Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@mui/material (source)	7.3.9 → 7.3.10
@types/chrome (source)	0.1.37 → 0.1.40
@vitest/coverage-v8 (source)	4.1.0 → 4.1.4
prettier (source)	3.8.1 → 3.8.2
react (source)	19.2.4 → 19.2.5
react-dom (source)	19.2.4 → 19.2.5
sass-embedded	1.98.0 → 1.99.0
typescript-eslint (source)	8.57.0 → 8.58.1
validator	13.15.26 → 13.15.35
vite-plugin-web-extension (source)	4.5.0 → 4.5.1
vitest (source)	4.1.0 → 4.1.4
web-ext	10.0.0 → 10.1.0

---

Release Notes

mui/material-ui (@​mui/material)

v7.3.10

Compare Source

A big thanks to the 15 contributors who made this release possible. A few highlights ✨:

• 📖 Added the Menubar component page to the docs.

@mui/material@7.3.10

• [alert][dialog] Accessibility improvements (#​48161) @​silviuaavram
• [autocomplete] Add root slot (#​47916) @​GerardasB
• [autocomplete] Fix helper text focusing input when clicked (#​48162) @​mj12albert
• [autocomplete] Fix popup reopening on window focus regain with openOnFocus (#​47914) @​aman44444
• [autocomplete] Optimize selected option lookup (#​48027) @​anchmelev
• [autocomplete] Support full slots for clearIndicator and popupIndicator (#​47913) @​silviuaavram
• [button-base] Fix native button detection (#​47994) @​mj12albert
• [input] Fix high contrast cutoff on first character (#​48160) @​silviuaavram
• [list item text][card header] Revert cleanup of duplicated CSS rules (#​47938) @​sai6855
• [popper] Add missing classes export (#​48033) @​mj12albert
• [select] Fix focus visible always set on menu item (#​48022) @​silviuaavram
• [slider] Accept readonly array for the value prop (#​47961) @​pcorpet
• [switch] Add border to make it visible in high contrast mode (#​48210) @​silviuaavram
• [theme] Do not create channel tokens for custom colors when nativeColor is used (#​48144) @​ZeeshanTamboli
• [transitions] Performance improvements & misc fixes (#​48217) @​mj12albert

Docs

• [codemod] Add v7 migration docs for deprecated Autocomplete APIs and Autocomplete codemod (#​47954) @​ZeeshanTamboli
• [menubar] Add Menubar component page (#​47942) @​siriwatknp
• [progress] Label all demo components (#​48168) @​mj12albert
• [system] Update styled API docs for easier understanding (#​47969) @​olivier-lxo
• Fix the dark mode footer row shadow for the Data Grid on the advanced components page (#​48152) @​arminmeh
• Fix MUI X redirects (#​47917) @​cherniavskii
• Use direct palette vars in Tailwind v4 snippet (#​47955) @​Ahmad-Alaziz

Core

• [blog] Blogpost for upcoming price changes for MUI X (#​47820) @​DanailH
• [blog] Update the 2026 price changes blogpost (#​47944) @​DanailH
• [code-infra] Add pkg-pr-new as dev dependency (#​48023) @​silviuaavram
• [docs-infra] Update Release Instructions and Search Index v7 (#​48109) @​dav-is

All contributors of this release in alphabetical order: @​Ahmad-Alaziz, @​aman44444, @​anchmelev, @​arminmeh, @​cherniavskii, @​DanailH, @​dav-is, @​GerardasB, @​mj12albert, @​olivier-lxo, @​pcorpet, @​sai6855, @​silviuaavram, @​siriwatknp, @​ZeeshanTamboli

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.4

Compare Source

   🚀 Features

• coverage:
  • Default to text reporter skipFull if agent detected  -  by @​hi-ogawa in #​10018 (53757)
• experimental:
  • Expose assertion as a public field  -  by @​sheremet-va in #​10095 (a120e)
  • Support aria snapshot  -  by @​hi-ogawa, Claude Opus 4.6 (1M context), @​AriPerkkio, Codex and @​sheremet-va in #​9668 (d4fbb)
• reporter:
  • Add filterMeta option to json reporter  -  by @​nami8824 and @​sheremet-va in #​10078 (b77de)

   🐞 Bug Fixes

• Use "black" foreground for labeled terminal message to ensure contrast  -  by @​hi-ogawa in #​10076 (203f0)
• Make expect(..., message) consistent as error message prefix  -  by @​hi-ogawa and Codex in #​10068 (a1b5f)
• Do not hoist imports whose names match class properties .  -  by @​SunsetFi in #​10093 and #​10094 (0fc4b)
• browser: Spread user server options into browser Vite server in project  -  by @​GoldStrikeArch in #​10049 (65c9d)

    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features

• Add experimental.preParse flag  -  by @​sheremet-va in #​10070 (78273)
• Support browser.locators.exact option  -  by @​sheremet-va in #​10013 (48799)
• Add TestAttachment.bodyEncoding  -  by @​hi-ogawa in #​9969 (89ca0)
• Support custom snapshot matcher  -  by @​hi-ogawa, Claude Sonnet 4.6 and Codex in #​9973 (59b0e)

   🐞 Bug Fixes

• Advance fake timers with expect.poll interval  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10022 (3f5bf)
• Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency  -  by @​alan-agius4 in #​10025 (146d4)
• Fix defineHelper for webkit async stack trace + update playwright 1.59.0  -  by @​hi-ogawa in #​10036 (5a5fa)
• Fix suite hook throwing errors for unused auto test-scoped fixture  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10035 (39865)
• expect:
  • Remove JestExtendError.context from verbose error reporting  -  by @​hi-ogawa in #​9983 (66751)
  • Don't leak "runner" types  -  by @​sheremet-va in #​10004 (ec204)
• snapshot:
  • Fix flagging obsolete snapshots for snapshot properties mismatch  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​9986 (6b869)
  • Export custom snapshot matcher helper from vitest  -  by @​hi-ogawa and Codex in #​10042 (691d3)
• ui:
  • Don't leak vite types  -  by @​sheremet-va in #​10005 (fdff1)
• vm:
  • Fix external module resolve error with deps optimizer query  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10024 (9dbf4)

    View changes on GitHub

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes

• Don't resolve setupFiles from parent directory  -  by @​hi-ogawa in #​9960 (7aa93)
• Ensure sequential mock/unmock resolution  -  by @​hi-ogawa and Claude Opus 4.6 in #​9830 (7c065)
• browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot  -  by @​macarie in #​9847 (faace)
• coverage: Correct coverageConfigDefaults values and types  -  by @​Arthie in #​9940 (b3c99)
• pretty-format: Fix output limit over counting  -  by @​hi-ogawa in #​9965 (d3b7a)
• Disable colors if agent is detected  -  by @​sheremet-va and @​AriPerkkio in #​9851 (6f97b)

    View changes on GitHub

v4.1.1

Compare Source

   🚀 Features

• experimental:
  • Expose matchesTagsFilter to test if the current filter matches tags  -  by @​sheremet-va in #​9913 (eec53)
  • Introduce experimental.vcsProvider  -  by @​sheremet-va in #​9928 (56115)

   🐞 Bug Fixes

• Mark TestProject.testFilesList internal properly  -  by @​sapphi-red in #​9867 (54f26)
• Detect fixture that returns without calling use  -  by @​oilater in #​9831 and #​9861 (633ae)
• Drop vite 8.beta support  -  by @​AriPerkkio in #​9862 (b78f5)
• Type regression in vi.mocked() static class methods  -  by @​purepear and @​hi-ogawa in #​9857 (90926)
• Properly re-evaluate actual modules of mocked external  -  by @​hi-ogawa in #​9898 (ae5ec)
• Preserve coverage report when html reporter overlaps  -  by @​hi-ogawa in #​9889 (2d81a)
• Provide vi.advanceTimers to the preview provider  -  by @​sheremet-va in #​9891 (1bc3e)
• Don't leak event listener in playwright provider  -  by @​sheremet-va in #​9910 (d9355)
• Open browser in --standalone mode without running tests  -  by @​sheremet-va in #​9911 (e78ad)
• Guard disposable and optional body  -  by @​sheremet-va in #​9912 (6fdb2)
• Resolve retry.condition RegExp serialization issue  -  by @​nstepien and @​hi-ogawa in #​9942 (7b605)
• collect:
  • Don't treat extra props on test return as tests  -  by @​sheremet-va in #​9871 (141e7)
• coverage:
  • Simplify provider types  -  by @​AriPerkkio in #​9931 (aaf9f)
  • Load built-in provider without module runner  -  by @​AriPerkkio in #​9939 (bf892)
• expect:
  • Soft assertions continue after .resolves/.rejects promise errors  -  by @​mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @​hi-ogawa in #​9843 (6d74b)
  • Fix sinon-chai style API  -  by @​hi-ogawa in #​9943 (0f08d)
• pretty-format:
  • Limit output for large object  -  by @​hi-ogawa and Claude Opus 4.6 (1M context) in #​9949 (0d5f9)

    View changes on GitHub

prettier/prettier (prettier)

v3.8.2

Compare Source

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

sass/embedded-host-node (sass-embedded)

v1.99.0

Compare Source

• Add support for parent selectors (&) at the root of the document. These are
  emitted as-is in the CSS output, where they're interpreted as the scoping
  root.

• User-defined functions named calc or clamp are no longer forbidden. If
  such a function exists without a namespace in the current module, it will be
  used instead of the built-in calc() or clamp() function.

• User-defined functions whose names begin with - and end with -expression,
  -url, -and, -or, or -not are no longer forbidden. These were
  originally intended to match vendor prefixes, but in practice no vendor
  prefixes for these functions ever existed in real browsers.

• User-defined functions named EXPRESSION, URL, and ELEMENT, those that
  begin with - and end with -ELEMENT, as well as the same names with some
  lowercase letters are now deprecated, These are names conflict with plain CSS
  functions that have special syntax.

  See the Sass website for details.

• In a future release, calls to functions whose names begin with - and end
  with -expression and -url will no longer have special parsing. For now,
  these calls are deprecated if their behavior will change in the future.

  See the Sass website for details.

• Calls to functions whose names begin with - and end with -progid:... are
  deprecated.

  See the Sass website for details.

typescript-eslint/typescript-eslint (typescript-eslint)

v8.58.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.0

Compare Source

🚀 Features

• support TypeScript 6 (#​12124)

❤️ Thank You

• Evyatar Daud @​StyleShit

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

validatorjs/validator.js (validator)

v13.15.35

Compare Source

Fixes, New Locales and Enhancements

• #​2663 isISO31661Alpha2/isISO31661Alpha3: add support for Kosovo (XK / XXK) @​johanpoirier-d4
• #​2661 isHexColor: ignore non-object options @​yuna0831
• isTaxID
  • #​2644 improve pt-BR locale by adding support for alphanumeric CNPJ format @​easedu
  • #​2675 improve pt-BR locale by adding support for formatted CPF values @​easedu
• #​2643 isPassportNumber: improve MX locale @​jesroffrouk
• #​2676 isMobilePhone: add fr-DJ locale @​Kartikeya-guthub
• #​2682 isPostalCode: add MC locale @​moogblob
• #​2690 isJSON: allow any valid JSON value to pass @​relu91
• #​2693 isSlug: restrict allowed characters to valid slug charset @​Shrawak
• Doc fixes and others:
  • #​2658 @​Manaskarthik28
  • #​2592 @​noritaka1166
  • #​2591 @​noritaka1166

aklinker1/vite-plugin-web-extension (vite-plugin-web-extension)

v4.5.1

Compare Source

Bug Fixes

• Add support vite 8 (981b011)

mozilla/web-ext (web-ext)

v10.1.0: (2026-03-31)

Compare Source

main changes

None

dependencies

• Updated: dependency addons-linter to 10.3.0 (#​3673)
• Updated: dependency @babel/runtime to 7.29.2 (#​3660)

dev dependencies

• Updated: dependency @babel/preset-env to 7.29.2 (#​3661)
• Updated: dependency @commitlint/cli to 20.5.0 (#​3657)
• Updated: dependency @commitlint/config-conventional to 20.5.0 (#​3658)
• Updated: dependency brace-expansion to 1.1.13 (#​3671)
• Updated: dependency flatted to 3.4.1 (#​3656)
• Updated: dependency flatted to 3.4.2 (#​3665)
• Updated: dependency node-forge to 1.4.0 (#​3670)
• Updated: dependency picomatch (#​3669)
• Updated: dependency sinon to 21.0.3 (#​3659)
• Updated: dependency undici to 7.24.1 (#​3655)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.