Skip to content

deps(apps): bump the mui group across 1 directory with 5 updates - #5397

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mui-87caf07c10
Open

deps(apps): bump the mui group across 1 directory with 5 updates#5397
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mui-87caf07c10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the mui group with 5 updates in the / directory:

Package From To
@mui/icons-material 7.3.8 9.4.0
@mui/material 7.3.8 9.4.0
@mui/stylis-plugin-rtl 7.3.8 9.4.0
@mui/x-date-pickers 8.27.2 9.12.0
@mui/x-tree-view 8.27.2 9.12.0

Updates @mui/icons-material from 7.3.8 to 9.4.0

Release notes

Sourced from @​mui/icons-material's releases.

v9.4.0

A big thanks to the 19 contributors who made this release possible. Here are some highlights ✨:

  • ♿️ Opt in to a consistent keyboard focus ring across components with the new theme.focusVisible.
  • ♿️ The Tooltip now supports disabled button triggers without an extra wrapper element.

@mui/material@9.4.0

@mui/utils@9.4.0

@mui/styled-engine-sc@9.4.0

Docs

Core

... (truncated)

Changelog

Sourced from @​mui/icons-material's changelog.

9.4.0

Aug 27, 2026

A big thanks to the 19 contributors who made this release possible. Here are some highlights ✨:

  • ♿️ Opt in to a consistent keyboard focus ring across components with the new theme.focusVisible.
  • ♿️ The Tooltip now supports disabled button triggers without an extra wrapper element.

@mui/material@9.4.0

@mui/utils@9.4.0

@mui/styled-engine-sc@9.4.0

Docs

Core

... (truncated)

Commits

Updates @mui/material from 7.3.8 to 9.4.0

Release notes

Sourced from @​mui/material's releases.

v9.4.0

A big thanks to the 19 contributors who made this release possible. Here are some highlights ✨:

  • ♿️ Opt in to a consistent keyboard focus ring across components with the new theme.focusVisible.
  • ♿️ The Tooltip now supports disabled button triggers without an extra wrapper element.

@mui/material@9.4.0

@mui/utils@9.4.0

@mui/styled-engine-sc@9.4.0

Docs

Core

... (truncated)

Changelog

Sourced from @​mui/material's changelog.

9.4.0

Aug 27, 2026

A big thanks to the 19 contributors who made this release possible. Here are some highlights ✨:

  • ♿️ Opt in to a consistent keyboard focus ring across components with the new theme.focusVisible.
  • ♿️ The Tooltip now supports disabled button triggers without an extra wrapper element.

@mui/material@9.4.0

@mui/utils@9.4.0

@mui/styled-engine-sc@9.4.0

Docs

Core

... (truncated)

Commits

Updates @mui/stylis-plugin-rtl from 7.3.8 to 9.4.0

Release notes

Sourced from @​mui/stylis-plugin-rtl's releases.

v9.4.0

A big thanks to the 19 contributors who made this release possible. Here are some highlights ✨:

  • ♿️ Opt in to a consistent keyboard focus ring across components with the new theme.focusVisible.
  • ♿️ The Tooltip now supports disabled button triggers without an extra wrapper element.

@mui/material@9.4.0

@mui/utils@9.4.0

@mui/styled-engine-sc@9.4.0

Docs

Core

... (truncated)

Changelog

Sourced from @​mui/stylis-plugin-rtl's changelog.

9.4.0

Aug 27, 2026

A big thanks to the 19 contributors who made this release possible. Here are some highlights ✨:

  • ♿️ Opt in to a consistent keyboard focus ring across components with the new theme.focusVisible.
  • ♿️ The Tooltip now supports disabled button triggers without an extra wrapper element.

@mui/material@9.4.0

@mui/utils@9.4.0

@mui/styled-engine-sc@9.4.0

Docs

Core

... (truncated)

Commits

Updates @mui/x-date-pickers from 8.27.2 to 9.12.0

Release notes

Sourced from @​mui/x-date-pickers's releases.

v9.12.0

We'd like to extend a big thank you to the 12 contributors who made this release possible. Here are some highlights ✨:

  • 🧮 Support Formulas on the Data Grid: cells in opted-in columns can hold spreadsheet-like formulas (=SUM(RANGE(…)), =price * quantity) evaluated by a built-in engine, with a formula editor and Formula Bar, autocomplete, reference highlighting, optional A1 notation, fill-handle reference adjustment, custom functions, and live formula Excel export
  • ♿️ Improve the accessibility of Data Grid cells and picker day cells
  • 🗓️ Enable multi-resource event creation and editing in the Scheduler
  • 🐞 Bugfixes
  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​mustafajw07

The following team members contributed to this release: @​brijeshb42, @​flaviendelangle, @​JCQuintas, @​LukasTy, @​MBilalShafi, @​michelengelen, @​noraleonte, @​rita-codes, @​romgrk, @​silviuaavram

Data Grid

@mui/x-data-grid@9.12.0

@mui/x-data-grid-pro@9.12.0 pro

Same changes as in @mui/x-data-grid@9.12.0, plus:

@mui/x-data-grid-premium@9.12.0 premium

Same changes as in @mui/x-data-grid-pro@9.12.0, plus:

Date and Time Pickers

@mui/x-date-pickers@9.12.0

@mui/x-date-pickers-pro@9.12.0 pro

Same changes as in @mui/x-date-pickers@9.12.0, plus:

... (truncated)

Changelog

Sourced from @​mui/x-date-pickers's changelog.

9.12.0

Aug 21, 2026

We'd like to extend a big thank you to the 12 contributors who made this release possible. Here are some highlights ✨:

  • 🧮 Support Formulas on the Data Grid: cells in opted-in columns can hold spreadsheet-like formulas (=SUM(RANGE(…)), =price * quantity) evaluated by a built-in engine, with a formula editor and Formula Bar, autocomplete, reference highlighting, optional A1 notation, fill-handle reference adjustment, custom functions, and live formula Excel export
  • ♿️ Improve the accessibility of Data Grid cells and picker day cells
  • 🗓️ Enable multi-resource event creation and editing in the Scheduler
  • 🐞 Bugfixes
  • 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​mustafajw07

The following team members contributed to this release: @​brijeshb42, @​flaviendelangle, @​JCQuintas, @​LukasTy, @​MBilalShafi, @​michelengelen, @​noraleonte, @​rita-codes, @​romgrk, @​silviuaavram

Data Grid

@mui/x-data-grid@9.12.0

@mui/x-data-grid-pro@9.12.0 pro

Same changes as in @mui/x-data-grid@9.12.0, plus:

  • [DataGridPro] Honor hasNextPage in infinite lazy loading (Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 3, 2026
@vercel

vercel Bot commented Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
staging-organized-app Error Error Sep 4, 2026 11:10pm UTC
test-organized-app Error Error Sep 4, 2026 11:10pm UTC

@socket-security

socket-security Bot commented Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​mui/​x-tree-view@​8.27.2 ⏵ 9.12.095 -210079 -3100 +1100
Updated@​mui/​stylis-plugin-rtl@​7.3.8 ⏵ 9.4.0100 +51008397 +1100
Updated@​mui/​icons-material@​7.3.8 ⏵ 9.4.093 -21008797100
Updated@​mui/​material@​7.3.8 ⏵ 9.4.089 +241009197 -1100
Updated@​mui/​x-date-pickers@​8.27.2 ⏵ 9.12.091 -310091 -2100100

View full report

@socket-security

socket-security Bot commented Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @mui/material is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/mui-one-time-password-input@5.0.0 → npm/@mui/material@7.3.11

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@mui/material@7.3.11. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @mui/system is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/@mui/x-date-pickers@9.12.0 → npm/@mui/x-tree-view@9.12.0 → npm/mui-one-time-password-input@5.0.0 → npm/@mui/lab@7.0.0-beta.17 → npm/@mui/system@7.3.11

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@mui/system@7.3.11. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@dependabot dependabot Bot changed the title deps(apps): bump the mui group with 5 updates deps(apps): bump the mui group across 1 directory with 5 updates Sep 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/mui-87caf07c10 branch from a9c102c to dca80a4 Compare September 3, 2026 23:20
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/mui-87caf07c10 branch from dca80a4 to 2d611f7 Compare September 4, 2026 23:03
devin-ai-integration[bot]
devin-ai-integration Bot reviewed Sep 4, 2026
View reviewed changes

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Devin Review

Comment thread package.json
"@mui/stylis-plugin-rtl": "^7.3.8",
"@mui/x-date-pickers": "^8.27.2",
"@mui/x-tree-view": "^8.27.2",
"@mui/material": "^9.4.0",

@devin-ai-integration devin-ai-integration Bot Sep 4, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 Clean dependency installation fails

@mui/material@9.4.0 conflicts with the Material 7 peer ranges required by two retained dependencies. npm ci exits with ERESOLVE before building.

Prompt for agents 
Resolve the incompatible Material UI peer dependency graph in package.json. @mui/lab@7.0.0-beta.17 requires @mui/material ^7.3.2, and mui-one-time-password-input@5.0.0 requires @mui/material ^7.0.0, while this PR selects @mui/material ^9.4.0. A clean npm ci now exits with ERESOLVE. Upgrade or replace both dependent packages with releases supporting Material 9, or keep the Material packages on a mutually supported major version. Regenerate package-lock.json and verify a strict npm ci succeeds without legacy-peer-deps or force.
Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

@dependabot
deps(apps): bump the mui group across 1 directory with 5 updates
88afbc1 
Bumps the mui group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@mui/icons-material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material) | `7.3.8` | `9.4.0` |
| [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `7.3.8` | `9.4.0` |
| [@mui/stylis-plugin-rtl](https://github.com/mui/material-ui/tree/HEAD/packages/mui-stylis-plugin-rtl) | `7.3.8` | `9.4.0` |
| [@mui/x-date-pickers](https://github.com/mui/mui-x/tree/HEAD/packages/x-date-pickers) | `8.27.2` | `9.12.0` |
| [@mui/x-tree-view](https://github.com/mui/mui-x/tree/HEAD/packages/x-tree-view) | `8.27.2` | `9.12.0` |



Updates `@mui/icons-material` from 7.3.8 to 9.4.0
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v9.4.0/packages/mui-icons-material)

Updates `@mui/material` from 7.3.8 to 9.4.0
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v9.4.0/packages/mui-material)

Updates `@mui/stylis-plugin-rtl` from 7.3.8 to 9.4.0
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v9.4.0/packages/mui-stylis-plugin-rtl)

Updates `@mui/x-date-pickers` from 8.27.2 to 9.12.0
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v9.12.0/packages/x-date-pickers)

Updates `@mui/x-tree-view` from 8.27.2 to 9.12.0
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v9.12.0/packages/x-tree-view)

---
updated-dependencies:
- dependency-name: "@mui/icons-material"
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: mui
- dependency-name: "@mui/material"
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: mui
- dependency-name: "@mui/stylis-plugin-rtl"
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: mui
- dependency-name: "@mui/x-date-pickers"
  dependency-version: 9.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: mui
- dependency-name: "@mui/x-tree-view"
  dependency-version: 9.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: mui
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/mui-87caf07c10 branch from 2d611f7 to 88afbc1 Compare September 4, 2026 23:08
@sonarqubecloud

sonarqubecloud Bot commented Sep 4, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@devin-ai-integration devin-ai-integration[bot] devin-ai-integration[bot] left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants