chore(deps): bump the frontend-minor-patch group across 1 directory with 34 updates

[dependabot]

Bumps the frontend-minor-patch group with 34 updates in the /frontend directory:

Package	From	To
@axe-core/playwright	4.10.2	4.13.0
@playwright/test	1.61.1	1.63.0
tsx	4.23.1	4.23.13
next	16.3.3	16.3.5
next-intl	4.13.6	4.14.5
react	19.2.7	19.3.0
@types/react	19.2.17	19.3.0
@tailwindcss/postcss	4.3.2	4.3.3
tailwindcss	4.3.2	4.3.3
expo	57.0.15	57.0.24
expo-linking	57.0.7	57.0.10
expo-router	57.0.15	57.0.22
react-native	0.81.6	0.87.1
react-native-gesture-handler	3.2.1	3.3.0
react-native-reanimated	4.6.0	4.7.0
react-native-safe-area-context	5.9.1	5.10.0
react-native-screens	4.27.0	4.28.0
hermes-compiler	250829098.0.17	250829098.0.19
postcss	8.5.19	8.5.28
@radix-ui/react-label	2.1.11	2.1.15
@radix-ui/react-slot	1.3.0	1.3.3
input-otp	1.4.2	1.5.0
radix-ui	1.6.1	1.6.7
react-resizable-panels	4.12.1	4.12.4
@testing-library/react	16.3.2	16.3.3
@tanstack/react-query	5.101.2	5.103.1
react-hook-form	7.81.0	7.88.0
@hookform/resolvers	5.4.0	5.9.1
@tanstack/react-router	1.170.18	1.170.38
typescript-eslint	8.62.1	8.70.0
@eslint/eslintrc	3.3.5	3.3.7
prettier	3.9.5	3.9.8
turbo	2.10.5	2.10.13
vite	8.2.1	8.3.0

Updates @axe-core/playwright from 4.10.2 to 4.13.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.13.0

What's Changed

• ci: use pat instead of github token by @​Garbee in dequelabs/axe-core-npm#1334
• chore: bump nyc from 17.1.0 to 18.0.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1311
• chore: increase timeout for axe-core update by @​Garbee in dequelabs/axe-core-npm#1354
• chore: pin node by @​Garbee in dequelabs/axe-core-npm#1355
• test: fix webdriverio esmTest.mjs by @​straker in dequelabs/axe-core-npm#1356
• chore: disable dependabot rebase strategy by @​Garbee in dequelabs/axe-core-npm#1344
• chore: bump actions/checkout from 6 to 6.0.2 in the gha-low-risk group by @​dependabot[bot] in dequelabs/axe-core-npm#1357
• ci: increase timeout for axe-core update by @​Garbee in dequelabs/axe-core-npm#1360
• chore: exclude test/release from npm workspaces by @​Garbee in dequelabs/axe-core-npm#1361
• chore: bump axios from 1.14.0 to 1.17.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1358
• chore: merge master into develop by @​michael-siek in dequelabs/axe-core-npm#1362
• chore: declare @​eslint/js and group eslint deps for dependabot by @​Garbee in dequelabs/axe-core-npm#1348
• chore: bump actions/checkout from 6.0.2 to 6.0.3 in the gha-low-risk group by @​dependabot[bot] in dequelabs/axe-core-npm#1363
• chore: group browser-driver and jest deps for dependabot by @​Garbee in dequelabs/axe-core-npm#1365
• chore: bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in dequelabs/axe-core-npm#1301
• chore: bump handlebars from 4.7.8 to 4.7.9 by @​dependabot[bot] in dequelabs/axe-core-npm#1305
• chore: bump fast-xml-parser from 5.5.1 to 5.8.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1325
• chore: bump lodash from 4.17.21 to 4.18.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1337
• chore: bump ip-address and socks by @​dependabot[bot] in dequelabs/axe-core-npm#1339
• chore: bump fast-xml-builder from 1.1.0 to 1.2.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1342
• chore: bump basic-ftp from 5.2.0 to 5.3.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1341
• chore: bump qs from 6.14.0 to 6.15.2 by @​dependabot[bot] in dequelabs/axe-core-npm#1349
• chore: bump tmp from 0.2.5 to 0.2.7 by @​dependabot[bot] in dequelabs/axe-core-npm#1350
• chore: bump @​babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.7 by @​dependabot[bot] in dequelabs/axe-core-npm#1343
• chore: bump undici from 6.23.0 to 6.26.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1366
• chore: bump the selenium group with 2 updates by @​dependabot[bot] in dequelabs/axe-core-npm#1369
• chore: bump lint-staged from 16.3.2 to 17.0.7 by @​dependabot[bot] in dequelabs/axe-core-npm#1375
• chore: bump sinon from 21.0.1 to 22.0.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1374
• chore: bump @​playwright/test from 1.58.2 to 1.60.0 in the playwright group by @​dependabot[bot] in dequelabs/axe-core-npm#1371
• feat: Update axe-core to v4.12.1 by @​attest-team-ci in dequelabs/axe-core-npm#1378
• chore: RC v4.12.0 by @​attest-team-ci in dequelabs/axe-core-npm#1381
• chore: RC v4.12.1 by @​attest-team-ci in dequelabs/axe-core-npm#1391
• chore: release v4.12.1 by @​axe-core in dequelabs/axe-core-npm#1393
• chore: merge master into develop by @​attest-team-ci in dequelabs/axe-core-npm#1394
• chore: bump @​sigstore/core from 3.1.0 to 3.2.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1395
• chore: bump axios from 1.17.0 to 1.18.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1400
• chore: bump rollup from 4.46.2 to 4.62.2 by @​dependabot[bot] in dequelabs/axe-core-npm#1402
• chore: bump undici from 6.26.0 to 6.28.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1409
• chore: bump ip-address from 10.2.0 to 10.4.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1408
• ci: remove scheduled trigger from update-axe-core workflow by @​Garbee in dequelabs/axe-core-npm#1411
• feat: update axe-core to v4.13.0 by @​axe-core in dequelabs/axe-core-npm#1413
• chore: RC v4.13.0 by @​attest-team-ci in dequelabs/axe-core-npm#1414
• chore: release v4.13.0 by @​axe-core in dequelabs/axe-core-npm#1416

Full Changelog: dequelabs/axe-core-npm@v4.11.3...v4.13.0

v4.11.3

... (truncated)

Changelog

Sourced from @​axe-core/playwright's changelog.

4.13.0 (2026-08-10)

Features

• Update axe-core to v4.12.1 (#1378) (4263054)
• update axe-core to v4.13.0 (#1413) (399c5d7), closes #1412

4.12.1 (2026-06-22)

Features

• Update axe-core to v4.12.1 (#1378) (4263054)

4.11.3 (2026-04-29)

Bug Fixes

• Update axe-core to v4.11.4 (#1330) (eed87f5)

4.11.2 (2026-04-14)

Bug Fixes

• Update axe-core to v4.11.3 (#1306) (71c4179)
• wdio: support v9 wdio switchFrame and switchWindow (#1302) (4689273), closes #1164

4.11.1 (2026-01-09)

Bug Fixes

• reorder exports to place types first (#1261) (40d22e3), closes #1243
• Update axe-core to v4.11.1 (#1271) (77f577e)

4.11.0 (2025-10-14)

Bug Fixes

• Optimize AxeBuilder memory usage. (#1154) (e53cd36), closes /github.com/bensenescu/axe-core-npm/blob/develop/packages/puppeteer/src/axePuppeteer.ts#L59 /github.com/bensenescu/axe-core-npm/blob/develop/packages/puppeteer/src/utils.ts#L34
• Update axe-core to v4.10.3 (#1155) (f8e3a14)
• wdio: resolve blank navigation issue in WDIO v9 (#1169) (6505560)

Features

• Update axe-core to v4.11.0 (#1233) (2758476)

Commits

• 70dca94 chore: release v4.13.0 (#1416)
• 20a98d8 chore: RC v4.13.0 (#1414)
• 3fb980a chore: RC v4.13.0
• 399c5d7 feat: update axe-core to v4.13.0 (#1413)
• 32aa6cc ci: remove scheduled trigger from update-axe-core workflow (#1411)
• d2e741f chore: bump ip-address from 10.2.0 to 10.4.0 (#1408)
• c1d50f2 chore: bump undici from 6.26.0 to 6.28.0 (#1409)
• afce5b2 chore: bump rollup from 4.46.2 to 4.62.2 (#1402)
• 3de37fb chore: bump axios from 1.17.0 to 1.18.1 (#1400)
• 2d3cb18 chore: bump @​sigstore/core from 3.1.0 to 3.2.1 (#1395)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​axe-core/playwright since your current version.

Updates @playwright/test from 1.61.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view

Updates tsx from 4.23.1 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

• cache: bound shared transform cache memory (#835) (28e1f12)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

• shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

• preserve async ESM require fallback (55cbece)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

• support nyc coverage discovery (#710) (ec1bcd5)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.9

4.23.9 (2026-08-06)

... (truncated)

Commits

• 28e1f12 fix(cache): bound shared transform cache memory (#835)
• ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
• 651f5be test: cover CommonJS TypeScript import.meta paths
• bd3bc64 test: cover CommonJS loader source fallback
• 55cbece fix: preserve async ESM require fallback
• 6c5ba85 docs: document CommonJS default interop
• ec1bcd5 fix: support nyc coverage discovery (#710)
• b6e5b48 docs: clarify CommonJS default imports
• 2f55884 fix: map Node test locations
• de935d5 docs: document Node source-map stack formatting
• Additional commits viewable in compare view

Updates next from 16.3.3 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
• next/image: Reject empty images when reading/writing to the disk cache (#98186)
• Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
• Add CSP nonce to script tags of loading and template files (#98403)
• Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

Commits

• ca2c75e v16.3.5
• 14fb290 [backport] Fix use cache prerender signal retention (#98448)
• 2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
• 4b56cee [16.3.x] Backport docs fixes (#98317)
• 5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
• 93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
• 6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
• d9eac96 [16.3.x] next/image: skip 0-byte entries when initializing disk LRU cache (#9...
• 84b35fe [test] Fix 16.3 deploy test assertions (#98133)
• 14f9c1a [16.3.x][ci] Run flake detection and new deploy tests when merged and on back...
• Additional commits viewable in compare view

Updates next-intl from 4.13.6 to 4.14.5

Release notes

Sourced from next-intl's releases.

v4.14.5

4.14.5 (2026-09-14)

Bug Fixes

• Avoid reading the pathname in useRouter and Link to work better with Cache Components (#2415) (ed97a92) – by @​amannn

v4.14.4

4.14.4 (2026-09-11)

Bug Fixes

• Improve base path detection for setting a cookie (#2410) (f04681d) – by @​soroush5

v4.14.3

4.14.3 (2026-09-10)

Bug Fixes

• Keep $ patterns in route param values literally (#2406) (a97b35e) – by @​soroush5

v4.14.2

4.14.2 (2026-09-01)

Bug Fixes

• Allow @eloqnt/* patches to resolve by moving to ^0.1.0 ranges (#2398) (4d18120) – by @​amannn

v4.14.1

4.14.1 (2026-08-28)

Bug Fixes

• Unbreak experimental.messages without a messages.sourceLocale (#2395) (67fca94) – by @​amannn

v4.14.0

4.14.0 (2026-08-27)

Features

• useExtracted improvements (#2346) (4ccf3b8) – by @​amannn

⚠️ If you're using useExtracted and the po format, this requires an update to your messages.

Please see amannn/next-intl#2393 for details and an upgrade prompt.

v4.13.7

4.13.7 (2026-08-17)

... (truncated)

Changelog

Sourced from next-intl's changelog.

4.14.5 (2026-09-14)

Bug Fixes

• Avoid reading the pathname in useRouter and Link to work better with Cache Components (#2415) (ed97a92) – by @​amannn

4.14.4 (2026-09-11)

Bug Fixes

• Improve base path detection for setting a cookie (#2410) (f04681d) – by @​soroush5

4.14.3 (2026-09-10)

Bug Fixes

• Keep $ patterns in route param values literally (#2406) (a97b35e) – by @​soroush5

4.14.2 (2026-09-01)

Bug Fixes

• Allow @eloqnt/* patches to resolve by moving to ^0.1.0 ranges (#2398) (4d18120) – by @​amannn

4.14.1 (2026-08-28)

Bug Fixes

• Unbreak experimental.messages without a messages.sourceLocale (#2395) (67fca94) – by @​amannn

4.14.0 (2026-08-27)

Features

• useExtracted improvements (#2346) (4ccf3b8) – by @​amannn

4.13.7 (2026-08-17)

Bug Fixes

• Pin @swc/core to a range that is compatible with the extractor plugin (#2389) (a37d8aa) – by @​amannn

Commits

• 7691fca v4.14.5
• ed97a92 fix: Avoid reading the pathname in useRouter and Link to work better with...
• 8267c8f v4.14.4
• f04681d fix: Improve base path detection for setting a cookie (#2410)
• e9b1637 v4.14.3
• a97b35e fix: Keep $ patterns in route param values literally (#2406)
• ddb378d docs: Lint messages with @eloqnt/cli in example-app-router (#2403)
• a388bd5 docs: Add a "Lint your messages" section to the README (#2404)
• 3259beb v4.14.2
• 4d18120 fix: Allow @eloqnt/* patches to resolve by moving to ^0.1.0 ranges (#2398)
• Additional commits viewable in compare view

Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462,

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
notrelix	Ignored		Sep 21, 2026 2:51am UTC