Skip to content

build(deps): bump the frontend-minor-patch group across 1 directory with 19 updates - #10

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/frontend-minor-patch-9b69c7bfa2
Open

build(deps): bump the frontend-minor-patch group across 1 directory with 19 updates#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/frontend-minor-patch-9b69c7bfa2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown

Bumps the frontend-minor-patch group with 19 updates in the / directory:

Package From To
@azure/msal-browser 5.6.3 5.27.0
@mui/x-tree-view 9.1.0 9.16.0
allotment 1.20.5 1.20.6
canvas 3.2.2 3.2.3
chart.js 4.5.1 4.6.1
dompurify 3.4.5 3.4.17
echarts 6.0.0 6.1.0
i18next 26.0.1 26.5.11
i18next-browser-languagedetector 8.2.1 8.2.3
katex 0.16.42 0.19.1
react-animate-height 3.2.3 3.2.4
react-virtuoso 4.18.3 4.18.20
validator 13.15.26 13.15.35
vega 6.2.0 6.4.0
vega-lite 6.4.1 6.5.0
@testing-library/dom 10.4.1 10.4.2
@testing-library/react 16.3.2 16.3.3
@types/lodash 4.17.24 4.17.27
electron-builder 26.15.3 26.18.0

Updates @azure/msal-browser from 5.6.3 to 5.27.0

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.27.0

5.27.0

Tue, 27 Oct 2026 18:15:10 GMT

Minor changes

  • Add the pocd (popup origin check done) parameter to authorize and end-session requests, preserving computed parameter precedence #8793 (kshabelko@microsoft.com)
  • Bump @​azure/msal-common to v16.15.0 (beachball)

Patches

@​azure/msal-browser v5.26.0

5.26.0

Wed, 21 Oct 2026 18:37:16 GMT

Minor changes

Patches

@​azure/msal-browser v5.25.1

5.25.1

Tue, 13 Oct 2026 19:04:35 GMT

Patches

@​azure/msal-browser v5.25.0

5.25.0

Tue, 06 Oct 2026 20:48:41 GMT

Minor changes

... (truncated)

Commits
  • 96488ec Clarify authority discovery trust model (#8938)
  • 95e5031 Handle response headers case-insensitively (#8916)
  • 01b6a8f Introduce "popup origin check done" param (#8793)
  • 0f98b8c Improve redirect response URL cleanup (#8918)
  • 4cf9a61 Post-release PR (#8925)
  • 16a4714 Fix web silent-request deduplication for refresh policies and extra parameter...
  • bd8b2cd Fallback from EAR to auth code flow in Safari (#8903)
  • a9a1221 Native Auth V2 entry and validation fixes (#8898)
  • 8bd17ff chore: update basic-ftp to patched 6.2.2 (#8915)
  • 4d1e6f9 build(deps): bump dorny/paths-filter from 3.0.4 to 4.0.3 (#8841)
  • Additional commits viewable in compare view

Updates @mui/x-tree-view from 9.1.0 to 9.16.0

Release notes

Sourced from @​mui/x-tree-view's releases.

v9.16.0

We'd like to extend a big thank you to the 14 contributors who made this release possible. Here are some highlights ✨:

  • 📊 Excel export in the Charts Premium, with a toolbar entry
  • 👆 Data Grid row reordering on touch and pen devices
  • 🗑️ Confirmation dialog before deleting an event in the Scheduler
  • 🌍 Improve Romanian (ro-RO) locale on the Data Grid and the Date and Time Pickers
  • 🌍 Improve Turkish (tr-TR) locale on the Data Grid, the Date and Time Pickers, and the Scheduler
  • 🐞 Bugfixes
  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​aozmekik, @​cpruijsen, @​mustafajw07, @​reckter, @​vicuts

The following team members contributed to this release: @​arminmeh, @​brijeshb42, @​cherniavskii, @​Janpot, @​JCQuintas, @​LukasTy, @​michelengelen, @​noraleonte, @​rita-codes

Data Grid

@mui/x-data-grid@9.16.0

@mui/x-data-grid-pro@9.16.0 pro

Same changes as in @mui/x-data-grid@9.16.0, plus:

@mui/x-data-grid-premium@9.16.0 premium

Same changes as in @mui/x-data-grid-pro@9.16.0, plus:

Date and Time Pickers

@mui/x-date-pickers@9.16.0

... (truncated)

Changelog

Sourced from @​mui/x-tree-view's changelog.

9.16.0

Oct 20, 2026

We'd like to extend a big thank you to the 14 contributors who made this release possible. Here are some highlights ✨:

  • 📊 Excel export in the Charts Premium, with a toolbar entry
  • 👆 Data Grid row reordering on touch and pen devices
  • 🗑️ Confirmation dialog before deleting an event in the Scheduler
  • 🌍 Improve Romanian (ro-RO) locale on the Data Grid and the Date and Time Pickers
  • 🌍 Improve Turkish (tr-TR) locale on the Data Grid, the Date and Time Pickers, and the Scheduler
  • 🐞 Bugfixes
  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​aozmekik, @​cpruijsen, @​mustafajw07, @​reckter, @​vicuts

The following team members contributed to this release: @​arminmeh, @​brijeshb42, @​cherniavskii, @​Janpot, @​JCQuintas, @​LukasTy, @​michelengelen, @​noraleonte, @​rita-codes

Data Grid

@mui/x-data-grid@9.16.0

@mui/x-data-grid-pro@9.16.0 pro

Same changes as in @mui/x-data-grid@9.16.0, plus:

@mui/x-data-grid-premium@9.16.0 premium

Same changes as in @mui/x-data-grid-pro@9.16.0, plus:

Date and Time Pickers

... (truncated)

Commits
  • 3766c82 [release] v9.16.0 (#23901)
  • 78fcfbd [x-internals] Restore removed exports and pin internal dependencies (#23907)
  • c1aa6b7 [TreeView] Fix infinite recursion when a mounted item suspends (#23668)
  • 67d2869 [infra] Remove engines.node from UI packages (#23786)
  • dd81f1a [release] v9.15.0 (#23777)
  • 03d2f6d [code-infra] Widen @​babel/runtime range and stop emitting empty class fields ...
  • ba99ac8 [tree view] Use aria-selected instead of aria-checked when `checkboxSelec...
  • 9b7842c [x-internals] Import Base UI utils directly instead of re-exporting them (#23...
  • cf17872 [x-internals] Import the store from @​base-ui/utils directly (#23335)
  • c83b3dd [release] v9.14.0 (#23608)
  • Additional commits viewable in compare view

Updates allotment from 1.20.5 to 1.20.6

Release notes

Sourced from allotment's releases.

v1.20.6

1.20.6 (2026-10-12)

Bug Fixes

  • call the latest onReset when double-clicking a sash (#904) (b4d9fca), closes #901
  • sash: end in-progress drags cleanly on dispose and view changes (#898) (b307433)
  • split-view: resize() no longer crashes when given extra sizes (#914) (2b547d3)
Changelog

Sourced from allotment's changelog.

1.20.6 (2026-10-12)

Bug Fixes

  • call the latest onReset when double-clicking a sash (#904) (b4d9fca), closes #901
  • sash: end in-progress drags cleanly on dispose and view changes (#898) (b307433)
  • split-view: resize() no longer crashes when given extra sizes (#914) (2b547d3)
Commits
  • fddd29d chore(main): release 1.20.6 (#895)
  • 1737285 chore(deps): update dependency @​rollup/plugin-babel to v7.1.0 (#896)
  • 2ac7dca docs: explain drag vs layout changes, what visible remembers, and known limit...
  • bf2554d chore(deps): update actions/setup-node action to v7 (#927)
  • 82ff665 docs: reorganise guides, complete the API overview and trim the FAQ (#928)
  • 3c3fdb4 chore(deps): update actions/checkout action to v7 (#924)
  • d67bd89 docs: add live styling and container resize examples (#926)
  • 3902bf5 docs: tidy up the getting started guide and Pane API page (#925)
  • daf6430 chore(deps): update docusaurus monorepo to v3.10.2 (#922)
  • 55eb86a chore(website): use clsx instead of classnames in the hero demo (#923)
  • Additional commits viewable in compare view

Updates canvas from 3.2.2 to 3.2.3

Release notes

Sourced from canvas's releases.

v3.2.3

Fixed

  • Fix building with gcc (#2559)
Changelog

Sourced from canvas's changelog.

3.2.3

Fixed

  • Fix building with gcc (#2559)
Commits

Updates chart.js from 4.5.1 to 4.6.1

Release notes

Sourced from chart.js's releases.

v4.6.1

Essential Links

  • #12355 fix: trusted publishing fix + version 4.6.1 bump

Thanks to @​etimberg

v4.6.0

Essential Links

  • #12354 chore: version bump to 4.6.0 to prepare for release
  • #12328 test: stabilize overlapping polar-area label fixture

Enhancements

  • #12238 Corrected spacing in pie/doughnut/polarArea (Fixes #10059)
  • #12130 Enable scale title stroke (12092)

Bugs Fixed

  • #12283 filler plugin fill extends past line when offset: true + index scale min/max
  • #12155 Fix early exit from clearStacks
  • #12142 Use integer canvas dimensions

Types

  • #12321 fix(types): allow scriptable and indexed grid tick widths

Documentation

  • #12258 Add a note that axis labels can span lines
  • #12134 docs: Add note about flexbox/grid layout responsivity issue
  • #12139 Fix amount of category scales count in docs

Development

  • #12306 Bump actions/setup-node from 6 to 7
  • #12303 Bump actions/checkout from 6 to 7

... (truncated)

Commits
  • 76d8cf8 fix: trusted publishing fix + version 4.6.1 bump (#12355)
  • 4e5443d chore: version bump to 4.6.0 to prepare for release (#12354)
  • 7169e65 fix(types): allow scriptable and indexed grid tick widths (#12321)
  • 714b48c test: stabilize overlapping polar-area labels across browsers (#12328)
  • 6a86e23 Bump actions/setup-node from 6 to 7 (#12306)
  • afb3d64 Bump actions/checkout from 6 to 7 (#12303)
  • 0db976c Bump pnpm/action-setup from 4.2.0 to 6.1.0 (#12307)
  • d2ddcf9 Specify build script for compressed size (#12310)
  • b972574 filler plugin fill extends past line when offset: true + index scale min/max ...
  • 0ad783f Use node 24 for CI (#12309)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chart.js since your current version.


Updates dompurify from 3.4.5 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions

DOMPurify 3.4.13

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible

DOMPurify 3.4.12

  • Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
  • Hardened the handling of hooks removing elements, @​mkrause-bee360
  • Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
  • Hardened the handling of declarative partial updates
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible

DOMPurify 3.4.11

  • Fixed an issue with a leaky config for hooks via setConfig, thanks @​trace37labs
  • Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
  • Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
  • Updated up the linting tool-chain and removed now-redundant lint directives
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible

... (truncated)

Commits

Updates echarts from 6.0.0 to 6.1.0

Release notes

Sourced from echarts's releases.

6.1.0

  • [Feature] [axis] Support dataMin and dataMax option for calculating a nice axis extent. #20838 (Justin-ZS, Ovilia)
  • [Feature] [axis] Comprehensively enable all types of axis (i.e., "value"/"time"/"category"/"log") to render series (typically "bar"/"pictorialBar"/"candlestick"/"boxplot") without overflow (including the case "category" axis with boundaryGap: false); provide containShape option; provide some corresponding clip option. dbfaf6a73 fe932a2aa 3973b21ee (100pah) #21511 (Akash Sonune)
  • [Feature] [axis] Automatically exclude non-positive series data values on "log" axis. dedc5dc18 (100pah)
  • [Feature] [axis] Enable axisLabel.formatter to receive its index for working with customValues. #21220 #21432 (Szymon Pachucki, Ovilia, plainheart)
  • [Feature] [line] Add triggerEvent option for more control over mouse event. #21001 (Steven Cobb, plainheart)
  • [Feature] [pie] Add tangential-noflip rotation mode to keep labels tangential without flipping. #21258 (春秋半夏, Ovilia)
  • [Feature] [gauge] progress.color supports 'auto'. #21224 (StNimmerlein, Ovilia)
  • [Feature] [radar] Add clockwise option. #21143 (Dai Xuezhou, Ovilia)
  • [Feature] [candlestick] [dataZoom] Add cursor option for candlestick series and add cursorGrab option & cursorGrabbing for 'inside' dataZoom. #21558 (zuming, Ovilia, 100pah)
  • [Feature] [scatter] [effectScatter] [geo] Enable clip option on "scatter"/"effectScatter" on geo. 417592289 (100pah)
  • [Feature] [visualMap] Add seriesTargets option for multiple series-dimension mappings. #20703 (Justin-ZS, plainheart)
  • [Feature] [matrix] Support matrix.x/y.length for conveniently creating a headless matrix without composing an array. #21191 (100pah, plainheart)
  • [Feature] [matrix] Add triggerEvent option to support triggering event on matrix cells. #21390 (Natsuo Kawai, 100pah)
  • [Feature] [i18n] add Latvian(LV) translation. #21546 (EPoikans)
  • [Fix] [axis] Change and clarify the rounding error and auto-precision utils and solutions. 479dcd454 (100pah)
  • [Fix] [axis] Fix chart does not work when using customValues with formatter in time axis (axis.type: 'time') label. #21352 (Srajan Sanjay Saxena, plainheart)
  • [Fix] [axis] Fix and clarify alignTick strategy, and fix LogScale precision. a6ab2458f ffcc636fb (100pah)
  • [Fix] [axis] Fix duplicate ticks when using time axis (axis.type: 'time') or customValues, which causes jitter of splitArea; fix the showMin/MaxLabel handling of a category axis (axis.type: 'category'); enable a uniform bandWidth calculation in numeric axis (axis.type: 'value' | 'time' | 'log'). 8de2b64fa 15af0db02 8ddaa5c69 (100pah)
  • [Fix] [axis] Fix time axis (axis.type: 'time') bug when value scale is in millisecond. 40b77b464 (100pah)
  • [Fix] [bar] Fix wrong label position when bar series has a 0 width/height. #21218 (Justin-ZS, Ovilia)
  • [Fix] [scatter] Fix jitter layout does not support progressive rendering and cause chart to be frozen and potential NPE. #21436 (plainheart)
  • [Fix] [lines] Fix effect symbol flip on unidirectional loop end when roundTrip is not enabled. #21320 (Mayank Mehta, plainheart)
  • [Fix] [candlestick] Fix candlestick render error with series.encode on horizontal layout. #21325 (Purbayan Pramanik, 100pah)
  • [Fix] [parallel] Fix incorrect axis extent when any subsequent series has a larger value than the first. #21387 (jackhickson, 100pah)
  • [Fix] [pie] Support axes extent union pie center automatically when pie is laid out on Cartesian (grid component). 18a23a875 (100pah)
  • [Fix] [treemap] Fix treemap can not be zoomed out after a zoom-in when scaleLimit is specified #21427 (TateLiu, 100pah)
  • [Fix] [lines] Fix potential tooltip XSS vulnerability in lines series (series.type: 'lines'). #21608 (plainheart)
  • [Fix] [map] [geo] Fix the failed synchronization and visual artifacts on geo roaming and animation. 417592289 (100pah)
  • [Fix] [tooltip] Fix tooltip content does not refresh when changing tooltip trigger from 'axis' to 'item'. #20710 (Justin-ZS, plainheart)
  • [Fix] [tooltip] valueFormatter callback param dataIndex should be rawDataIndex rather than dataZoom filtered dataIndex. #21479 (100pah, plainheart)
  • [Fix] [axisPointer] Fix axisPointer shadow and enable clipping - it is previously only applicable to "category" axis, but is buggy in numeric axis with "bar" series. 8de2b64fa (100pah)
  • [Fix] [axisPointer] Fix visual artifacts caused by failed axisPointer restoration. 56a32c0bb (100pah)
  • [Fix] [hoverLayer] Fix visual artifacts arisen on hover layer. zrender#1151 933585126 (100pah)
  • [Fix] [marker] Fix marker fails to render with dataset and encode. #21439 (plainheart, 100pah).
  • [Fix] [dataZoom] Fix wrong position of the dataZoom when the series has only one data point. #21196 (alesmit, Ovilia)
  • [Fix] [dataZoom] Fix dataZoom bug that data info disappears when dragging released; fix dataZoom dragging cursor style. 64305a4b8 (100pah)
  • [Fix] [dataZoom] Apply a better auto-precision method; fix unexpected behaviors when dataZoom controls axes with alignTicks: true. d168bf237 (100pah)
  • [Fix] [dataZoom] Fix AxisProxy can not be cleared when dataZoom option changed; fix related onZero behaviors. 52ceb924a 2e82d33c3 (100pah)
  • [Fix] [areaStyle] Fix areaStyle render error when dimension name is empty string. #21219 (Justin-ZS, Ovilia)
  • [Fix] [sunburst] Fix root node label may not be centered. #21306 (Akash Sonune, Ovilia)
  • [Fix] [matrix] Fix matrix label formatter does not work. #21410 (Justin-ZS, Ovilia)
  • [Fix] [toolbox] Fix emphasis color is the same as the default color. #21384 (Ovilia) b094f987d (100pah)
  • [Fix] [toolbox] Fix the dataView component does not fit the dark mode. #21176 (notthistrain, Ovilia)
  • [Fix] [progressive] Fix progressive rendering issues. 91a60fc76 (100pah)
  • [Fix] [labelLine] Fix labelLine.smooth can not be reset. #21425 (fanwww, plainheart)
  • [Fix] [graphic] Fix stroke corner gap due to not closing path in roundRect helper. zrender#1155 (plainheart)
  • [Fix] [svg] Enhance SVG encodeBase64 compatibility to make it available in more environments like Web Worker/NodeJS/Bun. zrender#1145 (plainheart)
  • [Fix] [core] Mark echarts instance object as raw in Vue. #21293 (plainheart)
  • [Fix] [chord] Add the missing export entry for chord chart. #21197 (plainheart, Ovilia)

... (truncated)

Commits
  • c5a48f5 Merge pull request #21612 from apache/release-dev
  • 77e5222 release 6.1.0-rc.2
  • 21f17be fixRegression(map,geo): Resolve circular dependencies introduced by this vers...
  • 830e8b6 chore: Supplement package.json (for module cjs declaration) to source release.
  • ed0e210 chore: Fix addHeader tool and add missing license headers.
  • cc78ada Merge pull request #21611 from apache/release-dev
  • 3f6e012 release: Build release.
  • d69405f chore: Add missing headers.
  • 6998ed0 release: Upgrade npm version.
  • 8cb374b fix(build): Fix build commands.
  • Additional commits viewable in compare view

Updates i18next from 26.0.1 to 26.5.11

Release notes

Sourced from i18next's releases.

v26.5.11

  • fix: a nested false, 0 or '' is now returned when a flat key with the same dotted name also exists. With { a: { b: false }, 'a.b': 'flat' }, getResource('en', 'translation', 'a.b') and t('a.b') returned 'flat': the nested result was checked for truthiness, so these present values fell through to the flat-key lookup. Without such a flat key they were already returned. A nested null, which is not a valid lookup by default (returnNull: false), still falls back to the flat key. Thanks @​lprnmns (#2461).

v26.5.10

  • fix: when none of the detected languages is in supportedLngs, the best match no longer picks a different language whose code only starts with the same letters. The last fuzzy check took any supported code starting with the language part, so with supportedLngs: ['en', 'fil-PH'] a Finnish user (fi-FI) got Filipino instead of the fallback language, and ha (Hausa) picked haw-US (Hawaiian). Other regions of the same language still match as before (de-CH → de-DE, pt-PT → pt-BR, fil → fil-PH). Compatibility note: a two-letter code no longer matches a supported three-letter code that extends it, like ar → arz-EG, sw → swh-KE or no → nob-NO; list the two-letter code in supportedLngs (or map it with fallbackLng) if you relied on that. Thanks @​Pharex38 (#2460).

v26.5.9

  • fix: nested lookups no longer resolve to methods inherited from the prototype, like constructor, toString or map. Only the top level was guarded, so {{constructor}} was treated as missing, but {{user.constructor}} rendered the function source (with a class instance, the full source code of the class), and {{user.toString}}, {{items.map}} or a class method like {{user.greet}} did the same. The same lookup is used for translation keys when ignoreJSONStructure is on (the default): a nested key named like an inherited method that is missing in the current language (t('roles.constructor') with roles.constructor only in the fallback language) returned function Object() { [native code] } instead of falling back, and exists('roles.valueOf') returned true. These keys are now missing, so the fallback language, missingInterpolationHandler, saveMissing and the missing key handler apply as for any other missing key. Getters defined on a class ({{user.fullName}} with get fullName()) still work. Nested lookups also no longer walk into the prototype via __proto__, so {{user.__proto__.constructor}} no longer prints the class source either. Thanks @​Pharex38 (#2459).

v26.5.8

  • fix: arrays returned with joinArrays now get the same resolved details as strings. The joined value was extended with lastKey in the place of the resolved lookup, so with postProcessPassResolved a post processor got no usedLng, usedNS or exactUsedKey (t('steps', { joinArrays: ' / ' }) reported undefined/undefined:undefined). T...

    Description has been truncated

@dependabot
build(deps): bump the frontend-minor-patch group across 1 directory w…
2dae2db 
…ith 19 updates

Bumps the frontend-minor-patch group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.6.3` | `5.27.0` |
| [@mui/x-tree-view](https://github.com/mui/mui-x/tree/HEAD/packages/x-tree-view) | `9.1.0` | `9.16.0` |
| [allotment](https://github.com/johnwalley/allotment) | `1.20.5` | `1.20.6` |
| [canvas](https://github.com/Automattic/node-canvas) | `3.2.2` | `3.2.3` |
| [chart.js](https://github.com/chartjs/Chart.js) | `4.5.1` | `4.6.1` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.5` | `3.4.17` |
| [echarts](https://github.com/apache/echarts) | `6.0.0` | `6.1.0` |
| [i18next](https://github.com/i18next/i18next) | `26.0.1` | `26.5.11` |
| [i18next-browser-languagedetector](https://github.com/i18next/i18next-browser-languageDetector) | `8.2.1` | `8.2.3` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.42` | `0.19.1` |
| [react-animate-height](https://github.com/Stanko/react-animate-height) | `3.2.3` | `3.2.4` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.3` | `4.18.20` |
| [validator](https://github.com/validatorjs/validator.js) | `13.15.26` | `13.15.35` |
| [vega](https://github.com/vega/vega) | `6.2.0` | `6.4.0` |
| [vega-lite](https://github.com/vega/vega-lite) | `6.4.1` | `6.5.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.24` | `4.17.27` |
| [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `26.15.3` | `26.18.0` |



Updates `@azure/msal-browser` from 5.6.3 to 5.27.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.6.3...msal-browser-v5.27.0)

Updates `@mui/x-tree-view` from 9.1.0 to 9.16.0
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v9.16.0/packages/x-tree-view)

Updates `allotment` from 1.20.5 to 1.20.6
- [Release notes](https://github.com/johnwalley/allotment/releases)
- [Changelog](https://github.com/johnwalley/allotment/blob/main/CHANGELOG.md)
- [Commits](johnwalley/allotment@v1.20.5...v1.20.6)

Updates `canvas` from 3.2.2 to 3.2.3
- [Release notes](https://github.com/Automattic/node-canvas/releases)
- [Changelog](https://github.com/Automattic/node-canvas/blob/master/CHANGELOG.md)
- [Commits](Automattic/node-canvas@v3.2.2...v3.2.3)

Updates `chart.js` from 4.5.1 to 4.6.1
- [Release notes](https://github.com/chartjs/Chart.js/releases)
- [Commits](chartjs/Chart.js@v4.5.1...v4.6.1)

Updates `dompurify` from 3.4.5 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.5...3.4.17)

Updates `echarts` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/apache/echarts/releases)
- [Commits](apache/echarts@6.0.0...6.1.0)

Updates `i18next` from 26.0.1 to 26.5.11
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.0.1...v26.5.11)

Updates `i18next-browser-languagedetector` from 8.2.1 to 8.2.3
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next-browser-languageDetector@v8.2.1...v8.2.3)

Updates `katex` from 0.16.42 to 0.19.1
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.42...v0.19.1)

Updates `react-animate-height` from 3.2.3 to 3.2.4
- [Changelog](https://github.com/Stanko/react-animate-height/blob/v3/CHANGELOG.md)
- [Commits](https://github.com/Stanko/react-animate-height/commits)

Updates `react-virtuoso` from 4.18.3 to 4.18.20
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.20/packages/react-virtuoso)

Updates `validator` from 13.15.26 to 13.15.35
- [Release notes](https://github.com/validatorjs/validator.js/releases)
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md)
- [Commits](validatorjs/validator.js@13.15.26...13.15.35)

Updates `vega` from 6.2.0 to 6.4.0
- [Release notes](https://github.com/vega/vega/releases)
- [Commits](vega/vega@v6.2.0...v6.4.0)

Updates `vega-lite` from 6.4.1 to 6.5.0
- [Release notes](https://github.com/vega/vega-lite/releases)
- [Changelog](https://github.com/vega/vega-lite/blob/main/CHANGELOG.md)
- [Commits](vega/vega-lite@v6.4.1...v6.5.0)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@types/lodash` from 4.17.24 to 4.17.27
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `electron-builder` from 26.15.3 to 26.18.0
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/electron-builder@26.18.0/packages/electron-builder/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-builder@26.18.0/packages/electron-builder)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@mui/x-tree-view"
  dependency-version: 9.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: allotment
  dependency-version: 1.20.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: canvas
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: chart.js
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: echarts
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: i18next
  dependency-version: 26.5.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: i18next-browser-languagedetector
  dependency-version: 8.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: katex
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: react-animate-height
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: validator
  dependency-version: 13.15.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: vega
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: vega-lite
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@types/lodash"
  dependency-version: 4.17.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: electron-builder
  dependency-version: 26.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants