chore(deps): Bump the all group across 1 directory with 9 updates by dependabot[bot] · Pull Request #73 · gittuf/visualizer

dependabot · 2026-01-25T12:16:04Z

Bumps the all group with 9 updates in the /frontend directory:

Package	From	To
framer-motion	`12.26.2`	`12.29.0`
lucide-react	`0.562.0`	`0.563.0`
next	`16.1.2`	`16.1.4`
react-resizable-panels	`4.4.1`	`4.5.1`
recharts	`3.6.0`	`3.7.0`
zod	`4.3.5`	`4.3.6`
@types/node	`25.0.8`	`25.0.10`
@types/react	`19.2.8`	`19.2.9`
eslint-config-next	`16.0.10`	`16.1.4`

Updates framer-motion from 12.26.2 to 12.29.0

Changelog

Sourced from framer-motion's changelog.

[12.29.0] 2026-01-22

Added

transformViewBoxPoint: Scale drag gestures within <svg> elements where viewBox and rendered width/height are mismatched.

trackContentSize: New scroll and useScroll option for tracking changes to content size.

Fixed

Add React 19 test suite to CI.

Fix types with motion.create().

Shared element animations now respect layoutDependency.

[12.28.2] 2026-01-22

Added

Add default value type px for fontSize.

Fixed

Removed default value type from radius.

Ensure LazyMotion animates initial state even when state has changed before Motion is loaded.

[12.28.1] 2026-01-21

Fixed

Ensure scale: "0%" isn't treated as default value.

[12.28.0] 2026-01-20

Added

useFollowValue and followValue: useSpring-style motion values that can accept any transition.

Fixed

Fix "multiple keyframe" error when using spring animations as default transitions for animation sequences.

[12.27.5] 2026-01-20

Fixed

Ensure pen gesture is correctly cleaned up on drag cancel.

Fix edge case where DocumentProjectionNode's attached element was null.

[12.27.4] 2026-01-20

Added

... (truncated)

Commits

9482fc1 v12.29.0
80802dc Updating changelog
b8a46fe Updating changelog
17218e3 Updating changelog
fcfe5cd Merge pull request #3497 from motiondivision/scroll-progress-after-layout
84d28bf Merge pull request #3494 from motiondivision/claude/fix-transformed-layout-an...
e63d56a Merge pull request #3495 from motiondivision/claude/fix-issue-1436-8qFF9
d3bd6de Merge pull request #3506 from motiondivision/claude/fix-create-proxy-ts-error...
479f35e Merge pull request #3507 from motiondivision/dependabot/npm_and_yarn/lodash-4...
911cd39 Merge pull request #3493 from motiondivision/react-19-ci
Additional commits viewable in compare view

Updates lucide-react from 0.562.0 to 0.563.0

Release notes

Sourced from lucide-react's releases.

Version 0.563.0

What's Changed

aria-hidden is by default added to icons components in all packages. This was already added to lucide-react before. Making icons accessible, you can add an aria-label or a title. See docs about accessibility.

All changes

chore(dev): Enable ligatures in font build configuration by @dcxo in lucide-icons/lucide#3876

chore(repo): add Android to brand stopwords by @karsa-mistmere in lucide-icons/lucide#3895

fix(site): add missing titles and a title template by @taimar in lucide-icons/lucide#3920

fix(site): unify and improve the styling of input fields by @taimar in lucide-icons/lucide#3919

fix(icons): changed star-off icon by @jguddas in lucide-icons/lucide#3952

fix(icons): changed tickets-plane icon by @jguddas in lucide-icons/lucide#3928

fix(icons): changed monitor-off icon by @jguddas in lucide-icons/lucide#3962

fix(icons): changed lasso icon by @jguddas in lucide-icons/lucide#3961

fix(icons): changed cloud-off icon by @jguddas in lucide-icons/lucide#3942

docs(site): added lucide-web-components third-party package by @midesweb in lucide-icons/lucide#3948

chore(deps-dev): bump preact from 10.27.2 to 10.27.3 by @dependabot[bot] in lucide-icons/lucide#3955

feat(icon): add globe-x icon with metadata by @Muhammad-Aqib-Bashir in lucide-icons/lucide#3827

fix(icons): changed waypoints icon by @karsa-mistmere in lucide-icons/lucide#3990

fix(icons): changed bookmark icon by @jguddas in lucide-icons/lucide#2906

fix(icons): changed message-square-dashed icon by @jguddas in lucide-icons/lucide#3959

fix(icons): changed cloudy icon by @jguddas in lucide-icons/lucide#3966

fix(github-actions): resolved spelling mistake in gh issue close command by @jguddas in lucide-icons/lucide#4000

Update LICENSE by @alxgraphy in lucide-icons/lucide#4009

feat(packages): Added aria-hidden fallback for decorative icons to all packages by @ericfennis in lucide-icons/lucide#3604

chore(deps): bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in lucide-icons/lucide#4020

chore(deps): bump lodash-es from 4.17.21 to 4.17.23 by @dependabot[bot] in lucide-icons/lucide#4019

Suggest anchoring to a specific lucide version when using a cdn by @drago1520 in lucide-icons/lucide#3727

feat(docs): upgraded backers block by @karsa-mistmere in lucide-icons/lucide#4014

fix(site): hide native search input clear "X" icon by @epifaniofrancisco in lucide-icons/lucide#3933

feat(icons): added printer-x icon by @lt25106 in lucide-icons/lucide#3941

New Contributors

@dcxo made their first contribution in lucide-icons/lucide#3876

@midesweb made their first contribution in lucide-icons/lucide#3948

@alxgraphy made their first contribution in lucide-icons/lucide#4009

@drago1520 made their first contribution in lucide-icons/lucide#3727

@lt25106 made their first contribution in lucide-icons/lucide#3941

Full Changelog: lucide-icons/lucide@0.562.0...0.563.0

Commits

67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
See full diff in compare view

Updates next from 16.1.2 to 16.1.4

Release notes

Sourced from next's releases.

v16.1.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Only filter next config if experimental flag is enabled (#88733)

Credits

Huge thanks to @mischnic for helping!

v16.1.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Fix linked list bug in LRU deleteFromLru (#88652)

Fix relative same host redirects in node middleware (#88253)

Credits

Huge thanks to @acdlite and @ijjk for helping!

Commits

60de6c2 v16.1.4
5f75d22 backport: Only filter next config if experimental flag is enabled (#88733) (#...
f01cf07 v16.1.3
74b43ae [backport]: Fix linked list bug in LRU deleteFromLru (#88652)
812cd75 [backport] Fix relative same host redirects in node middleware #88253 (#88630)
See full diff in compare view

Updates react-resizable-panels from 4.4.1 to 4.5.1

Release notes

Sourced from react-resizable-panels's releases.

4.5.1

624: Bugfix: Fallback to alternate CSS cursor styles for Safari

Safari Chrome, Firefox

grab move

col-resize ew-resize

row-resize ns-resize

4.5.0

616: Replace Separator and Panel edge hit-area padding with a minimum size threshold based on Apple's user interface guidelines. Separators that are large enough will no longer be padded; separators that are too small (or panels without separators) will more or less function like before. This should not have much of a user-facing impact other than an increase in the click target area. (Previously I was not padding enough, as per Apple's guidelines.)

615, 620: Double-clicking on a Separator resets its associated Panel to its default-size (see video below); double-click will have no impact on panels without default sizes

622: Bugfix: Panels within vertical groups are now properly sized in Safari

618: Bugfix: Don't override adoptedStyleSheets

Demo of double-clicking on a separator:

dbl-click.mov

4.4.2

610: Fix calculated cursor style when "pointermove" event is has low-precision/rounded clientX and clientY values

Changelog

Sourced from react-resizable-panels's changelog.

4.5.1

624: Bugfix: Fallback to alternate CSS cursor styles for Safari

Safari Chrome, Firefox

grab move

col-resize ew-resize

row-resize ns-resize

4.5.0

616: Replace Separator and Panel edge hit-area padding with a minimum size threshold based on Apple's user interface guidelines. Separators that are large enough will no longer be padded; separators that are too small (or panels without separators) will more or less function like before. This should not have much of a user-facing impact other than an increase in the click target area. (Previously I was not padding enough, as per Apple's guidelines.)

615, 620: Double-clicking on a Separator resets its associated Panel to its default-size (see video below); double-click will have no impact on panels without default sizes

622: Bugfix: Panels within vertical groups are now properly sized in Safari

618: Bugfix: Don't override adoptedStyleSheets

Demo of double-clicking on a separator:

dbl-click.mov

4.4.2

610: Fix calculated cursor style when "pointermove" event is has low-precision/rounded clientX and clientY values

Commits

d1d2ddf 4.5.0 -> 4.5.1
23538a3 Fix Safari cursor styles (#624)
fb047a8 4.4.2 -> 4.5.0
afa9982 Double-click resets secondary Panel to default size if primary Panel does not...
ae4f0f5 CHANGELOG tweak
3dd3b17 Bugfix: Panel heights within vertical groups (#622)
3fb215c Bugfix: Don't override adoptedStyleSheets (#618)
678e4ef Exploration: Replace hit-area padding with minimum size threshold (#616)
85d7851 Exploration: Double-clicking a Separator resets Panel to default size (#615)
e610171 4.4.1 -> 4.4.2
Additional commits viewable in compare view

Updates recharts from 3.6.0 to 3.7.0

Release notes

Sourced from recharts's releases.

v3.7.0

What's Changed

📢 Cell is now deprecated and will be removed in the next major version. Please migrate all Cell usage to use the shape prop of respective chart elements. ‼️

Feat

New Hooks

useIsTooltipActive: returns if the tooltip is active by @PavelVanecek in recharts/recharts#6880

useActiveTooltipCoordinate: returns current tooltip coordinate by @PavelVanecek in recharts/recharts#6880

Other

Tooltip: allow offset prop to accept Coordinate object by @bigsaigon333 in recharts/recharts#6868 X/YAxis add new axis type: "auto" by @PavelVanecek in recharts/recharts#6823

sets the type to "category" for categorical axes, and "number" for numeric axis.

X/YAxis: replace tick: any with explicit type by @PavelVanecek in recharts/recharts#6911

Bar/TypeScript: add BarShapeProps type to fix Bar.shape type by @PavelVanecek in recharts/recharts#6900

TypeScript: add missing useful type exports for content, shape functions, etc. @PavelVanecek in recharts/recharts#6852

Fix

BarChart: fix stackOffset=sign for charts with 3 or more positive values in one series by @PavelVanecek in recharts/recharts#6807

BarStack: fix circular dependency when building with vite by @jkr2255 in recharts/recharts#6777

BarStack: fix BarStack clipPath in charts with stackOffset=sign by @PavelVanecek in recharts/recharts#6806

BarStack: apply bar stack radius to active bars by @PavelVanecek in recharts/recharts#6906

Chore

Enabled strict tsconfig by @PavelVanecek in recharts/recharts#6842

Docs

We've started auto-generating our docs for the most part so you should see large improvements in accuracy of the docs between the code, the website, and the storybook. Huge shoutout to @PavelVanecek 🚀

Dark mode 🕶️ by @cloud-walker in recharts/recharts#6828

Thanks @cloud-walker

Recharts devtools has been added to all website examples for easier issue debugging

New Contributors

@jkr2255 made their first contribution in recharts/recharts#6777

@cloud-walker made their first contribution in recharts/recharts#6824

@bigsaigon333 made their first contribution in recharts/recharts#6868

@huangkevin-apr made their first contribution in recharts/recharts#6872

Full Changelog: recharts/recharts@v3.6.0...v3.7.0

Commits

d1bc41c 3.7.0 (#6913)
8ea7355 Replace tick: any with explicit type (#6911)
5586fb2 Deprecate Cell, move all examples to shape, export ScatterShapeProps (#6904)
9644f29 chore(deps-dev): bump typescript-eslint from 8.53.0 to 8.53.1 (#6910)
3f9dbd0 chore(deps): bump eventemitter3 from 5.0.1 to 5.0.4 (#6908)
6529696 chore(deps-dev): bump @testing-library/react from 16.3.1 to 16.3.2 (#6909)
bef3630 Clarify docs (#6907)
2548a9f Apply BarStackClipLayer on active bars (#6906)
0374d8e Remove duplicate stories (#6901)
23a42f4 [Omnidoc] Link examples from each prop (#6899)
Additional commits viewable in compare view

Updates zod from 4.3.5 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors

f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)

251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call

edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)

85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)

cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)

dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)

762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling

ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6

Commits

ca3c862 v4.3.6
762e911 Generalize numeric key handling
dfbbf1c Avoid re-exported star modules (#5656)
cbf77bb Avoid non null assertion (#5638)
85db85e fix: typo in codec.test.ts file (#5628)
edd4132 fix: add missing User-agent to robots.txt and allow all (#5646)
251d716 Clean up workflow_call
f4b7bae Update pullfrog.yml (#5634)
9977fb0 Add brand.dev to sponsors
See full diff in compare view

Updates @types/node from 25.0.8 to 25.0.10

Commits

See full diff in compare view

Updates @types/react from 19.2.8 to 19.2.9

Commits

See full diff in compare view

Updates eslint-config-next from 16.0.10 to 16.1.4

Release notes

Sourced from eslint-config-next's releases.

v16.1.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Only filter next config if experimental flag is enabled (#88733)

Credits

Huge thanks to @mischnic for helping!

v16.1.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Fix linked list bug in LRU deleteFromLru (#88652)

Fix relative same host redirects in node middleware (#88253)

Credits

Huge thanks to @acdlite and @ijjk for helping!

v16.1.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Turbopack: Update to swc_core v50.2.3 (#87841) (#88296)

Fixes a crash when processing mdx files with multibyte characters. (#87713)

Turbopack: mimalloc upgrade and enabling it on musl (#88503) (#87815) (#88426)

Fixes a significant performance issue on musl-based Linux distributions (e.g. Alpine in Docker) related to musl's allocator.

Other platforms have always used mimalloc, but we previously did not use mimalloc on musl because of compilation issues that have since been resolved.

Credits

Huge thanks to @mischnic for helping!

v16.1.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Turbopack: Create junction points instead of symlinks on Windows (#87606)

Credits

... (truncated)

Commits

60de6c2 v16.1.4
f01cf07 v16.1.3
cb436b3 v16.1.2
3aa5398 v16.1.1
3491676 v16.1.0
58e8f8c v16.1.0-canary.34
3284587 v16.1.0-canary.33
04290ab v16.1.0-canary.32
d36c03e v16.1.0-canary.31
b174155 v16.1.0-canary.30
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 9 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [framer-motion](https://github.com/motiondivision/motion) | `12.26.2` | `12.29.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.562.0` | `0.563.0` | | [next](https://github.com/vercel/next.js) | `16.1.2` | `16.1.4` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.4.1` | `4.5.1` | | [recharts](https://github.com/recharts/recharts) | `3.6.0` | `3.7.0` | | [zod](https://github.com/colinhacks/zod) | `4.3.5` | `4.3.6` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.8` | `25.0.10` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.8` | `19.2.9` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.0.10` | `16.1.4` | Updates `framer-motion` from 12.26.2 to 12.29.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.26.2...v12.29.0) Updates `lucide-react` from 0.562.0 to 0.563.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.563.0/packages/lucide-react) Updates `next` from 16.1.2 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.1.2...v16.1.4) Updates `react-resizable-panels` from 4.4.1 to 4.5.1 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.4.1...4.5.1) Updates `recharts` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.6.0...v3.7.0) Updates `zod` from 4.3.5 to 4.3.6 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.3.5...v4.3.6) Updates `@types/node` from 25.0.8 to 25.0.10 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.8 to 19.2.9 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `eslint-config-next` from 16.0.10 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/packages/eslint-config-next) --- updated-dependencies: - dependency-name: framer-motion dependency-version: 12.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: lucide-react dependency-version: 0.563.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: next dependency-version: 16.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: react-resizable-panels dependency-version: 4.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: recharts dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: zod dependency-version: 4.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: "@types/node" dependency-version: 25.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: "@types/react" dependency-version: 19.2.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: eslint-config-next dependency-version: 16.1.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

patzielinski · 2026-01-27T19:50:05Z

@dependabot rebase

dependabot · 2026-01-27T19:54:15Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 25, 2026

dependabot bot closed this Jan 27, 2026

dependabot bot deleted the dependabot/npm_and_yarn/frontend/all-23c9f08859 branch January 27, 2026 19:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the all group across 1 directory with 9 updates#73

chore(deps): Bump the all group across 1 directory with 9 updates#73
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/all-23c9f08859

dependabot bot commented on behalf of github Jan 25, 2026 •

edited

Loading

Uh oh!

patzielinski commented Jan 27, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Jan 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

[12.29.0] 2026-01-22

Added

Fixed

[12.28.2] 2026-01-22

Added

Fixed

[12.28.1] 2026-01-21

Fixed

[12.28.0] 2026-01-20

Added

Fixed

[12.27.5] 2026-01-20

Fixed

[12.27.4] 2026-01-20

Added

Version 0.563.0

What's Changed

All changes

New Contributors

v16.1.4

Core Changes

Credits

v16.1.3

Core Changes

Credits

4.5.1

4.5.0

4.4.2

4.5.1

4.5.0

4.4.2

v3.7.0

What's Changed

Feat

New Hooks

Other

Fix

Chore

Docs

New Contributors

v4.3.6

Commits:

v16.1.4

Core Changes

Credits

v16.1.3

Core Changes

Credits

v16.1.2

Core Changes

Credits

v16.1.1

Core Changes

Credits

Uh oh!

patzielinski commented Jan 27, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jan 25, 2026 •

edited

Loading