Skip to content

Deps: Bump the patch-updates group across 1 directory with 7 updates#5415

Merged
greenbonebot merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/patch-updates-6c8017f901
Jul 15, 2026
Merged

Deps: Bump the patch-updates group across 1 directory with 7 updates#5415
greenbonebot merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/patch-updates-6c8017f901

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the patch-updates group with 6 updates in the / directory:

Package From To
@tanstack/react-query 5.101.1 5.101.2
styled-components 6.4.2 6.4.3
@emnapi/core 1.11.1 1.11.2
@emnapi/runtime 1.11.1 1.11.2
@vitest/coverage-v8 4.1.9 4.1.10
@vitest/eslint-plugin 1.6.20 1.6.21

Updates @tanstack/react-query from 5.101.1 to 5.101.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.2

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.2

@​tanstack/react-query-persist-client@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.2
    • @​tanstack/react-query@​5.101.2

@​tanstack/react-query@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2
Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2
Commits

Updates styled-components from 6.4.2 to 6.4.3

Release notes

Sourced from styled-components's releases.

styled-components@6.4.3

Patch Changes

  • f692ec2: Fix a TypeScript error when wrapping a component whose props can't be statically read, such as Mantine v7's polymorphic-factory components (Button, Card, Menu.Item, and similar). These styled components no longer reject every prop, including children; arbitrary props are accepted again at the JSX call site and via .attrs(), while components with readable prop types stay fully type-checked.
  • f692ec2: Keep TypeScript attribute autocomplete working while you type props on a polymorphic styled component. When a component renders a different element through as (for example as="video"), beginning to type a new prop name could make the whole suggestion list vanish; the rendered element's props now keep autocompleting as you go.

styled-components@6.4.3-prerelease-20260602021501

Patch Changes

  • f692ec2: Fix a TypeScript error when wrapping a component whose props can't be statically read, such as Mantine v7's polymorphic-factory components (Button, Card, Menu.Item, and similar). These styled components no longer reject every prop, including children; arbitrary props are accepted again at the JSX call site and via .attrs(), while components with readable prop types stay fully type-checked.
  • f692ec2: Keep TypeScript attribute autocomplete working while you type props on a polymorphic styled component. When a component renders a different element through as (for example as="video"), beginning to type a new prop name could make the whole suggestion list vanish; the rendered element's props now keep autocompleting as you go.

Full Changelog: styled-components/styled-components@styled-components@6.4.2...styled-components@6.4.3-prerelease-20260602021501

Commits
  • e066341 Version Packages
  • f692ec2 fix(types): permissive props for un-introspectable targets, plus as-target au...
  • See full diff in compare view

Updates @emnapi/core from 1.11.1 to 1.11.2

Release notes

Sourced from @​emnapi/core's releases.

v1.11.2

What's Changed

Full Changelog: toyobayashi/emnapi@v1.11.1...v1.11.2

Commits

Updates @emnapi/runtime from 1.11.1 to 1.11.2

Release notes

Sourced from @​emnapi/runtime's releases.

v1.11.2

What's Changed

Full Changelog: toyobayashi/emnapi@v1.11.1...v1.11.2

Commits

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vitest/eslint-plugin from 1.6.20 to 1.6.21

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.21

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • ffe3299 chore: release v1.6.21
  • af7ac0c Initial support for aroundEach and aroundAll hooks (#923)
  • 52692a4 fix: support Chai-style expect chains (#920)
  • 8f671ac fix(prefer-called-with): map calledOnce matcher to exact once with (#918)
  • See full diff in compare view

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 15, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 15, 2026 03:22
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 15, 2026
@greenbonebot
greenbonebot enabled auto-merge (rebase) July 15, 2026 03:22
@github-actions

github-actions Bot commented Jul 15, 2026

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 52bb9f2.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@emnapi/core 1.11.2 🟢 3.4
Details
CheckScoreReason
Code-Review⚠️ 0Found 2/30 approved changesets -- score normalized to 0
Maintained🟢 1022 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@emnapi/runtime 1.11.2 🟢 3.4
Details
CheckScoreReason
Code-Review⚠️ 0Found 2/30 approved changesets -- score normalized to 0
Maintained🟢 1022 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@tanstack/query-core 5.101.2 UnknownUnknown
npm/@tanstack/react-query 5.101.2 UnknownUnknown
npm/@vitest/coverage-v8 4.1.10 UnknownUnknown
npm/@vitest/eslint-plugin 1.6.21 UnknownUnknown
npm/@vitest/expect 4.1.10 UnknownUnknown
npm/@vitest/mocker 4.1.10 UnknownUnknown
npm/@vitest/pretty-format 4.1.10 UnknownUnknown
npm/@vitest/runner 4.1.10 UnknownUnknown
npm/@vitest/snapshot 4.1.10 UnknownUnknown
npm/@vitest/spy 4.1.10 UnknownUnknown
npm/@vitest/utils 4.1.10 UnknownUnknown
npm/styled-components 6.4.3 🟢 6.2
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 2Found 2/7 approved changesets -- score normalized to 2
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
SAST🟢 10SAST tool is run on all commits
npm/vitest 4.1.10 UnknownUnknown

Scanned Files

  • package-lock.json

@dependabot dependabot Bot changed the title Deps: Bump the patch-updates group with 7 updates Deps: Bump the patch-updates group across 1 directory with 7 updates Jul 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/patch-updates-6c8017f901 branch from baeb45b to 2eddbd8 Compare July 15, 2026 06:01
@mergify

mergify Bot commented Jul 15, 2026

Copy link
Copy Markdown

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

@bjoernricks

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps the patch-updates group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.1` | `5.101.2` |
| [styled-components](https://github.com/styled-components/styled-components) | `6.4.2` | `6.4.3` |
| [@emnapi/core](https://github.com/toyobayashi/emnapi) | `1.11.1` | `1.11.2` |
| [@emnapi/runtime](https://github.com/toyobayashi/emnapi) | `1.11.1` | `1.11.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.6.20` | `1.6.21` |



Updates `@tanstack/react-query` from 5.101.1 to 5.101.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.2/packages/react-query)

Updates `styled-components` from 6.4.2 to 6.4.3
- [Release notes](https://github.com/styled-components/styled-components/releases)
- [Commits](https://github.com/styled-components/styled-components/compare/styled-components@6.4.2...styled-components@6.4.3)

Updates `@emnapi/core` from 1.11.1 to 1.11.2
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.11.1...v1.11.2)

Updates `@emnapi/runtime` from 1.11.1 to 1.11.2
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.11.1...v1.11.2)

Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `@vitest/eslint-plugin` from 1.6.20 to 1.6.21
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.6.20...v1.6.21)

Updates `vitest` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@emnapi/core"
  dependency-version: 1.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@emnapi/runtime"
  dependency-version: 1.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.6.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: styled-components
  dependency-version: 6.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/patch-updates-6c8017f901 branch from 2eddbd8 to 52bb9f2 Compare July 15, 2026 06:29
@greenbonebot
greenbonebot merged commit df0cccb into main Jul 15, 2026
23 of 25 checks passed
@greenbonebot
greenbonebot deleted the dependabot/npm_and_yarn/main/patch-updates-6c8017f901 branch July 15, 2026 06:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants