Update Frontend Packages August 2026 (#6359)

* Update frontend packages to clear bun audit vulnerabilities

Bumps react-router-dom, @babel/core, @babel/preset-env off pinned
vulnerable versions and takes the in-range bun update sweep (MUI 9.4,
x-date-pickers 9.12, vite 8.2, eslint 10.9, js-yaml 4.3, etc). Adds
overrides for nested duplicate copies (brace-expansion, nanoid,
postcss, js-yaml, @babel/core) that bun update alone didn't reach.
Updates a snapshot for a cosmetic MUI emotion class hash change.

bun audit: 11 vulnerabilities (5 high, 5 moderate, 1 low) -> none.

* Bump remaining in-range frontend minor/patch versions

Updates all dependencies still behind within their current major
version: @mui/x-tree-view, @sentry/react, @tanstack/react-query(-devtools),
styled-components, @tanstack/eslint-plugin-query, @testing-library/react,
@types/node, @types/react, @types/react-dom, @typescript-eslint/*,
esbuild, globals, msw, openapi-typescript-codegen, prettier, vitest.

Major-version bumps (i18next 26, react-i18next 17, react-dropzone 20,
Babel 8, testing-library/jest-dom 7, @vitejs/plugin-react 6, js-yaml 5,
jsdom 30, typescript 7) are left out of scope, as they need migration.

Removes a now-unnecessary type assertion in useHopeDetailsQuery.ts
flagged by @typescript-eslint/eslint-plugin 8.68. Updates 3 Vitest
snapshots for cosmetic emotion/styled-components class hash changes.

Author: mmaciekk

src/frontend/bun.lock

@@ -26,15 +26,15 @@
     "@date-io/moment": "^3.2.0",
     "@emotion/react": "^11.14.0",
     "@emotion/styled": "^11.14.1",
-    "@mui/icons-material": "^9.2.0",
-    "@mui/material": "^9.2.0",
-    "@mui/styled-engine-sc": "^9.1.1",
-    "@mui/system": "^9.2.0",
-    "@mui/x-date-pickers": "^9.10.0",
-    "@mui/x-tree-view": "9.10.0",
-    "@sentry/react": "10.68.0",
-    "@tanstack/react-query": "5.101.0",
-    "@tanstack/react-query-devtools": "5.101.4",
+    "@mui/icons-material": "^9.4.0",
+    "@mui/material": "^9.4.0",
+    "@mui/styled-engine-sc": "^9.4.0",
+    "@mui/system": "^9.4.0",
+    "@mui/x-date-pickers": "^9.12.0",
+    "@mui/x-tree-view": "9.12.0",
+    "@sentry/react": "10.72.0",
+    "@tanstack/react-query": "5.102.8",
+    "@tanstack/react-query-devtools": "5.102.8",
     "chart.js": "^4.5.1",
     "chartjs-plugin-annotation": "^3.1.0",
     "chartjs-plugin-datalabels": "^2.2.0",
@@ -53,46 +53,46 @@
     "react-dropzone": "15.0.0",
     "react-i18next": "16.5.4",
     "react-idle-timer": "^5.7.3",
-    "react-router-dom": "7.18.1",
+    "react-router-dom": "7.18.3",
     "react-use": "^17.6.1",
-    "react-zoom-pan-pinch": "^4.0.3",
-    "read-excel-file": "^9.3.5",
+    "react-zoom-pan-pinch": "^4.0.4",
+    "read-excel-file": "^9.3.10",
     "string.prototype.replaceall": "^1.0.11",
-    "styled-components": "6.4.2",
+    "styled-components": "6.5.3",
     "use-deep-compare-effect": "^1.8.1",
-    "uuid": "^14.0.1",
+    "uuid": "^14.0.2",
     "yup": "1.7.1"
   },
   "devDependencies": {
-    "@babel/core": "7.29.0",
+    "@babel/core": "7.29.7",
     "@babel/plugin-syntax-jsx": "^8.0.1",
     "@babel/plugin-transform-class-properties": "^8.0.1",
     "@babel/plugin-transform-object-rest-spread": "^8.0.1",
     "@babel/plugin-transform-typescript": "^8.0.1",
-    "@babel/preset-env": "7.29.0",
+    "@babel/preset-env": "7.29.7",
     "@babel/preset-react": "^7.29.7",
     "@babel/preset-typescript": "^8.0.1",
     "@emotion/babel-plugin": "^11.13.5",
     "@eslint/compat": "2.1.0",
-    "@eslint/eslintrc": "^3.3.5",
+    "@eslint/eslintrc": "^3.3.6",
     "@eslint/js": "10.0.1",
-    "@tanstack/eslint-plugin-query": "5.101.2",
+    "@tanstack/eslint-plugin-query": "5.102.8",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "6.9.1",
-    "@testing-library/react": "16.3.2",
-    "@types/lodash": "^4.17.24",
-    "@types/node": "26.1.1",
-    "@types/react": "19.2.17",
-    "@types/react-dom": "19.2.3",
+    "@testing-library/react": "16.3.3",
+    "@types/lodash": "^4.17.25",
+    "@types/node": "26.4.0",
+    "@types/react": "19.2.18",
+    "@types/react-dom": "19.2.5",
     "@types/react-router-dom": "^5.3.3",
-    "@typescript-eslint/eslint-plugin": "8.64.0",
-    "@typescript-eslint/parser": "8.64.0",
+    "@typescript-eslint/eslint-plugin": "8.68.0",
+    "@typescript-eslint/parser": "8.68.0",
     "@vitejs/plugin-react": "5.1.4",
     "braces": "3.0.3",
     "camelcase": "^9.0.0",
     "cross-spawn": "^7.0.6",
-    "esbuild": "0.28.1",
-    "eslint": "^10.5.0",
+    "esbuild": "0.28.2",
+    "eslint": "^10.9.1",
     "eslint-import-resolver-alias": "^1.1.2",
     "eslint-import-resolver-typescript": "4.4.5",
     "eslint-plugin-import": "^2.32.0",
@@ -101,30 +101,35 @@
     "eslint-plugin-react-hooks": "7.1.1",
     "form-data": "^4.0.6",
     "glob": "13.0.6",
-    "globals": "17.6.0",
-    "helmet": "^8.2.0",
-    "js-yaml": "^4.2.0",
+    "globals": "17.11.0",
+    "helmet": "^8.3.0",
+    "js-yaml": "^4.3.2",
     "jsdom": "29.1.1",
     "micromatch": "4.0.8",
-    "msw": "2.14.6",
-    "openapi-typescript-codegen": "^0.30.0",
+    "msw": "2.15.0",
+    "openapi-typescript-codegen": "^0.31.0",
     "path": "^0.12.7",
-    "prettier": "3.9.4",
+    "prettier": "3.9.6",
     "react-test-renderer": "19.2.8",
-    "tough-cookie": "^6.0.1",
+    "tough-cookie": "^6.0.2",
     "ts-node": "^10.9.2",
     "ts-prune": "^0.10.3",
     "typescript": "5.9.3",
-    "vite": "^8.1.5",
+    "vite": "^8.2.2",
     "vite-plugin-csp-guard": "4.0.1",
     "vite-tsconfig-paths": "6.1.1",
-    "vitest": "4.1.10",
+    "vitest": "4.1.11",
     "waait": "^1.0.5"
   },
   "overrides": {
     "@typescript-eslint/utils": "8.61.1",
     "minimatch": ">=9.0.5",
     "rollup": ">=4.59.0",
-    "undici": "^7.25.0"
+    "undici": "^7.29.0",
+    "@babel/core": "^7.29.7",
+    "brace-expansion": "^5.0.9",
+    "nanoid": "^3.3.18",
+    "postcss": "^8.5.26",
+    "js-yaml": "^4.3.2"
   }
 }