Skip to content

chore(deps): update web-ui npm dependencies#153

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/web-ui-npm-dependencies
Open

chore(deps): update web-ui npm dependencies#153
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/web-ui-npm-dependencies

Conversation

@renovate

@renovate renovate Bot commented Feb 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@eslint/js (source) 9.39.2 → 9.39.5 age confidence
@opentelemetry/api (source) 1.9.0 → 1.9.1 age confidence
@opentelemetry/auto-instrumentations-web (source) ^0.56.0 → ^0.65.0 age confidence
@opentelemetry/exporter-trace-otlp-http (source) ^0.211.0 → ^0.221.0 age confidence
@opentelemetry/sdk-trace-web (source) 2.5.0 → 2.10.0 age confidence
@opentelemetry/semantic-conventions (source) 1.39.0 → 1.43.0 age confidence
@react-querybuilder/bootstrap (source) 8.14.0 → 8.20.2 age confidence
@tanstack/react-query (source) 5.90.20 → 5.101.4 age confidence
@types/node (source) 24.10.10 → 24.13.3 age confidence
@types/react (source) 19.2.10 → 19.2.17 age confidence
@vitejs/plugin-react (source) 5.1.3 → 5.2.0 age confidence
cytoscape (source) 3.33.1 → 3.34.0 age confidence
date-fns 4.1.0 → 4.4.0 age confidence
eslint (source) 9.39.2 → 9.39.5 age confidence
eslint-plugin-react-hooks (source) 7.0.1 → 7.1.1 age confidence
eslint-plugin-react-refresh 0.5.0 → 0.5.3 age confidence
globals 17.3.0 → 17.7.0 age confidence
i18next (source) 25.8.1 → 25.10.10 age confidence
i18next-browser-languagedetector 8.2.0 → 8.2.1 age confidence
jsdom 28.0.0 → 28.1.0 age confidence
msw (source) 2.12.8 → 2.15.0 age confidence
react (source) 19.2.4 → 19.2.8 age confidence
react-dom (source) 19.2.4 → 19.2.8 age confidence
react-i18next 16.5.4 → 16.6.6 age confidence
react-querybuilder (source) 8.14.0 → 8.20.2 age confidence
react-router-dom (source) 7.13.0 → 7.18.1 age confidence
recharts 3.7.0 → 3.10.0 age confidence
sass 1.97.3 → 1.101.3 age confidence
typescript-eslint (source) 8.54.0 → 8.65.0 age confidence
vite-plugin-pwa 1.2.0 → 1.3.0 age confidence
workbox-precaching (source) 7.4.0 → 7.4.1 age confidence
workbox-routing (source) 7.4.0 → 7.4.1 age confidence

Release Notes

eslint/eslint (@​eslint/js)

v9.39.5

Compare Source

Bug Fixes

Documentation

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

v9.39.4

Compare Source

Bug Fixes

Documentation

Chores

v9.39.3

Compare Source

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

open-telemetry/opentelemetry-js (@​opentelemetry/api)

v1.9.1

Compare Source

🐛 (Bug Fix)
🏠 (Internal)
open-telemetry/opentelemetry-js-contrib (@​opentelemetry/auto-instrumentations-web)

v0.65.0

Compare Source

Features
Dependencies

v0.64.0

Compare Source

Features
Dependencies

v0.63.0

Compare Source

Features
Dependencies

v0.62.0

Compare Source

Features
Dependencies

v0.61.0

Compare Source

Features
Dependencies

v0.60.0

Compare Source

Features
Dependencies

v0.59.0

Compare Source

Features
Dependencies

v0.58.0

Compare Source

Features
Dependencies

v0.57.0

Compare Source

Features
Dependencies
react-querybuilder/react-querybuilder (@​react-querybuilder/bootstrap)

v8.20.2

Compare Source

Added
  • [#​1053] New @react-querybuilder/datetime/ui entry point containing all React components and utilities (QueryBuilderDateTime, RelativeDateTimeValueEditor, the relative-date mode controllers, etc.).
Changed
  • [#​1053] Breaking: React-related exports must now be imported from @react-querybuilder/datetime/ui instead of the package root. The root and per-library entry points (/dayjs, /date-fns, /jsdate, /luxon) no longer import react or react-querybuilder, so their rule/value processors can be used in non-React/server environments. (react and react-querybuilder are now optional peer dependencies; @react-querybuilder/core is required.)
  • [#​1053] QueryBuilderDateTime now uses the native JavaScript Date API by default instead of dayjs. Override with the dateTimeAPI prop.
Fixed
  • [#​1053] Reverted dayjs to an optional peer dependency for @react-querybuilder/datetime. It was accidentally made a direct dependency in v8.19.0.

v8.20.1

Compare Source

Added
  • [#​1050] Automated npm publish. No changes to packages from previous version.

v8.20.0

Compare Source

Added
  • [#​1049] New opt-in queryBuilder-responsive class, now included in the default stylesheet. Apply it via the controlClassnames prop (or to any ancestor element) to let rule and group header rows wrap onto multiple lines—with a hanging indent for the wrapped content—instead of overflowing when horizontal space runs short. No media or container queries are involved, so the layout reflows based on the actual available width, even for deeply nested groups. These styles are intentionally minimal and only lightly opinionated; think of them as a convenient starting point for responsive behavior rather than a canonical or prescribed approach, and feel free to override or replace them to suit your design.
  • [#​1049] New dragHandleAttributes prop on the DragHandle component. The @dnd-kit adapter uses it to pass drag-handle ARIA attributes and sensor listeners through as JSX props; its useRuleDnD/useRuleGroupDnD hooks now return a dragHandleAttributes object.
Changed
  • [#​1048] The @dnd-kit adapter now applies drag-handle ARIA attributes and sensor listeners as JSX props (via dragHandleAttributes) instead of through imperative DOM manipulation. Custom dragHandle components used with the dnd-kit adapter must now spread dragHandleAttributes onto their root element to remain draggable. Disabled rule groups now expose drag-handle ARIA attributes (without activator listeners).
Fixed
  • [#​1049] useAsyncOptionList no longer recomputes cache validity during render or includes it in its effect dependencies, avoiding redundant option-list refetches when a cached entry expires (cache TTL is still enforced by the loader).

v8.19.1

Compare Source

Added
  • [#​1047] New showBranches prop on RulesEngineBuilder, with accompanying styles.
  • [#​1047] New showShiftActions prop on RulesEngineBuilder, with accompanying component and styles.
  • [#​1047] RulesEngineBuilder consequent types can now define editable properties. When a consequentTypes option carries a properties array (ConsequentPropertyDef[]), the built-in ConsequentBuilderBody renders an input ("text", "textarea", "number", "checkbox", or "select") for each one, storing the values on the consequent under params[name]. New types: ConsequentTypeOption, FullConsequentTypeOption, ConsequentPropertyDef, and ConsequentPropertyInputType.
  • [#​1047] New addConsequentToNewConditions prop on RulesEngineBuilder. When true, newly added conditions are seeded with a consequent of the default consequent type for that condition.
Fixed
  • [#​1047] In RulesEngineBuilder, the top-level "Add condition" button is not hidden when allowNestedConditions is false.

v8.19.0

Compare Source

Added
  • [#​1045] Relative date/time value support in @react-querybuilder/datetime.
    • New RelativeDateTimeValueEditor component. Relative mode edits a structured value (anchor + signed offset + unit, e.g. "3 months ago" or "start of year"); absolute values remain plain ISO 8601 strings for backward compatibility.
    • Pluggable mode switching via RelativeDateTimeModeController. Ships with toggleModeController (the zero-config default absolute/relative toggle button) and an operator-driven option built with createOperatorModeController + withRelativeOperators (the operator selector chooses the mode, no toggle rendered). Operator-driven values export via the context.relativeOperatorMap option, which maps mode-signaling operator names to real comparison operators at format time.
    • between/notBetween operators render two independent bounds, each individually absolute or relative (mixable), stored as a two-element array.
    • QueryBuilderDateTime now renders the relative-capable editor for date/datetime fields. Non-date fields delegate to the surrounding compatibility/theme value editor (falling back to the standard editor), and that themed editor is also used for the absolute date input and the relative offset input.
    • New dateTimeAPI prop on QueryBuilderDateTime (type RQBDateTimeLibraryAPI, default Day.js adapter) controls how the absolute date editor parses and validates input. Pass the adapter matching your export processor (Luxon, date-fns, native Date, etc.) to keep editor parsing and export consistent.
    • All formatQuery rule processors handle relative values: SQL emits live, dialect-specific symbolic expressions and JsonLogic stays live via a dateRelative operation, while other formats materialize to ISO strings. New context options materializeRelativeDateTime (force materialization for all formats) and relativeDateTimeBase (pin "now" for deterministic output).
    • Datetime-aware rule processors added for the "parameterized", "spel", "ldap", "gremlin", "elasticsearch", "prisma", "sequelize", "drizzle", "tanstack_db", and "mongodb" export formats. Relative values are materialized (as ISO strings for text-based formats, Date objects for ORM formats) and between/notBetween bounds are reordered chronologically.
    • RQBDateTimeLibraryAPI gains startOf, endOf, and add methods (implemented for the Day.js, date-fns, Luxon, and JS Date plugins).
    • Demo: "Use date/time package" option now wraps the live query builder with QueryBuilderDateTime for interactive relative editing.
  • [#​1046] Several major enhancements to @react-querybuilder/rules-engine:
    • Evaluation modes for the rules engine (@react-querybuilder/rules-engine). A new evaluationMode property (type EvaluationMode, i.e. "cascade" | "cumulative") can be set on RulesEngine/RulesEngineIC objects, or passed as a formatRulesEngine option to override the object-level value at export time. Defaults to "cascade".
      • "cascade": conditions are evaluated in order; a later sibling only fires if all prior siblings' antecedents failed (if/else-if/else semantics).
      • "cumulative": every condition is evaluated independently and any number may fire.
      • RulesEngineBuilder renders an evaluation mode toggle in its header, configurable via new evaluationMode, evaluationModeCascade, and evaluationModeCumulative translation keys and an evaluationMode classname.
      • In cumulative mode, RulesEngineBuilder labels condition headers "When" and the default consequent "Always" (instead of "If"/"Else If"/"Else"). New translation keys blockLabelWhen/blockLabelAlways and standard classes blockLabel-when/blockLabel-always.
      • New interactive rules engine builder demo on the website.
    • Additional operators and operator auto-registration for the rules engine's "json-rules-engine" export (@react-querybuilder/rules-engine).
      • formatRulesEngine(re, 'json-rules-engine') now supports the React Query Builder operators that json-rules-engine has no built-in equivalent for, via supplemental evaluators exported as jsonRulesEngineAdditionalOperators: beginsWith/doesNotBeginWith, endsWith/doesNotEndWith, contains/doesNotContain (mapped to containsGeneric/doesNotContainGeneric to bypass the built-in array-only contains), and between/notBetween.
      • between/notBetween mirror formatQuery's robustness: bounds may be an array ([lo, hi]) or a comma-separated string ("lo,hi"), and numeric bounds are parsed and reordered ascending.
      • New context option for formatRulesEngine. For the "json-rules-engine" format, passing context: { engine } registers every additional operator on the Engine as a side effect, so exported rules that use them run without manual engine.addOperator(...) calls.
    • Additional formatRulesEngine export targets for the rules engine (@react-querybuilder/rules-engine): "native", "node-rules", and "rulepilot" (joining the existing "json-rules-engine").
      • "native" returns a dependency-free in-process RulesEngineEvaluator—(facts) => Consequent[]—that yields the consequents of every condition that fires, in order, honoring the evaluationMode.
      • "node-rules" returns an array of live node-rules Rule objects (with real condition/consequence functions) ready to pass to new RuleEngine(...). Antecedents reuse the "native" predicates, so evaluation needs no operator registration, and each fired consequent is pushed onto fact.events (mirroring the "json-rules-engine" result shape).
      • "rulepilot" returns a single rulepilot Rule. Because RulePilot.evaluate returns a single (first-matched) result, this target models single-outcome decisioning: nested or overlapping conditions that would fire multiple consequents under the other targets yield only the first match, cumulative evaluation mode throws, and the substring operators (contains/beginsWith/endsWith and their negations) are omitted as they have no faithful mapping. Evaluate with RulePilot.evaluate(rule, criteria, true) to skip pre-validation of the always-true guards.
Changed
  • Replaced any with unknown on input parameters of ~20 core utility functions (type guards, array utils, string escape helpers, clsx). Return types preserved or tightened to avoid breaking consumers.
Fixed
  • [#​1046] Rules engine (@react-querybuilder/rules-engine): useRulesEngineBuilder no longer enters an infinite update loop. The hook now honors the defaultRulesEngine prop and preserves edits in uncontrolled mode (previously the prop-sync effect could overwrite them on each render).

v8.18.0

Compare Source

Changed
  • defaultValueProcessor is now marked @deprecated (prefer defaultValueProcessorByRule).
Added
  • thresholdPlaceholder prop on MatchModeEditorProps, configurable via translations.matchThreshold.placeholderName.
  • parseJsonLogic now supports subproperty references in "all"/"some"/"none" operations (e.g., {"var": "name"} scoped to array elements).
Fixed
  • SQL/Parameterized/Drizzle formatters use count(*)::float for decimal match mode thresholds (was integer division).
  • CEL formatter wraps filteredCount in double() for decimal match mode thresholds (was int/double type mismatch).

v8.17.0

Compare Source

Changed
  • [#​1041] Deprecated: @react-querybuilder/drizzle package. Use formatQuery(query, 'drizzle') from react-querybuilder or @react-querybuilder/core instead.
Added
  • [#​1040] onRuleDrop callback prop for QueryBuilderDnD — fires after any drag-and-drop operation completes (same-QB or cross-QB) with source/target qbIds, paths, drop effect, and group mode.

v8.16.2

Compare Source

Added
  • [#​1039] New "tanstack_db" export format produces a callback for TanStack DB's .where() function.
Fixed
  • [#​1039] Drizzle export supports parseNumbers.

v8.16.1

Compare Source

Added
  • [#​1034] shadcn/ui registry components (QueryBuilderShadcn, shadcnControlElements, and individual Shadcn* components) installable via npx shadcn add https://react-querybuilder.js.org/r/query-builder.json.
  • [#​1036] PrimeReact compatibility package @react-querybuilder/prime (released 2026-05-21).
Fixed
  • [#​1032] Keyboard navigation now works when using the dnd-kit adapter.
  • [#​1033] translation keys for "natural_language" export allow more natural, grammatically correct output for non-English languages.
    • New keys: ruleSeparator, listSeparator, betweenAnd, afterSubject, afterVerb, afterObject.
    • Added comprehensive configuration examples for Spanish, Japanese, Korean, and Welsh to website demo.
  • SPARQL export automatically prefixes variables with ? where appropriate.
  • SPARQL output uses native IN/NOT IN syntax where appropriate.

v8.16.0

Compare Source

Added
  • [#​1030] Graph query language import/export support:
    • New formatQuery formats: "cypher" (alias "gql"), "gremlin", "sparql".
      • Graph query temporal-type rule processors for @react-querybuilder/datetime.
    • Parsers: parseCypher(alias parseGQL), parseGremlin, parseSPARQL.
Fixed
  • Small bug in Sequelize export for "contains", "beginsWith", and "endsWith" operators combined with valueSource: "field".

v8.15.0

Compare Source

Changed
  • [#​1021] In @react-querybuilder/dnd, react-dnd is now an optional peer dependency (it was previously required).
  • [#​1021] Deprecated: Passing raw react-dnd exports as the dnd prop (e.g., dnd={{ ...ReactDnD, ...ReactDnDHTML5Backend }}) still works—they are auto-detected and wrapped in a react-dnd adapter—but createReactDnDAdapter is preferred.
  • [#​1021] Deprecated: useReactDnD hook — use createReactDnDAdapter instead.
Added
  • [#​1021] @react-querybuilder/dnd is now DnD-library-agnostic via an adapter pattern.
    • New DndAdapter interface — implement DndProvider, useRuleDnD, useRuleGroupDnD, and useInlineCombinatorDnD to integrate any drag-and-drop library.
    • New createReactDnDAdapter factory wraps react-dnd exports into a DndAdapter. This is the recommended way to enable drag-and-drop going forward.
    • New createDndKitAdapter factory wraps @dnd-kit/core exports into a DndAdapter, providing a first-class alternative to react-dnd.
    • Shared pure-logic helpers (canDropOnRule, canDropOnRuleGroup, canDropOnInlineCombinator, buildDropResult, handleDrop, getDragItem) are exported for use in custom adapters.
  • [#​1025] New updateWhileDragging prop for QueryBuilderDnD. When enabled, the query tree visually rearranges in real-time as rules and groups are dragged (using a shadow query that commits on drop). Supported by the @atlaskit/pragmatic-drag-and-drop and @dnd-kit/core adapters.
  • [#​1026] New copyModeAfterHoverMs and groupModeAfterHoverMs props for QueryBuilderDnD. When set to a value greater than zero, the drop mode will switch to "copy" or "group" automatically after hovering over a valid rule or group for the specified number of milliseconds. Supported by the @atlaskit/pragmatic-drag-and-drop and @dnd-kit/core adapters.
  • [#​1018] New "diagnostics" export format (formatQuery(query, 'diagnostics')) which returns:
    • query: annotated copy of the query tree with valid, reasons, path, and level on every rule and group.
    • diagnostics: flat array of all issues (placeholder checks, muted nodes, custom validator failures, value/type mismatches, undefined/unreferenced fields).
    • stats: aggregate counts (totalRules, totalGroups, validRules, invalidRules, validGroups, invalidGroups).
    • fieldSummary: per-field ruleCount and invalidCount.
Fixed
  • [#​1019] useValueSelector normalizes multiselect values to strings so they match option names, which are always strings.

v8.14.4

Compare Source

Fixed
  • [#​1015] MongoDB export formats ("mongodb_query"/"mongodb") now use $nor instead of $not for rule group negation, fixing the unknown top level operator: $not runtime error.

v8.14.3

Compare Source

Fixed
  • Restored provenance attestation on npm.

v8.14.2

Compare Source

Fixed
  • [#​1007] transformQuery and merge[Any]Translation[s] now guard against prototype pollution.

v8.14.1

Compare Source

Fixed
  • [#​1005] MongoDB export formats ("mongodb_query"/"mongodb") now properly support rule groups with not: true.
TanStack/query (@​tanstack/react-query)

v5.101.4

Compare Source

Patch Changes

v5.101.3

Compare Source

Patch Changes

v5.101.2

Compare Source

Patch Changes

v5.101.1

Compare Source

Patch Changes

v5.101.0

Compare Source

Patch Changes
  • Updated dependencies []:
    • [@​tanstack/query-core](https://

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "before 5am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Feb 9, 2026
@renovate
renovate Bot force-pushed the renovate/web-ui-npm-dependencies branch 12 times, most recently from 36d3c59 to 41ba948 Compare February 16, 2026 10:59
@renovate
renovate Bot force-pushed the renovate/web-ui-npm-dependencies branch 9 times, most recently from 5975b4e to 0fa3bc0 Compare February 23, 2026 17:55
@renovate
renovate Bot force-pushed the renovate/web-ui-npm-dependencies branch 6 times, most recently from 661c2c2 to 37b0d6e Compare March 1, 2026 21:38
@renovate
renovate Bot force-pushed the renovate/web-ui-npm-dependencies branch 2 times, most recently from 69f1c7f to e15388b Compare March 4, 2026 09:19
@renovate
renovate Bot force-pushed the renovate/web-ui-npm-dependencies branch 6 times, most recently from ac3394f to 86f1e16 Compare March 17, 2026 13:39
@renovate
renovate Bot force-pushed the renovate/web-ui-npm-dependencies branch 17 times, most recently from 81e353d to 0452fcb Compare March 25, 2026 13:54
@renovate
renovate Bot force-pushed the renovate/web-ui-npm-dependencies branch 6 times, most recently from 0775102 to 51b29a0 Compare March 27, 2026 01:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants