Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

  • Bumps the frontend-prod-minor-deps group with 8 updates:
Package From To
@marsidev/react-turnstile 1.3.1 1.4.1
@mui/material 6.4.12 6.5.0
@mui/x-date-pickers 7.27.3 7.29.4
@reduxjs/toolkit 2.9.2 2.11.2
i18next 25.6.0 25.7.3
motion 12.23.24 12.23.26
react-router 7.9.5 7.11.0
validator 13.15.22 13.15.26

Changelog

Sourced from react-i18next's changelog.

16.5.0

  • Add configuration option transDefaultProps to set default props for the Trans component (e.g. tOptions, shouldUnescape, values) 1895

16.4.1

  • fix(Trans): prevent double-escaping of interpolated values in component props (e.g. title). Unescape HTML entities before passing prop values to React to avoid rendered output like " / &[#39](https://github.com/i18next/react-i18next/issues/39);. 1893

16.4.0

  • <Trans count> prop: optional - infer count from children 1891

16.3.5

  • fix runaway effect in useTranslation 1888 by 1889

16.3.4

  • Fix: avoid the "ref is not a prop" warning when a user ref is placed on an element inside <Trans> 1887, by still trying to fix element.ref access issue with react 19 1846

16.3.3

  • improve useTranslation to fix "Maximum update depth exceeded" but still support new react-compiler 1885 1863

16.3.2

  • fix: avoid "Uncaught TypeError: Cannot redefine property: __original"

16.3.1

  • revert fix: Incosistent behaviour of Trans and t. Trans set defaultValue when t call doesn't set the field. 1876 f22d478

16.3.0

  • fix: add i18n wrapper for React Compiler and React.memo compatibility 1884

16.2.4

  • try to fix "Trans component do not render anymore children as default value in test environment" 1883 by also respecting 1876

16.2.3

  • fix hyphened component break issue 1882

16.2.2

  • fix trans component break with less than sign 1880, closes 1734

16.2.1

... (truncated)

Commits

  • Updates the frontend license report

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

This change is Reviewable

Summary by CodeRabbit

  • Chores
    • Updated multiple frontend dependencies to newer versions with no behavioral changes to the application.

✏️ Tip: You can customize this high-level summary in your review settings.

Bumps the frontend-prod-minor-deps group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@marsidev/react-turnstile](https://github.com/marsidev/react-turnstile) | `1.3.1` | `1.4.1` |
| [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `6.4.12` | `6.5.0` |
| [@mui/x-date-pickers](https://github.com/mui/mui-x/tree/HEAD/packages/x-date-pickers) | `7.27.3` | `7.29.4` |
| [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.9.2` | `2.11.2` |
| [i18next](https://github.com/i18next/i18next) | `25.6.0` | `25.7.3` |
| [motion](https://github.com/motiondivision/motion) | `12.23.24` | `12.23.26` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.9.5` | `7.11.0` |
| [validator](https://github.com/validatorjs/validator.js) | `13.15.22` | `13.15.26` |


Updates `@marsidev/react-turnstile` from 1.3.1 to 1.4.1
- [Release notes](https://github.com/marsidev/react-turnstile/releases)
- [Commits](marsidev/react-turnstile@v1.3.1...v1.4.1)

Updates `@mui/material` from 6.4.12 to 6.5.0
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/v6.5.0/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v6.5.0/packages/mui-material)

Updates `@mui/x-date-pickers` from 7.27.3 to 7.29.4
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/v7.29.4/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v7.29.4/packages/x-date-pickers)

Updates `@reduxjs/toolkit` from 2.9.2 to 2.11.2
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](reduxjs/redux-toolkit@v2.9.2...v2.11.2)

Updates `i18next` from 25.6.0 to 25.7.3
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v25.6.0...v25.7.3)

Updates `motion` from 12.23.24 to 12.23.26
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.23.24...v12.23.26)

Updates `react-router` from 7.9.5 to 7.11.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router)

Updates `validator` from 13.15.22 to 13.15.26
- [Release notes](https://github.com/validatorjs/validator.js/releases)
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md)
- [Commits](validatorjs/validator.js@13.15.22...13.15.26)

---
updated-dependencies:
- dependency-name: "@marsidev/react-turnstile"
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: "@mui/material"
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: "@mui/x-date-pickers"
  dependency-version: 7.29.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: i18next
  dependency-version: 25.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: motion
  dependency-version: 12.23.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-prod-minor-deps
- dependency-name: react-router
  dependency-version: 7.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-prod-minor-deps
- dependency-name: validator
  dependency-version: 13.15.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-prod-minor-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2026
@coderabbitai
Copy link

coderabbitai bot commented Jan 1, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

📝 Walkthrough

Walkthrough

This pull request updates frontend dependencies to newer versions across the project, including updates to Material-UI, Redux Toolkit, React Router, i18next, and other packages. Version changes range from minor to moderate semantic version bumps, with corresponding updates in both package.json and the frontend licenses documentation file.

Changes

Cohort / File(s) Summary
Frontend Dependencies
package.json
Updated 10 dependencies to newer versions: @marsidev/react-turnstile (1.3.1→1.4.1), @mui/material (6.4.6→6.5.0), @reduxjs/toolkit (2.9.2→2.11.2), i18next (25.6.0→25.7.3), motion/framer-motion (12.23.24→12.23.26), react-i18next (15.4.1→16.5.0), react-router (7.9.5→7.11.0), validator (13.15.22→13.15.26), and type definitions.
License Documentation
docs/user_guide/assets/licenses/frontend_licenses.txt
License file updated to reflect same dependency version bumps as package.json, including copyright year change from 2024 to 2025 for react-i18next.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Suggested reviewers

  • jasonleenaylor

Poem

🐰 Versions hop and updates bound,
Dependencies upgraded all around,
React and Redux, routers so spry,
Fresh i18next features reach up high,
License books dusted, copyrights renewed,
Our frontend feast is freshly brewed!

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely summarizes the main change: updating frontend production dependencies. It directly matches the changeset content.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link

github-actions bot commented Jan 1, 2026

⚠️ Commit Message Format Issues ⚠️
commit 5f454c6672:
3: B1 Line exceeds max length (86>80): "Bumps react-i18next from 15.4.1 to 16.5.0."

commit 9ea8c1edf3:
7: B1 Line exceeds max length (96>80): "| @marsidev/react-turnstile | 1.3.1 | 1.4.1 |"
8: B1 Line exceeds max length (108>80): "| @mui/material | 6.4.12 | 6.5.0 |"
9: B1 Line exceeds max length (111>80): "| @mui/x-date-pickers | 7.27.3 | 7.29.4 |"
10: B1 Line exceeds max length (85>80): "| @reduxjs/toolkit | 2.9.2 | 2.11.2 |"
13: B1 Line exceeds max length (114>80): "| react-router | 7.9.5 | 7.11.0 |"
14: B1 Line exceeds max length (86>80): "| validator | 13.15.22 | 13.15.26 |"
24: B1 Line exceeds max length (84>80): "- Commits"
29: B1 Line exceeds max length (81>80): "- Commits"
42: B1 Line exceeds max length (83>80): "- Commits"
46: B1 Line exceeds max length (101>80): "- Changelog"
47: B1 Line exceeds max length (104>80): "- Commits"
51: B1 Line exceeds max length (83>80): "- Changelog"
52: B1 Line exceeds max length (84>80): "- Commits"

@codecov
Copy link

codecov bot commented Jan 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.57%. Comparing base (f78ef22) to head (47de66e).
⚠️ Report is 10 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #4071   +/-   ##
=======================================
  Coverage   74.57%   74.57%           
=======================================
  Files         295      295           
  Lines       10938    10938           
  Branches     1372     1372           
=======================================
  Hits         8157     8157           
  Misses       2385     2385           
  Partials      396      396           
Flag Coverage Δ
backend 85.59% <ø> (ø)
frontend 66.02% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

dependabot bot and others added 2 commits January 8, 2026 09:17
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.4.1 to 16.5.0.
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v15.4.1...v16.5.0)

---
updated-dependencies:
- dependency-name: react-i18next
  dependency-version: 16.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@github-actions github-actions bot added the documentation Improvements or additions to documentation label Jan 8, 2026
@imnasnainaec imnasnainaec changed the title Bump the frontend-prod-minor-deps group with 8 updates Bump frontend production deps Jan 8, 2026
@imnasnainaec imnasnainaec requested a review from Copilot January 8, 2026 14:42
@imnasnainaec imnasnainaec self-assigned this Jan 8, 2026
@imnasnainaec
Copy link
Collaborator

@coderabbitai review

@coderabbitai
Copy link

coderabbitai bot commented Jan 8, 2026

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Copy link
Collaborator

@imnasnainaec imnasnainaec left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@imnasnainaec reviewed 3 files and all commit messages.
Reviewable status: :shipit: complete! all files reviewed, all discussions resolved (waiting on @dependabot[bot]).

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates 9 frontend production dependencies to their latest minor and patch versions. The most significant change is a major version bump of react-i18next from 15.4.1 to 16.5.0, which is properly supported by updating i18next from 25.6.0 to 25.7.3 to meet the new peer dependency requirement (>= 25.6.2). Additionally, @reduxjs/toolkit's update from 2.9.2 to 2.11.2 brings immer from version 10.2.0 to 11.1.3.

  • Updated 8 packages to latest minor/patch versions
  • Updated react-i18next to 16.5.0 (major version bump) with required i18next upgrade to 25.7.3
  • Updated license documentation to reflect new package versions

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
package.json Updates version constraints for 9 frontend dependencies and 1 dev dependency (@types/validator)
package-lock.json Locks updated package versions and their transitive dependencies, including immer 11.1.3 and new use-sync-external-store dependency
docs/user_guide/assets/licenses/frontend_licenses.txt Updates license information to reflect new package versions, including copyright year change for react-i18next (2024 → 2025)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@imnasnainaec imnasnainaec added the 🟨Medium Medium-priority PR label Jan 8, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 8, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 8, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/frontend-prod-minor-deps-d5209d3ed3 branch January 8, 2026 17:33
@imnasnainaec imnasnainaec restored the dependabot/npm_and_yarn/frontend-prod-minor-deps-d5209d3ed3 branch January 8, 2026 18:46
@imnasnainaec imnasnainaec reopened this Jan 8, 2026
Copy link
Contributor

@jasonleenaylor jasonleenaylor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:lgtm:

@jasonleenaylor reviewed 3 files and all commit messages, and made 1 comment.
Reviewable status: :shipit: complete! all files reviewed, all discussions resolved (waiting on @dependabot[bot]).

@imnasnainaec imnasnainaec merged commit e52dbfd into master Jan 9, 2026
19 of 20 checks passed
@imnasnainaec imnasnainaec deleted the dependabot/npm_and_yarn/frontend-prod-minor-deps-d5209d3ed3 branch January 9, 2026 19:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation javascript Pull requests that update Javascript code 🟨Medium Medium-priority PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants