chore(deps): bump the prod-deps group across 1 directory with 7 updates

[dependabot]

Bumps the prod-deps group with 7 updates in the / directory:

Package	From	To
prettier	3.6.2	3.9.5
stylis	4.3.6	4.4.0
react-aria	3.37.0	3.50.0
react-keyed-flatten-children	5.1.2	5.1.3
react-stately	3.35.0	3.48.0
sharp	0.34.5	0.35.3
@playwright/test	1.58.2	1.61.1

Updates prettier from 3.6.2 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

3.8.3

• SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @​kovsu)

🔗 Changelog

3.8.2

• Support Angular v21.2

🔗 Changelog

3.8.1

• Include available printers in plugin type declarations (#18706 by @​porada)

🔗 Changelog

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text
<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text
<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](https://github.com/prettier/prettier/blob/main/<> "title")
<!-- Prettier 3.9.4 -->
[link](https://github.com/prettier/prettier/blob/main/ "title")
<!-- Prettier 3.9.5 -->
</tr></table>

... (truncated)

Commits

• b6c7d18 Release 3.9.5
• cd54ccc Avoid corrupting empty Markdown link with title (#19487)
• 2bb67ce Preserving comments' placement property (#19567)
• 91bcac8 Add more tests for comment-only object type (#19587)
• cbee737 Remove space in empty object type (#19583)
• 6394c73 Align empty module declaration with TS (#19568)
• a4e6f7a Prevent the addition of space in type() with + (#19516)
• 3d063b5 Ignore dangling comments when checking type parameter comments (#19572)
• 908503e Handle dangling comments in SwitchStatement (#19581)
• 943a475 Angular: Support expression for exhaustive typechecking (#19571)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier since your current version.

Updates stylis from 4.3.6 to 4.4.0

Commits

• 6ff0e46 4.4.0
• 37fc380 Fix & substitutions in functional pseudo classes (#353)
• 92f46fb Preserve all empty variables (#352)
• See full diff in compare view

Updates react-aria from 3.37.0 to 3.50.0

Commits

• 1c84a49 Publish
• 208099b chore: omit isNonModal from ContextualHelpPopover (#10224)
• a064c19 docs: add S2 audit skill (#10160)
• 0594914 chore: update chat story prompts to be more realistic (#10223)
• b8b0688 chore: Audit style props in AI package (#10218)
• cb43c8c docs: add CenterBaseline to style macro docs (#10216)
• 003d04d chore: remove horizontal card from ai export (#10217)
• 358d6d8 chore: make sure Tree keyboard navigation docs example renders fully on small...
• edceb07 chore: Expose keyboardNavigationBehavior="tab" in S2 (#10206)
• 6e132fb Revert "fix: preserve selection anchor for multi-Select range selection (#101...
• Additional commits viewable in compare view

Updates react-keyed-flatten-children from 5.1.2 to 5.1.3

Release notes

Sourced from react-keyed-flatten-children's releases.

v5.1.3

Dependency security updates — all transitive devDependencies, no consumer-facing changes:

• form-data — GHSA-hmw2-7cc7-3qxx (high)
• glob — GHSA-5j98-mcp5-4vw2 (high)
• picomatch — GHSA-3v7f-55p6-f55p (high/moderate)
• ws — GHSA-58qx-3vcg-4xpx (high)
• @​babel/runtime — GHSA-968p-4wvh-cqc8 (moderate)
• brace-expansion — GHSA-v6h2-p8h4-qcjw (moderate)

npm audit now reports 0 vulnerabilities. See #35.

Changelog

Sourced from react-keyed-flatten-children's changelog.

5.1.3

Bump dependencies to resolve security advisories (form-data, glob, picomatch, ws, @​babel/runtime, brace-expansion). All are transitive devDependencies — no consumer-facing changes.

Commits

• 3322509 5.1.3
• 16de3ee 5.1.3
• efd2482 Merge pull request #35 from grrowl/fix/dependency-audit
• 5209122 Bump dependencies to resolve security advisories
• See full diff in compare view

Updates react-stately from 3.35.0 to 3.48.0

Release notes

Sourced from react-stately's releases.

October 2, 2025 Release

Happy fall! This release brings some long-awaited features, including multi-selection in React Aria Select and enhanced animation support across our components. For example, Disclosure now provides CSS variables to easily animate expanding and collapsing. We’ve also added a new component that can be used within components that support single selection such as Tabs and ToggleButtonGroup to animate selection changes. In addition, we have significantly improved the behavior of scrolling modals on iOS 26. Lastly, onAction can now be used on a ComboBoxItem, enabling you to add a “create” option.

As always, thank you to our community for their support and contributions!

As always, thank you to our community for their support and contributions!

Full Release Notes

August 25, 2025 Release

Summer might be winding down but we’re definitely not! Back with another release, we have added support for origin-aware overlay animations in Popover and Tooltip, which enable scale transitions to appear as if they are emerging from the trigger. We have also advanced Autocomplete to RC, and added support for filtering GridList, Table, and TagGroup (virtual focus support is still to come). Section support in GridList has also been added as an alpha, laying the groundwork for similar support in Tree and Table.

As always, a big thank you to everyone in the community for your feedback and contributions! ❤️

July 22, 2025 Release

Happy summer! This release adds support for async loading and infinite scrolling, improves form integration and drag and drop interactions, and adds support for additional DOM events and attributes.

The new LoadMoreItem components supported in ListBox, GridList, Table, and Tree enables infinite scrolling. These trigger the loading of additional pages of items and display a loading spinner. Multiple LoadMoreItems can be rendered within a collection too, enabling loading multiple levels of a tree or sections of data from different APIs.

We've also opened up the React Aria Components API to pass through more DOM events and attributes. This improves integration with other libraries, for example making it possible to use another library's menu with a React Aria button.

As always, thanks so much to everyone who contributed to this release!

Full release notes

June 5, 2025 Release

Drop everything! Drag and drop support in React Aria Tree has been released! 🫳🎤 This supports moving items within a tree or between collection components, with full keyboard and screen reader accessibility. It's interoperable with our existing drag and drop support in components like Table and GridList, and with third party apps via native HTML APIs. Check out our previous blog post on drag and drop to learn about the interactions, and our new Tree drag and drop documentation.

This release also includes some highly requested bug fixes, including scrollbar layout shifts when opening popovers and modals, date picker interaction improvements, and enhancements to our form components.

As always, thank you to our community for their support and contributions!

Full Release Notes

May 19, 2025 Release

This release includes a range of enhancements and fixes such as improved keyboard accessibility in TagGroup and increased stability for dynamic table updates. It also brings support for React 19’s ref cleanup behavior, performance improvements for collection updates in React transitions and pressable elements, and TypeScript updates including backwards compatibility with older TypeScript and @​types/react versions.

As always, thank you to our community for their support and contributions!

Full Release Notes

April 11, 2025 Release

In today’s release, we are excited to announce custom calendar support across all React Spectrum libraries! This feature allows you to create your own calendar that implements custom business logic, such as a 4-5-4 fiscal calendar, either by extending an existing Calendar implementation or building from scratch. Please see the React Spectrum docs for an example implementation. A special shout out to @​ToyWalrus for all the hard work that went into this contribution!

This release also includes several updates for collections in React Aria Components. These include enhanced support for React Suspense and optimizations for large collections. These changes should result in much more performant collections when fetching and rendering large amounts of data.

We have also reduced the bundle sizes of our libraries by moving some console warnings to development only, and removing old browser fallbacks for pointer events. For example, @​react-aria/interactions, which powers most of our components, is now 22% smaller!

Lastly, we have decided to handle onClick as an alias for onPress. This improves interoperability with other dependencies that use onClick events. Please note that onPress is still preferred over onClick as it standardizes behavior across a variety of platforms.

... (truncated)

Commits

• 1c84a49 Publish
• 208099b chore: omit isNonModal from ContextualHelpPopover (#10224)
• a064c19 docs: add S2 audit skill (#10160)
• 0594914 chore: update chat story prompts to be more realistic (#10223)
• b8b0688 chore: Audit style props in AI package (#10218)
• cb43c8c docs: add CenterBaseline to style macro docs (#10216)
• 003d04d chore: remove horizontal card from ai export (#10217)
• 358d6d8 chore: make sure Tree keyboard navigation docs example renders fully on small...
• edceb07 chore: Expose keyboardNavigationBehavior="tab" in S2 (#10206)
• 6e132fb Revert "fix: preserve selection anchor for multi-Select range selection (#101...
• Additional commits viewable in compare view

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

• Improve code bundler support by resolving path to libvips binary.

• Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

• Emit warning about binaries provided by Electron for use on Linux.

• Add hasAlpha property to output info. #4500

• TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

• Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

• Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

• Reject infinite values when validating numbers. #4553 @​metsw24-max

• Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

• Verify background colour values are numbers. #4556 @​metsw24-max

• Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

• Tighten recomb and affine matrix verification. #4560 @​chatman-media

• Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

• 1018449 Release v0.35.3
• ba303a7 Prerelease v0.35.3-rc.2
• 4f94fc5 Upgrade to sharp-libvips v1.3.2
• c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
• 9a8d002 Docs: Add changelog entry and note about transferable #4520
• 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
• e000d0b Prerelease v0.35.3-rc.1
• 9554ca9 Prerelease v0.35.3-rc.0
• 6a29fd5 Emit warning about native binaries on Linux Electron
• 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
• Additional commits viewable in compare view

Updates @playwright/test from 1.58.2 to 1.61.1

Release notes

Sourced from @​playwright/test's releases.

v1.61.1

Bug Fixes

• #41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
• #41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
• #41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
• #41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
• #41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

• apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

• 39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
• 4328122 chore: mark v1.61.1 (#41404)
• 2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
• 4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
• 041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
• b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
• b5a3175 cherry-pick(#41319): fix(loader): support other node versions
• d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
• 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
• a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
• Additional commits viewable in compare view

[changeset-bot]

⚠️ No Changeset found

Latest commit: c981074

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.