fix(deps): update weekly patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@codemirror/lang-javascript	6.2.2 -> 6.2.3					dependencies	patch
@radix-ui/react-checkbox (source)	1.1.2 -> 1.1.4					dependencies	patch
@radix-ui/react-dialog (source)	1.1.2 -> 1.1.6					dependencies	patch
@radix-ui/react-dropdown-menu (source)	2.1.2 -> 2.1.6					dependencies	patch
@​radix-ui/react-icons	1.3.0 -> 1.3.2					dependencies	patch
@radix-ui/react-primitive (source)	2.0.0 -> 2.0.2					dependencies	patch
@radix-ui/react-radio-group (source)	1.2.1 -> 1.2.3					dependencies	patch
@radix-ui/react-slider (source)	1.2.1 -> 1.2.3					dependencies	patch
@radix-ui/react-tabs (source)	1.1.1 -> 1.1.3					dependencies	patch
@types/lodash (source)	4.17.7 -> 4.17.16					devDependencies	patch
@types/node (source)	18.19.50 -> 18.19.86					devDependencies	patch
@types/react (source)	18.3.5 -> 18.3.20					devDependencies	patch
@types/react-dom (source)	18.3.0 -> 18.3.6					devDependencies	patch
@uiw/react-codemirror (source)	4.23.1 -> 4.23.10					dependencies	patch
@vitejs/plugin-react (source)	4.3.1 -> 4.3.4					devDependencies	patch
eslint (source)	8.57.0 -> 8.57.1					devDependencies	patch
eslint-plugin-jsx-a11y	6.10.0 -> 6.10.2					devDependencies	patch
eslint-plugin-prettier	5.2.1 -> 5.2.6					devDependencies	patch
express (source)	4.21.0 -> 4.21.2					dependencies	patch
pytest (changelog)	==8.3.4 -> ==8.3.5						patch
python	3.13.1-bookworm -> 3.13.2-bookworm					final	patch
python-engineio	==4.11.1 -> ==4.11.2						patch
python-socketio	==5.12.0 -> ==5.12.1						patch
react-joyride (source)	2.9.2 -> 2.9.3					dependencies	patch
requests (source, changelog)	==2.32.2 -> ==2.32.3						patch
ws	8.18.0 -> 8.18.1					dependencies	patch
zustand	4.5.5 -> 4.5.6					dependencies	patch

---

Release Notes

codemirror/lang-javascript (@​codemirror/lang-javascript)

v6.2.3

Compare Source

Bug fixes

Disable JavaScript completions in JSX context.

radix-ui/primitives (@​radix-ui/react-checkbox)

v1.1.4

Compare Source

v1.1.3

Compare Source

uiwjs/react-codemirror (@​uiw/react-codemirror)

v4.23.10

Compare Source

Documentation v4.23.10: https://raw.githack.com/uiwjs/react-codemirror/b920d7f/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.9...v4.23.10

npm i @​uiw/[email protected]

• 🐞 fix: Fix flash of content on initialization (#​717) b11562d @​colsondonohue

v4.23.9

Compare Source

Documentation v4.23.9: https://raw.githack.com/uiwjs/react-codemirror/fc8f5fa/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.8...v4.23.9

npm i @​uiw/[email protected]

• 🐞 fix(theme): correctly extend basic light theme (#​716) e191c2a @​veksen
• 🆎 type: module in codemirror-extensions-basic-setup (#​702) a657654 @​PuruVJ

v4.23.8

Compare Source

Documentation v4.23.8: https://raw.githack.com/uiwjs/react-codemirror/62aac6a/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.7...v4.23.8

npm i @​uiw/[email protected]

• 🐞 fix: Pass diffConfig to options in CodeMirrorMerge component (#​712) a95fb47 @​snelsi

v4.23.7

Compare Source

Documentation v4.23.7: https://raw.githack.com/uiwjs/react-codemirror/5b16350/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.6...v4.23.7

npm i @​uiw/[email protected]

• 💄 chore: update nextjs example. #​677 ab89f28 @​jaywcjlove
• 🐞 fix(theme): implement 'exports' field in themes/theme/package.json (#​708) 4edca1d @​aspiers
• 🐞 fix(theme): implement 'exports' field in themes/*/package.json #​708 #​613 #​680 ced0b1a @​jaywcjlove

v4.23.6

Compare Source

Documentation v4.23.6: https://raw.githack.com/uiwjs/react-codemirror/57d9fb7/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.5...v4.23.6

npm i @​uiw/[email protected]

• 🐞 fix: Implement 'exports' field in package.json for the core & basics setup package (#​692) 8f1ff2d @​fatton139
• 🐞 fix: resolve exports field issue causing README.md loading error in documentation #​692 c2437c7 @​jaywcjlove

v4.23.5

Compare Source

Documentation v4.23.5: https://raw.githack.com/uiwjs/react-codemirror/2dc5095/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.4...v4.23.5

npm i @​uiw/[email protected]

• 🎨 style(vscode): fix default value issue for light mode. #​688 661bfc9 @​jaywcjlove

v4.23.4

Compare Source

Documentation v4.23.4: https://raw.githack.com/uiwjs/react-codemirror/b4d4e77/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.3...v4.23.4

npm i @​uiw/[email protected]

• 🐞 fix(hyper-link): Move toString out of while loop to prevent memory leak (#​687) e10f426 @​danielericlee

v4.23.3

Compare Source

Documentation v4.23.3: https://raw.githack.com/uiwjs/react-codemirror/d199b9e/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.2...v4.23.3

npm i @​uiw/[email protected]

• 🎨 style(theme): Vscode Light - lineHighlight. (#​686) 4af6677 @​luiz2f

v4.23.2

Compare Source

Documentation v4.23.2: https://raw.githack.com/uiwjs/react-codemirror/c8cf3ac/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.1...v4.23.2

npm i @​uiw/[email protected]

• 🐞 fix(merge): ref view not available on load. #​681 67b6d6b @​jaywcjlove

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v4.3.4

Compare Source

Add Vite 6 to peerDependencies range

Vite 6 is highly backward compatible, not much to add!

Force Babel to output spec compliant import attributes #​386

The default was an old spec (with type: "json"). We now enforce spec compliant (with { type: "json" })

v4.3.3

Compare Source

React Compiler runtimeModule option removed

React Compiler was updated to accept a target option and runtimeModule was removed. vite-plugin-react will still detect runtimeModule for backwards compatibility.

When using a custom runtimeModule or target !== '19', the plugin will not try to pre-optimize react/compiler-runtime dependency.

The react-compiler-runtime is now available on npm can be used instead of the local shim for people using the compiler with React < 19.

Here is the configuration to use the compiler with React 18 and correct source maps in development:

npm install babel-plugin-react-compiler react-compiler-runtime @​babel/plugin-transform-react-jsx-development

export default defineConfig(({ command }) => {
  const babelPlugins = [['babel-plugin-react-compiler', { target: '18' }]]
  if (command === 'serve') {
    babelPlugins.push(['@​babel/plugin-transform-react-jsx-development', {}])
  }

  return {
    plugins: [react({ babel: { plugins: babelPlugins } })],
  }
})

v4.3.2

Compare Source

Ignore directive sourcemap error #​369

eslint/eslint (eslint)

v8.57.1

Compare Source

Bug Fixes

• a19072f fix: add logic to handle fixTypes in the lintText() method (#​18900) (Francesco Trotta)
• 04c7188 fix: Don't lint same file multiple times (#​18899) (Francesco Trotta)
• 87ec3c4 fix: do not throw when defining a global named __defineSetter__ (#​18898) (Francesco Trotta)
• 60a1267 fix: Provide helpful error message for nullish configs (#​18889) (Milos Djermanovic)
• a0dea8e fix: allow name in global ignores, fix --no-ignore for non-global (#​18875) (Milos Djermanovic)
• 3836bb4 fix: do not crash on error in fs.walk filter (#​18886) (Milos Djermanovic)
• 2dec349 fix: skip processor code blocks that match only universal patterns (#​18880) (Milos Djermanovic)

Documentation

• 6a5add4 docs: v8.x Add EOL banner (#​18744) (Amaresh S M)
• b034575 docs: v8.x add version support page to the dropdown (#​18731) (Amaresh S M)
• 760ef7d docs: v8.x add version support page in the side navbar (#​18740) (Amaresh S M)
• 428b7ea docs: Add Powered by Algolia label to the search (#​18658) (Amaresh S M)
• c68c07f docs: version selectors synchronization (#​18265) (Milos Djermanovic)

Build Related

• 35d366a build: Support updates to previous major versions (#​18870) (Milos Djermanovic)

Chores

• 140ec45 chore: upgrade @​eslint/js@​8.57.1 (#​18913) (Milos Djermanovic)
• bcdfc04 chore: package.json update for @​eslint/js release (Jenkins)
• 3f6ce8d chore: pin [email protected] (#​18910) (Milos Djermanovic)
• 9f07549 chore: ignore /docs/v8.x in link checker (#​18660) (Milos Djermanovic)

jsx-eslint/eslint-plugin-jsx-a11y (eslint-plugin-jsx-a11y)

v6.10.2

Compare Source

Fixed

• [patch] no-redundandant-roles: allow <img src="*.svg" role="img" /> #936

Commits

• [meta] fix changelog URLs 0d01a1a
• [Refactor] remove no-longer-needed es-iterator-helpers aa075bd
• [Refactor] avoid spreading things that are already arrays d15d3ab
• [Dev Deps] update @babel/cli, @babel/core, @babel/eslint-parser, @babel/plugin-transform-flow-strip-types, @babel/register 5dad7c4
• [Tests] aria-role: Add valid test for <svg role="img" /> daba189
• [Docs] label-has-associated-control: add line breaks for readability 0bc6378
• [Tests] label-has-associated-control: add additional test cases 30d2318
• [Tests] Add tests to reinforce required attributes for role="heading" d92446c

v6.10.1

Compare Source

Commits

• [Fix] handle interactive/noninteractive changes from aria-query 4925ba8
• [Docs] Use consistent spelling of 'screen reader' cb6788c
• [Dev Deps] update @babel/cli, @babel/core, @babel/eslint-parser, @babel/plugin-transform-flow-strip-types, @babel/register, auto-changelog, eslint-plugin-import, tape 518a77e
• [Deps] update es-iterator-helpers, string.prototype.includes eed03a3
• [meta] package.json - Update jscodeshift & remove babel-jest 2ee940c
• [Docs] Remove accidental whitespace in CONTRIBUTING.md a262131
• [Deps] unpin aria-query e517937

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v5.2.6

Compare Source

Patch Changes

• #​723 1451176 Thanks @​renovate! - fix(deps): bump synckit to v0.11.0

v5.2.5

Compare Source

Patch Changes

• #​721 4f5513d Thanks @​JounQin! - fix: clarify correct eslint-config-prettier peer range

v5.2.4

Compare Source

Patch Changes

• #​715 b8cfe56 Thanks @​JounQin! - chore: hourcekeeping, bump all (dev) deps

v5.2.3

Compare Source

Patch Changes

• #​703 9c6141f Thanks @​BPScott! - Add name field to recommended flat config

v5.2.2

Compare Source

Patch Changes

• #​700 aa5b59f Thanks @​ntnyq! - fix: report node when loc not found

expressjs/express (express)

v4.21.2

Compare Source

What's Changed

• Add funding field (v4) by @​bjohansebas in https://github.com/expressjs/express/pull/6065
• deps: [email protected] by @​blakeembrey in https://github.com/expressjs/express/pull/5956
• deps: bump [email protected] by @​jonchurch in https://github.com/expressjs/express/pull/6209
• Release: 4.21.2 by @​UlisesGascon in https://github.com/expressjs/express/pull/6094

Full Changelog: expressjs/express@4.21.1...4.21.2

v4.21.1

Compare Source

What's Changed

• Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in https://github.com/expressjs/express/pull/6029
• Release: 4.21.1 by @​UlisesGascon in https://github.com/expressjs/express/pull/6031

Full Changelog: expressjs/express@4.21.0...4.21.1

pytest-dev/pytest (pytest)

v8.3.5

Compare Source

pytest 8.3.5 (2025-03-02)

Bug fixes

• #​11777: Fixed issue where sequences were still being shortened even with -vv verbosity.
• #​12888: Fixed broken input when using Python 3.13+ and a libedit build of Python, such as on macOS or with uv-managed Python binaries from the python-build-standalone project. This could manifest e.g. by a broken prompt when using Pdb, or seeing empty inputs with manual usage of input() and suspended capturing.
• #​13026: Fixed AttributeError{.interpreted-text role="class"} crash when using --import-mode=importlib when top-level directory same name as another module of the standard library.
• #​13053: Fixed a regression in pytest 8.3.4 where, when using --import-mode=importlib, a directory containing py file with the same name would cause an ImportError
• #​13083: Fixed issue where pytest could crash if one of the collected directories got removed during collection.

Improved documentation

• #​12842: Added dedicated page about using types with pytest.

  See types{.interpreted-text role="ref"} for detailed usage.

Contributor-facing changes

• #​13112: Fixed selftest failures in test_terminal.py with Pygments >= 2.19.0
• #​13256: Support for Towncrier versions released in 2024 has been re-enabled
  when building Sphinx docs -- by webknjaz{.interpreted-text role="user"}.

miguelgrinberg/python-engineio (python-engineio)

v4.11.2: Release 4.11.2

Compare Source

See CHANGES.md for release notes.

miguelgrinberg/python-socketio (python-socketio)

v5.12.1: Release 5.12.1

Compare Source

See CHANGES.md for release notes.

gilbarbara/react-joyride (react-joyride)

v2.9.3: 2.9.3

Compare Source

• Update custom-components docs: 650ab36
• Upgrade dependencies: 9874150
• Fix scroll for targets with custom scroll parent or fixed position: 3648311
• Disable tooltip keyboard focus if the disableScrolling is set: af6fa9e
• Fix locale handling of custom components: 826669d

psf/requests (requests)

v2.32.3

Compare Source

Bugfixes

• Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of
  HTTPAdapter. (#​6716)
• Fixed issue where Requests started failing to run on Python versions compiled
  without the ssl module. (#​6724)

websockets/ws (ws)

v8.18.1

Compare Source

Bug fixes

• The length of the UNIX domain socket paths in the tests has been shortened to
  make them work when run via CITGM (021f7b8).

pmndrs/zustand (zustand)

v4.5.6

Compare Source

See: #​2943

Full Changelog: pmndrs/zustand@v4.5.5...v4.5.6

---

Configuration

📅 Schedule: Branch creation - "before 5am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.