[katarinazaprazna]

Consolidates the backlog of stale Dependabot PRs into a single update. Majors are intentionally excluded (matches ignore: semver-major in dependabot.yml).

Changes

• npm update --save across root + packages/module: every dependency bumped to latest within its current major, with ranges raised to match
• ts-jest (pinned) 29.3.4 → 29.4.15 for a security fix
• react-router / react-router-dom → ^6.30.6 (the 6.30.5 useNavigate colon-URL change doesn't affect us: react-router is only used in docs examples via useSearchParams)

PatternFly stays on 6.4 on purpose

PatternFly libraries (react-core, -icons, -table, -component-groups, plus @patternfly/patternfly and react-code-editor for docs) are unchanged: same published ranges and same lockfile versions as main. This keeps the declared ranges and what CI tests in sync, and doesn't force consumers onto PF 6.7. Moving to PF 6.7 will be a separate PR.

So that the docs work with PF 6.4, @patternfly/documentation-framework goes to ^6.28.10, the newest release that accepts PF 6.4 (6.29.0 doesn't declare its @rspack/core dependency and fails to build).

No snapshot changes.

Verification

• clean npm ci ✅
• npm run build ✅
• npm run lint ✅ (0 errors)
• npm test ✅ (81 tests, 21 snapshots, unchanged)
• npm run build:docs ✅

Not addressed

• npm audit: 112 findings (down from 126 on main), all in dev/docs tooling. The rest need major upgrades (jest 29, cypress 13, typescript-eslint 5, patternfly-a11y, serve, react-router 6) or the PF 6.7 bump
• documentation-framework 6.28.10 pins express@4.21.2 and webpack@5.94.0, so build(deps): bump webpack and @patternfly/documentation-framework #608, build(deps-dev): bump @patternfly/documentation-framework from 6.24.2 to 6.41.0 #653, build(deps-dev): bump body-parser from 1.20.3 to 1.20.5 (via audit fix) #655, build(deps-dev): bump serve-static from 1.16.2 to 1.16.3 (via audit fix) #657 and build(deps): bump serialize-javascript, @patternfly/documentation-framework and terser-webpack-plugin #661 will only be resolved by the PF 6.7 PR (which brings documentation-framework 6.54)
• build(deps-dev): bump @img/sharp-libvips-linux-x64 from 1.0.0 to 1.2.4 (via audit fix) #652, build(deps-dev): bump @img/sharp-linux-arm64 from 0.33.0 to 0.34.5 (via audit fix) #656 (sharp binaries) and build(deps): bump @tootallnate/once and jest-environment-jsdom #619 (jest-environment-jsdom) aren't covered here
• build(deps-dev): update @patternfly/patternfly requirement from ^6.4.0 to ^6.5.2 in /packages/module #663–build(deps-dev): update @patternfly/documentation-framework requirement from ^6.24.2 to ^6.44.0 in /packages/module #669 propose raising the PF floors and should be closed, not merged

Supersedes

#587 #610 #614 #654 #659 #660 #697 #698

🤖 Generated with Claude Code

[dlabaj]

LGTM