refactor: Bump react-draggable from 4.7.0 to 4.7.2

[dependabot]

Bumps react-draggable from 4.7.0 to 4.7.2.

Changelog

Sourced from react-draggable's changelog.

4.7.2 (Sep 16, 2026)

• Fix: ESM consumers under moduleResolution: node16/nodenext no longer resolve the CommonJS type declaration. The exports map carried a single condition-independent "types" key, so the import entry was typed by build/cjs/cjs.d.ts — a CJS declaration, since the package has no "type": "module" — which made a default import resolve to the module namespace and <Draggable> fail with TS2604/TS2786. Each condition now declares its own types, pointing the ESM entry at the cjs.d.mts tsup already emits. Regression in 4.6.0; types-only, no runtime change. (closes #816)
• Internal: the build contract check now asserts that exports types each condition separately, and type-checks a real ESM consumer against the built package under nodenext — resolving through exports rather than a paths mapping, which is what let this regression through.

4.7.1 (Jul 28, 2026)

• Fix: props are no longer marked required under React 18 TypeScript. Regression in 4.6.0. The propTypes static was a required member of the public type; React 18's JSX LibraryManagedAttributes consults propTypes when it is required, and doing so cancels the optionality defaultProps normally grants. React 19 ignores propTypes, which is why the v19-only type check missed it. make lint now also type-checks the public surface against @types/react@18. (#809, closes #807)
• Fix: guard the process access in the debug logger so browser bundlers that do not shim process no longer crash on import. (#810, closes #806)

Commits

• fc6286a release v4.7.2
• 576628c chore: restore missing security resolutions + close esbuild/uuid alerts (#823)
• a995fb5 chore: clear dependabot security alerts (#821)
• 194ecfc build: pin packageManager to yarn 1.22.22 (#820)
• 01989d2 fix: type each exports condition so ESM consumers get ESM types (#817)
• 087337f build: check npm before the tag-is-tip check in the release gate
• bcbaa8e build: make the release flow refuse to publish a bad state
• 2a2bfc0 test(build): fail the build on an unguarded process reference (#806)
• 0c95645 release v4.7.1
• 24a8fb3 Merge PR #809: fix partial/undefined props under React 18 TypeScript
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: a79315e9-5011-4066-95b0-99c3b4fcdacd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}