[dependabot]

Bumps the dependencies group with 5 updates:

Package	From	To
babel-plugin-transform-import-meta	3.0.0	3.1.0
jsdom	30.1.2	30.1.3
puppeteer	25.13.0	25.14.0
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1

Updates babel-plugin-transform-import-meta from 3.0.0 to 3.1.0

Changelog

Sourced from babel-plugin-transform-import-meta's changelog.

3.1.0 (2026-10-15)

Features

• support import.meta.main #42 (792d32b)

Commits

• bd03715 chore(release): 3.1.0
• 792d32b feat: support import.meta.main #42
• 80031c8 Merge pull request #40 from javiertury/chore/update-lockfile
• 6983771 chore: update pnpm-lock.yaml
• 3ad3b1b Merge pull request #38 from javiertury/renovate/actions-checkout-7.x
• 5d8ace9 chore(deps): update actions/checkout action to v7.0.1
• 58872bc Merge pull request #37 from javiertury/chore/update-lockfile
• 5653c0b chore: update pnpm-lock.yaml
• See full diff in compare view

Updates jsdom from 30.1.2 to 30.1.3

Release notes

Sourced from jsdom's releases.

v30.1.3

• Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@​scttcper, @​asamuzaK)
• Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@​scttcper)
• Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
• Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
• Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@​rnavarro)
• Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
• Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
• Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
• Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
• Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
• Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
• Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
• Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
• Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@​asamuzaK)

Commits

• 058c0f5 30.1.3
• fcd1fd1 Cascade parsed longhands independently
• a3ee786 Cascade computed style properties on demand
• f42dc15 Resolve colors before caching or using currentcolor
• 074b1fb Compute background-position lengths against the final font size
• d19598c Apply style rules nested in multiple @​media rules
• 45d626c Rule out attribute selector subjects before matching
• 3ff0a5b Upgrade Undici and remove abort workarounds
• 8813bb1 Ignore CSS declarations with unparseable math functions
• 63712d8 Fix XHR credentials across redirects
• Additional commits viewable in compare view

Updates puppeteer from 25.13.0 to 25.14.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.14.0

25.14.0 (2026-10-14)

🎉 Features

• migrate network emulation to Network.emulateNetworkConditionsByRule (#15508) (2952199)
• network: accept Headers instances for request interception and extra headers (#15530) (b20d03b)
• roll to Firefox 158.0 (#15582) (3902129)

🛠️ Fixes

• enforce blocklist/allowlist for service worker requests (#15586) (414231a)
• roll to Chrome 155.0.8059.79 (#15584) (9ea69c1)
• screencast: round the frame size to whole pixels (#15574) (565e584)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.2.4 to 3.2.5

puppeteer: v25.14.0

25.14.0 (2026-10-14)

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.2.4 to 3.2.5
    • puppeteer-core bumped from 25.13.0 to 25.14.0

Commits

• d1b9a21 chore: release main (#15577)
• 414231a fix: enforce blocklist/allowlist for service worker requests (#15586)
• 2952199 feat: migrate network emulation to Network.emulateNetworkConditionsByRule (#1...
• 9478d60 chore(deps-dev): bump the dev-dependencies group with 5 updates (#15571)
• b20d03b feat(network): accept Headers instances for request interception and extra he...
• 9ea69c1 fix: roll to Chrome 155.0.8059.79 (#15584)
• 198c333 fix(browsers): persist alias removal when uninstalling a browser (#15463)
• 3902129 feat: roll to Firefox 158.0 (#15582)
• d8e4e36 fix(browsers): prevent symlink chain escapes during zip extraction (#15578)
• 04dee98 fix: don't allow path traversal from buildId (#15565)
• Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: ed5887e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	react@​19.3.0 ⏵ 19.3.1
	babel-plugin-transform-import-meta@​3.0.0 ⏵ 3.1.0	+1		+1	+1
	puppeteer@​25.13.0 ⏵ 25.14.0
	react-dom@​19.3.0 ⏵ 19.3.1			+1
	jsdom@​30.1.2 ⏵ 30.1.3	+1		+1

View full report