Bump the website-all group in /website with 10 updates #327

dependabot · 2026-02-01T17:11:09Z

Bumps the website-all group in /website with 10 updates:

Package	From	To
react	`19.2.3`	`19.2.4`
@types/react	`19.2.8`	`19.2.10`
react-dom	`19.2.3`	`19.2.4`
react-resizable-panels	`4.4.1`	`4.5.7`
react-window	`2.2.5`	`2.2.6`
@types/node	`25.0.9`	`25.2.0`
autoprefixer	`10.4.23`	`10.4.24`
eslint-plugin-react-refresh	`0.4.26`	`0.5.0`
globals	`17.0.0`	`17.3.0`
typescript-eslint	`8.53.0`	`8.54.0`

Updates react from 19.2.3 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

Commits

90ab3f8 Version 19.2.4
See full diff in compare view

Updates @types/react from 19.2.8 to 19.2.10

Commits

See full diff in compare view

Updates react-dom from 19.2.3 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

Commits

90ab3f8 Version 19.2.4
See full diff in compare view

Updates react-resizable-panels from 4.4.1 to 4.5.7

Release notes

Sourced from react-resizable-panels's releases.

4.5.6

644: Disabled the change to collapsible panel behavior that was originally made in 635.

4.5.5

641: Removed aria-orientation role from root Group element as this was invalid according to the ARIA spec; (for more information see the discussion on issue #640)

642: Bugfix: Fix collapsible Panel regression introduced in 4.5.3

4.5.4

638: Panel avoids unnecessary re-renders in response to mouse-hover state.

4.5.3

635: Expand pre-collapsed panels if drug past the halfway point for more consistent collapse/expand behavior.

631: Bugfix: Panels set max-width and max-height to 100% to fix potential CSS overflow bug.

4.5.2

626: Decrease default hit target size for Separator and Panel edges; make configurable via a new Group prop.

4.5.1

624: Bugfix: Fallback to alternate CSS cursor styles for Safari

Safari Chrome, Firefox

grab move

col-resize ew-resize

row-resize ns-resize

4.5.0

616: Replace Separator and Panel edge hit-area padding with a minimum size threshold based on Apple's user interface guidelines. Separators that are large enough will no longer be padded; separators that are too small (or panels without separators) will more or less function like before. This should not have much of a user-facing impact other than an increase in the click target area. (Previously I was not padding enough, as per Apple's guidelines.)

615, 620: Double-clicking on a Separator resets its associated Panel to its default-size (see video below); double-click will have no impact on panels without default sizes

622: Bugfix: Panels within vertical groups are now properly sized in Safari

618: Bugfix: Don't override adoptedStyleSheets

Demo of double-clicking on a separator:

dbl-click.mov

4.4.2

610: Fix calculated cursor style when "pointermove" event is has low-precision/rounded clientX and clientY values

Changelog

Sourced from react-resizable-panels's changelog.

4.5.7

646: Re-enable the collapsible Panel from 4.5.3 that was disabled in 4.5.6

648: Bugfix: Reset Separator hover-state on Document "pointerout"

4.5.6

644: Disabled the change to collapsible panel behavior that was originally made in 635.

4.5.5

641: Removed aria-orientation role from root Group element as this was invalid according to the ARIA spec; (for more information see the discussion on issue #640)

642: Bugfix: Fix collapsible Panel regression introduced in 4.5.3

4.5.4

638: Panel avoids unnecessary re-renders in response to mouse-hover state.

4.5.3

635: Expand pre-collapsed panels if drug past the halfway point for more consistent collapse/expand behavior.

631: Bugfix: Panels set max-width and max-height to 100% to fix potential CSS overflow bug.

4.5.2

626: Decrease default hit target size for Separator and Panel edges; make configurable via a new Group prop.

4.5.1

624: Bugfix: Fallback to alternate CSS cursor styles for Safari

Safari Chrome, Firefox

grab move

col-resize ew-resize

row-resize ns-resize

4.5.0

616: Replace Separator and Panel edge hit-area padding with a minimum size threshold based on Apple's user interface guidelines. Separators that are large enough will no longer be padded; separators that are too small (or panels without separators) will more or less function like before. This should not have much of a user-facing impact other than an increase in the click target area. (Previously I was not padding enough, as per Apple's guidelines.)

615, 620: Double-clicking on a Separator resets its associated Panel to its default-size (see video below); double-click will have no impact on panels without default sizes

622: Bugfix: Panels within vertical groups are now properly sized in Safari

618: Bugfix: Don't override adoptedStyleSheets

Demo of double-clicking on a separator:

dbl-click.mov

4.4.2

... (truncated)

Commits

db20c9b 4.5.6 -> 4.5.7
5948c2b Update CHANGELOG with pending release changes
7f58523 Reset seperator hover-state on Document "pointerout" (#648)
21f3e9d Update CHANGELOG with pending release notes
7382e94 Re-enable the collapsible Panel from 4.5.3 that was disabled in 4.5.6 (#646)
1cb436e Unwind some of the test abstraction
46889ae 4.5.5 -> 4.5.6
d248dda Disable recent min-threshold change (#644)
fa50622 Add more unit tests
47b9fcc 4.5.4 -> 4.5.5
Additional commits viewable in compare view

Updates react-window from 2.2.5 to 2.2.6

Release notes

Sourced from react-window's releases.

2.2.6

useDynamicRowHeight should not instantiate ResizeObserver when server-rendering

Changelog

Sourced from react-window's changelog.

2.2.6

useDynamicRowHeight should not instantiate ResizeObserver when server-rendering

Commits

2b98251 2.2.5 -> 2.2.6
6222edc useDynamicRowHeight: Don't instantiate ResizeObserver when server-rendering (...
69330f4 Fix example
8433914 Update docs to clarify that Grid cells can't be auto-sized
7969e5a Fix docs typo
See full diff in compare view

Updates @types/node from 25.0.9 to 25.2.0

Commits

See full diff in compare view

Updates @types/react from 19.2.8 to 19.2.10

Commits

See full diff in compare view

Updates autoprefixer from 10.4.23 to 10.4.24

Release notes

Sourced from autoprefixer's releases.

10.4.24

Made Autoprefixer a little faster (by @Cherry).

Changelog

Sourced from autoprefixer's changelog.

10.4.24

Made Autoprefixer a little faster (by @Cherry).

Commits

36692c2 Release 10.4.24 version
67df014 Update dependencies
032440e perf: reduce array allocations (#1542)
See full diff in compare view

Updates eslint-plugin-react-refresh from 0.4.26 to 0.5.0

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.0

Breaking changes

The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config

A new reactRefresh export is available and prefered over the default export. It's an object with two properties:

plugin: The plugin object with the rules

configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.

customHOCs option was renamed to extraHOCs

Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:
import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);
Config example without config:
import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
// other rules
"react-refresh/only-export-components": [
"warn",
{ extraHOCs: ["someLibHOC"] },
],
},
});
Why

This version follows a revamp of the internal logic to better make the difference between random call expressions like export const Enum = Object.keys(Record) and actual React HOC calls like export const MemoComponent = memo(Component). (fixes #93)

The rule now handles ternaries and patterns like export default customHOC(props)(Component) which makes it able to correctly support files like this one given this config:

... (truncated)

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.0

Breaking changes

The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config

A new reactRefresh export is available and prefered over the default export. It's an object with two properties:

plugin: The plugin object with the rules

configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.

customHOCs option was renamed to extraHOCs

Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:
import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);
Config example without config:
import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
// other rules
"react-refresh/only-export-components": [
"warn",
{ extraHOCs: ["someLibHOC"] },
],
},
});
Why

This version follows a revamp of the internal logic to better make the difference between random call expressions like export const Enum = Object.keys(Record) and actual React HOC calls like export const MemoComponent = memo(Component). (fixes #93)

The rule now handles ternaries and patterns like export default customHOC(props)(Component) which makes it able to correctly support files like this one given this config:

... (truncated)

Commits

daa2efb Revamp logic to catch more cases [publish] (#97)
See full diff in compare view

Updates globals from 17.0.0 to 17.3.0

Release notes

Sourced from globals's releases.

v17.3.0

Update globals (2026-02-01) (#336) 295fba9

sindresorhus/globals@v17.2.0...v17.3.0

v17.2.0

jasmine: Add throwUnless and throwUnlessAsync globals (#335) 97f23a7

sindresorhus/globals@v17.1.0...v17.2.0

v17.1.0

Add webpack and rspack globals (#333) 65cae73

sindresorhus/globals@v17.0.0...v17.1.0

Commits

5edc602 17.3.0
295fba9 Update globals (2026-02-01) (#336)
8176ac7 17.2.0
97f23a7 jasmine: Add throwUnless and throwUnlessAsync globals (#335)
7a2f354 17.1.0
65cae73 Add webpack and rspack globals (#333)
3efe5aa Remove script transform (#332)
See full diff in compare view

Updates typescript-eslint from 8.53.0 to 8.54.0

Release notes

Sourced from typescript-eslint's releases.

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)

scope-manager: support ScopeManager#addGlobals (#11914)

typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)

eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)

scope-manager: fix catch clause scopes def.name (#11982)

scope-manager: prevent misidentification of "use strict" directives (#11995)

utils: handle missing FlatESLint and LegacyESLint (#11958)

❤️ Thank You

Brad Zacher @bradzacher

fnx @DMartens

Francesco Trotta

Josh Goldberg

MinJae @Ju-MINJAE

Minyeong Kim @minyeong981

overlookmotel

Yuya Yoshioka @YuyaYoshioka

김현수 @Kimsoo0119

You can read about our versioning strategy and releases on our website.

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)

utils: make RuleCreator root defaultOptions optional (#11956)

❤️ Thank You

Cameron

Yukihiro Hasegawa @y-hsgw

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.54.0 (2026-01-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.53.1 (2026-01-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

d423e57 chore(release): publish 8.54.0
9940e53 chore(release): publish 8.53.1
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the website-all group in /website with 10 updates: | Package | From | To | | --- | --- | --- | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.4` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.8` | `19.2.10` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.2.4` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.4.1` | `4.5.7` | | [react-window](https://github.com/bvaughn/react-window) | `2.2.5` | `2.2.6` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.9` | `25.2.0` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.23` | `10.4.24` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.26` | `0.5.0` | | [globals](https://github.com/sindresorhus/globals) | `17.0.0` | `17.3.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.53.0` | `8.54.0` | Updates `react` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react) Updates `@types/react` from 19.2.8 to 19.2.10 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom) Updates `react-resizable-panels` from 4.4.1 to 4.5.7 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.4.1...4.5.7) Updates `react-window` from 2.2.5 to 2.2.6 - [Release notes](https://github.com/bvaughn/react-window/releases) - [Changelog](https://github.com/bvaughn/react-window/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-window@2.2.5...2.2.6) Updates `@types/node` from 25.0.9 to 25.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.8 to 19.2.10 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `autoprefixer` from 10.4.23 to 10.4.24 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.23...10.4.24) Updates `eslint-plugin-react-refresh` from 0.4.26 to 0.5.0 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.26...v0.5.0) Updates `globals` from 17.0.0 to 17.3.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.0.0...v17.3.0) Updates `typescript-eslint` from 8.53.0 to 8.54.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website-all - dependency-name: "@types/react" dependency-version: 19.2.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: website-all - dependency-name: react-dom dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website-all - dependency-name: react-resizable-panels dependency-version: 4.5.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: website-all - dependency-name: react-window dependency-version: 2.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website-all - dependency-name: "@types/node" dependency-version: 25.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website-all - dependency-name: "@types/react" dependency-version: 19.2.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: website-all - dependency-name: autoprefixer dependency-version: 10.4.24 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: website-all - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website-all - dependency-name: globals dependency-version: 17.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website-all - dependency-name: typescript-eslint dependency-version: 8.54.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website-all ... Signed-off-by: dependabot[bot] <[email protected]>

meta-codesync · 2026-02-02T15:48:44Z

@FindHao has imported this pull request. If you are a Meta employee, you can view this in D92054230.

dependabot · 2026-02-02T21:01:01Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

meta-codesync · 2026-02-02T21:01:21Z

@FindHao merged this pull request in fa35a89.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 1, 2026

meta-cla bot added the CLA Signed This label is managed by the Meta Open Source bot. label Feb 1, 2026

meta-codesync bot closed this in fa35a89 Feb 2, 2026

facebook-github-bot added the Merged label Feb 2, 2026

dependabot bot deleted the dependabot/npm_and_yarn/website/website-all-fbb53c484e branch February 2, 2026 23:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the website-all group in /website with 10 updates #327

Bump the website-all group in /website with 10 updates #327

dependabot bot commented on behalf of github Feb 1, 2026

Uh oh!

meta-codesync bot commented Feb 2, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

meta-codesync bot commented Feb 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the website-all group in /website with 10 updates #327

Bump the website-all group in /website with 10 updates #327

Conversation

dependabot bot commented on behalf of github Feb 1, 2026

19.2.4 (January 26th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

4.5.6

4.5.5

4.5.4

4.5.3

4.5.2

4.5.1

4.5.0

4.4.2

4.5.7

4.5.6

4.5.5

4.5.4

4.5.3

4.5.2

4.5.1

4.5.0

4.4.2

2.2.6

2.2.6

10.4.24

10.4.24

v0.5.0

Breaking changes

Why

0.5.0

Breaking changes

Why

v17.3.0

v17.2.0

v17.1.0

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

❤️ Thank You

8.54.0 (2026-01-26)

8.53.1 (2026-01-19)

Uh oh!

meta-codesync bot commented Feb 2, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

meta-codesync bot commented Feb 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant