chore(deps): bump the frontend-minor-patch group across 1 directory with 11 updates

[dependabot]

Bumps the frontend-minor-patch group with 11 updates in the /frontend directory:

Package	From	To
@react-three/drei	10.7.7	10.7.8
@react-three/fiber	9.6.1	9.7.0
react	19.2.7	19.2.8
@types/react	19.2.17	19.2.18
react-dom	19.2.7	19.2.8
@types/react-dom	19.2.3	19.2.4
zustand	5.0.14	5.0.15
@playwright/test	1.61.1	1.62.1
@vitejs/plugin-react	6.0.3	6.0.5
oxlint	1.73.0	1.78.0
vite	8.1.4	8.2.1

Updates @react-three/drei from 10.7.7 to 10.7.8

Release notes

Sourced from @​react-three/drei's releases.

v10.7.8

10.7.8 (2026-08-05)

Bug Fixes

• Add Chromatic badge to introduction.md (bd7bad3)
• ci: support npm trusted publishing (#2760) (ffa15b9)
• ci: use repository Node version in tests (6fdcd73)
• docs: do not override docker_tag (c9d3d0d)
• docs: pmndrs/docs:3 (032f1d6)
• MeshTransmissionMaterial: backside rendering and perf improvements (#2759) (ea128ae)
• wrong branch name (a039007)

Commits

• ffa15b9 fix(ci): support npm trusted publishing (#2760)
• ea128ae fix(MeshTransmissionMaterial): backside rendering and perf improvements (#2759)
• 6a89ee3 chore(ci): remove CodeSandbox configuration
• 6fdcd73 fix(ci): use repository Node version in tests
• c9d3d0d fix(docs): do not override docker_tag
• a039007 fix: wrong branch name
• 032f1d6 fix(docs): pmndrs/docs:3
• bd7bad3 fix: Add Chromatic badge to introduction.md
• 9cc32c4 chore: use trusted publisher (#2598)
• 563a6ce chore(storybook): upgrade to sb10 (#2594)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​react-three/drei since your current version.

Updates @react-three/fiber from 9.6.1 to 9.7.0

Release notes

Sourced from @​react-three/fiber's releases.

v9.7.0

The headline updates for this release are the reconciler fixes. We did a pass to harden what is there against react-dom as the standard.

• R3F's internal children were not being reordered correctly. Basically, if React reordered children, our internal map would drift out of sync and this would cause subtle bugs. This is now fixed. Thanks to @​kvvasuu who reported it and @​wanxiankai who offered a solution.
• Pierced props now reset properly. We had a bug where if a pierce prop was unset, the reconciler would try to reset it to a default value. However, it would set it to the base object instead of the pierced prop. This is fixed now.

// Initial render
<mesh position-x={5} />
// Later render: prop removed
<mesh />
// bug: would set it to the base object
mesh.x = 0 // !!!

• Host props now update properly. Host props are ones that we supply such as dispose and onUpdate. These now update properly. This also caused a subtle bug where imperatively updated values could get overwritten unexpectedly after unsetting the value in React. This is all fixed. Note: attach is fixed on first set and ignored if you try to dynamically update it.
• Properly batch instance reconstruction. This one is pretty technical and if you are curious check out the test in the attached PR. Basically, there was an edge case where if two instances needed to reconstruct (because the args updated), one could be ignore if the other bailed out of updates because of a React.memo or similar. It is likely a problem you never had, but your agent would curse if you did.
• Event priorities match react-dom. React allows for prioritizing events, for example continuous events like wheel get a higher priority over impulse events like pointer. We copy from the best here and use the same list react-dom does.
• Support reconciler microtasks. The React reconciler has a cool feature where it can queue microtasks to defer work based on the priorities we set earlier.

What's Changed

• chore: move eslint rules from parserOptions to top-level rules (#3706) by @​in-ch in pmndrs/react-three-fiber#3707
• docs: update useFrame hook description to specify that the clock delta is in seconds by @​AJamesPhillips in pmndrs/react-three-fiber#3742
• chore(CI): update test workflow actions to remove Node 20 deprecation warning by @​Shushovan015 in pmndrs/react-three-fiber#3710
• docs: fix FBXLoader naming in loading-models by @​pavan-sh in pmndrs/react-three-fiber#3745
• chore(docs): pmndrs/examples by @​abernier in pmndrs/react-three-fiber#3639
• fix: act import by @​krispya in pmndrs/react-three-fiber#3807
• fix: internal instance children synchronization after keyed reorder by @​krispya in pmndrs/react-three-fiber#3808
• chore: remove CodeSandbox CI by @​krispya in pmndrs/react-three-fiber#3809
• fix: Pierced prop reset by @​krispya in pmndrs/react-three-fiber#3810
• fix: Internal instance props sync by @​krispya in pmndrs/react-three-fiber#3811
• fix: Batch instance reconstruction hardening by @​krispya in pmndrs/react-three-fiber#3812
• feat: Match react-dom event priorities by @​krispya in pmndrs/react-three-fiber#3815
• feat: Support reconciler microtasks by @​krispya in pmndrs/react-three-fiber#3816

New Contributors

• @​in-ch made their first contribution in pmndrs/react-three-fiber#3707
• @​AJamesPhillips made their first contribution in pmndrs/react-three-fiber#3742
• @​Shushovan015 made their first contribution in pmndrs/react-three-fiber#3710
• @​pavan-sh made their first contribution in pmndrs/react-three-fiber#3745

Full Changelog: pmndrs/react-three-fiber@v9.6.1...v9.7.0

Commits

• 0a10741 RELEASING: Releasing 2 package(s)
• c340195 docs(changeset): prepare 9.7.0 and 9.1.1
• ff52c35 feat: Support reconciler microtasks (#3816)
• f1d5524 feat: match react-dom event priorities (#3815)
• a421117 fix: Batch instance reconstruction hardening (#3812)
• 169845f fix: Internal instance props sync (#3811)
• 99a3248 fix: pierced prop reset (#3810)
• 1258702 chore: remove CodeSandbox CI (#3809)
• 87040cf fix: Internal instance children synchronization after keyed reorder (#3808)
• 69f37f7 Fix act import (#3807)
• Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates zustand from 5.0.14 to 5.0.15

Release notes

Sourced from zustand's releases.

v5.0.15

Fix some issues in devtools and persist middleware.

What's Changed

• fix(devtools): correct V8 stack regex when source path contains spaces by @​dai-shi with @​Copilot in pmndrs/zustand#3531
• fix(persist): clearStorage() should invalidate concurrent async rehydration by @​dai-shi with @​Copilot in pmndrs/zustand#3555

Full Changelog: pmndrs/zustand@v5.0.14...v5.0.15

Commits

• 2115efb v5.0.15
• 1f531ba chore(deps): update dev dependencies (#3560)
• aa6d2a1 docs: add zustand-devtools-bridge (#3559)
• 3febf8c fix(persist): clearStorage() should invalidate concurrent async rehydration (...
• f44cecc fix(devtools): correct V8 stack regex when source path contains spaces (#3531)
• beca84e fix: update broken README links from docs/guides/ to docs/learn/guides/ (#3542)
• 038f496 docs(persist): clarify createJSONStorage behavior and warn about production u...
• a1f685c docs: fix missing code highlights in tic-tac-toe tutorial (#3527)
• 07cee61 docs: fix missing highlight on setXIsNext line in tic-tac-toe tutorial (#3524)
• 566b5bf Fix dead link in README.md: update immer guide path (#3519)
• Additional commits viewable in compare view

Updates @playwright/test from 1.61.1 to 1.62.1

Release notes

Sourced from @​playwright/test's releases.

v1.62.1

Bug Fixes

• #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
• #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
• #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
• #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
• #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits

• 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
• 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
• 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
• 66c5cc9 chore: mark v1.62.1 (#42020)
• 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
• 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
• 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• Additional commits viewable in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.0.3 to 6.0.5

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

plugin-react@6.0.4

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

6.0.4 (2026-07-22)

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

Commits

• 68c0cb8 release: plugin-react@6.0.5 (#1362)
• 555cdbc fix(react): make the react compiler preset filter linear (#1353)
• a00a9f8 fix(deps): update all non-major dependencies (#1327)
• f4b5498 release: plugin-react@6.0.4
• 7a40659 fix(react): $RefreshSig$ is not defined with NODE_ENV=production vite dev ...
• 98b32d4 fix(deps): update react 19.2.8 (#1298)
• 8ae5449 fix: babel-plugin-react-compiler cannot be imported when used in a framework ...
• f09ea01 fix(deps): update all non-major dependencies (#1282)
• See full diff in compare view

Updates oxlint from 1.73.0 to 1.78.0

Changelog

Sourced from oxlint's changelog.

[1.78.0] - 2026-08-10

🚀 Features

• ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#25207) (Mikhail Baev)
• d4a897c linter/eslint: Implement one-var rule (#24470) (Cole Ellison)
• 5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#24571) (Cole Ellison)

🐛 Bug Fixes

• 9573937 linter/typescript: Validate ban-ts-comment description_format (#25320) (Mikhail Baev)

[1.77.0] - 2026-08-03

🐛 Bug Fixes

• 5c0fa61 linter/eslint/no-warning-comments: Unify config structs and remove manual options docs (#25151) (Mikhail Baev)

📚 Documentation

• 9dc7756 linter/typescript/no-unnecessary-condition: Clarify options (#25110) (camc314)

[1.76.0] - 2026-07-27

🚀 Features

• 8d31dfa linter: Verify eslint/no-restricted-globals config schema (#24598) (vigneshwar)
• 7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (#24724) (Bartok)
• 016cf2a linter/oxc: Add bad-match-all-arg rule (#24900) (camc314)
• cdc941e linter/n: Implement exports-style rule (#24087) (Mikhail Baev)
• 1ad6f6c linter/eslint: Implement id-denylist rule (#24632) (Mikhail Baev)

📚 Documentation

• 3ff2e0e linter: Clarify config extends types (#24936) (Boshen)

[1.75.0] - 2026-07-20

🚀 Features

• dd18383 linter/node: Implement no-top-level-await rule (#24634) (Connor Shea)
• 16a65f2 linter/react: Implement function-component-definition rule (#24471) (Cole Ellison)
• 7f1f585 linter: Reuse jest/padding-around-test-blocks for vitest/padding-around-test-blocks (#24519) (Mikhail Baev)
• 99978a8 linter/import/consistent-type-specifier-style: Support prefer-top-level-if-only-type-imports option (#24502) (camc314)

🐛 Bug Fixes

• 8694167 linter/eslint/prefer-destructuring: Handle typed declarations (#24616) (camc314)

[1.74.0] - 2026-07-13

... (truncated)

Commits

• c42d639 release(apps): oxlint v1.78.0 && oxfmt v0.63.0 (#25473)
• ccb8fe8 feat(linter/jsdoc): implement no-blank-blocks rule (#25207)
• 9573937 fix(linter/typescript): validate ban-ts-comment description_format (#25320)
• d4a897c feat(linter/eslint): implement one-var rule (#24470)
• 5ab9340 feat(linter/jsx-a11y/anchor-has-content): add options to match eslint (#24571)
• 9a423f2 release(apps): oxlint v1.77.0 && oxfmt v0.62.0 (#25251)
• 5c0fa61 fix(linter/eslint/no-warning-comments): unify config structs and remove manua...
• 9dc7756 docs(linter/typescript/no-unnecessary-condition): clarify options (#25110)
• 65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
• 3ff2e0e docs(linter): clarify config extends types (#24936)
• Additional commits viewable in compare view

Updates vite from 8.1.4 to 8.2.1

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.1 (2026-08-06)

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
• bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)
• css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)
• deps: update all non-major dependencies (#23136) (14454fd)
• deps: update rolldown-related dependencies (#23070) (7ac6f7f)
• don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)
• handle shebang ending with uncommon line terminators (#23038) (17f7b2f)
• server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

• css: look up pure CSS chunks through a Set (#23114) (1331b0b)

Documentation

• build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

• deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)
• deps: update dependency strip-literal to v4 (#23140) (9db65ce)

Code Refactoring

• bundled-dev: avoid injecting server values in the bundle (#22967) (23b8a08)
• bundled-dev: remove rolldown lazy stub module workaround (#23129) (e72036e)

Tests

• bundled-dev: enable sourcemap playgrounds (#23080) (c2155fe)
• reduce logs (#23138) (7673c02)

8.2.0 (2026-07-30)

Features

• add input to server.fs.allow (#23035) (95a3cda)
• bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
• bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
• config: include column in config incompatibility location (#23064) (8a24572)
• dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

• bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
• deps: update all non-major dependencies (#23069) (4c07b74)
• hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
• importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)

... (truncated)

Commits

• 4216158 release: v8.2.1
• fddf4ea fix(server): use a random port when port is 0 (#23158)
• de041a7 fix(css): don't re-run lightningcss visitor during minify (fix #23146) (#23147)
• 15f0307 fix(build): make client chunkImportMap work with sharedPlugins: true (#23184)
• c2155fe test(bundled-dev): enable sourcemap playgrounds (#23080)
• ef02435 docs(build): fix incomplete @default for build.minify (#23177)
• eac0cc8 fix(bundled-dev): inject client script tag before chunk scripts (#23161)
• 23b8a08 refactor(bundled-dev): avoid injecting server values in the bundle (#22967)
• e72036e refactor(bundled-dev): remove rolldown lazy stub module workaround (#23129)
• 14454fd fix(deps): update all non-major dependencies (#23136)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions