Skip to content

chore: bump the production-dependencies group across 1 directory with 6 updates#606

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/production-dependencies-fdfd5879c5
Open

chore: bump the production-dependencies group across 1 directory with 6 updates#606
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/production-dependencies-fdfd5879c5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 6 updates in the / directory:

Package From To
@mui/x-charts 8.27.0 9.3.0
@mui/x-data-grid 8.27.1 9.3.0
axios 1.15.0 1.16.1
dotenv 17.3.1 17.4.2
lodash-es 4.17.22 4.18.1
react-i18next 16.5.4 17.0.8

Updates @mui/x-charts from 8.27.0 to 9.3.0

Release notes

Sourced from @​mui/x-charts's releases.

v9.3.0

We'd like to extend a big thank you to the 16 contributors who made this release possible. Here are some highlights ✨:

  • 📆 Refactor Calendar Range drag editing to use Pointer Events instead of drag and touch events combination (#22279)
  • ✨ Apply lazy loading to EventTimelinePremium (#22308)
  • 🐞 Bugfixes
  • 📚 Documentation improvements
  • 🌎 Added Norwegian bokmål (nb-NO) locale to the Scheduler
  • 🌎 Improved Swedish (sv-SE) locale on the Data Grid

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​jvskriubakken, @​oscar-b, @​rin, @​viktormelin

The following team members contributed to this release: @​aemartos, @​alexfauquette, @​arminmeh, @​Janpot, @​JCQuintas, @​LukasTy, @​mj12albert, @​oliviertassinari, @​rita-codes, @​romgrk, @​sai6855

Data Grid

@mui/x-data-grid@9.3.0

@mui/x-data-grid-pro@9.3.0 pro

Same changes as in @mui/x-data-grid@9.3.0.

@mui/x-data-grid-premium@9.3.0 premium

Same changes as in @mui/x-data-grid-pro@9.3.0.

Date and Time Pickers

@mui/x-date-pickers@9.3.0

  • [pickers] Fix disabled state styling for PickersTextField standard and filled variants (#22189) @​LukasTy
  • [pickers] Fix previous month disabled state calculation (#22524) @​mj12albert
  • [pickers] Merge slotProps.sectionContent in PickersInputBase (#22324) @​rin

@mui/x-date-pickers-pro@9.3.0 pro

Same changes as in @mui/x-date-pickers@9.3.0, plus:

Charts

@mui/x-charts@9.3.0

... (truncated)

Changelog

Sourced from @​mui/x-charts's changelog.

9.3.0

May 21, 2026

We'd like to extend a big thank you to the 16 contributors who made this release possible. Here are some highlights ✨:

  • 📆 Refactor Calendar Range drag editing to use Pointer Events instead of drag and touch events combination (#22279)
  • ✨ Apply lazy loading to EventTimelinePremium (#22308)
  • 🐞 Bugfixes
  • 📚 Documentation improvements
  • 🌎 Added Norwegian bokmål (nb-NO) locale to the Scheduler
  • 🌎 Improved Swedish (sv-SE) locale on the Data Grid

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​jvskriubakken, @​oscar-b, @​rin, @​viktormelin

The following team members contributed to this release: @​aemartos, @​alexfauquette, @​arminmeh, @​Janpot, @​JCQuintas, @​LukasTy, @​mj12albert, @​oliviertassinari, @​rita-codes, @​romgrk, @​sai6855

Data Grid

@mui/x-data-grid@9.3.0

@mui/x-data-grid-pro@9.3.0 pro

Same changes as in @mui/x-data-grid@9.3.0.

@mui/x-data-grid-premium@9.3.0 premium

Same changes as in @mui/x-data-grid-pro@9.3.0.

Date and Time Pickers

@mui/x-date-pickers@9.3.0

  • [pickers] Fix disabled state styling for PickersTextField standard and filled variants (#22189) @​LukasTy
  • [pickers] Fix previous month disabled state calculation (#22524) @​mj12albert
  • [pickers] Merge slotProps.sectionContent in PickersInputBase (#22324) @​rin

@mui/x-date-pickers-pro@9.3.0 pro

Same changes as in @mui/x-date-pickers@9.3.0, plus:

Charts

... (truncated)

Commits
  • 1eb0ba2 [release] v9.3.0 (#22540)
  • ca688af [charts] Fix highlighted item crash (#22539)
  • 341b5f9 [charts] Fix the line and mark class (#22526)
  • 5405089 [charts] Add data-series to elements of radar chart (#22523)
  • 30d0bd5 [code-infra] Make generated propTypes union order deterministic (#22521)
  • 033f9bc [charts] Chart seriesConfig deduplication for lines an bars (#22257)
  • 4359d56 [code-infra] Enable mui/no-presentation-role lint rule (#22360)
  • c15aff8 [charts] Add environment check for warning messages in axis and radar hooks (...
  • 29b59b4 [charts] Improve performance of evaluateCurveY function (#22407)
  • bced0c8 [release] v9.2.0 (#22436)
  • Additional commits viewable in compare view

Updates @mui/x-data-grid from 8.27.1 to 9.3.0

Release notes

Sourced from @​mui/x-data-grid's releases.

v9.3.0

We'd like to extend a big thank you to the 16 contributors who made this release possible. Here are some highlights ✨:

  • 📆 Refactor Calendar Range drag editing to use Pointer Events instead of drag and touch events combination (#22279)
  • ✨ Apply lazy loading to EventTimelinePremium (#22308)
  • 🐞 Bugfixes
  • 📚 Documentation improvements
  • 🌎 Added Norwegian bokmål (nb-NO) locale to the Scheduler
  • 🌎 Improved Swedish (sv-SE) locale on the Data Grid

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​jvskriubakken, @​oscar-b, @​rin, @​viktormelin

The following team members contributed to this release: @​aemartos, @​alexfauquette, @​arminmeh, @​Janpot, @​JCQuintas, @​LukasTy, @​mj12albert, @​oliviertassinari, @​rita-codes, @​romgrk, @​sai6855

Data Grid

@mui/x-data-grid@9.3.0

@mui/x-data-grid-pro@9.3.0 pro

Same changes as in @mui/x-data-grid@9.3.0.

@mui/x-data-grid-premium@9.3.0 premium

Same changes as in @mui/x-data-grid-pro@9.3.0.

Date and Time Pickers

@mui/x-date-pickers@9.3.0

  • [pickers] Fix disabled state styling for PickersTextField standard and filled variants (#22189) @​LukasTy
  • [pickers] Fix previous month disabled state calculation (#22524) @​mj12albert
  • [pickers] Merge slotProps.sectionContent in PickersInputBase (#22324) @​rin

@mui/x-date-pickers-pro@9.3.0 pro

Same changes as in @mui/x-date-pickers@9.3.0, plus:

Charts

@mui/x-charts@9.3.0

... (truncated)

Changelog

Sourced from @​mui/x-data-grid's changelog.

9.3.0

May 21, 2026

We'd like to extend a big thank you to the 16 contributors who made this release possible. Here are some highlights ✨:

  • 📆 Refactor Calendar Range drag editing to use Pointer Events instead of drag and touch events combination (#22279)
  • ✨ Apply lazy loading to EventTimelinePremium (#22308)
  • 🐞 Bugfixes
  • 📚 Documentation improvements
  • 🌎 Added Norwegian bokmål (nb-NO) locale to the Scheduler
  • 🌎 Improved Swedish (sv-SE) locale on the Data Grid

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​jvskriubakken, @​oscar-b, @​rin, @​viktormelin

The following team members contributed to this release: @​aemartos, @​alexfauquette, @​arminmeh, @​Janpot, @​JCQuintas, @​LukasTy, @​mj12albert, @​oliviertassinari, @​rita-codes, @​romgrk, @​sai6855

Data Grid

@mui/x-data-grid@9.3.0

@mui/x-data-grid-pro@9.3.0 pro

Same changes as in @mui/x-data-grid@9.3.0.

@mui/x-data-grid-premium@9.3.0 premium

Same changes as in @mui/x-data-grid-pro@9.3.0.

Date and Time Pickers

@mui/x-date-pickers@9.3.0

  • [pickers] Fix disabled state styling for PickersTextField standard and filled variants (#22189) @​LukasTy
  • [pickers] Fix previous month disabled state calculation (#22524) @​mj12albert
  • [pickers] Merge slotProps.sectionContent in PickersInputBase (#22324) @​rin

@mui/x-date-pickers-pro@9.3.0 pro

Same changes as in @mui/x-date-pickers@9.3.0, plus:

Charts

... (truncated)

Commits

Updates axios from 1.15.0 to 1.16.1

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

... (truncated)

Changelog

Sourced from axios's changelog.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

... (truncated)

Commits
  • 1337d6b chore(release): prepare release 1.16.1 (#10877)
  • 858a790 fix: remove all caches (#10882)
  • 34adfd9 revert: "fix: support URL object as config.url input (#10866)" (#10874)
  • 847d89b fix: support URL object as config.url input (#10866)
  • 4094886 fix(progress): guard malformed XHR upload events (#10868)
  • 44f0c5b chore: change sponsorship link and add Twicsy advertisement (#10869)
  • 64e1095 chore: update PR and issue template to use h2 (#10865)
  • 3e6b4e1 fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...
  • c4453ba fix: add the ability to add additional sponsors to the process sponsors scrip...
  • caa00a9 fix: https data in cleartext to proxy (#10858)
  • Additional commits viewable in compare view

Updates dotenv from 17.3.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)
Commits

Updates lodash-es from 4.17.22 to 4.18.1

Release notes

Sourced from lodash-es's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits

Updates react-i18next from 16.5.4 to 17.0.8

Changelog

Sourced from react-i18next's changelog.

17.0.8

  • fix(types): <Trans i18nKey={$ => ...}> now typechecks under enableSelector: 'strict'. The Trans component's conditional type was gated on _EnableSelector extends true | 'optimize', excluding 'strict' and falling back to the legacy string-key signature. Runtime was already correct (it calls keyFromSelector(i18nKey) whenever typeof i18nKey === 'function'); this is a type-only fix that widens the conditional to include 'strict'. Thanks @​Faithfinder (#1921)

17.0.7

  • feat: useTranslation([nsA, nsB, ...]) now passes its full namespace list to getFixedT via the new scopeNs opt (requires i18next ≥ v26.0.10). This makes selector calls with a secondary-namespace prefix resolve correctly under default nsMode: t($ => $.nsB.foo) previously missed silently because the bound ns was the primary string only and i18next's selector rewrite needed an array. Resolution semantics are unchanged — plain t('key') lookups still stay isolated to the primary namespace by default; use nsMode: 'fallback' to opt into multi-ns fallback resolution as before. Fixes i18next#2429 for useTranslation-based callers.

17.0.6

  • fix: restore the v17 nodesToString output format consumed by i18next-cli's extractor while still rendering 1919 correctly
    • 17.0.5 fixed 1919 by changing what nodesToString produced, which inadvertently changed the extracted translation strings for keep-tags wrapping non-keep React elements
    • The fix now lives in the renderer: indexed <N> placeholders nested inside a keep-tag are scoped to that tag's own original React children (matching kept tags by name and positional occurrence at each level), so the translation string format produced by nodesToString is unchanged

17.0.5

  • fix: <Trans /> no longer breaks child rendering when a kept HTML node (transKeepBasicHtmlNodesFor) wraps a non-keep React element 1919 — superseded by 17.0.6, which keeps the same runtime fix without changing the nodesToString output

17.0.4

  • fix: avoid React does not recognize the 'i18nIsDynamicList' prop on a DOM element warning 1915

17.0.3

  • fix: avoid invalid prop on React.Fragment inside <Trans /> 1914

17.0.2

  • fix(types): values prop on <Trans /> now only requires interpolation variables for the specific i18nKey, not all variables in the namespace 1913

17.0.1

  • chore: bump minimum i18next peer dependency to >= 26.0.1 (forgot to do it in last version)
  • fix: migrate test setup from removed legacy interpolation.format to i18n.services.formatter.add() (i18next v26)

17.0.0

Potentially breaking changes

  • fix: transKeepBasicHtmlNodesFor now correctly preserves HTML tag names when children contain interpolations or mixed content 230
    • Previously, <strong>{{name}}</strong> was incorrectly serialized as <1>{{name}}</1> — the tag name was only preserved for plain string children
    • This bug existed since the feature was introduced and affects auto-generated keys (when no explicit i18nKey is provided)
    • If you rely on auto-generated Trans keys containing indexed tags for kept HTML elements with interpolation children, you will need to update your translation files

Other changes

  • updated dev dependencies (vitest, rollup plugins, happy-dom, typescript, etc.)

16.6.6

... (truncated)

Commits
  • a46ad23 17.0.8
  • f715031 update i18next dep
  • a515d5b changelog: 17.0.8 entry for #1921
  • d5ab7c8 fix(types): accept selector i18nKey on <Trans> under enableSelector: 'strict'...
  • b91ba36 Add Locize advice section near the top of README
  • 5e892a2 17.0.7
  • c8f4c6b feat: useTranslation([nsA,nsB]) routes selector secondary-ns prefix via getFi...
  • 084f9a6 Modernize locize.com URLs and refresh UTM tags
  • cb20d18 17.0.6
  • b8ad5e4 fix: scope indexed placeholders inside keep-tags at render time #1919
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: bump the production-dependencies group across 1 directory with…
c724aee 
… 6 updates

Bumps the production-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@mui/x-charts](https://github.com/mui/mui-x/tree/HEAD/packages/x-charts) | `8.27.0` | `9.3.0` |
| [@mui/x-data-grid](https://github.com/mui/mui-x/tree/HEAD/packages/x-data-grid) | `8.27.1` | `9.3.0` |
| [axios](https://github.com/axios/axios) | `1.15.0` | `1.16.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.2` |
| [lodash-es](https://github.com/lodash/lodash) | `4.17.22` | `4.18.1` |
| [react-i18next](https://github.com/i18next/react-i18next) | `16.5.4` | `17.0.8` |



Updates `@mui/x-charts` from 8.27.0 to 9.3.0
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v9.3.0/packages/x-charts)

Updates `@mui/x-data-grid` from 8.27.1 to 9.3.0
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v9.3.0/packages/x-data-grid)

Updates `axios` from 1.15.0 to 1.16.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.15.0...v1.16.1)

Updates `dotenv` from 17.3.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.3.1...v17.4.2)

Updates `lodash-es` from 4.17.22 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits/4.18.1)

Updates `react-i18next` from 16.5.4 to 17.0.8
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v16.5.4...v17.0.8)

---
updated-dependencies:
- dependency-name: "@mui/x-charts"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@mui/x-data-grid"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: axios
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lodash-es
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-i18next
  dependency-version: 17.0.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 25, 2026
@github-actions

github-actions Bot commented May 25, 2026

Copy link
Copy Markdown
PR Preview Action v1.8.1

QR code for preview link

🚀 View preview at
https://wandelbotsgmbh.github.io/wandelbots-js-react-components/pr-preview/pr-606/

Built to branch gh-pages at 2026-05-25 11:05 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants