Skip to content

chore(deps): bump the minor group across 1 directory with 23 updates - #1599

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-c2a2070cfe
Open

chore(deps): bump the minor group across 1 directory with 23 updates#1599
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-c2a2070cfe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group with 23 updates in the /frontend directory:

Package From To
@diamondlightsource/sci-react-ui 0.3.0 0.7.0
@jsonforms/core 3.6.0 3.8.0
@jsonforms/material-renderers 3.6.0 3.8.0
@jsonforms/react 3.6.0 3.8.0
@xyflow/react 12.9.2 12.11.6
ajv 8.18.0 8.20.0
graphql-ws 6.0.6 6.2.1
fuse.js 7.1.0 7.5.0
@testing-library/react 16.3.0 16.3.3
@testing-library/user-event 14.6.1 14.6.7
@vitest/eslint-plugin 1.4.2 1.6.27
eslint-plugin-react-hooks 7.0.1 7.1.1
eslint-plugin-react-refresh 0.4.24 0.5.6
prettier 3.6.2 3.9.6
typescript-eslint 8.46.3 8.70.0
@storybook/addon-links 10.3.5 10.6.0
@storybook/builder-vite 10.3.6 10.6.0
@storybook/react-vite 10.3.6 10.6.0
storybook 10.3.6 10.6.0
@storybook/addon-docs 10.3.6 10.6.0
keycloak-js 26.2.1 26.2.4
msw 2.12.1 2.15.0
react-router-dom 7.12.0 7.18.3

Updates @diamondlightsource/sci-react-ui from 0.3.0 to 0.7.0

Release notes

Sourced from @​diamondlightsource/sci-react-ui's releases.

v0.7.0

[v0.7.0] - 2026-09-02

Added

  • New SidebarNav component, with afterNavSlot and footerSlot to inject content after the nav items or pinned to the bottom of the drawer.
  • Added typography fonts and tokens for default, display, mono typography into the theme (Inter, Outfit, IBM Plex Mono).
  • Added DiamondDSIntegrations for global Material React Table (MRT) theme overrides.
  • Added Typography and Icons pages to the documentation's Foundation section.

Changed

  • Widened the --ds-elevation-* token scale to a 25-step gradient and switched Paper's tonal elevation to use it consistently in light and dark modes; --Paper-shadow is now off by default and reinstated only on Dialog, Popover-based dropdowns (Menu/Select), Autocomplete's listbox, temporary Drawers and SnackbarContent.
  • Reworked Navbar surface options: default surface remains brand, with brand-fixed/brand-fixedDim documented as alternatives for a persistent Diamond identity colour; neutral surfaces now get a bottom border to separate them from the content below.
  • Increased contrast of the danger, warning and success intent colours in light mode.
  • Updated the tertiary and highlight (secondary brand) colour tokens for light and dark modes.
  • Corrected mislabeled MUI palette roles and reorganised the colour documentation, splitting functional intent colours from core brand colours (brand, tertiary, highlight) and adding contrastText rows.
  • Bumped pnpm override versions to address vulnerabilities flagged by the OSV scanner.

Fixed

  • Fixed Navbar logo tone matching: the light-on-dark logo is now only forced for surfaces that stay saturated in both modes, instead of being hardcoded for every non-brand surface.
  • Fixed the permanent SidebarNav drawer not reliably filling the full viewport height.
  • Fixed MuiCard raised and MuiAutocomplete's listbox not matching their documented elevation band.

v0.6.2

Added

  • Comprehensive tests for DiamondDSTheme to improve coverage and ensure theme consistency.
  • Added overrides for MuiButtonGroup for improved styling consistency.

Changed

  • Refactored the theme architecture to improve maintainability and compatibility with Material React Table (MRT).
  • Updated border and alpha colour tokens to align with the design system theme and improve visual consistency.
  • Updated Avatar and MuiToggleButton theme overrides for improved styling consistency.
  • Updated the project's Node.js version.

Fixed

  • Updated the theme implementation to satisfy the new test suite and improve reliability.
  • Fixed initial theme flash by updating ColourSchemeButton and the development index.
  • Fixed colour scheme transition animation flicker when switching between light and dark modes.
  • Fixed minor compatibility issues
  • Fixed the Storybook installation link.

v0.6.2-alpha.1

Added

  • Comprehensive tests for DiamondDSTheme to improve coverage and ensure theme consistency.

... (truncated)

Changelog

Sourced from @​diamondlightsource/sci-react-ui's changelog.

[v0.7.0] - 2026-09-02

Added

  • New SidebarNav component, with afterNavSlot and footerSlot to inject content after the nav items or pinned to the bottom of the drawer.
  • Added typography fonts and tokens for default, display, mono typography into the theme (Inter, Outfit, IBM Plex Mono).
  • Added DiamondDSIntegrations for global Material React Table (MRT) theme overrides.
  • Added Typography and Icons pages to the documentation's Foundation section.

Changed

  • Widened the --ds-elevation-* token scale to a 25-step gradient and switched Paper's tonal elevation to use it consistently in light and dark modes; --Paper-shadow is now off by default and reinstated only on Dialog, Popover-based dropdowns (Menu/Select), Autocomplete's listbox, temporary Drawers and SnackbarContent.
  • Reworked Navbar surface options: default surface remains brand, with brand-fixed/brand-fixedDim documented as alternatives for a persistent Diamond identity colour; neutral surfaces now get a bottom border to separate them from the content below.
  • Increased contrast of the danger, warning and success intent colours in light mode.
  • Updated the tertiary and highlight (secondary brand) colour tokens for light and dark modes.
  • Corrected mislabeled MUI palette roles and reorganised the colour documentation, splitting functional intent colours from core brand colours (brand, tertiary, highlight) and adding contrastText rows.
  • Bumped pnpm override versions to address vulnerabilities flagged by the OSV scanner.

Fixed

  • Fixed Navbar logo tone matching: the light-on-dark logo is now only forced for surfaces that stay saturated in both modes, instead of being hardcoded for every non-brand surface.
  • Fixed the permanent SidebarNav drawer not reliably filling the full viewport height.
  • Fixed MuiCard raised and MuiAutocomplete's listbox not matching their documented elevation band.

[v0.6.2] - 2026-07-21

Added

  • Comprehensive tests for DiamondDSTheme to improve coverage and ensure theme consistency.
  • Added overrides for MuiButtonGroup for improved styling consistency.

Changed

  • Refactored the theme architecture to improve maintainability and compatibility with Material React Table (MRT).
  • Updated border and alpha colour tokens to align with the design system theme and improve visual consistency.
  • Updated Avatar and MuiToggleButton theme overrides for improved styling consistency.
  • Updated the project's Node.js version.

Fixed

  • Updated the theme implementation to satisfy the new test suite and improve reliability.
  • Fixed initial theme flash by updating ColourSchemeButton and the development index.
  • Fixed colour scheme transition animation flicker when switching between light and dark modes.
  • Fixed minor compatibility issues
  • Fixed the Storybook installation link.

[v0.6.1] - 2026-06-25

Added

... (truncated)

Commits
  • 30849c6 Version tweaks (#285)
  • fa27f7e Release v0.6.3 (#281)
  • ce829f8 Typography Docs: Expanded MUI Typography Story with full DS Typography (#279)
  • 8e2444f Added an Integrations page for global MRT theme overrides (#249)
  • 92e7a95 Updated docs theme colours and add reference to highlight and tertiary (#267)
  • 6a43a0d Rework Navbar surface options and fix logo tone matching (#268)
  • aea9988 Widen elevation scale and suppress Paper shadow (#269)
  • a6d7201 Add afterNavSlot and footerSlot to SidebarNav (#270)
  • e3057c7 Docs: Added Typography and Icons to Foundation section (#254)
  • 623998b New component: Initial SidebarNav implementation (#221)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by akademy, a new releaser for @​diamondlightsource/sci-react-ui since your current version.


Updates @jsonforms/core from 3.6.0 to 3.8.0

Release notes

Sourced from @​jsonforms/core's releases.

v3.8.0

What's Changed

[angular] remove deprecated use of ComponentFactoryResolver (eclipsesource/jsonforms#2566) [angular] build against v20, allow v22 RC, inject() instead of constructor injection (eclipsesource/jsonforms#2573) [angular] add option to toggle off errors without user interaction (eclipsesource/jsonforms#2583) [angular] allow 22 release and bump dev deps to latest 20.x.x (eclipsesource/jsonforms#2590)

[angular-material] Remove outdated TSDOC for AutocompleteControlRenderer (eclipsesource/jsonforms#2534) [angular-material] Translate Autocomplete Control Renderer (eclipsesource/jsonforms#2535) [angular-material] Remove hammerjs from angular-material and bump angular dev deps (eclipsesource/jsonforms#2561) [angular-material] OneOf Enum Control Renderer (eclipsesource/jsonforms#2551)

[core] feat: Pass oneOf subschema to Translator (eclipsesource/jsonforms#2536) [core] Filter error keywords before touch (eclipsesource/jsonforms#2540) [core] Increase AJV to ^8.18.0 and bump angular dev deps (eclipsesource/jsonforms#2552) [core] feat: add separateReadonlyFromDisabled config option (eclipsesource/jsonforms#2532) [core] Fix oneOf renderers not clearing some primitive values (eclipsesource/jsonforms#2520) [core] fix: Fix validation errors for nested props of same name (eclipsesource/jsonforms#2531) [core] improve Translator type for strict TypeScript compatibility (eclipsesource/jsonforms#2562) [core] handle nullable object/array in generateUISchema (eclipsesource/jsonforms#2586) [core] improve id generation (eclipsesource/jsonforms#2584)

[core, react] fix: Remove usage of lodash/isArray and React.StatelessComponent (eclipsesource/jsonforms#2539)

[react] remove usage of React.ReducerAction (eclipsesource/jsonforms#2581)

[vue] add jest testing hints on imports (eclipsesource/jsonforms#2568)

[vue-vuetify] fix data flicker when quickly changing between inputs (eclipsesource/jsonforms#2558) [vue-vuetify] fix: make rawChildErrors reactive in vue-vuetify (eclipsesource/jsonforms#2580)

[core, vue] Fix categorization stepper step order index, introduce new composition function for vue, fix config to be properly passed to test functions (eclipsesource/jsonforms#2522)

[dev] add project information for Theia AI (eclipsesource/jsonforms#2470) [dev] add UI testing guide to CLAUDE.md, align dev scripts (eclipsesource/jsonforms#2554) [dev] Update to Node 24 and pnpm 10.33.0 and update GH actions (eclipsesource/jsonforms#2565)

[dependencies] bump lodash from 4.17.21 to 4.17.23 (eclipsesource/jsonforms#2537) [dependencies] Bump angular dev dependencies to latest 19.x (eclipsesource/jsonforms#2527) [dependencies] bump rollup from 2.79.1 to 2.80.0 (eclipsesource/jsonforms#2546) [dependencies] bump lodash from 4.17.23 to 4.18.1 (eclipsesource/jsonforms#2564)

[docs] update roadmap timeline and milestones for 2026 (eclipsesource/jsonforms#2518) [docs] update roadmap (eclipsesource/jsonforms#2576)

When migrating from 3.7 to 3.8, check the migration guide. There have been breaking changes relating to the Angular renderers and the translator type. Furthermore, support for Angular 19 was dropped.

Contributors

... (truncated)

Commits
  • 6075bce v3.8.0
  • c602e0e v3.8.0-beta.0
  • 37387f3 core: avoid quadratic id generation for repeated proposed ids
  • e797a3d core: expose Id singleton to allow overriding id generation
  • 7556cec core: handle nullable object/array in generateUISchema
  • 53918bc v3.8.0-alpha.2
  • 9752a40 dev: upgrade to typescript ~5.8.3
  • 2d4eee9 v3.8.0-alpha.1
  • 31b9a7a core: improve Translator type for strict TypeScript compatibility (#2562)
  • 4c27a53 fix(core): Fix validation errors for nested props of same name (#2531)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​jsonforms/core since your current version.


Updates @jsonforms/material-renderers from 3.6.0 to 3.8.0

Release notes

Sourced from @​jsonforms/material-renderers's releases.

v3.8.0

What's Changed

[angular] remove deprecated use of ComponentFactoryResolver (eclipsesource/jsonforms#2566) [angular] build against v20, allow v22 RC, inject() instead of constructor injection (eclipsesource/jsonforms#2573) [angular] add option to toggle off errors without user interaction (eclipsesource/jsonforms#2583) [angular] allow 22 release and bump dev deps to latest 20.x.x (eclipsesource/jsonforms#2590)

[angular-material] Remove outdated TSDOC for AutocompleteControlRenderer (eclipsesource/jsonforms#2534) [angular-material] Translate Autocomplete Control Renderer (eclipsesource/jsonforms#2535) [angular-material] Remove hammerjs from angular-material and bump angular dev deps (eclipsesource/jsonforms#2561) [angular-material] OneOf Enum Control Renderer (eclipsesource/jsonforms#2551)

[core] feat: Pass oneOf subschema to Translator (eclipsesource/jsonforms#2536) [core] Filter error keywords before touch (eclipsesource/jsonforms#2540) [core] Increase AJV to ^8.18.0 and bump angular dev deps (eclipsesource/jsonforms#2552) [core] feat: add separateReadonlyFromDisabled config option (eclipsesource/jsonforms#2532) [core] Fix oneOf renderers not clearing some primitive values (eclipsesource/jsonforms#2520) [core] fix: Fix validation errors for nested props of same name (eclipsesource/jsonforms#2531) [core] improve Translator type for strict TypeScript compatibility (eclipsesource/jsonforms#2562) [core] handle nullable object/array in generateUISchema (eclipsesource/jsonforms#2586) [core] improve id generation (eclipsesource/jsonforms#2584)

[core, react] fix: Remove usage of lodash/isArray and React.StatelessComponent (eclipsesource/jsonforms#2539)

[react] remove usage of React.ReducerAction (eclipsesource/jsonforms#2581)

[vue] add jest testing hints on imports (eclipsesource/jsonforms#2568)

[vue-vuetify] fix data flicker when quickly changing between inputs (eclipsesource/jsonforms#2558) [vue-vuetify] fix: make rawChildErrors reactive in vue-vuetify (eclipsesource/jsonforms#2580)

[core, vue] Fix categorization stepper step order index, introduce new composition function for vue, fix config to be properly passed to test functions (eclipsesource/jsonforms#2522)

[dev] add project information for Theia AI (eclipsesource/jsonforms#2470) [dev] add UI testing guide to CLAUDE.md, align dev scripts (eclipsesource/jsonforms#2554) [dev] Update to Node 24 and pnpm 10.33.0 and update GH actions (eclipsesource/jsonforms#2565)

[dependencies] bump lodash from 4.17.21 to 4.17.23 (eclipsesource/jsonforms#2537) [dependencies] Bump angular dev dependencies to latest 19.x (eclipsesource/jsonforms#2527) [dependencies] bump rollup from 2.79.1 to 2.80.0 (eclipsesource/jsonforms#2546) [dependencies] bump lodash from 4.17.23 to 4.18.1 (eclipsesource/jsonforms#2564)

[docs] update roadmap timeline and milestones for 2026 (eclipsesource/jsonforms#2518) [docs] update roadmap (eclipsesource/jsonforms#2576)

When migrating from 3.7 to 3.8, check the migration guide. There have been breaking changes relating to the Angular renderers and the translator type. Furthermore, support for Angular 19 was dropped.

Contributors

... (truncated)

Commits
  • 6075bce v3.8.0
  • c602e0e v3.8.0-beta.0
  • e797a3d core: expose Id singleton to allow overriding id generation
  • 53918bc v3.8.0-alpha.2
  • 713f863 react: remove usage of React.ReducerAction
  • 9752a40 dev: upgrade to typescript ~5.8.3
  • 2d4eee9 v3.8.0-alpha.1
  • 31b9a7a core: improve Translator type for strict TypeScript compatibility (#2562)
  • 574e2d1 react-material: Fix oneOf renderer not clearing some primitive values
  • 754d9dd v3.8.0-alpha.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​jsonforms/material-renderers since your current version.


Updates @jsonforms/react from 3.6.0 to 3.8.0

Release notes

Sourced from @​jsonforms/react's releases.

v3.8.0

What's Changed

[angular] remove deprecated use of ComponentFactoryResolver (eclipsesource/jsonforms#2566) [angular] build against v20, allow v22 RC, inject() instead of constructor injection (eclipsesource/jsonforms#2573) [angular] add option to toggle off errors without user interaction (eclipsesource/jsonforms#2583) [angular] allow 22 release and bump dev deps to latest 20.x.x (eclipsesource/jsonforms#2590)

[angular-material] Remove outdated TSDOC for AutocompleteControlRenderer (eclipsesource/jsonforms#2534) [angular-material] Translate Autocomplete Control Renderer (eclipsesource/jsonforms#2535) [angular-material] Remove hammerjs from angular-material and bump angular dev deps (eclipsesource/jsonforms#2561) [angular-material] OneOf Enum Control Renderer (eclipsesource/jsonforms#2551)

[core] feat: Pass oneOf subschema to Translator (eclipsesource/jsonforms#2536) [core] Filter error keywords before touch (eclipsesource/jsonforms#2540) [core] Increase AJV to ^8.18.0 and bump angular dev deps (eclipsesource/jsonforms#2552) [core] feat: add separateReadonlyFromDisabled config option (eclipsesource/jsonforms#2532) [core] Fix oneOf renderers not clearing some primitive values (eclipsesource/jsonforms#2520) [core] fix: Fix validation errors for nested props of same name (eclipsesource/jsonforms#2531) [core] improve Translator type for strict TypeScript compatibility (eclipsesource/jsonforms#2562) [core] handle nullable object/array in generateUISchema (eclipsesource/jsonforms#2586) [core] improve id generation (eclipsesource/jsonforms#2584)

[core, react] fix: Remove usage of lodash/isArray and React.StatelessComponent (eclipsesource/jsonforms#2539)

[react] remove usage of React.ReducerAction (eclipsesource/jsonforms#2581)

[vue] add jest testing hints on imports (eclipsesource/jsonforms#2568)

[vue-vuetify] fix data flicker when quickly changing between inputs (eclipsesource/jsonforms#2558) [vue-vuetify] fix: make rawChildErrors reactive in vue-vuetify (eclipsesource/jsonforms#2580)

[core, vue] Fix categorization stepper step order index, introduce new composition function for vue, fix config to be properly passed to test functions (eclipsesource/jsonforms#2522)

[dev] add project information for Theia AI (eclipsesource/jsonforms#2470) [dev] add UI testing guide to CLAUDE.md, align dev scripts (eclipsesource/jsonforms#2554) [dev] Update to Node 24 and pnpm 10.33.0 and update GH actions (eclipsesource/jsonforms#2565)

[dependencies] bump lodash from 4.17.21 to 4.17.23 (eclipsesource/jsonforms#2537) [dependencies] Bump angular dev dependencies to latest 19.x (eclipsesource/jsonforms#2527) [dependencies] bump rollup from 2.79.1 to 2.80.0 (eclipsesource/jsonforms#2546) [dependencies] bump lodash from 4.17.23 to 4.18.1 (eclipsesource/jsonforms#2564)

[docs] update roadmap timeline and milestones for 2026 (eclipsesource/jsonforms#2518) [docs] update roadmap (eclipsesource/jsonforms#2576)

When migrating from 3.7 to 3.8, check the migration guide. There have been breaking changes relating to the Angular renderers and the translator type. Furthermore, support for Angular 19 was dropped.

Contributors

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​jsonforms/react since your current version.


Updates @xyflow/react from 12.9.2 to 12.11.6

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

@​xyflow/react@​12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

@​xyflow/react@​12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

  • #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

  • #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

@​xyflow/react@​12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

  • #5943 d1def59 - Invoke an error if handle can not be found

  • #5947 2ba040f - Use correct nodeExtent for internal setNodes.

  • #5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

  • #5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

... (truncated)

Changelog

Sourced from @​xyflow/react's changelog.

12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

  • #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

  • #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

... (truncated)

Commits
  • 9fd41fd chore(packages): bump
  • 19f9c2a fix(react/store): reset defaultEdgeOptions
  • 2acefb5 fix(react/store): reset functions #5991
  • 8f0a5d6 chore(packages): bump
  • 286816c chore(packages): bump
  • 3319ef4 fix(react): keep minimap bounds at the viewport when all nodes are hidden
  • b7186f3 fix(react): minimap still works after reactflow remounts #5971
  • d8edc77 Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...
  • 59b1a60 Simplify node click handling in MiniMap component
  • 25869f2 chore(system): add attr warning handler
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​xyflow/react since your current version.


Updates ajv from 8.18.0 to 8.20.0

Release notes

Sourced from ajv's releases.

v8.20.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

v8.19.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.18.0...v8.19.0

Commits

Updates graphql-ws from 6.0.6 to 6.2.1

Release notes

Sourced from graphql-ws's releases.

v6.2.1

Patch Changes

v6.2.0

Minor Changes

v6.1.1

Patch Changes

  • #680 3fdd82f Thanks @​kkhys! - Disposing of a client event listener twice no longer removes an unrelated listener

    The unsubscribe function returned by client.on spliced at indexOf(listener) without checking for -1, so removing an already-removed listener would splice(-1, 1) and silently drop the most recently registered listener of the same event. This happens in practice without any double-dispose by the user: emits iterate over a copy of the listeners, so a one-shot internal listener that already unlistened itself during a nested emit (e.g. when client.terminate() is called from within a closed/error listener) is re-invoked from the copy and unlistens again, knocking out registered closed/error listeners.

v6.1.0

Minor Changes

v6.0.8

Patch Changes

  • #667 fc03004 Thanks @​endigma! - Fix the server sending a Complete message after an Error message for subscriptions.

    Previously, when a subscription's async iterable threw an error, the server would send:

    {"id":"1","type":"error","payload":[{"message":"..."}]}
    {"id":"1","type":"complete"}
    

    Per the protocol spec:

    Error: This message terminates the operation and no further messages will be sent.

    Complete (Server → Client): If the server dispatched the Error message relative to the original Subscribe message, no Complete message will be emitted.

    The server now correctly sends only the Error message:

    {"id":"1","type":"error","payload":[{"message":"..."}]}
    

    Clients that correctly follow the spec should be unaffected, as they are expected to ignore messages for operations they consider already completed.

v6.0.7

Patch Changes

  • #665 5536292 Thanks @​enisdenjo! - Remove uWebSockets.js from peer dependencies in package.json

    It does not exist on NPM anymore and could lead to weird behavior when installing dependencies with npm. Nothing else changes, using graphql-ws with uWebSockets.js still works.

Changelog

Sourced from graphql-ws's changelog.

6.2.1

Patch Changes

6.2.0

Minor Changes

6.1.1

Patch Changes

  • #680 3fdd82f Thanks @​kkhys! - Disposing of a client event listener twice no longer removes an unrelated listener

    The unsubscribe function returned by client.on spliced at indexOf(listener) without checking for -1, so removing an already-removed listener would splice(-1, 1) and silently drop the most recently registered listener of the same event. This happens in practice without any double-dispose by the user: emits iterate over a copy of the listeners, so a one-shot internal listener that already unlistened itself during a nested emit (e.g. when client.terminate() is called from within a closed/error listener) is re-invoked from the copy and unlistens again, knocking out registered closed/error listeners.

6.1.0

Minor Changes

6.0.8

Patch Changes

  • #667 fc03004 Thanks @​endigma! - Fix the server sending a Complete message after an Error message for subscriptions.

    Previously, when a subscription's async iterable threw an error, the server would send:

    {"id":"1","type":"error","payload":[{"message":"..."}]}
    {"id":"1","type":"complete"}
    

    Per the protocol spec:

    Error: This message terminates the operation and no further messages will be sent.

    Complete (Server → Client): If the server dispatched the Error message relative to the original Subscribe message, no Complete message will be emitted.

    The server now correctly sends only the Error message:

    {"id":"1","type":"error","payload":[{"message":"..."}]}
    

... (truncated)

Commits
  • 839ca7d Upcoming Release Changes (#684)
  • 61731f0 Import type WebSocketServer directly from 'ws' (#660)
  • af4f5c9 Upcoming Release Changes (#683)
  • 1e70c1a feat(server): Add parse option for custom GraphQL parsing (#682)
  • 716eb36 Upcoming Release Changes (#681)
  • 3fdd82f fix(client): don't remove an unrelated listener when disposing of an already-...
  • ea0d083 chore: no need for registry url
  • 0b69b9b Upcoming Release Changes (#679)
  • 8bbad60 chore: downgrade uws for node 20
  • 3675e0d chore: bump uws
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql-ws since your current version.


Updates fuse.js from 7.1.0 to 7.5.0

Release notes

Sourced from fuse.js's releases.

v7.5.0

⚠️ Behavior changes

Every change in this release is a bug fix, but each one corrects a scoring or ranking bug. Scores and result ordering will shift for some queries. That is why this ships as a minor rather than a patch: the public API is unchanged and upgrading is a drop-in, but the results you get back can differ, and that should not arrive silently in a patch bump.

If you assert on exact score values or on a specific result order, expect those assertions to need updating. Re-baseline them against 7.5.0 rather than pinning to 7.4.x, since the 7.4.x behavior was wrong in the cases below.

  • Field-length normalisation now counts words correctly. Tabs and newlines were not treated as word separators, so a multi-line or tab-delimited field was scored as though it were one long word, making it look far shorter than it is. Fields containing \t, \n, or \r now score differently (#830).
  • Key weights are now normalised in object and keyless-logical search. Weights that did not sum to 1 were applied unnormalised, skewing the relative influence of each key. If your keys weights do not already sum to 1, your relative ranking changes (#833).
  • limit now returns the correct top-N when scores tie. A tie at the cutoff boundary could evict a result that should have been kept, so limit could return the wrong items, not merely the right items in a different order (#835).
  • Bitap respects minMatchCharLength in the exact-match shortcut. Matches shorter than minMatchCharLength were still reported via the exact-match fast path, so the matches array could contain entries it was configured to exclude (#831).

Bug Fixes

  • bitap: respect minMatchCharLength in exact-match shortcut (dbb98b6), closes #831
  • fieldNorm: count tabs and newlines as word separators (6fe85b0), closes #830
  • fieldNorm: count word-starts instead of space transitions (2946f97)
  • Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 7, 2026
Bumps the minor group with 23 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@diamondlightsource/sci-react-ui](https://github.com/DiamondLightSource/sci-react-ui) | `0.3.0` | `0.7.0` |
| [@jsonforms/core](https://github.com/eclipsesource/jsonforms/tree/HEAD/packages/core) | `3.6.0` | `3.8.0` |
| [@jsonforms/material-renderers](https://github.com/eclipsesource/jsonforms/tree/HEAD/packages/material-renderers) | `3.6.0` | `3.8.0` |
| [@jsonforms/react](https://github.com/eclipsesource/jsonforms/tree/HEAD/packages/react) | `3.6.0` | `3.8.0` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.9.2` | `12.11.6` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | `6.0.6` | `6.2.1` |
| [fuse.js](https://github.com/krisk/Fuse) | `7.1.0` | `7.5.0` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.7` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.4.2` | `1.6.27` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `7.0.1` | `7.1.1` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.24` | `0.5.6` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.6` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.46.3` | `8.70.0` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `10.3.5` | `10.6.0` |
| [@storybook/builder-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/builders/builder-vite) | `10.3.6` | `10.6.0` |
| [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.3.6` | `10.6.0` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.3.6` | `10.6.0` |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.3.6` | `10.6.0` |
| [keycloak-js](https://github.com/keycloak/keycloak-js) | `26.2.1` | `26.2.4` |
| [msw](https://github.com/mswjs/msw) | `2.12.1` | `2.15.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.12.0` | `7.18.3` |



Updates `@diamondlightsource/sci-react-ui` from 0.3.0 to 0.7.0
- [Release notes](https://github.com/DiamondLightSource/sci-react-ui/releases)
- [Changelog](https://github.com/DiamondLightSource/sci-react-ui/blob/main/changelog.md)
- [Commits](DiamondLightSource/sci-react-ui@v0.3.0...v0.7.0)

Updates `@jsonforms/core` from 3.6.0 to 3.8.0
- [Release notes](https://github.com/eclipsesource/jsonforms/releases)
- [Commits](https://github.com/eclipsesource/jsonforms/commits/v3.8.0/packages/core)

Updates `@jsonforms/material-renderers` from 3.6.0 to 3.8.0
- [Release notes](https://github.com/eclipsesource/jsonforms/releases)
- [Commits](https://github.com/eclipsesource/jsonforms/commits/v3.8.0/packages/material-renderers)

Updates `@jsonforms/react` from 3.6.0 to 3.8.0
- [Release notes](https://github.com/eclipsesource/jsonforms/releases)
- [Commits](https://github.com/eclipsesource/jsonforms/commits/v3.8.0/packages/react)

Updates `@xyflow/react` from 12.9.2 to 12.11.6
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.6/packages/react)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `graphql-ws` from 6.0.6 to 6.2.1
- [Release notes](https://github.com/enisdenjo/graphql-ws/releases)
- [Changelog](https://github.com/enisdenjo/graphql-ws/blob/master/CHANGELOG.md)
- [Commits](enisdenjo/graphql-ws@v6.0.6...v6.2.1)

Updates `fuse.js` from 7.1.0 to 7.5.0
- [Release notes](https://github.com/krisk/Fuse/releases)
- [Changelog](https://github.com/krisk/Fuse/blob/main/CHANGELOG.md)
- [Commits](krisk/Fuse@v7.1.0...v7.5.0)

Updates `@testing-library/react` from 16.3.0 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.0...v16.3.3)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.7)

Updates `@vitest/eslint-plugin` from 1.4.2 to 1.6.27
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.4.2...v1.6.27)

Updates `eslint-plugin-react-hooks` from 7.0.1 to 7.1.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/eslint-plugin-react-hooks@7.1.1/packages/eslint-plugin-react-hooks)

Updates `eslint-plugin-react-refresh` from 0.4.24 to 0.5.6
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.24...v0.5.6)

Updates `prettier` from 3.6.2 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.9.6)

Updates `typescript-eslint` from 8.46.3 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint)

Updates `@storybook/addon-links` from 10.3.5 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/addons/links)

Updates `@storybook/builder-vite` from 10.3.6 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/builders/builder-vite)

Updates `@storybook/react-vite` from 10.3.6 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/frameworks/react-vite)

Updates `storybook` from 10.3.6 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/core)

Updates `@storybook/addon-docs` from 10.3.6 to 10.6.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.0/code/addons/docs)

Updates `keycloak-js` from 26.2.1 to 26.2.4
- [Release notes](https://github.com/keycloak/keycloak-js/releases)
- [Changelog](https://github.com/keycloak/keycloak-js/blob/main/RELEASE-CHECKLIST.md)
- [Commits](keycloak/keycloak-js@26.2.1...26.2.4)

Updates `msw` from 2.12.1 to 2.15.0
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.12.1...v2.15.0)

Updates `react-router-dom` from 7.12.0 to 7.18.3
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.3/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.3/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: "@diamondlightsource/sci-react-ui"
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@jsonforms/core"
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@jsonforms/material-renderers"
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@jsonforms/react"
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@storybook/addon-links"
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@storybook/builder-vite"
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@storybook/react-vite"
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.6.27
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@xyflow/react"
  dependency-version: 12.11.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: fuse.js
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: graphql-ws
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: keycloak-js
  dependency-version: 26.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: msw
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: react-router-dom
  dependency-version: 7.18.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: storybook
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: typescript-eslint
  dependency-version: 8.69.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/minor-c2a2070cfe branch from 19c204d to 7792517 Compare September 14, 2026 04:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants