fix(deps): update weekly patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@codemirror/lang-javascript	6.2.2 -> 6.2.4					dependencies	patch
@radix-ui/react-dialog (source)	1.1.2 -> 1.1.14					dependencies	patch
@radix-ui/react-dropdown-menu (source)	2.1.2 -> 2.1.15					dependencies	patch
@​radix-ui/react-icons	1.3.0 -> 1.3.2					dependencies	patch
@radix-ui/react-tabs (source)	1.1.1 -> 1.1.12					dependencies	patch
@types/cors (source)	2.8.17 -> 2.8.19					devDependencies	patch
@types/express (source)	4.17.21 -> 4.17.23					devDependencies	patch
@types/lodash (source)	4.17.7 -> 4.17.17					devDependencies	patch
@types/node (source)	18.19.50 -> 18.19.111					devDependencies	patch
@types/react (source)	18.3.5 -> 18.3.23					devDependencies	patch
@types/react-dom (source)	18.3.0 -> 18.3.7					devDependencies	patch
@uiw/react-codemirror (source)	4.23.1 -> 4.23.13					dependencies	patch
eslint (source)	8.57.0 -> 8.57.1					devDependencies	patch
eslint-plugin-jsx-a11y	6.10.0 -> 6.10.2					devDependencies	patch
express (source)	4.21.0 -> 4.21.2					dependencies	patch
mongoose (source)	7.8.1 -> 7.8.7					dependencies	patch
pydantic (changelog)	==2.11.3 -> ==2.11.7						patch
pyinstrument	==5.0.1 -> ==5.0.2						patch
python	3.13.3-bookworm -> 3.13.5-bookworm					final	patch
react-joyride (source)	2.9.2 -> 2.9.3					dependencies	patch
typing-inspection (changelog)	==0.4.0 -> ==0.4.1						patch
uvicorn (changelog)	==0.34.0 -> ==0.34.3						patch
ws	8.18.0 -> 8.18.2					dependencies	patch
zustand	4.5.5 -> 4.5.7					dependencies	patch

---

Release Notes

codemirror/lang-javascript (@​codemirror/lang-javascript)

v6.2.4

Compare Source

Bug fixes

Fix a crash in the esLint helper when a rule's meta.docs isn't defined.

Properly dedent lines starting with an opening curly brace below composite statements like for/while.

v6.2.3

Compare Source

Bug fixes

Disable JavaScript completions in JSX context.

radix-ui/primitives (@​radix-ui/react-dialog)

v1.1.8

v1.1.7

Compare Source

v1.1.6

Compare Source

v1.1.5

Compare Source

v1.1.4

Compare Source

v1.1.3

Compare Source

uiwjs/react-codemirror (@​uiw/react-codemirror)

v4.23.13

Compare Source

Documentation v4.23.13: https://raw.githack.com/uiwjs/react-codemirror/40401ed/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.12...v4.23.13

npm i @​uiw/react-codemirror@4.23.13

• 🐞 fix(merge): Update react codemirror merge to work in shadow dom (#​735) 154727c @​boopeshmahendran227
• 🆎 type(merge): fix type error. #​735 9e9776b @​jaywcjlove

v4.23.12

Compare Source

Documentation v4.23.12: https://raw.githack.com/uiwjs/react-codemirror/e780cd8/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.11...v4.23.12

npm i @​uiw/react-codemirror@4.23.12

• 🐞 fix: Fix ESM import in core package by adding .babelrc and babel-plugin-add-import-extension (#​732) 9a5ce28 @​Shellishack
• 🐞 fix: resolve ESM import issue in the package. #​732 8ce4ceb @​jaywcjlove

v4.23.11

Compare Source

Documentation v4.23.11: https://raw.githack.com/uiwjs/react-codemirror/4f9af7b/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.10...v4.23.11

npm i @​uiw/react-codemirror@4.23.11

• 🌍 website: fix example issue. #​717 d589c09 @​jaywcjlove
• 📄 example: update nextjs example. 3bf96a6 @​jaywcjlove
• 🐞 fix: Set correct module type in basic package (#​729) d6ee7f8 @​danez
• 🐞 fix(react-codemirror): Set correct module type in basic package (#​729) d1271a6 @​jaywcjlove

v4.23.10

Compare Source

Documentation v4.23.10: https://raw.githack.com/uiwjs/react-codemirror/b920d7f/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.9...v4.23.10

npm i @​uiw/react-codemirror@4.23.10

• 🐞 fix: Fix flash of content on initialization (#​717) b11562d @​colsondonohue

v4.23.9

Compare Source

Documentation v4.23.9: https://raw.githack.com/uiwjs/react-codemirror/fc8f5fa/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.8...v4.23.9

npm i @​uiw/react-codemirror@4.23.9

• 🐞 fix(theme): correctly extend basic light theme (#​716) e191c2a @​veksen
• 🆎 type: module in codemirror-extensions-basic-setup (#​702) a657654 @​PuruVJ

v4.23.8

Compare Source

Documentation v4.23.8: https://raw.githack.com/uiwjs/react-codemirror/62aac6a/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.7...v4.23.8

npm i @​uiw/react-codemirror@4.23.8

• 🐞 fix: Pass diffConfig to options in CodeMirrorMerge component (#​712) a95fb47 @​snelsi

v4.23.7

Compare Source

Documentation v4.23.7: https://raw.githack.com/uiwjs/react-codemirror/5b16350/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.6...v4.23.7

npm i @​uiw/react-codemirror@4.23.7

• 💄 chore: update nextjs example. #​677 ab89f28 @​jaywcjlove
• 🐞 fix(theme): implement 'exports' field in themes/theme/package.json (#​708) 4edca1d @​aspiers
• 🐞 fix(theme): implement 'exports' field in themes/*/package.json #​708 #​613 #​680 ced0b1a @​jaywcjlove

v4.23.6

Compare Source

Documentation v4.23.6: https://raw.githack.com/uiwjs/react-codemirror/57d9fb7/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.5...v4.23.6

npm i @​uiw/react-codemirror@4.23.6

• 🐞 fix: Implement 'exports' field in package.json for the core & basics setup package (#​692) 8f1ff2d @​fatton139
• 🐞 fix: resolve exports field issue causing README.md loading error in documentation #​692 c2437c7 @​jaywcjlove

v4.23.5

Compare Source

Documentation v4.23.5: https://raw.githack.com/uiwjs/react-codemirror/2dc5095/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.4...v4.23.5

npm i @​uiw/react-codemirror@4.23.5

• 🎨 style(vscode): fix default value issue for light mode. #​688 661bfc9 @​jaywcjlove

v4.23.4

Compare Source

Documentation v4.23.4: https://raw.githack.com/uiwjs/react-codemirror/b4d4e77/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.3...v4.23.4

npm i @​uiw/react-codemirror@4.23.4

• 🐞 fix(hyper-link): Move toString out of while loop to prevent memory leak (#​687) e10f426 @​danielericlee

v4.23.3

Compare Source

Documentation v4.23.3: https://raw.githack.com/uiwjs/react-codemirror/d199b9e/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.2...v4.23.3

npm i @​uiw/react-codemirror@4.23.3

• 🎨 style(theme): Vscode Light - lineHighlight. (#​686) 4af6677 @​luiz2f

v4.23.2

Compare Source

Documentation v4.23.2: https://raw.githack.com/uiwjs/react-codemirror/c8cf3ac/index.html\
Comparing Changes: uiwjs/react-codemirror@v4.23.1...v4.23.2

npm i @​uiw/react-codemirror@4.23.2

• 🐞 fix(merge): ref view not available on load. #​681 67b6d6b @​jaywcjlove

eslint/eslint (eslint)

v8.57.1

Compare Source

Bug Fixes

• a19072f fix: add logic to handle fixTypes in the lintText() method (#​18900) (Francesco Trotta)
• 04c7188 fix: Don't lint same file multiple times (#​18899) (Francesco Trotta)
• 87ec3c4 fix: do not throw when defining a global named __defineSetter__ (#​18898) (Francesco Trotta)
• 60a1267 fix: Provide helpful error message for nullish configs (#​18889) (Milos Djermanovic)
• a0dea8e fix: allow name in global ignores, fix --no-ignore for non-global (#​18875) (Milos Djermanovic)
• 3836bb4 fix: do not crash on error in fs.walk filter (#​18886) (Milos Djermanovic)
• 2dec349 fix: skip processor code blocks that match only universal patterns (#​18880) (Milos Djermanovic)

Documentation

• 6a5add4 docs: v8.x Add EOL banner (#​18744) (Amaresh S M)
• b034575 docs: v8.x add version support page to the dropdown (#​18731) (Amaresh S M)
• 760ef7d docs: v8.x add version support page in the side navbar (#​18740) (Amaresh S M)
• 428b7ea docs: Add Powered by Algolia label to the search (#​18658) (Amaresh S M)
• c68c07f docs: version selectors synchronization (#​18265) (Milos Djermanovic)

Build Related

• 35d366a build: Support updates to previous major versions (#​18870) (Milos Djermanovic)

Chores

• 140ec45 chore: upgrade @​eslint/js@​8.57.1 (#​18913) (Milos Djermanovic)
• bcdfc04 chore: package.json update for @​eslint/js release (Jenkins)
• 3f6ce8d chore: pin vite-plugin-commonjs@0.10.1 (#​18910) (Milos Djermanovic)
• 9f07549 chore: ignore /docs/v8.x in link checker (#​18660) (Milos Djermanovic)

jsx-eslint/eslint-plugin-jsx-a11y (eslint-plugin-jsx-a11y)

v6.10.2

Compare Source

Fixed

• [patch] no-redundandant-roles: allow <img src="*.svg" role="img" /> #936

Commits

• [meta] fix changelog URLs 0d01a1a
• [Refactor] remove no-longer-needed es-iterator-helpers aa075bd
• [Refactor] avoid spreading things that are already arrays d15d3ab
• [Dev Deps] update @babel/cli, @babel/core, @babel/eslint-parser, @babel/plugin-transform-flow-strip-types, @babel/register 5dad7c4
• [Tests] aria-role: Add valid test for <svg role="img" /> daba189
• [Docs] label-has-associated-control: add line breaks for readability 0bc6378
• [Tests] label-has-associated-control: add additional test cases 30d2318
• [Tests] Add tests to reinforce required attributes for role="heading" d92446c

v6.10.1

Compare Source

Commits

• [Fix] handle interactive/noninteractive changes from aria-query 4925ba8
• [Docs] Use consistent spelling of 'screen reader' cb6788c
• [Dev Deps] update @babel/cli, @babel/core, @babel/eslint-parser, @babel/plugin-transform-flow-strip-types, @babel/register, auto-changelog, eslint-plugin-import, tape 518a77e
• [Deps] update es-iterator-helpers, string.prototype.includes eed03a3
• [meta] package.json - Update jscodeshift & remove babel-jest 2ee940c
• [Docs] Remove accidental whitespace in CONTRIBUTING.md a262131
• [Deps] unpin aria-query e517937

expressjs/express (express)

v4.21.2

Compare Source

What's Changed

• Add funding field (v4) by @​bjohansebas in https://github.com/expressjs/express/pull/6065
• deps: path-to-regexp@0.1.11 by @​blakeembrey in https://github.com/expressjs/express/pull/5956
• deps: bump path-to-regexp@0.1.12 by @​jonchurch in https://github.com/expressjs/express/pull/6209
• Release: 4.21.2 by @​UlisesGascon in https://github.com/expressjs/express/pull/6094

Full Changelog: expressjs/express@4.21.1...4.21.2

v4.21.1

Compare Source

What's Changed

• Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in https://github.com/expressjs/express/pull/6029
• Release: 4.21.1 by @​UlisesGascon in https://github.com/expressjs/express/pull/6031

Full Changelog: expressjs/express@4.21.0...4.21.1

Automattic/mongoose (mongoose)

v7.8.7

Compare Source

==================

• types(aggregate): allow calling project() with a string #​15304 #​15300
• docs: update deleteOne & deleteMany API def #​15360 Elliot67 SethFalco

v7.8.6

Compare Source

===================

• chore: remove coverage output from bundle

v7.8.5

Compare Source

===================

• chore: re-release to force npm audit to pick up 6.x fix for CVE-2025-23061

v7.8.4

Compare Source

===================

• fix: disallow nested $where in populate match CVE-2025-23061

v7.8.3

Compare Source

==================

• fix: disallow using $where in match
• fix(projection): avoid setting projection to unknown exclusive/inclusive if elemMatch on a Date, ObjectId, etc. #​14894 #​14893
• docs(migrating_to_7): add note about keepAlive to Mongoose 7 migration guide #​15032 #​13431

v7.8.2

Compare Source

==================

• fix(projection): avoid setting projection to unknown exclusive/inclusive if elemMatch on a Date, ObjectId, etc. #​14894 #​14893

pydantic/pydantic (pydantic)

v2.11.7

Compare Source

GitHub release

What's Changed

Fixes

• Copy FieldInfo instance if necessary during FieldInfo build by @​Viicos in #​11898

v2.11.6

Compare Source

GitHub release

What's Changed

Fixes

• Rebuild dataclass fields before schema generation by @​Viicos in #​11949
• Always store the original field assignment on FieldInfo by @​Viicos in #​11946

v2.11.5

Compare Source

v2.11.4

Compare Source

GitHub release

What's Changed

Packaging

• Bump mkdocs-llmstxt to v0.2.0 by @​Viicos in #​11725

Changes

• Allow config and bases to be specified together in create_model() by @​Viicos in #​11714.
  This change was backported as it was previously possible (although not meant to be supported)
  to provide model_config as a field, which would make it possible to provide both configuration
  and bases.

Fixes

• Remove generics cache workaround by @​Viicos in #​11755
• Remove coercion of decimal constraints by @​Viicos in #​11772
• Fix crash when expanding root type in the mypy plugin by @​Viicos in #​11735
• Fix issue with recursive generic models by @​Viicos in #​11775
• Traverse function-before schemas during schema gathering by @​Viicos in #​11801

joerick/pyinstrument (pyinstrument)

v5.0.2

Compare Source

• Fix a bug that caused jupyter notebooks to continue to run after a profiled cell was interrupted with Ctrl-C (#​373)
• Fix a type annotation issue when using mypy and import pyinstrument (#​373)

gilbarbara/react-joyride (react-joyride)

v2.9.3: 2.9.3

Compare Source

• Update custom-components docs: 650ab36
• Upgrade dependencies: 9874150
• Fix scroll for targets with custom scroll parent or fixed position: 3648311
• Disable tooltip keyboard focus if the disableScrolling is set: af6fa9e
• Fix locale handling of custom components: 826669d

pydantic/typing-inspection (typing-inspection)

v0.4.1

Compare Source

• Use list as a type hint for InspectedAnnotation.metadata by @​Viicos in #​43

encode/uvicorn (uvicorn)

v0.34.3: Verrsion 0.34.3

Compare Source

What's Changed

• Don't include cwd() when non-empty --reload-dirs is passed by @​stinovlas in https://github.com/encode/uvicorn/pull/2598
• Apply get_client_addr formatting to WebSocket logging by @​Harry-Lees in https://github.com/encode/uvicorn/pull/2636
• chore: improve type hints by @​waketzheng in https://github.com/encode/uvicorn/pull/2638

New Contributors

• @​stinovlas made their first contribution in https://github.com/encode/uvicorn/pull/2598
• @​LifeLex made their first contribution in https://github.com/encode/uvicorn/pull/2621
• @​Harry-Lees made their first contribution in https://github.com/encode/uvicorn/pull/2636
• @​waketzheng made their first contribution in https://github.com/encode/uvicorn/pull/2638

Full Changelog: encode/uvicorn@0.34.2...0.34.3

v0.34.2: Version 0.34.2

Compare Source

What's Changed

• Flush the stdout buffer on Windows to trigger reload by @​jamesh1999 in https://github.com/encode/uvicorn/pull/2604

New Contributors

• @​jamesh1999 made their first contribution in https://github.com/encode/uvicorn/pull/2604

Full Changelog: encode/uvicorn@0.34.1...0.34.2

v0.34.1: Version 0.34.1

Compare Source

What's Changed

• Deprecate ServerState in the main module by @​Kludex in https://github.com/encode/uvicorn/pull/2581

New Contributors

• @​RakhimovRamis made their first contribution in [https://gi

---

Configuration

📅 Schedule: Branch creation - "before 5am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.