Skip to content

Javascript dependency: bump the web-javascript-minor-and-patch group across 1 directory with 5 updates - #10380

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web/web-javascript-minor-and-patch-652af0a8f0
Open

Javascript dependency: bump the web-javascript-minor-and-patch group across 1 directory with 5 updates#10380
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web/web-javascript-minor-and-patch-652af0a8f0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the web-javascript-minor-and-patch group with 5 updates in the /web directory:

Package From To
@fortawesome/fontawesome-free 7.2.0 7.3.1
ip-address 10.5.0 10.7.0
react-frame-component 5.2.7 5.3.2
@testing-library/user-event 14.6.3 14.6.6
webpack 5.108.4 5.110.2

Updates @fortawesome/fontawesome-free from 7.2.0 to 7.3.1

Release notes

Sourced from @​fortawesome/fontawesome-free's releases.

Release 7.3.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits
Maintainer changes

This version was pushed to npm by fortawesome-admin, a new releaser for @​fortawesome/fontawesome-free since your current version.


Updates ip-address from 10.5.0 to 10.7.0

Release notes

Sourced from ip-address's releases.

v10.7.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.6.0...v10.7.0

v10.6.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.5.1...v10.6.0

v10.5.1

Full Changelog: beaugunderson/ip-address@v10.5.0...v10.5.1

Commits
  • 2b7cab5 10.7.0
  • 87fae23 Add offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct ...
  • 42c1f8b 10.6.0
  • fb12583 Add isGlobal() and pin the classifiers to the IANA special-purpose registries...
  • 38b02d7 10.5.1
  • d03e960 Merge commit from fork
  • ab3dc88 Merge commit from fork
  • See full diff in compare view

Updates react-frame-component from 5.2.7 to 5.3.2

Release notes

Sourced from react-frame-component's releases.

v5.3.2

Patch Changes

  • f191d58: Add types condition to package.json exports to fix TypeScript resolution with TSGo and modern ESM tools

  • 1820bc3: ## Fix race condition in getMountTarget() (issue #250)

    Fixed "Cannot read properties of null" errors when initialContent changes rapidly by adding null checks for doc and doc.body in getMountTarget().

    Changes

    • src/Frame.jsx: Added null check in getMountTarget() to handle cases when iframe document is temporarily unavailable during rapid rerenders

v5.3.0

What's Changed

Add fallback to document.write() for initial frame rendering via dangerouslyUseDocWrite prop to support libraries like Repcaptcha and Google Maps that depend on the frame's location/origin.

PR #248: Add document.write() fallback (@​andrewpye)

Previous releases: https://github.com/ryanseddon/react-frame-component/releases

Changelog

Sourced from react-frame-component's changelog.

5.3.2

Patch Changes

  • f191d58: Add types condition to package.json exports to fix TypeScript resolution with TSGo and modern ESM tools

  • 1820bc3: ## Fix race condition in getMountTarget() (issue #250)

    Fixed "Cannot read properties of null" errors when initialContent changes rapidly by adding null checks for doc and doc.body in getMountTarget().

    Changes

    • src/Frame.jsx: Added null check in getMountTarget() to handle cases when iframe document is temporarily unavailable during rapid rerenders

5.3.1

Patch Changes

  • 14c215c: Fix React 19 and Vite compatibility by externalizing react/jsx-runtime

    The ESM and UMD builds were incorrectly bundling react/jsx-runtime inline from CommonJS source, which caused two issues:

    1. ESM builds contained __require("react") calls - This failed in browser ESM environments with "Could not dynamically require react" errors when using Vite.
    2. UMD builds referenced __SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED.ReactCurrentOwner - This internal API was removed in React 19, causing "Cannot read properties of undefined" errors.

    The fix adds react/jsx-runtime and react/jsx-dev-runtime to the external dependencies list in the Vite configuration. This ensures the JSX transform is loaded from the proper module format rather than being bundled inline from CJS source.

    Bundle size improvements:

    • ESM: 35.7 KB → 4.6 KB (-87%)
    • UMD: 37.9 KB → 6.8 KB (-82%)

    Fixes #280

5.3.0

Minor Changes

  • 8d922c3: Add fallback to document.write() for initial frame rendering via dangerouslyUseDocWrite prop to support libraries like Repcaptcha and Google Maps that depend on the frame's location/origin.
Commits
  • 3f4cb97 Update npm to latest for OIDC trusted publishing (#290)
  • eddb677 Revert "Update npm to latest for OIDC trusted publishing"
  • 194d769 Update npm to latest for OIDC trusted publishing
  • ed62652 Version Packages (#289)
  • fb302a0 Bump follow-redirects from 1.15.0 to 1.15.11
  • c44e385 Merge pull request #285 from ryanseddon/dependabot/npm_and_yarn/picomatch-2.3.2
  • 722560a Bump picomatch from 2.3.1 to 2.3.2
  • d6b8e30 Merge pull request #288 from ryanseddon/fix/issue-287-types-exports
  • f191d58 Add changeset
  • 1820bc3 fix: add null check in getMountTarget to prevent race condition (#286)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-frame-component since your current version.


Updates @testing-library/user-event from 14.6.3 to 14.6.6

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

  • default pointer event pointerType to empty string instead of the string "undefined" (#1325) (71a5475)

v14.6.5

14.6.5 (2026-08-18)

Bug Fixes

  • tab retargeting if focus moved during keydown (#1296) (43efda7)

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

Commits
  • 71a5475 fix: default pointer event pointerType to empty string instead of the string ...
  • 43efda7 fix: tab retargeting if focus moved during keydown (#1296)
  • d7e80e3 fix: keyboard event repeat property (#1312)
  • 43d8e6c ci: remove broken npm backfill step (#1322)
  • See full diff in compare view

Updates webpack from 5.108.4 to 5.110.2

Release notes

Sourced from webpack's releases.

v5.110.2

Patch Changes

v5.110.1

Patch Changes

v5.110.0

Minor Changes

  • Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @​hai-x in #21519)

  • Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @​alexander-akait in #21841)

  • Add the descriptionRelativePath module rule condition. (by @​alexander-akait in #21705)

  • Add OS-independent glob matching to module rules. (by @​alexander-akait in #21771)

  • Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @​alexander-akait in #21740)

  • Allow marking externals as side-effect-free with a sideEffects flag. (by @​alexander-akait in #21712)

  • Give externals the original request of a context module element. (by @​alexander-akait in #21780)

  • Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @​alexander-akait in #21569)

  • Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @​hai-x in #21770)

  • Resolve @custom-media values that are true / false or name another custom media. (by @​alexander-akait in #21624)

  • Add the __webpack_css_server_styles__ module variable to read the CSS collected while rendering without a DOM, and keep that CSS in the order the styles were applied. (by @​alexander-akait in #21576)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.110.2

Patch Changes

5.110.1

Patch Changes

5.110.0

Minor Changes

  • Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @​hai-x in #21519)

  • Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @​alexander-akait in #21841)

  • Add the descriptionRelativePath module rule condition. (by @​alexander-akait in #21705)

  • Add OS-independent glob matching to module rules. (by @​alexander-akait in #21771)

  • Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @​alexander-akait in #21740)

  • Allow marking externals as side-effect-free with a sideEffects flag. (by @​alexander-akait in #21712)

  • Give externals the original request of a context module element. (by @​alexander-akait in #21780)

  • Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @​alexander-akait in #21569)

  • Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @​hai-x in #21770)

... (truncated)

Commits
  • 75eec50 chore(release): new release (#21850)
  • 0b28311 fix: move the source map with a removed BOM (#21861)
  • c5fb111 fix(css): skip the loading runtime when every css chunk is initial (#21862)
  • 17fa705 docs: update examples (#21860)
  • e7ad244 fix: do not emit a JS chunk for an output.html generated page (#21859)
  • b74192f fix(loaders): strip a BOM from a string result in the loader chain (#21857)
  • 852e759 fix: report an unused named import that names a missing export (#21856)
  • 2a6a4fa docs: drop the built-in-superseded loaders and plugins from the README (#21855)
  • 1f3264e fix: ESM correctness in circular re-exports, imported bindings and defer orde...
  • e9a34ae fix(analyzable): bake urls past cycles, mixed-served wasm and partial style m...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Javascript dependency: bump the web-javascript-minor-and-patch group …
c90807e 
…across 1 directory with 5 updates

Bumps the web-javascript-minor-and-patch group with 5 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) | `7.2.0` | `7.3.1` |
| [ip-address](https://github.com/beaugunderson/ip-address) | `10.5.0` | `10.7.0` |
| [react-frame-component](https://github.com/ryanseddon/react-frame-component) | `5.2.7` | `5.3.2` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.3` | `14.6.6` |
| [webpack](https://github.com/webpack/webpack) | `5.108.4` | `5.110.2` |



Updates `@fortawesome/fontawesome-free` from 7.2.0 to 7.3.1
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md)
- [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.1)

Updates `ip-address` from 10.5.0 to 10.7.0
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](beaugunderson/ip-address@v10.5.0...v10.7.0)

Updates `react-frame-component` from 5.2.7 to 5.3.2
- [Release notes](https://github.com/ryanseddon/react-frame-component/releases)
- [Changelog](https://github.com/ryanseddon/react-frame-component/blob/master/CHANGELOG.md)
- [Commits](ryanseddon/react-frame-component@v5.2.7...v5.3.2)

Updates `@testing-library/user-event` from 14.6.3 to 14.6.6
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.3...v14.6.6)

Updates `webpack` from 5.108.4 to 5.110.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.108.4...v5.110.2)

---
updated-dependencies:
- dependency-name: "@fortawesome/fontawesome-free"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: ip-address
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: react-frame-component
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-javascript-minor-and-patch
- dependency-name: webpack
  dependency-version: 5.110.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-javascript-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Sep 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants