deps(deps): bump the react-ecosystem group across 1 directory with 9 updates

[dependabot]

Bumps the react-ecosystem group with 9 updates in the / directory:

Package	From	To
react	19.2.3	19.2.4
@types/react	19.2.7	19.2.13
react-day-picker	9.13.0	9.13.1
react-dom	19.2.3	19.2.4
react-dropzone	14.3.8	14.4.0
react-error-boundary	6.0.0	6.1.0
react-hook-form	7.69.0	7.71.1
react-resizable-panels	4.0.14	4.6.2
react-router-dom	7.11.0	7.13.0

Updates react from 19.2.3 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Commits

• 90ab3f8 Version 19.2.4
• See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.13

Commits

• See full diff in compare view

Updates react-day-picker from 9.13.0 to 9.13.1

Release notes

Sourced from react-day-picker's releases.

v9.13.1

Persian calendar improvements.

What's Changed

• feat: add narrow weekday format for Persian calendar by @​rezaaa in gpbl/react-day-picker#2895

New Contributors

• @​rezaaa made their first contribution in gpbl/react-day-picker#2895

Full Changelog: gpbl/react-day-picker@v9.13.0...v9.13.1

Changelog

Sourced from react-day-picker's changelog.

Changelog

DayPicker follows Semantic Versioning. See the Releases page on Github for the complete list of changes, diffs and contributors, or the list of versions published on npm.

Commits

• 375f48a build: bump v9.13.1
• 3caa733 feat: add narrow weekday format for Persian calendar (#2895)
• fee7c41 docs: add view source to examples
• 693f913 docs: fix link in CHANGELOG
• 56f346f docs: fix broken links
• 03bb506 docs: fix test with setTestTime
• b54c451 docs: update changelog
• 0f9cee4 docs: update introductory links
• 7323f9d docs: update accessibility notes for input fields
• 67792b7 repo: fix for npm publish
• Additional commits viewable in compare view

Updates react-dom from 19.2.3 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Commits

• 90ab3f8 Version 19.2.4
• See full diff in compare view

Updates react-dropzone from 14.3.8 to 14.4.0

Release notes

Sourced from react-dropzone's releases.

v14.4.0

14.4.0 (2026-01-29)

Bug Fixes

• accept files with empty type during drag events (eaa8ba5)
• correct dragLeave filter logic and add dragend test (273aff4)

Features

• add isDragGlobal state for document-level drag detection (f0874b0)

Commits

• e2ae36d build: remove @​semantic-release/git
• 84ff2d6 build: update deps for semantic-release and node version
• 65095ea build: add --ignore-engines flag to test workflow for Node 18 compatibility
• d70ea96 build: enable passwordless publishing with NPM trusted publishers
• 2c2c56e build: add full git history fetch and build step to release workflow
• a9e9741 build: add semantic-release configuration with trusted publishing support
• 1455f4c build: Update checkout action to version 4 in release workflow
• f4e6706 build: Update Node.js setup action to version 4
• 8de653a build: Remove NPM_TOKEN from release.yml
• ca30590 build: Update release.yml to include permissions
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-dropzone since your current version.

Updates react-error-boundary from 6.0.0 to 6.1.0

Release notes

Sourced from react-error-boundary's releases.

6.1.0

• #235: Fix error type (Error -> unknown)
• Export getErrorMessage helper method

6.0.3

• Removed react-dom from peer dependencies list; it was accidentally added during a previous internal refactor

6.0.2

Updated README and generated TS docs

6.0.1

Updated README and generated docs

Commits

• 86c0509 6.0.4 -> 6.1.0
• 9aea72a Fix error type (Error -> unknown) (#235)
• 186ae40 6.0.2 -> 6.0.3
• bc1e74b 6.0.1 -> 6.0.2
• 9d2cb82 Tweaked FAQ header
• e39086d Update react-lib-tools dep
• 6a51a1a Add FAQ section to docs
• f33ab81 Update react-lib-tools dep
• 27d8a8f Replace og.svg with og.png
• ea18878 Update react-lib-tools dep
• Additional commits viewable in compare view

Updates react-hook-form from 7.69.0 to 7.71.1

Release notes

Sourced from react-hook-form's releases.

Version v7.71.1

🐞 fix #13250 issue with booleans_as_integers (#13252)

Version 7.71.0

⚡ perf: memoize FormProvider context value to prevent unnecessary rerenders (#13235) 🚄 perf: separate control context to prevent unnecessary rerenders (#13234) 🐞 fix: update isValid when field disabled state changes (#13231) 👌 chore: optimize bundle size via safe terser options (#13243) (#13244)

thanks to @​kamja44, @​a28689604 & @​newsiberian

Version 7.70.0

✅ watch type improvement (#13228) 🐞 fix: prevent field array ghost elements with keepDirtyValues (#13188) 🐞 fix: improve invalid date handling in deepEqual and validation (#13230) 🐞 fix(types): handle branded types correctly in DeepPartial (#13222) 🐞 fix native validation focus issue (#13220) 🐞 change spread operator to set name with depricated names prop, then override with new name prop is supplied (#13214) 🐞 fix: prevent duplicate subscription trigger in setValue (#13206) (#13209) 👌 chore: fix lib type check include tests (#13229)

thanks to @​EdwardEB, @​constantly-dev & @​a28689604

Commits

• 51589c5 7.71.1
• fc57a62 🐞 fix #13250 issue with booleans_as_integers (#13252)
• 195139d 7.71.0
• e26f886 👌 chore: optimize bundle size via safe terser options (#13243) (#13244)
• 17c85ed 🚄 perf: separate control context to prevent unnecessary rerenders (#13234)
• a084dcb ⚡ perf: memoize FormProvider context value to prevent unnecessary rerenders (...
• 65c78bc 🐞 fix: update isValid when field disabled state changes (#13231)
• d810ff5 7.70.0
• c54ebf9 🐞 fix: prevent field array ghost elements with keepDirtyValues (#13188)
• 3966596 ✅ watch type improvement (#13228)
• Additional commits viewable in compare view

Updates react-resizable-panels from 4.0.14 to 4.6.2

Release notes

Sourced from react-resizable-panels's releases.

4.6.2

• 660: Group guards against layouts with mis-ordered Panel id keys

4.6.1

• 658: Imperative Panel and Group APIs ignored disabled status when resizing panels; this is an explicit override of the disabled state and is required to support conditionally disabled groups.
• 658: Separator component does not set a cursor: not-allowed style if the parent Group has cursors disabled.

4.6.0

• 657: Allow Panel and Separator components to be disabled

4.5.9

• 649: Optimization: Replace useForceUpdate with useSyncExternalStore to avoid side effect of swallowing "click" events in certain cases
• 654: Bugfix Imperative Group method setLayout persists layout to in-memory cache
• 652: Re-enable collapsible panel bugfix after fixing another reported issue

4.5.8

• 651: Disabled the change to collapsible panel behavior that was originally made in 635 due to another reported regression

4.5.7

• 646: Re-enable the collapsible Panel from 4.5.3 that was disabled in 4.5.6
• 648: Bugfix: Reset Separator hover-state on Document "pointerout"

4.5.6

• 644: Disabled the change to collapsible panel behavior that was originally made in 635.

4.5.5

• 641: Removed aria-orientation role from root Group element as this was invalid according to the ARIA spec; (for more information see the discussion on issue #640)
• 642: Bugfix: Fix collapsible Panel regression introduced in 4.5.3

4.5.4

• 638: Panel avoids unnecessary re-renders in response to mouse-hover state.

4.5.3

• 635: Expand pre-collapsed panels if drug past the halfway point for more consistent collapse/expand behavior.
• 631: Bugfix: Panels set max-width and max-height to 100% to fix potential CSS overflow bug.

4.5.2

• 626: Decrease default hit target size for Separator and Panel edges; make configurable via a new Group prop.

4.5.1

• 624: Bugfix: Fallback to alternate CSS cursor styles for Safari

Safari	Chrome, Firefox
grab	move
col-resize	ew-resize
row-resize	ns-resize

4.5.0

• 616: Replace Separator and Panel edge hit-area padding with a minimum size threshold based on Apple's user interface guidelines. Separators that are large enough will no longer be padded; separators that are too small (or panels without separators) will more or less function like before. This should not have much of a user-facing impact other than an increase in the click target area. (Previously I was not padding enough, as per Apple's guidelines.)

... (truncated)

Changelog

Sourced from react-resizable-panels's changelog.

4.6.2

• 660: Group guards against layouts with mis-ordered Panel id keys

4.6.1

• 658: Imperative Panel and Group APIs ignored disabled status when resizing panels; this is an explicit override of the disabled state and is required to support conditionally disabled groups.
• 658: Separator component does not set a cursor: not-allowed style if the parent Group has cursors disabled.

4.6.0

• 657: Allow Panel and Separator components to be disabled

4.5.9

• 649: Optimization: Replace useForceUpdate with useSyncExternalStore to avoid side effect of swallowing "click" events in certain cases
• 654: Bugfix Imperative Group method setLayout persists layout to in-memory cache
• 652: Re-enable collapsible panel bugfix after fixing another reported issue

4.5.8

• 651: Disabled the change to collapsible panel behavior that was originally made in 635 due to another reported regression

4.5.7

• 646: Re-enable the collapsible Panel from 4.5.3 that was disabled in 4.5.6
• 648: Bugfix: Reset Separator hover-state on Document "pointerout"

4.5.6

• 644: Disabled the change to collapsible panel behavior that was originally made in 635

4.5.5

• 641: Removed aria-orientation role from root Group element as this was invalid according to the ARIA spec; (for more information see the discussion on issue #640)
• 642: Bugfix: Fix collapsible Panel regression introduced in 4.5.3

4.5.4

• 638: Panel avoids unnecessary re-renders in response to mouse-hover state.

4.5.3

• 635: Expand pre-collapsed panels if drug past the halfway point for more consistent collapse/expand behavior.
• 631: Bugfix: Panels set max-width and max-height to 100% to fix potential CSS overflow bug.

4.5.2

• 626: Decrease default hit target size for Separator and Panel edges; make configurable via a new Group prop.

... (truncated)

Commits

• b4ece6f 4.6.1 -> 4.6.2
• cabb73b Group guards against layouts with mis-ordered Panel id keys (#660)
• 4001d8c 4.6.0 -> 4.6.1
• d85e9b6 Improve disabled Panel and Separator UX (#658)
• f039bf2 4.5.9 -> 4.6.0
• 8860cf9 Allow Panel and Separator components to be disabled (#657)
• 0c9b5d3 4.5.8 -> 4.5.9
• 5cc60a5 Add another unit test for panel collapse/expand
• 6359942 Add e2e test for click-swallowing issue
• 4a5e519 Update CHANGELOG with pending release changes
• Additional commits viewable in compare view

Updates react-router-dom from 7.11.0 to 7.13.0

Release notes

Sourced from react-router-dom's releases.

react-router-dom-v5-compat@6.4.0-pre.15

Patch Changes

• Updated dependencies
  • react-router@6.4.0-pre.15
  • react-router-dom@6.4.0-pre.15

Changelog

Sourced from react-router-dom's changelog.

7.13.0

Patch Changes

• Updated dependencies:
  • react-router@7.13.0

7.12.0

Patch Changes

• Updated dependencies:
  • react-router@7.12.0

Commits

• 5557ba3 chore: Update version for release (#14749)
• 62c6e0e chore: Update version for release (pre) (#14738)
• 26653a6 chore: Update version for release (#14712)
• 7ac2346 chore: Update version for release (pre) (#14709)
• See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.13

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Assignees

The following users could not be added as assignees: maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.