team as a code owner July 13, 2026 05:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@npm-cli-bot