chore: bump the npm-minor-patch group across 1 directory with 38 updates

[dependabot]

Bumps the npm-minor-patch group with 38 updates in the / directory:

Package	From	To
@codemirror/autocomplete	6.20.1	6.20.2
@codemirror/lang-yaml	6.1.2	6.1.3
@codemirror/language	6.12.2	6.12.3
@codemirror/legacy-modes	6.5.2	6.5.3
@codemirror/search	6.6.0	6.7.0
@codemirror/view	6.40.0	6.43.0
@lezer/common	1.5.1	1.5.2
@tauri-apps/api	2.10.1	2.11.0
@tauri-apps/plugin-dialog	2.6.0	2.7.1
@tauri-apps/plugin-opener	2.5.3	2.5.4
@tauri-apps/plugin-updater	2.10.0	2.10.1
material-icon-theme	5.32.0	5.35.0
mermaid	11.13.0	11.15.0
posthog-js	1.363.1	1.376.0
react	19.2.4	19.2.6
@types/react	19.2.14	19.2.15
react-dom	19.2.4	19.2.6
react-resizable-panels	4.7.3	4.11.2
react-virtuoso	4.18.3	4.18.7
recharts	3.8.0	3.8.1
shiki	4.0.2	4.1.0
tailwind-merge	3.5.0	3.6.0
zustand	5.0.12	5.0.13
@sentry/vite-plugin	5.1.1	5.3.0
@tailwindcss/vite	4.2.2	4.3.0
@tauri-apps/cli	2.10.1	2.11.2
@types/node	25.5.0	25.9.1
@vitejs/plugin-react	6.0.1	6.0.2
@vitest/coverage-v8	4.1.0	4.1.7
happy-dom	20.8.4	20.9.0
jsdom	29.0.1	29.1.1
oxfmt	0.41.0	0.51.0
oxlint	1.56.0	1.66.0
react-scan	0.5.3	0.5.6
shadcn	4.1.0	4.8.0
tailwindcss	4.2.2	4.3.0
vite	8.0.1	8.0.14
vitest	4.1.0	4.1.7

Updates @codemirror/autocomplete from 6.20.1 to 6.20.2

Commits

• See full diff in compare view

Updates @codemirror/lang-yaml from 6.1.2 to 6.1.3

Changelog

Sourced from @​codemirror/lang-yaml's changelog.

6.1.3 (2026-03-24)

Bug fixes

Fix a regression in indentation caused by a bugfix in @​lezer/lr 1.4.7.

Commits

• 1a5b4f7 Mark version 6.1.3
• eda1a0d Use start of first pair, rather than start of block node, in indent
• 7ecebaa Remove duplicated slash in forum url in README
• d5a487a Fix forum link in readme
• 721f1f1 Add a usage section to readme
• See full diff in compare view

Updates @codemirror/language from 6.12.2 to 6.12.3

Changelog

Sourced from @​codemirror/language's changelog.

6.12.3 (2026-03-25)

Bug fixes

Fix a crash in bracketMatching when composing at end of document.

Commits

• f5af31e Mark version 6.12.3
• 371c9ba Fix bogus bracket highlighting being generated at end of document
• 9531899 Remove duplicated slash in forum url in README
• 2f4e701 Fix forum link in readme
• See full diff in compare view

Updates @codemirror/legacy-modes from 6.5.2 to 6.5.3

Commits

• See full diff in compare view

Updates @codemirror/search from 6.6.0 to 6.7.0

Commits

• See full diff in compare view

Updates @codemirror/view from 6.40.0 to 6.43.0

Changelog

Sourced from @​codemirror/view's changelog.

6.41.0 (2026-04-01)

Bug fixes

Fix an issue where EditorView.posAtCoords could incorrectly return a position near a higher element on the line, in mixed-font-size lines.

Expand the workaround for the Webkit bug that causes nonexistent selections to stay visible to be active on non-Safari Webkit browsers.

New features

The new EditorView.cursorScrollMargin facet can now be used to configure the extra space used when scrolling the cursor into view.

Commits

• See full diff in compare view

Updates @lezer/common from 1.5.1 to 1.5.2

Changelog

Sourced from @​lezer/common's changelog.

1.5.2 (2026-04-08)

Bug fixes

Fix a bug in mixed parsing that could cause the parser to fail to reuse unchanged inner parses.

Commits

• de5f962 Mark version 1.5.2
• 94cfcf7 Fix a bug in mixed parsing that could make it fail to reuse nodes
• See full diff in compare view

Updates @tauri-apps/api from 2.10.1 to 2.11.0

Release notes

Sourced from @​tauri-apps/api's releases.

@​tauri-apps/api v2.11.0

No known vulnerabilities found

[2.11.0]

New Features

• 074299c08 (#14307) Add Bring All to Front predefined menu item type
• a12142a48 (#14357) Add macos support for setting the icon and icon template state in the same step of the main thread, to prevent flickering.
• 001c8fe3d (#14722) Add a WebView option to control browser-level general autofill behavior. This option does not disable password or credit card autofill. On Windows (WebView2), setting it to true disables the general autofill "Suggestions" UI, which may appear even when autocomplete="off" is specified on input elements. On Linux, macOS, iOS, and Android, this option is currently unsupported and performs no operation.
• eb0312ea9 (#15199) Propagates the Event::Suspended and Event::Resumed events from tao when they are emitted on mobile targets.

> @tauri-apps/api@2.11.0 npm-publish /home/runner/work/tauri/tauri/packages/api
> pnpm build && cd ./dist && pnpm publish --access public --loglevel silly --no-git-checks
> @​tauri-apps/api@​2.11.0 build /home/runner/work/tauri/tauri/packages/api
> rollup -c --configPlugin typescript
�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m1s�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.6s�[22m�[39m
npm verbose cli /opt/hostedtoolcache/node/24.14.1/x64/bin/node /opt/hostedtoolcache/node/24.14.1/x64/bin/npm
npm info using npm@11.11.0
npm info using node@v24.14.1
npm silly config load:file:/opt/hostedtoolcache/node/24.14.1/x64/lib/node_modules/npm/npmrc
npm silly config load:file:/tmp/62753b73fd2498862aee9b07ed29cc21/.npmrc
npm silly config load:file:/home/runner/.npmrc
npm silly config load:file:/home/runner/.config/pnpm/rc
npm verbose title npm publish tauri-apps-api-2.11.0.tgz
npm verbose argv "publish" "--ignore-scripts" "tauri-apps-api-2.11.0.tgz" "--access" "public" "--loglevel" "silly"
npm verbose logfile logs-max:10 dir:/home/runner/.npm/_logs/2026-04-30T15_51_13_171Z-
npm verbose logfile /home/runner/.npm/_logs/2026-04-30T15_51_13_171Z-debug-0.log
npm warn Unknown env config "verify-deps-before-run". This will stop working in the next major version of npm. See npm help npmrc for supported config options.
npm warn Unknown env config "npm-globalconfig". This will stop working in the next major version of npm. See npm help npmrc for supported config options.
npm warn Unknown env config "_jsr-registry". This will stop working in the next major version of npm. See npm help npmrc for supported config options.
</tr></table>

... (truncated)

Commits

• e60834f Apply Version Updates From Current Changes (#15041)
• df05c00 chore: minor bump for codegen crate
• 13bea17 chore: fmt
• 9808236 fix(macOS): correct value for work_area.position.y (#14655)
• eb0312e feat(mobile): Propagate tao::Event::Suspended and tao::Event::Resumed to the ...
• 4ef5797 feat(ios): add --no-sign and --archive-only flags to ios build (#15061)
• 110336c fix(macOS): fix incorrect window position on multi-monitor setups (#15250)
• c00a3db feat(macros): add support for rename command macro in tauri-macros #14173 (#1...
• 764b913 feat(cli): restart Android emulator if it is disconnected from adb (#14313)
• 1035f12 fix(windows): tauri-bundler detect arm system (#14923)
• Additional commits viewable in compare view

Updates @tauri-apps/plugin-dialog from 2.6.0 to 2.7.1

Release notes

Sourced from @​tauri-apps/plugin-dialog's releases.

dialog-js v2.7.1

[2.7.1]

Dependencies

• Upgraded to fs-js@2.5.1

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.1
npm notice filename: tauri-apps-plugin-dialog-2.7.1.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: fc83387de807c8d064d2b64b1b813b84e8286a12
npm notice integrity: sha512-OK1UBXYt+ojcm[...]FmEOjIY9IhzOQ==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1429011725
+ @tauri-apps/plugin-dialog@2.7.1

dialog v2.7.1

[2.7.1]

Dependencies

• Upgraded to fs-js@2.5.1

... (truncated)

Commits

• e7a68fa publish new versions (#3068)
• b5550a3 chore: temp delete updater changefile
• 93426f8 fix: fix docsrs builds
• 4ee61e0 Revert "chore: temp delete updater changefile"
• 06124af publish new versions (#2972)
• 060219e chore(deps): update dependency @​rollup/plugin-typescript to v12.3.0 (#3067)
• c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
• d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
• cdc7eec chore(deps): update dependency @​rollup/plugin-typescript to v12.2.0 (#3066)
• 6314b00 chore: temp delete updater changefile
• Additional commits viewable in compare view

Updates @tauri-apps/plugin-opener from 2.5.3 to 2.5.4

Release notes

Sourced from @​tauri-apps/plugin-opener's releases.

opener-js v2.5.4

[2.5.4]

• c1fd33b3 (#3343 by @​Legend-Master) Fix revealItemInDir/reveal_items_in_dir can't reveal network paths like \\wsl.localhost\Ubuntu\etc on Windows

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.5.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.5.4
npm notice filename: tauri-apps-plugin-opener-2.5.4.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: b37883e4d36125b8c5a0c74f683395958a65bd7d
npm notice integrity: sha512-1HnPkb+AmgO29[...]aUJtT57lfO9CQ==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1429011743
+ @tauri-apps/plugin-opener@2.5.4

opener v2.5.4

[2.5.4]

• c1fd33b3 (#3343 by @​Legend-Master) Fix revealItemInDir/reveal_items_in_dir can't reveal network paths like \\wsl.localhost\Ubuntu\etc on Windows

... (truncated)

Commits

• e7a68fa publish new versions (#3068)
• b5550a3 chore: temp delete updater changefile
• 93426f8 fix: fix docsrs builds
• 4ee61e0 Revert "chore: temp delete updater changefile"
• See full diff in compare view

Updates @tauri-apps/plugin-updater from 2.10.0 to 2.10.1

Release notes

Sourced from @​tauri-apps/plugin-updater's releases.

updater-js v2.10.1

[2.10.1]

• 31ab6f8d (#3285 by @​hrzlgnm) fix: preserve file extension of updater package, otherwise users may get confused when presented with a sudo dialog suggesting to install a file with the extension .rpm using dpkg -i

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.10.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.1kB README.md
npm notice 2.6kB dist-js/index.cjs
npm notice 2.3kB dist-js/index.d.ts
npm notice 2.6kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.10.1
npm notice filename: tauri-apps-plugin-updater-2.10.1.tgz
npm notice package size: 3.7 kB
npm notice unpacked size: 12.1 kB
npm notice shasum: ea0efd766890394b6c719b9fc21de7da0029c69c
npm notice integrity: sha512-NFYMg+tWOZPJd[...]Y1WVCNHnh3eRA==
npm notice total files: 6
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1235993797
+ @tauri-apps/plugin-updater@2.10.1

updater v2.10.1

[2.10.1]

• 31ab6f8d (#3285 by @​hrzlgnm) fix: preserve file extension of updater package, otherwise users may get confused when presented with a sudo dialog suggesting to install a file with the extension .rpm using dpkg -i

</tr></table> 

... (truncated)

Commits

• d6a3898 Publish New Versions (v2) (#3268)
• 2e5bcdf chore(deps): fix audits (#3373)
• 4374b4f chore(notification): remove unused dev-deps (#3372)
• f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
• 4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
• 99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
• eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
• 5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
• 2c0883e chore(deps): update dependency vite to v8 (#3346)
• 024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
• Additional commits viewable in compare view

Updates material-icon-theme from 5.32.0 to 5.35.0

Release notes

Sourced from material-icon-theme's releases.

v5.35.0

compare changes

🚀 Enhancements

• Add CAD file extensions to 3d icon mapping (#3436)
• Add tsdown icon (#3418)
• Add new icons for mrpack (#3439)
• Add support for vercel.ts icon (typed Vercel configuration) (#3441)
• Support jxl image file type (#3444)
• Add uiua file icon (#3408)
• Add folder associations for rust/cargo projects (#3447)
• icon: Add zed folder icon (#3442)
• icon: Add redis icon (#3450)
• Add more unit tests for writefile helper function (9e4c98aa)
• Include language IDs into the file icons (c9a9d2ed)
• Update dependencies (d7274c71)

🩹 Fixes

• Add rootDir to tsconfig.declarations.json for TypeScript 6 (4f7f49e9)
• Correct typos in CONTRIBUTING.md (4de4acf7)

💅 Refactors

• core: Rewrite toTitleCase for clarity and add tests (33c0e614)
• Remove duplicate toTitleCase, consolidate imports (e247951d)

🏡 Chore

• Improve release process (b959b483)

✅ Tests

• core: Add comprehensive tests for object helpers (57f476c5)

❤️ Contributors

• Philipp Kief (@​PKief)
• Sayan Shankhari (@​SayanShankhari)
• Tymon Marek (@​TymonMarek)
• Unteksi-ozar (@​Unteksi-ozar)
• 锐冰 SharpIce (@​SharpIceX)
• El Mahdi Bennajah (@​bennajah)
• Glitch714 (@​glitchplaysgames714)
• Andrin Haldner (@​AHaldner)
• Kaden Gruizenga (@​kgruiz)

v5.34.0

compare changes

... (truncated)

Changelog

Sourced from material-icon-theme's changelog.

v5.35.0

compare changes

🚀 Enhancements

• Add CAD file extensions to 3d icon mapping (#3436)
• Add tsdown icon (#3418)
• Add new icons for mrpack (#3439)
• Add support for vercel.ts icon (typed Vercel configuration) (#3441)
• Support jxl image file type (#3444)
• Add uiua file icon (#3408)
• Add folder associations for rust/cargo projects (#3447)
• icon: Add zed folder icon (#3442)
• icon: Add redis icon (#3450)
• Add more unit tests for writefile helper function (9e4c98aa)
• Include language IDs into the file icons (c9a9d2ed)
• Update dependencies (d7274c71)

🩹 Fixes

• Add rootDir to tsconfig.declarations.json for TypeScript 6 (4f7f49e9)
• Correct typos in CONTRIBUTING.md (4de4acf7)

💅 Refactors

• core: Rewrite toTitleCase for clarity and add tests (33c0e614)
• Remove duplicate toTitleCase, consolidate imports (e247951d)

🏡 Chore

• Improve release process (b959b483)

✅ Tests

• core: Add comprehensive tests for object helpers (57f476c5)

❤️ Contributors

• Philipp Kief (@​PKief)
• Sayan Shankhari (@​SayanShankhari)
• Tymon Marek (@​TymonMarek)
• Unteksi-ozar (@​Unteksi-ozar)
• 锐冰 SharpIce (@​SharpIceX)
• El Mahdi Bennajah (@​bennajah)
• Glitch714 (@​glitchplaysgames714)
• Andrin Haldner (@​AHaldner)
• Kaden Gruizenga (@​kgruiz)

v5.34.0

... (truncated)

Commits

• 39b78e2 chore(release): v5.35.0
• 676e3d3 chore(deps): update github actions workflows (#3454)
• d7274c7 feat: update dependencies
• c9a9d2e feat: include language IDs into the file icons
• 9e4c98a feat: add more unit tests for writefile helper function
• 4de4acf fix: correct typos in CONTRIBUTING.md
• 4f7f49e fix: add rootDir to tsconfig.declarations.json for TypeScript 6
• b0ca202 chore(deps): update bun packages (major) (#3412)
• 61c98df chore(deps): update dependency bun to v1.3.13 (#3325)
• 559e00f chore(deps): update bun packages (#3257)
• Additional commits viewable in compare view

Attestation changes

This version has no provenance attestation, while the previous version (5.32.0) was attested. Review the package versions before updating.

Updates mermaid from 11.13.0 to 11.15.0

Release notes

Sourced from mermaid's releases.

mermaid@11.15.0

Minor Changes

• #7174 0aca217 Thanks @​milesspencer35! - feat(sequence): Add support for decimal start and increment values in the autonumber directive

• #7512 8e17492 Thanks @​aruncveli! - feat(flowchart): add datastore shape

  In Data flow diagrams, a datastore/warehouse/file/database is used to represent data persistence. It is denoted by a rectangle with only top and bottom borders, and can be used in flowcharts with A@{ shape: datastore, label: "Datastore" }.

• #6440 9ad8dde Thanks @​yordis, @​lgazo! - feat: add Event Modeling diagram

• #7707 27db774 Thanks @​txmxthy! - feat(architecture): expose four fcose layout knobs for architecture-beta diagrams (nodeSeparation, idealEdgeLengthMultiplier, edgeElasticity, numIter) so authors can tune layout density and spread overlapping siblings without changing diagram source

• #7604 bf9502f Thanks @​M-a-c! - feat(class): add nested namespace support for class diagrams via dot notation and syntactic nesting

  If you have namespaces in class diagrams that use .s already and want to render them without nesting (≤v11.14.0 behaviour), you can use set class.hierarchicalNamespaces=false in your mermaid config:

  config:
    class:
      hierarchicalNamespaces: false

• #7272 88cdd3d Thanks @​xinbenlv! - feat(sankey): add outlined label style, configurable nodeWidth/nodePadding, and custom node colors

Patch Changes

• #7737 e9b0f34 Thanks @​ashishjain0512! - fix: prevent unbalanced CSS styles in classDefs

• #7737 37ff937 Thanks @​ashishjain0512! - fix: create CSS styles using the CSSOM

  This removes some invalid CSS and normalizes some CSS formatting.

• #7508 bfe60cc Thanks @​biiab! - fix(stateDiagram): end note now only closes a note when used on a new line

• #7737 faafb5d Thanks @​ashishjain0512! - fix(gantt): add iteration limit for excludes field

• #7737 65f8be2 Thanks @​ashishjain0512! - fix: disallow some CSS at-rules in custom CSS

• #7726 1502f32 Thanks @​aloisklink! - fix(wardley): fix unnecessary sanitization of text

• #7578 1f98db8 Thanks @​Gaston202! - fix(class): self-referential class multiplicity labels no longer rendered multiple times

  Fixes #7560. Resolves an issue where cardinality labels on self-referential class relationships were rendered three times due to edge splitting in the dagre layout. The fix ensures that each sub-edge only carries its relevant label positions.

• #7592 2343e38 Thanks @​knsv-bot! - fix(sequence): add background box behind alt/else section title labels in sequence diagrams

• #7589 7fb9509 Thanks @​NYCU-Chung! - fix(block): prevent column widths from shrinking when mixing different column spans

• #7632 3f9e0f1 Thanks @​ekiauhce! - fix(sequence): correct messageAlign label position for right-to-left arrows in sequence diagrams

... (truncated)

Commits

• 41646df Merge pull request #7739 from aloisklink/ci/fix-release
• 2671f5c docs: fix v11.15.0 release
• f4bf04b Merge pull request #7738 from mermaid-js/changeset-release/master
• abfb563 Version Packages
• 60b289f Release Candidate 11.15.0 (#7737)
• d37c0db Merge pull request #7730 from aloisklink/fix/fix-edgeLabelRightLeft-changes
• 5ab5a28 docs: improve nested namespace changeset
• 18f8b4c fix: revert endEdgeLabelLeft/endEdgeLabelRight change
• 504b2eb Merge pull request #7726 from aloisklink/fix/correct-unnecessary-html-escapes...
• 1502f32 fix(wardley): fix unnecessary sanitization of text
• Additional commits viewable in compare view

Updates posthog-js from 1.363.1 to 1.376.0

Release notes

Sourced from posthog-js's releases.

posthog-js@1.376.0

1.376.0

Minor Changes

• #3655 6e8d349 Thanks @​arnaudhillen! - Expose the in-repo @posthog/rrweb, @posthog/rrweb-types, and @posthog/rrweb-plugin-console-record packages as subpath entry points on posthog-js. Consumers can now import { Replayer } from 'posthog-js/rrweb', import type { eventWithTime } from 'posthog-js/rrweb-types', and import { LogLevel } from 'posthog-js/rrweb-plugin-console-record' instead of installing the underlying rrweb packages directly. The rrweb worker sourcemap (image-bitmap-data-url-worker-*.js.map) is also shipped from posthog-js/dist/ so downstream bundlers no longer need to reach into node_modules/@posthog/rrweb. (2026-05-22)

Patch Changes

• #3639 c806cca Thanks @​marandaneto! - Use native async gzip compression for session recording events when CompressionStream is available. (2026-05-22)
• Updated dependencies [c806cca]:
  • @​posthog/core@​1.29.9
  • @​posthog/types@​1.376.0

posthog-js@1.375.0

1.375.0

Minor Changes

• #3641 2e1d5f4 Thanks @​dustinbyrne! - Add flag_keys config to restrict browser feature flag remote evaluation to specific flag keys. (2026-05-21)

Patch Changes

• Updated dependencies [2e1d5f4]:
  • @​posthog/types@​1.375.0
  • @​posthog/core@​1.29.8

posthog-js@1.374.4

1.374.4

Patch Changes

• #3638 87e2145 Thanks @​marandaneto! - Apply tracing headers to matching XMLHttpRequest requests (2026-05-21)

• #3646 4f87827 Thanks @​marandaneto! - Avoid throwing or initializing PostHogProvider when no API key or client is provided (2026-05-21)

• #3645 280832b Thanks @​TueHaulund! - Capture <link rel="stylesheet"> URLs from link.sheet.href and try link.sheet directly for inlining, so recordings survive SPA history.pushState navigations between routes of different path depths (where link.href re-resolves against a new baseURI but link.sheet.href preserves the URL the browser actually fetched).

  Ships the fix landed in #3635, which only bumped the internal @posthog/rrweb-snapshot package — that package is bundled into posthog-js at build time but is not published to npm on its own, so a posthog-js bump is needed to actually deliver the change. (2026-05-21)

• Updated dependencies []:

  • @​posthog/types@​1.374.4
  • @​posthog/core@​1.29.7

posthog-js@1.374.3

... (truncated)

Commits

• 3d41c1d chore: update versions and lockfile [version bump]
• c806cca feat: use async gzip for replay event compression (#3639)
• 6e8d349 feat(replay): expose rrweb subpath entries on posthog-js (#3655)
• ec81cc6 chore: validate changeset versioning (#3647)
• 6d3d39f chore(ci): bump pinned posthog-sdk-test-harness SHA (#3660)
• b191176 chore(ci): bump pinned PostHog/.github reusable workflow SHA (#3659)
• fb18a0a chore: pin github actions to sha (#3644)
• a05405d chore: update versions and lockfile [version bump]
• 18ea8b5 feat(node): promote flag definition cache provider types (#3642)
• 2e1d5f4 feat: add browser flag_keys config (#3641)
• Additional commits viewable in compare view

Updates react from 19.2.4 to 19.2.6

Release notes

Sourced from react's releases.

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

Commits

• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• See full diff in compare view

Updates @types/react from 19.2.14 to 19.2.15

Commits

• See full diff in compare view

Updates react-dom from 19.2.4 to 19.2.6

Release notes

Sourced from react-dom's releases.

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

Commits

• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• See full diff in compare view

Updates react-resizable-panels from 4.7.3 to 4.11.2

Release notes

Sourced from react-resizable-panels's releases.

4.9.0

• 702: Add disableDoubleClick prop to Separator to enable turning off the double-click size reset behavior.

4.8.0

• 699: useDefaultLayout hook automatically migrates legacy layouts to version 4 format; see issue 605 or PR 699 for details on how this works.

4.7.6

• 698: Replace Panel aria-disabled attribute with data-disabled

4.7.5

• 696: Improved server rendering support for defaultSize prop

4.7.4

• 689: Fix edge case bug with pointer event capture

Changelog

Sourced from react-resizable-panels's changelog.

4.11.2

• Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.