Home Original page

Bump the dependencies group across 1 directory with 20 updates by dependabot[bot] · Pull Request #833 · xarray-contrib/xarray.dev

Bumps the dependencies group with 20 updates in the / directory:

Package From To
@chakra-ui/icons 2.2.1 2.2.4
@chakra-ui/next-js 2.3.1 2.4.2
@chakra-ui/react 2.9.1 3.33.0
@emotion/react 11.13.3 11.14.0
@emotion/styled 11.13.0 11.14.1
@giscus/react 3.0.0 3.1.0
@mdx-js/loader 3.0.1 3.1.1
@mdx-js/react 3.0.1 3.1.1
@next/mdx 14.2.14 16.1.6
apexcharts 3.54.0 5.7.0
framer-motion 11.9.0 12.34.3
isomorphic-dompurify 2.16.0 3.0.0
next 14.2.32 16.1.6
next-mdx-remote 5.0.0 6.0.0
react 18.3.1 19.2.4
react-apexcharts 1.4.1 2.0.1
react-dom 18.3.1 19.2.4
react-icons 5.3.0 5.5.0
react-syntax-highlighter 15.6.6 16.1.1
swr 2.2.5 2.4.1

Updates @chakra-ui/icons from 2.2.1 to 2.2.4

Commits

Updates @chakra-ui/next-js from 2.3.1 to 2.4.2

Commits

Updates @chakra-ui/react from 2.9.1 to 3.33.0

Release notes

Sourced from @​chakra-ui/react's releases.

@​chakra-ui/react@​3.33.0

Minor Changes

  • 60a0a8b Thanks @​segunadebayo! - - Checkbox: Fixed individual checkbox props being overridden by CheckboxGroup when rendering
    • Color Picker: Fixed color not updating when selecting black shades in controlled mode
    • Dialog/Popover: Fixed issue where closing nested dialogs/popovers would incorrectly close parent layers
    • Menu: Fixed glitchy submenu behavior when hovering between trigger items quickly
    • Number Input: Fixed cursor positioning issues after clicking label or scrubbing
    • Pagination: Fixed next trigger not being disabled when count is 0
    • Scroll Area: Added overflow CSS variables for scroll fade effects (--scroll-area-overflow-{x,y}-{start,end})
    • Slider:
      • Added thumbCollisionBehavior prop to control collision handling between thumbs (none, push, swap)
      • Fixed thumb drag behavior from edge in thumbAlignment="contain" mode
    • Steps: Added validation support with isStepValid, isStepSkippable, and onStepInvalid props
    • Switch: Fixed api.toggleChecked() not working
    • Tags Input: Added placeholder prop that shows when no tags exist
    • Textarea: Fixed change event not being emitted after clearing controlled textarea
    • Tooltip: Added data-instant attribute for instant animations when switching between multiple tooltip triggers
    • Tree View: Fixed initial focus when first node/branch is disabled

Patch Changes

  • 2b8360b Thanks @​segunadebayo! - CodeBlock: Fix overlay and floating elements scrolling out of view when horizontally scrolling long code lines.

@​chakra-ui/react@​3.32.0

Minor Changes

Patch Changes

... (truncated)

Changelog

Sourced from @​chakra-ui/react's changelog.

3.33.0

Minor Changes

  • 60a0a8b Thanks @​segunadebayo! - - Checkbox: Fixed individual checkbox props being overridden by CheckboxGroup when rendering
    • Color Picker: Fixed color not updating when selecting black shades in controlled mode
    • Dialog/Popover: Fixed issue where closing nested dialogs/popovers would incorrectly close parent layers
    • Menu: Fixed glitchy submenu behavior when hovering between trigger items quickly
    • Number Input: Fixed cursor positioning issues after clicking label or scrubbing
    • Pagination: Fixed next trigger not being disabled when count is 0
    • Scroll Area: Added overflow CSS variables for scroll fade effects (--scroll-area-overflow-{x,y}-{start,end})
    • Slider:
      • Added thumbCollisionBehavior prop to control collision handling between thumbs (none, push, swap)
      • Fixed thumb drag behavior from edge in thumbAlignment="contain" mode
    • Steps: Added validation support with isStepValid, isStepSkippable, and onStepInvalid props
    • Switch: Fixed api.toggleChecked() not working
    • Tags Input: Added placeholder prop that shows when no tags exist
    • Textarea: Fixed change event not being emitted after clearing controlled textarea
    • Tooltip: Added data-instant attribute for instant animations when switching between multiple tooltip triggers
    • Tree View: Fixed initial focus when first node/branch is disabled

Patch Changes

  • 2b8360b Thanks @​segunadebayo! - CodeBlock: Fix overlay and floating elements scrolling out of view when horizontally scrolling long code lines.

3.32.0

Minor Changes

Patch Changes

... (truncated)

Commits

Updates @emotion/react from 11.13.3 to 11.14.0

Release notes

Sourced from @​emotion/react's releases.

@​emotion/react@​11.14.0

Minor Changes

  • #3281 fc4d7bd Thanks @​Andarist! - Source code has been migrated to TypeScript. From now on type declarations will be emitted based on that, instead of being hand-written.

Patch Changes

  • Updated dependencies [8dc1a6d, e1bf17e]:
    • @​emotion/cache@​11.14.0
    • @​emotion/use-insertion-effect-with-fallbacks@​1.2.0

@​emotion/react@​11.13.5

Patch Changes

  • #3270 77d930d Thanks @​emmatown! - Fix inconsistent hashes using development vs production bundles/exports conditions when using @emotion/babel-plugin with sourceMap: true (the default). This is particularly visible when using Emotion with the Next.js Pages router where the development condition is used when bundling code but not when importing external code with Node.js.

  • Updated dependencies [77d930d]:

    • @​emotion/serialize@​1.3.3
    • @​emotion/cache@​11.13.5
    • @​emotion/utils@​1.4.2
    • @​emotion/babel-plugin@​11.13.5
Commits

Updates @emotion/styled from 11.13.0 to 11.14.1

Release notes

Sourced from @​emotion/styled's releases.

@​emotion/styled@​11.14.1

Patch Changes

  • #3334 0facbe4 Thanks @​ZachRiegel! - Renamed default-exported variable in @emotion/styled to aid inferred import names in auto-import completions in IDEs

@​emotion/styled@​11.14.0

Minor Changes

  • #3284 a19d019 Thanks @​Andarist! - Source code has been migrated to TypeScript. From now on type declarations will be emitted based on that, instead of being hand-written.

Patch Changes

  • Updated dependencies [e1bf17e]:
    • @​emotion/use-insertion-effect-with-fallbacks@​1.2.0

@​emotion/styled@​11.13.5

Patch Changes

  • #3270 77d930d Thanks @​emmatown! - Fix inconsistent hashes using development vs production bundles/exports conditions when using @emotion/babel-plugin with sourceMap: true (the default). This is particularly visible when using Emotion with the Next.js Pages router where the development condition is used when bundling code but not when importing external code with Node.js.

  • Updated dependencies [77d930d]:

    • @​emotion/serialize@​1.3.3
    • @​emotion/utils@​1.4.2
    • @​emotion/babel-plugin@​11.13.5
Commits

Updates @giscus/react from 3.0.0 to 3.1.0

Release notes

Sourced from @​giscus/react's releases.

@​giscus/react v3.1.0

Added

  • Update types with new available languages and themes.
Commits
  • eba2a53 common: Update giscus to 1.6.0 and bump version to 3.1.0
  • 282f365 common: Update types with new languages and themes
  • d3f7f4a common: Update dependencies
  • e1a3a8d build(deps-dev): bump the react group across 1 directory with 6 updates
  • 06a9bf1 common: Ensure component is rendered after import is finished
  • 8415cf3 react: Fix tsconfig for vite.config.mts
  • 58b355a react: Allow React 19
  • acedcb2 react: Simplify tsconfig
  • 5ea198e react: Fix type augmentation for giscus-widget
  • 25a7bf9 build(deps-dev): bump the react group across 1 directory with 12 updates
  • Additional commits viewable in compare view

Updates @mdx-js/loader from 3.0.1 to 3.1.1

Release notes

Sourced from @​mdx-js/loader's releases.

3.1.1

Fix

Types

  • 933ab444 @mdx-js/mdx: add attributes to export/import declarations

Docs

Full Changelog: mdx-js/mdx@3.1.0...3.1.1

3.1.0

Add

Fix

  • d306f870 @mdx-js/core: replace periscopic with estree-util-scope
  • c7479905 @mdx-js/core: fix injecting providers for jsx in esm, expressions
  • 3a794ab5 @mdx-js/loader: fix ESM type import by @​remcohaszing in mdx-js/mdx#2452
  • be79212a @mdx-js/loader: change webpack peer dependency to optional by @​chenjiahan in mdx-js/mdx#2440

Types

... (truncated)

Commits

Updates @mdx-js/react from 3.0.1 to 3.1.1

Release notes

Sourced from @​mdx-js/react's releases.

3.1.1

Fix

Types

  • 933ab444 @mdx-js/mdx: add attributes to export/import declarations

Docs

Full Changelog: mdx-js/mdx@3.1.0...3.1.1

3.1.0

Add

Fix

  • d306f870 @mdx-js/core: replace periscopic with estree-util-scope
  • c7479905 @mdx-js/core: fix injecting providers for jsx in esm, expressions
  • 3a794ab5 @mdx-js/loader: fix ESM type import by @​remcohaszing in mdx-js/mdx#2452
  • be79212a @mdx-js/loader: change webpack peer dependency to optional by @​chenjiahan in mdx-js/mdx#2440

Types

... (truncated)

Commits

Updates @next/mdx from 14.2.14 to 16.1.6

Release notes

Sourced from @​next/mdx's releases.

v16.1.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Upgrade to swc 54 (#88207)
  • implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
  • tweak LRU sentinel key (#89123)

Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

v16.1.5

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472 https://vercel.com/changelog/summary-of-cve-2026-23864

v16.1.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Only filter next config if experimental flag is enabled (#88733)

Credits

Huge thanks to @​mischnic for helping!

v16.1.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix linked list bug in LRU deleteFromLru (#88652)
  • Fix relative same host redirects in node middleware (#88253)

Credits

Huge thanks to @​acdlite and @​ijjk for helping!

v16.1.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

... (truncated)

Commits

Updates apexcharts from 3.54.0 to 5.7.0

Release notes

Sourced from apexcharts's releases.

💎 Version 5.7.0

Features

Feature-level tree-shaking

ApexCharts now ships modular entry points so you can import only the chart types and features your application actually uses. This can cut bundle size substantially for apps that don't need the full chart catalogue.

// Minimal custom bundle — only what you need
import ApexCharts from 'apexcharts/core'
import 'apexcharts/line'               // line / area / scatter
import 'apexcharts/features/legend'    // optional legend

Chart-type entry points

Import Chart types
apexcharts/line line, area, scatter, bubble
apexcharts/bar bar, column
apexcharts/pie pie, donut
apexcharts/radial radialBar
apexcharts/candlestick candlestick
apexcharts/heatmap heatmap
apexcharts/treemap treemap
apexcharts/rangearea rangeArea, rangeBar
apexcharts/boxplot boxPlot
apexcharts/funnel funnel
apexcharts/radar radar

Feature entry points

Import Feature
apexcharts/features/legend Legend
apexcharts/features/toolbar Toolbar / zoom controls
apexcharts/features/exports SVG / PNG / CSV / JSON export
apexcharts/features/annotations Point, line, and area annotations
apexcharts/features/keyboard Keyboard navigation (accessibility)

The standard import ApexCharts from 'apexcharts' import continues to work unchanged — all chart types and features are included by default.

Keyboard navigation

Charts are now keyboard-accessible. After focusing a chart (tab or click), users can navigate between data points using the arrow keys. The tooltip and active marker update as focus moves between points. This meets WCAG 2.1 AA keyboard

... (truncated)

Commits
  • 41923a4 release: 5.7.0
  • 9bd70f8 fix: lint errors
  • 3e541a1 feat: feature-level tree-shaking via chart-type registry and optional feature...
  • db422ed Merge branch 'main' of https://github.com/apexcharts/apexcharts.js
  • 2322644 refactor: migrate internal gl.* aliases to typed slice paths
  • 1f11d84 Merge pull request #5173 from apexcharts/dependabot/npm_and_yarn/rollup-4.59.0
  • e966283 ci: switch workflows from npm ci to yarn install --frozen-lockfile
  • 696bc8f replace npm lint with yarn lint
  • be06db7 refactor: activate typed slices + migrate w.globals.* to typed slice paths
  • 2a0e23f refactor: Phase 1 - slice extraction and return-value write-back stubs
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates framer-motion from 11.9.0 to 12.34.3

Changelog

Sourced from framer-motion's changelog.

[12.34.3] 2026-02-20

Fixed

  • Ensure velocity is never transferred to a time-derived spring.

[12.34.2] 2026-02-18

Fixed

  • Layout animations: Reset motion value velocity when starting a new layout animation.

[12.34.1] 2026-02-17

Fixed

  • useScroll: Ensure animations aren't hardware accelerated when target is set.
  • Improve animatable "none" generation for mask values.

[12.34.0] 2026-02-09

Added

  • useScroll: Hardware accelerated animations.

[12.33.2] 2026-02-06

Fixed

  • Improve detection of detached elements with vanilla layout animations.

[12.33.1] 2026-02-06

Fixed

  • AnimatePresence: Ensure exiting nodes are correctly removed when rapidly switching children.

[12.33.0] 2026-02-05

Added

  • <motion />: New propagate.tap prop prevents tap gestures from propagating to parents.

[12.32.0] 2026-02-05

Added

  • transition.inherit: When true, inherit transition values from less-specific transitions.

[12.31.3] 2026-02-05

... (truncated)

Commits
  • 071f659 v12.34.3
  • ab73833 Updating changelog
  • bd6eac3 Merge pull request #3564 from motiondivision/fix/time-defined-spring-velocity
  • bebd7f5 Ignore velocity for time-defined springs to prevent wild oscillation
  • 6828340 v12.34.2
  • 679a0ad Reset layout animation motion value velocity on restart
  • 1d566fc Merge pull request #3546 from veeceey/fix/typescript-ban-types-issue
  • 57263d8 v12.34.1
  • 9447ee2 Updating changelog
  • 79a4097 Merge pull request #3555 from motiondivision/scroll-acc
  • Additional commits viewable in compare view

Updates isomorphic-dompurify from 2.16.0 to 3.0.0

Release notes

Sourced from isomorphic-dompurify's releases.

3.0.0: ESM Support + Memory Leak Fix for Long-Running Server Processes

isomorphic-dompurify v3.0.0

ESM Support

The library now ships proper ESM alongside CommonJS. Both import and require work out of the box with correct module resolution.

// ESM — now works natively
import DOMPurify, { sanitize } from "isomorphic-dompurify";
// CJS — still works
const DOMPurify = require("isomorphic-dompurify");

Memory Leak Fix for Long-Running Server Processes

New clearWindow() export that closes the internal jsdom window and creates a fresh one, preventing unbounded memory growth and progressive slowdown in long-running Node.js processes (#368).

import { sanitize, clearWindow } from "isomorphic-dompurify";
// Call clearWindow() when you want to release accumulated DOM state,
// e.g. periodically, after a batch, or per-request in a server:
app.use((req, res, next) => {
res.on("finish", () => clearWindow());
next();
});

Note: clearWindow() is a no-op in the browser build (no jsdom to manage). Any hooks or config set via addHook/setConfig will need to be re-applied after calling it.

Breaking Changes

  • Named exports are now available. sanitize, addHook, removeHook, removeHooks, removeAllHooks, setConfig, clearConfig, isValidAttribute, isSupported, version, and removed are all exported directly.
  • global.DOMPurify singleton removed. The library no longer writes to global.DOMPurify. Module caching provides singleton behavior in both ESM and CJS. This also fixes a security concern where malicious code could preempt the global before the module loaded (#324).
  • Build output moved to dist/. Entry points are now dist/index.js (CJS), dist/index.mjs (ESM), dist/browser.js (CJS), dist/browser.mjs (ESM). The exports map handles this automatically — no changes needed for consumers using standard imports.
  • Type definitions are auto-generated. The hand-written index.d.ts using export = DOMPurify is replaced by generated .d.ts and .d.mts files with proper export default and named exports.
  • Node.js version constraint tightened. Now requires ^20.19.0 || ^22.12.0 || >=24.0.0 to match jsdom 28's requirements. Node 21.x, 23.x, and 22.0–22.11 are no longer supported.

Issues Fixed

  • #368 — Memory leak and progressive slowdown in long-running Node.js processes
  • #163 — ESM support
  • #324 — Security concern with global.DOMPurify
  • #353 — lru-cache ESM resolution errors in Nuxt/Nitro builds
  • #350 — Build error with Astro + Cloudflare adapter
  • #203 — Build error in Angular Universal

Issues Mitigated

... (truncated)

Commits
  • 5b92fc4 chore: bump version to 3.0.0
  • 2e6e322 chore: Updated biome config.
  • 295e3a7 chore(deps-dev): bump @​biomejs/biome from 2.4.2 to 2.4.4
  • 9f0e6b5 chore: bump version to 3.0.0-rc.3
  • fa6b673 chore(deps): bump jsdom from 28.0.0 to 28.1.0
  • f527ba7 chore: add Biome linting, lefthook pre-commit hooks, and CI lint step
  • bca3171 docs: Added Playgrounds section to the readme.
  • 112fd3c Merge pull request #389 from kkomelin/memory-leak
  • f34f7b3 chore: untrack RELEASE_NOTES_3.0.0.md
  • 4be627b fix: make removed named export delegate to current instance
  • Additional commits viewable in compare view

Updates next from 14.2.32 to 16.1.6

Release notes

Sourced from next's releases.

v16.1.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Upgrade to swc 54 (#88207)
  • implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
  • tweak LRU sentinel key (#89123)

Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

v16.1.5

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472 https://vercel.com/changelog/summary-of-cve-2026-23864

v16.1.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Only filter next config if experimental flag is enabled (#88733)

Credits

Huge thanks to @​mischnic for helping!

v16.1.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix linked list bug in LRU deleteFromLru (#88652)
  • Fix relative same host redirects in node middleware (#88253)

Credits

Huge thanks to @​acdlite and @​ijjk for helping!

v16.1.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

... (truncated)

Commits

Updates next-mdx-remote from 5.0.0 to 6.0.0

Release notes

Sourced from next-mdx-remote's releases.

v6.0.0

Breaking/Major Changes

Changelog

Sourced from next-mdx-remote's changelog.

6.0.0

Breaking/Major Changes

  • Updated unist-util-remove to ^4.0.0
  • Introduced the parameters blockJS and blockDangerousJS that controls how JS in interpreted during compiling MDX. Both default to true for security reasons.
  • Updated the README to explain this change: hashicorp/next-mdx-remote#498.
Commits
Maintainer changes

This version was pushed to npm by rubennic, a new releaser for next-mdx-remote since your current version.

Updates react from 18.3.1 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components