chore(deps): update minor updates

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@canonical/react-components (source)	4.9.0 → 4.11.6
@canonical/store-components (source)	0.55.0 → 0.57.1
@types/react (source)	19.2.16 → 19.3.0
@types/react-dom (source)	19.2.3 → 19.3.0
@typescript-eslint/eslint-plugin (source)	8.67.0 → 8.71.1
@typescript-eslint/parser (source)	8.67.0 → 8.71.1
Flask-Caching (changelog)	==2.4.1 → ==2.5.1
PyGithub	==2.9.1 → ==2.10.0
autoprefixer	10.5.4 → 10.6.1
canonicalwebteam.discourse	==7.8.0 → ==7.10.0
canonicalwebteam.image-template	==1.9.0 → ==1.10.0
cypress (source)	15.20.1 → 15.21.1
mermaid	11.16.1 → 11.17.2
opentelemetry-api	==1.44.0 → ==1.45.0
opentelemetry-exporter-otlp	==1.44.0 → ==1.45.0
opentelemetry-exporter-otlp-proto-http	==1.44.0 → ==1.45.0
opentelemetry-sdk	==1.44.0 → ==1.45.0
react (source)	19.2.7 → 19.3.0
react-dom (source)	19.2.7 → 19.3.0
ruff (source, changelog)	==0.14.14 → ==0.16.10
sass-embedded	1.100.0 → 1.105.1
vanilla-framework (source)	4.56.0 → 4.59.0

---

Release Notes

canonical/react-components (@​canonical/react-components)

v4.11.6

Compare Source

Bug Fixes

• a11y: add aria label forwarding to the app status component [AC-4749] (#​1429) (2c0efb9)

v4.11.5

Compare Source

Bug Fixes

• a11y: fix clipped search button when tabbing in search and filter component [AC-4632] (#​1428) (8fe0139)

v4.11.4

Compare Source

Bug Fixes

• contextual-menu: route Tab into the menu when opened with the mouse (#​1418) (69f641c)

v4.11.3

Compare Source

Bug Fixes

• a11y-landmark: spread other html props over tabs nav item (#​1405) (b35364d)

v4.11.2

Compare Source

Bug Fixes

• a11y-filter-panel: allow users to choose the level of the filter panel section heading [AC-4758] (#​1424) (1db4dc0)

v4.11.1

Compare Source

Bug Fixes

• a11y: fix portal content effects firing before portal mount (#​1425) (e57bcf3)

v4.11.0

Compare Source

Features

• OutputField: add truncate prop for overflowing values (#​1422) (72c9ba1)

v4.10.2

Compare Source

Bug Fixes

• a11y-tabs: improve a11y compliance of the tabs component [AC-4742] (#​1407) (1f02f0c)

v4.10.1

Compare Source

Bug Fixes

• step: ensure step status icon style is not overwritten by icon's (#​1416) (7412f5d)

v4.10.0

Compare Source

Features

• SearchAndFilter: use Chip's appearance (#​1411) (07bb584)

canonical/store-components (@​canonical/store-components)

v0.57.1

Compare Source

What's Changed

• fix chip text colour by @​abbiesims in #​185

Full Changelog: canonical/store-components@v0.57.0...v0.57.1

v0.57.0

Compare Source

What's Changed

• Wd 38243/create solution card by @​abbiesims in #​184

Full Changelog: canonical/store-components@v0.56.2...v0.57.0

v0.56.2

Compare Source

What's Changed

• fix font size and margins by @​abbiesims in #​182

Full Changelog: canonical/store-components@v0.56.1...v0.56.2

v0.56.1

Compare Source

What's Changed

• Build docs for 0.56.0 by @​abbiesims in #​177
• Charm card ux changes by @​abbiesims in #​181

Full Changelog: canonical/store-components@v0.56.0...v0.56.1

v0.56.0

Compare Source

What's Changed

• Wd 38589/modify charm card by @​abbiesims in #​176

Full Changelog: canonical/store-components@v0.55.0...v0.56.0

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.71.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#​12941)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#​12953)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#​12930)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#​12957)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#​12919)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#​12892)
• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#​12923)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.0

Compare Source

🚀 Features

• eslint-plugin: [no-unsafe-enum-assignment] add rule (#​12732)

🩹 Fixes

• eslint-plugin: [no-misused-promises] handle a return outside of any function (#​12912)
• eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#​12832)
• eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
• eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#​12885)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Fatih Çakır @​wfatih
• Josh Goldberg
• Josh Goldberg ✨
• Zamiell @​Zamiell

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#​12904)
• eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#​12826)
• eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#​12747)
• eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#​12845)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#​12880)
• eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#​12716)
• eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#​12873)
• eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#​12869)
• eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#​12850)
• eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#​12854)
• eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#​12818)
• eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#​12637)
• eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#​12768)

❤️ Thank You

• Brad Zacher @​bradzacher
• Diptajoy Mistry @​diptomistry
• Grit @​Grit03
• Hugo @​hugop95
• Michael Naumov @​mnaoumov
• Mikhail Baev @​baevm
• Om Rawat
• Sanath @​sansynx
• Shinji
• Vinccool96
• 김채영 @​cchaeyoung
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.0

Compare Source

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#​12730)

🩹 Fixes

• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#​12780)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#​12728)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#​12729)

❤️ Thank You

• Josh Goldberg ✨ @​JoshuaKGoldberg
• Ulrich Stark @​ulrichstark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

Compare Source

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#​12603)

🩹 Fixes

• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#​12727)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#​12741)
• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#​12731)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• wonbeanie @​wonbeanie

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

Compare Source

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#​12086)

🩹 Fixes

• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#​12739)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#​12646)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#​12711)
• eslint-plugin: [unified-signatures] report identical signatures (#​12678)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#​12707)
• eslint-plugin: [unified-signatures] deduplicate types in report (#​12656)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Niki @​phaux
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.71.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

pallets-eco/flask-caching (Flask-Caching)

v2.5.1

Compare Source

Released 2026-09-04

• @cached no longer treats view arguments named path or query_args
  as the explicit make_cache_key() arguments of the same name. :issue:679

v2.5.0

Compare Source

Released 2026-08-24

• Specifying timeouts now also works with datetime.timedelta. :issue:266
• Add config option CACHE_SERIALIZER to set the cachelib serializer the backend uses.
  :issue:209
• cachelib backends can now be configured directly via CACHE_TYPE="cachelib.ValkeyCache.
  :pr:668
• @cached and @memoize now go through the public Cache proxy methods
  (get, set, has, delete, delete_many, get_many and
  set_many) instead of calling the backend directly. :issue:417
• Document that CACHE_REDIS_HOST accepts an already created redis.Redis
  client instead of a host name, which allows sharing a connection pool with
  other extensions and the application. :issue:629
• Send Signals for cache hits and misses. :pr:#237 and :pr:667
• Include key_prefix when building @cached(query_string=True) cache
  keys. :issue:302
• Add Cache.delete_cached() and extend make_cache_key() with path and query_args
  arguments to make deleting views decorated with cached(query_string=True) possible.
  :issue:243
• Use hashlib.sha256 instead of hashlib.md5 for hashing the cache keys.
  This changes the generated keys, so entries cached by an earlier version become
  obsolete. If you wish to still use hashlib.md5 set the config
  CACHE_HASH_METHOD = hashlib.md5. :pr:563
• Add CACHE_HASH_METHOD to set the hash method used for the cache keys of
  @cached and @memoize.
• Drop support for Python 3.10 and require cachelib 0.17.0+
• CACHE_IGNORE_ERRORS is now used by every backend instead of only
  SimpleCache and FileSystemCache.
• The delete_many method is now used from cachelib. A key
  that does not exist counts as deleted, and with CACHE_IGNORE_ERRORS set to
  False a RuntimeError is raised if the key could not be deleted.
• Clarify docs about decorator order regarding @staticmethod and @classmethod
  when memoizing. :issue:440
• Remove the deprecated lowercase CACHE_TYPE names (null, simple,
  filesystem, redis, redissentinel, rediscluster, uwsgi,
  memcached, gaememcached, saslmemcached and
  spreadsaslmemcached)
• Call @memoize forced_update callbacks once per decorated function
  call instead of once while making the key and again before cache lookup.
  :issue:387
• Add an is_stale option to @cached and @memoize. It is called on a
  cache hit with the cached value. Unlike forced_update it uses the value itself
  to check whether the cache is stale. Can be used in combination with forced_update
  :issue:392
• @cached now caches an HTTPException raised by the view (i.e. through abort()).
  This exception will now be re-raises on a cache hit. Use response_filter,
  to keep the exception out of the cache. :issue:444
• Fix a @memoize cache-key collision when a parameter has a falsy
  default (e.g. 0, "", False): calling with the default was
  keyed the same as passing None, returning the wrong cached result.
  :pr:656
• @cached and @memoize now preserve the wrapped function's
  signature and expose uncached, cache_timeout, make_cache_key
delete_memoized to type checkers.
• Fix @cached(response_hit_indication=True) appending a new
  after_request function to the app on every request.
• Fix a view returning an iterator of strings, for example when using
  flask.stream_template it previously returned a list of JSON strings instead
  of the rendered template. :issue:511
• Fix __caching_id__ never being usable. @memoize silently ignored that
  and ran the function uncached.
• Add CACHE_FILE_HASH_METHOD config option to FileSystemCache to allow
  using a different hash function for cache keys. :pr:660
• Add pool_size and pool_blocking to make MemcachedCache backends
  thread-safe. :pr:663
• Modify SimpleCache docs as it's now thread-safe using an RLock for all
  operations. :pr:663
• delete_memoized now takes the instance from a bound method, so
  cache.delete_memoized(obj.method, 1) deletes the cache for
  obj.method(1) instead of silently deleting nothing.
  The current behaviour by passing the instance keeps working as well.
  :issue:554
• The {% cache %} Jinja tag no longer propagates backend errors. If the
  cache is unavailable, the block is rendered normally instead of raising,
  matching the existing behavior of @memoize. :issue:564 :pr:565
• Fix @memoize invalidating a function's entire cache by not updating the
  memoize version key's timeout. It is now refreshed each time an entry is written,
  with that entry's own timeout. :issue:531

pygithub/pygithub (PyGithub)

v2.10.0: 2.10.0

Compare Source

Notable changes

Drop Python 3.9 support due to End-of-Life

Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features

• Allow to specify the Github API version by @​EnricoMi in PyGithub/PyGithub#3480
• Add issue dependency endpoints by @​james-geiger in PyGithub/PyGithub#3477

Improvements

• Add incomplete_results property to PaginatedList by @​Felixoid in PyGithub/PyGithub#3396
• Add WorkflowRun.get_attempt and Repository.get_workflow_job functions by @​cecheta in PyGithub/PyGithub#3401
• Add support for head_repo when creating pull request by @​shannon in PyGithub/PyGithub#3479
• Add max_rate_limit_wait to GithubRetry to cap rate limit backoff by @​tanistheta in PyGithub/PyGithub#3540
• Add return_run_details parameter to Workflow.create_dispatch by @​SebastienSyd in PyGithub/PyGithub#3471
• Update SecurityAndAnalysis by @​EnricoMi in PyGithub/PyGithub#3503

Bug Fixes

• Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() by @​Krishnachaitanyakc in PyGithub/PyGithub#3472
• Fix GithubException.__str__ decoding bytes data by @​SAY-5 in PyGithub/PyGithub#3494
• Fixing OrganizationVariable.value by properly using base class by @​EnricoMi in PyGithub/PyGithub#3507
• Parse only the query string for PaginatedList.totalCount by @​Noethix55555 in PyGithub/PyGithub#3518
• Encode boolean query parameters as lowercase by @​Noethix55555 in PyGithub/PyGithub#3516
• Fix doubled slash in request path for base_url with trailing slash by @​Noethix55555 in PyGithub/PyGithub#3537
• Fix WorkflowRun schema suggestion by @​EnricoMi in PyGithub/PyGithub#3559
• Fix OAuth2 authorization state / code_verifier parameters by @​TheoGoudout in PyGithub/PyGithub#3440
• Allow creating custom property with values_editable_by param by @​chawlajay9 in PyGithub/PyGithub#3548
• Fix OrganizationSecret.edit() to seal the value and use PUT by @​Noethix55555 in PyGithub/PyGithub#3529
• Fix lazy retrieval of latest tag name by @​sathieu in PyGithub/PyGithub#3487
• Fix typing and typos by @​EnricoMi in PyGithub/PyGithub#3485

Maintenance

• Add support for Python 3.15 and drop EOL 3.9 by @​hugovk in PyGithub/PyGithub#3551
• Move self-link awareness into CompletableGithubObject by @​EnricoMi in PyGithub/PyGithub#3432
• Add documentation for agents, add Claude skills by @​EnricoMi in PyGithub/PyGithub#3509
• Add sphinx-copybutton for code blocks by @​DivyanshiGautam31 in PyGithub/PyGithub#3493
• Add support to OpenAPI script for applying schema to methods by @​EnricoMi in PyGithub/PyGithub#3374
• Improve OpenAPI apply properties and methods by @​EnricoMi in PyGithub/PyGithub#3495
• Fix OpenAPI method verb detection by @​EnricoMi in PyGithub/PyGithub#3496
• Add OpenAPI script tests by @​EnricoMi in PyGithub/PyGithub#3489
• Fix OpenAPI apply method by @​EnricoMi in PyGithub/PyGithub#3498
• Reordering OpenAPI test sequence by @​EnricoMi in PyGithub/PyGithub#3500
• Apply typing convention by @​EnricoMi in PyGithub/PyGithub#3504
• Bump mypy Python version to 3.12 by @​EnricoMi in PyGithub/PyGithub#3505
• Use @overload to type get_user by @​xmo-odoo in PyGithub/PyGithub#3502
• Add overload type annotations by @​EnricoMi in PyGithub/PyGithub#3506
• Simplify OrganizationVariable by @​EnricoMi in PyGithub/PyGithub#3508
• Add OpenAPI script filename option to create class by @​EnricoMi in PyGithub/PyGithub#3512
• OpenAPI script improvements by @​EnricoMi in PyGithub/PyGithub#3511
• Make OpenAPI index file deterministic by @​EnricoMi in PyGithub/PyGithub#3514
• Add more OpenAPI script tests by @​EnricoMi in PyGithub/PyGithub#3501
• Make unified diffs of run path by @​EnricoMi in PyGithub/PyGithub#3515
• CI: Upgrade Github actions, pin to commit SHAs by @​EnricoMi with @​Copilot in PyGithub/PyGithub#3552
• Use simple str contains instead of re in requester 401 OTP check by @​scop in PyGithub/PyGithub#3541
• Remove deprecated usage of lazy argument in get_repo test calls by @​comNayaK in PyGithub/PyGithub#3555
• docs: add exception handling example by @​zain-asif-dev in PyGithub/PyGithub#3543
• docs: add example for uploading multiple files in a single commit by @​laurazimrn in PyGithub/PyGithub#3545

Full Changelog: PyGithub/PyGithub@v2.9.1...v2.10.0

postcss/autoprefixer (autoprefixer)

v10.6.1

Compare Source

• Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

v10.6.0

Compare Source

• Added initial-letter support (by @​thomasmattheussen).

v10.5.6

Compare Source

• Fixed producing wrong old -webkit- gradients (by @​ryanchou1994).

v10.5.5

Compare Source

• Fixed resolution media query parsing performance (by @​NotAFlightRisk).

canonical/canonicalwebteam.discourse (canonicalwebteam.discourse)

v7.10.0

Added freshness-probe throttling and EngagePages freshness

• Freshness probes (get_topics_last_activity_time /
  get_categories_last_activity_time) now memoise their result for
  freshness_probe_ttl seconds (new constructor param, default 60),
  keeping the per-render probes off the shared admin API rate limit. An
  edit is detected up to that many seconds late. Per-process and not
  single-flight; set freshness_probe_ttl=0 to disable
• Only successful probes are memoised, so a failure is retried next
  render rather than latched
• EngagePages now checks its category on each render (same throttled
  probe) and, on an edit, drops that category's engage_by_param and
  engage_by_tag entries. Scoped per category, so editing one doesn't
  clear another's, and never touches the shared events cache. Lets
  edits appear without shortening the shared TTL. Best-effort; never
  fails a page
• Engage cache keys now carry the category id as a discrete element for
  per-category invalidation by prefix

v7.9.0

Added normalize_link to engage page metadata parser

• Adds a 'https://' scheme to links that don't already have one. Only applies to fields within a pre-defined list URL_METADATA_KEYS

cypress-io/cypress (cypress)

v15.21.1

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-21-1

v15.21.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-21-0

mermaid-js/mermaid (mermaid)

v11.17.2

Compare Source

Patch Changes

• #​8125 178d7c7 Thanks @​knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it

v11.17.1

Compare Source

Patch Changes

• #​8092 31ce60a

❗ Important

✂ PR body was truncated to here.

[webteam-app]

Demo

Jenkins

demos.haus

[github-actions]

Demo

⏳ Deployment in progress… View workflow run