chore(deps): bump patch-level dependencies
Proposed changes (including videos or screenshots)
Routine patch-level dependency maintenance, plus a Yarn upgrade. Every bump is patch-only — no minors or majors — and no code changes were needed.
Runtime dependencies
| Dependency | Bump | Affected packages |
|---|---|---|
react, react-dom, react-is | 19.2.7 → 19.2.8 | meteor, pdf-worker, uikit-playground |
ws | 8.21.1 → 8.21.3 | rocketchat-services, ddp-streamer |
nodemailer | 9.0.3 → 9.0.5 | meteor |
mailparser | 3.9.14 → 3.9.15 | meteor |
google-libphonenumber | 3.2.44 → 3.2.46 | meteor |
twitter-api-v2 | 1.29.0 → 1.29.1 | meteor |
ip-range-check | 0.2.0 → 0.2.1 | meteor |
esbuild | 0.28.1 → 0.28.2 | apps, release-action |
@octokit/core | 7.0.6 → 7.0.7 | release-action |
@octokit/plugin-throttling | 11.0.3 → 11.0.5 | release-action |
@swc/core | 1.15.46 → 1.15.47 | jest-presets |
Build, test and type tooling (devDependencies only)
ts-jest 29.4.11 → 29.4.12 · rollup 4.62.3 → 4.62.4 · html-webpack-plugin 5.6.7 → 5.6.8 · @vitejs/plugin-react 6.0.3 → 6.0.5 · @testing-library/user-event 14.6.1 → 14.6.4 · @types/react 19.2.17 → 19.2.18 · @types/react-dom 19.2.3 → 19.2.4 · @types/lodash 4.17.24 → 4.17.25 · @types/codemirror 5.60.17 → 5.60.18 · @types/google-libphonenumber 7.4.30 → 7.4.31
A separate commit upgrades Yarn from 4.17.1 to 4.18.0.
Issue(s)
Steps to test or reproduce
No behavior changes are expected. CI (lint, typecheck, unit and E2E) is the coverage here.
Further comments
This branch was rebased onto #41754, which already carries newer hono (4.12.34), postcss (8.5.26) and dompurify (3.4.13). Those three bumps were therefore dropped from this PR — the versions on develop are equal to or newer than what this branch had proposed.
The changeset lists only the packages whose own dependencies moved — @rocket.chat/meteor, rocketchat-services, @rocket.chat/ddp-streamer, @rocket.chat/pdf-worker, @rocket.chat/uikit-playground, @rocket.chat/apps, @rocket.chat/jest-presets and @rocket.chat/release-action — regardless of whether they are published, since a runtime dependency change is a change to what that package executes.
The remaining touched manifests (livechat, fuselage-ui-kit, gazzodown, http-router, mock-providers, mp3-encoder, storybook-config, tracing, ui-kit, the ui-* packages, web-ui-registration, ddp-client and omnichannel-transcript) only moved devDependencies, and no peerDependencies ranges changed anywhere, so those packages produce identical output and are deliberately left out of the changeset.
Summary by CodeRabbit
-
Chores
- Updated project tooling and package dependencies to newer patch releases.
- Updated React, React DOM, type definitions, and related testing utilities.
- Updated networking, security, build, and release tooling dependencies.
- Upgraded the project’s Yarn release.
-
Release
- Prepared patch-level package releases reflecting these dependency updates.