Skip to content

deps: update compatible app dependencies - #595

Merged
stdavis merged 3 commits into
mainfrom
dependabot/npm_and_yarn/safe-app-dependencies-fc460faa37
Nov 2, 2026
Merged

deps: update compatible app dependencies#595
stdavis merged 3 commits into
mainfrom
dependabot/npm_and_yarn/safe-app-dependencies-fc460faa37

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited by stdavis
Loading

Copy link
Copy Markdown
Contributor

Summary

Refresh the compatible minor and patch dependency updates from the safe-app-dependencies group, including matched ArcGIS 5.1.27 packages, React/React DOM 19.3.1, React Aria, TanStack Query, Firebase Admin/Functions, PDFMake, Vite, and aligned Storybook 10.6.4 packages.

Two review corrections are included:

  • Preserve the already-merged follow-redirects@1.16.2 patch instead of downgrading it to 1.16.1 during grouped lockfile regeneration.
  • Keep the @ugrc/utah-design-system 4.3.2 update separate in deps: update UGRC design system to 4.3.2 #593, as requested. This group retains 4.1.0 while updating its peer resolutions for the other dependency upgrades.

The recreated/rebased head also preserves the merged MCP SDK 1.32.2 and Zod 4.6.7 updates. TypeScript remains at 6.0.3; incompatible major updates are tracked separately in #594.

Validation

The complete corrected dependency set was validated on Node 24 with pnpm 11:

  • Frozen install passes the unchanged strict release-age and build policies.
  • CI=1 pnpm test:ci passes all 333 tests.
  • pnpm lint, pnpm check, and pnpm build pass.

No assertions, CI gates, or dependency policies were weakened. Fresh GitHub checks must pass on the final head before merging.

References

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 2, 2026
@stdavis stdavis self-assigned this Nov 2, 2026
@stdavis

stdavis commented Nov 2, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
deps: bump the safe-app-dependencies group across 1 directory with 31…
4bf12aa 
… updates

Bumps the safe-app-dependencies group with 31 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@arcgis/core](https://js.arcgis.com) | `5.1.22` | `5.1.27` |
| [@arcgis/map-components](https://developers.arcgis.com/javascript/latest/) | `5.1.22` | `5.1.27` |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.9.1` | `5.9.2` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.104.5` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.102.8` | `5.104.5` |
| [@ugrc/utah-design-system](https://github.com/agrc/kitchen-sink) | `4.1.0` | `4.3.2` |
| [immer](https://github.com/immerjs/immer) | `11.1.18` | `11.1.23` |
| [ky](https://github.com/sindresorhus/ky) | `2.1.0` | `2.2.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-aria](https://github.com/adobe/react-spectrum) | `3.52.0` | `3.53.1` |
| [react-aria-components](https://github.com/adobe/react-spectrum) | `1.21.0` | `1.22.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` |
| [react-error-boundary](https://github.com/bvaughn/react-error-boundary) | `6.1.4` | `6.1.6` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.90.0` |
| [react-stately](https://github.com/adobe/react-spectrum) | `3.50.0` | `3.51.0` |
| [xstate](https://github.com/statelyai/xstate) | `5.32.6` | `5.33.3` |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.6.0` | `10.6.4` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `10.6.0` | `10.6.4` |
| [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.6.0` | `10.6.4` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.5` | `10.0.6` |
| [firebase-tools](https://github.com/firebase/firebase-tools) | `15.29.0` | `15.34.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |
| [prettier-plugin-packagejson](https://github.com/matzkoh/prettier-plugin-packagejson) | `3.0.2` | `3.0.3` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.6.2` | `10.6.4` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.4` | `8.3.4` |
| [wait-on](https://github.com/jeffbski/wait-on) | `9.1.0` | `9.5.1` |
| [firebase-admin](https://github.com/firebase/firebase-admin-node) | `14.3.0` | `14.5.0` |
| [firebase-functions](https://github.com/firebase/firebase-functions) | `7.3.2` | `7.4.0` |
| [pdfmake](https://github.com/bpampuch/pdfmake) | `0.3.11` | `0.3.13` |



Updates `@arcgis/core` from 5.1.22 to 5.1.27

Updates `@arcgis/map-components` from 5.1.22 to 5.1.27

Updates `@hookform/resolvers` from 5.9.1 to 5.9.2
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v5.9.1...v5.9.2)

Updates `@tanstack/react-query` from 5.102.8 to 5.104.5
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.5/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.102.8 to 5.104.5
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.104.5/packages/react-query-devtools)

Updates `@ugrc/utah-design-system` from 4.1.0 to 4.3.2
- [Release notes](https://github.com/agrc/kitchen-sink/releases)
- [Commits](agrc/kitchen-sink@utah-design-system-v4.1.0...utah-design-system-v4.3.2)

Updates `immer` from 11.1.18 to 11.1.23
- [Release notes](https://github.com/immerjs/immer/releases)
- [Commits](immerjs/immer@v11.1.18...v11.1.23)

Updates `ky` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/sindresorhus/ky/releases)
- [Commits](sindresorhus/ky@v2.1.0...v2.2.0)

Updates `react` from 19.2.8 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-aria` from 3.52.0 to 3.53.1
- [Release notes](https://github.com/adobe/react-spectrum/releases)
- [Commits](https://github.com/adobe/react-spectrum/compare/react-aria@3.52.0...react-aria@3.53.1)

Updates `react-aria-components` from 1.21.0 to 1.22.1
- [Release notes](https://github.com/adobe/react-spectrum/releases)
- [Commits](https://github.com/adobe/react-spectrum/compare/react-aria-components@1.21.0...react-aria-components@1.22.1)

Updates `react-dom` from 19.2.8 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@types/react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-error-boundary` from 6.1.4 to 6.1.6
- [Release notes](https://github.com/bvaughn/react-error-boundary/releases)
- [Commits](bvaughn/react-error-boundary@6.1.4...6.1.6)

Updates `react-hook-form` from 7.87.0 to 7.90.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.87.0...v7.90.0)

Updates `react-stately` from 3.50.0 to 3.51.0
- [Release notes](https://github.com/adobe/react-spectrum/releases)
- [Commits](https://github.com/adobe/react-spectrum/compare/react-stately@3.50.0...react-stately@3.51.0)

Updates `xstate` from 5.32.6 to 5.33.3
- [Release notes](https://github.com/statelyai/xstate/releases)
- [Commits](https://github.com/statelyai/xstate/compare/xstate@5.32.6...xstate@5.33.3)

Updates `@storybook/addon-docs` from 10.6.0 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/addons/docs)

Updates `@storybook/addon-links` from 10.6.0 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/addons/links)

Updates `@storybook/react-vite` from 10.6.0 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/frameworks/react-vite)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `concurrently` from 10.0.5 to 10.0.6
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v10.0.5...v10.0.6)

Updates `firebase-tools` from 15.29.0 to 15.34.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Commits](firebase/firebase-tools@v15.29.0...v15.34.0)

Updates `prettier` from 3.9.6 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.10)

Updates `prettier-plugin-packagejson` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/matzkoh/prettier-plugin-packagejson/releases)
- [Commits](matzkoh/prettier-plugin-packagejson@v3.0.2...v3.0.3)

Updates `storybook` from 10.6.2 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/core)

Updates `vite` from 8.2.4 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

Updates `wait-on` from 9.1.0 to 9.5.1
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](jeffbski/wait-on@v9.1.0...v9.5.1)

Updates `firebase-admin` from 14.3.0 to 14.5.0
- [Release notes](https://github.com/firebase/firebase-admin-node/releases)
- [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-admin-node@v14.3.0...v14.5.0)

Updates `firebase-functions` from 7.3.2 to 7.4.0
- [Release notes](https://github.com/firebase/firebase-functions/releases)
- [Commits](firebase/firebase-functions@v7.3.2...v7.4.0)

Updates `pdfmake` from 0.3.11 to 0.3.13
- [Release notes](https://github.com/bpampuch/pdfmake/releases)
- [Changelog](https://github.com/bpampuch/pdfmake/blob/master/CHANGELOG.md)
- [Commits](bpampuch/pdfmake@0.3.11...0.3.13)

---
updated-dependencies:
- dependency-name: "@arcgis/core"
  dependency-version: 5.1.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: "@arcgis/map-components"
  dependency-version: 5.1.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: "@storybook/addon-links"
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: "@storybook/react-vite"
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.104.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: "@ugrc/utah-design-system"
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: concurrently
  dependency-version: 10.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: firebase-admin
  dependency-version: 14.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: firebase-functions
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: firebase-tools
  dependency-version: 15.34.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: immer
  dependency-version: 11.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: ky
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: pdfmake
  dependency-version: 0.3.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: prettier-plugin-packagejson
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: react-aria
  dependency-version: 3.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: react-aria-components
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: react-error-boundary
  dependency-version: 6.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.90.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: react-stately
  dependency-version: 3.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: storybook
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe-app-dependencies
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: wait-on
  dependency-version: 9.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
- dependency-name: xstate
  dependency-version: 5.33.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe-app-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/safe-app-dependencies-fc460faa37 branch from e522fc5 to 4bf12aa Compare November 2, 2026 18:19
@stdavis
fix(deps): preserve merged patches and isolate UGRC update
33dc303 
Keep follow-redirects at the already-merged 1.16.2 release. Leave the design-system upgrade in its separate reviewed PR.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@stdavis stdavis changed the title deps: bump the safe-app-dependencies group across 1 directory with 31 updates chore(deps): update compatible app dependencies Nov 2, 2026
@stdavis stdavis changed the title chore(deps): update compatible app dependencies deps: update compatible app dependencies Nov 2, 2026
@stdavis
stdavis merged commit 6974062 into main Nov 2, 2026
6 checks passed
@stdavis
stdavis deleted the dependabot/npm_and_yarn/safe-app-dependencies-fc460faa37 branch November 2, 2026 18:49
@ugrc-release-bot ugrc-release-bot Bot mentioned this pull request Nov 2, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@stdavis stdavis

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@stdavis