Bump the 3-3-core-ui-package-updates group across 1 directory with 23 updates

[dependabot]

Bumps the 3-3-core-ui-package-updates group with 23 updates in the /airflow-core/src/airflow/ui directory:

Package	From	To
@tanstack/react-query	5.101.4	5.102.3
@tanstack/react-virtual	3.14.9	3.14.10
@xyflow/react	12.11.2	12.11.3
dayjs	1.11.21	1.11.23
i18next	26.3.6	26.4.0
react-hook-form	7.85.0	7.86.0
react-i18next	17.0.11	17.0.12
zustand	5.0.14	5.0.15
@tanstack/eslint-plugin-query	5.101.4	5.102.3
@types/node	26.2.0	26.3.0
@types/react-dom	19.2.4	19.2.5
@typescript-eslint/eslint-plugin	8.66.0	8.68.0
@typescript-eslint/parser	8.66.0	8.68.0
@typescript-eslint/utils	8.66.0	8.68.0
@vitejs/plugin-react	6.0.5	6.1.0
@vitest/coverage-v8	4.1.10	4.1.11
eslint	10.8.1	10.9.1
eslint-plugin-jsonc	3.4.1	3.4.2
globals	17.9.0	17.11.0
happy-dom	20.11.2	20.11.6
typescript-eslint	8.66.0	8.68.0
vite	8.2.1	8.2.2
vitest	4.1.10	4.1.11

Updates @tanstack/react-query from 5.101.4 to 5.102.3

Changelog

Sourced from @​tanstack/react-query's changelog.

5.102.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.3

5.102.2

Patch Changes

• Updated dependencies [80fbf73]:
  • @​tanstack/query-core@​5.102.2

5.102.1

Patch Changes

• Updated dependencies [134890d]:
  • @​tanstack/query-core@​5.102.1

5.102.0

Minor Changes

• #10668 e674826 - react-query: update usePrefetchQuery and usePrefetchInfiniteQuery to use queryClient.query and queryClient.infiniteQuery

Patch Changes

• #11245 37127db - revert: remove NoInfer from useQuery return types

• #10373 6e3d521 - fix(types): propagate generic type parameters to useMutationState select callback

• #11224 294d4e6 - Fix queryOptions and infiniteQueryOptions return types so exported inferred options can be emitted in declaration files without leaking internal data tag symbols.

• #11147 cb6c9d3 - Default TData of UseInfiniteQueryOptions and UseSuspenseInfiniteQueryOptions to InfiniteData<TQueryFnData> so it matches the hook generics.

• #8737 2215bb0 - fix: make mutation variables optional when undefined extends TVariables

• #11221 1ef4208 - Remove experimental render-time prefetching and the promise property from query results.

• #11228 fb6c3fa - Avoid emitting a runtime import for React Query's type-only exports.

• #11130 8834267 - fix(react-query): don't show optimistic fetching for unsubscribed useQueries

• #11233 b866a95 - remove unused experimental_beforeQuery and experimental_afterQuery hooks

• #11144 e546d03 - fix: remove placeholderData from suspense infinite query

• Updated dependencies [34f7cee, b4368c4, 5bb089d, ba4650c, 294d4e6, 1f631b3, 01a02bf, 18c1c1e, 5448063, 2215bb0, 1ef4208, 5981771, 4a9bef6, bef4bc7, 9656dc4, 326aaf1, 3e83601, c6fc17c]:

... (truncated)

Commits

• 730b3aa ci: Version Packages (#11276)
• 388bbaf ci: Version Packages (#11265)
• bc423b3 ci: Version Packages (#11261)
• be1352b test(*): add adapter-level type coverage for optional undefinable mutate vari...
• 5743468 ci: Version Packages (#11206)
• 2215bb0 fix(query-core): make MutateFunction optional undefinable-variables (#8737)
• d156adc test: transition tests (#11246)
• 37127db fix/11018 (#11245)
• e674826 React: update usePrefetchQuery to use new methods, plus react adaptor tests a...
• 8834267 fix(react-query): keep unsubscribed useQueries idle (#11130)
• Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.9 to 3.14.10

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.10

Patch Changes

• Updated dependencies [a0a411e, d2cf98b]:
  • @​tanstack/virtual-core@​3.17.8

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.10

Patch Changes

• Updated dependencies [a0a411e, d2cf98b]:
  • @​tanstack/virtual-core@​3.17.8

Commits

• e9874f0 ci: Version Packages (#1247)
• See full diff in compare view

Updates @xyflow/react from 12.11.2 to 12.11.3

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.3

Patch Changes

• #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

• #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

• #5943 d1def59 - Invoke an error if handle can not be found

• #5947 2ba040f - Use correct nodeExtent for internal setNodes.

• #5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

• #5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

• #5929 4c5d7d2 - Allow key combinations of three or more keys (e.g. 'Meta+Shift+s') for useKeyPress.

• #5938 91a052f - Fix <Background /> pattern offset miscalculation.

• Updated dependencies [393d951, ff126a0, e5d86bd, 392da00]:

  • @​xyflow/system@​0.0.80

Changelog

Sourced from @​xyflow/react's changelog.

12.11.3

Patch Changes

• #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

• #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

• #5943 d1def59 - Invoke an error if handle can not be found

• #5947 2ba040f - Use correct nodeExtent for internal setNodes.

• #5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

• #5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

• #5929 4c5d7d2 - Allow key combinations of three or more keys (e.g. 'Meta+Shift+s') for useKeyPress.

• #5938 91a052f - Fix <Background /> pattern offset miscalculation.

• Updated dependencies [393d951, ff126a0, e5d86bd, 392da00]:

  • @​xyflow/system@​0.0.80

Commits

• 359f70c chore(packages): bump
• e90a1b6 Merge pull request #5938 from Feyyus/fix/background-offset-precedence
• 2ba040f fix(react): use the current nodeExtent in setNodes
• 42f367e Merge pull request #5922 from Skyline-23/fix/control-pan-activation
• d7dbd57 Merge pull request #5929 from Jian-Zhang08/fix/usekeypress-multi-key-combination
• bdcf89a fix(edge-wrapper): pass onError prop closes #5936, closes #5932
• 91a052f fix(react): correct offset math in Background pattern
• 4c5d7d2 fix(react): make useKeyPress work with combinations of three or more keys
• 392da00 fix(system): allow Control key to activate pane panning
• c5d7442 fix(pane): prefer touch panning over drag selection
• See full diff in compare view

Updates dayjs from 1.11.21 to 1.11.23

Release notes

Sourced from dayjs's releases.

v1.11.23

1.11.23 (2026-08-17)

Bug Fixes

• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (dad46e6)
• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (#3181) (2a3785f)

v1.11.22

1.11.22 (2026-08-16)

Bug Fixes

• plugin: timezone compute instance .tz() offset without host DST (#3174) (e27ee80), closes #3169

Changelog

Sourced from dayjs's changelog.

1.11.23 (2026-08-17)

Bug Fixes

• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (dad46e6)
• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (#3181) (2a3785f)

1.11.22 (2026-08-16)

Bug Fixes

• plugin: timezone compute instance .tz() offset without host DST (#3174) (e27ee80), closes #3169

Commits

• 4549b8d chore(release): 1.11.23 [skip ci]
• 2a3785f fix(plugin): timezone plugin prevent RangeError for invalid Day.js values (#3...
• dad46e6 fix(plugin): timezone plugin prevent RangeError for invalid Day.js values (#3...
• ae3a550 chore(release): 1.11.22 [skip ci]
• accfc67 D2M (#3177)
• e27ee80 fix(plugin): timezone compute instance .tz() offset without host DST (#3174)
• 98364bc chore: update doc
• f6a1556 chore: update doc
• 6609c5e chore: update doc
• See full diff in compare view

Updates i18next from 26.3.6 to 26.4.0

Release notes

Sourced from i18next's releases.

v26.4.0

• perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
• chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.

Changelog

Sourced from i18next's changelog.

26.4.0

• perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
• chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.

Commits

• 652847e 26.4.0
• 6c6025f prettier fix
• 742b9a9 chore: update dependencies and clean up dev tooling
• 06924d9 fix: invalidate toResolveHierarchy cache on in-place fallbackLng mutation
• bb80369 perf: cache toResolveHierarchy (#2444)
• See full diff in compare view

Updates react-hook-form from 7.85.0 to 7.86.0

Release notes

Sourced from react-hook-form's releases.

Version 7.86.0

✨ Features

• Add type-safe getErrors method. (#13639, #12853)

🐞 Fixes

• Fix useWatch returning stale values when the watched name changes to null. (#13668)
• Fix unregister keepDirty behavior. (#13669)
• Fix setValues for fields registered under object or array values. (#13667)
• Fix Controller notifications for field array item roots. (#13665)
• Fix validation state checks. (#13661)
• Fix setCustomValidity with criteriaMode: 'all'. (#13655)
• Fix File, Blob, and FileList handling in flatten. (#13652)
• Fix stale errors and touched state after updating a field array item. (#13650)
• Fix stale field names leaking into persisted formState. (#13649)

🚀 Performance

• Improve createFormControl performance. (#13648)
• Improve cloneObject performance.
• Avoid unnecessary value cloning in unregister. (#13662)
• Improve performance in onChange-heavy workloads.

🧹 Chores & Refactoring

• Remove unnecessary any usage. (#13660)
• Improve TypeScript handling around checkbox values. (#13659)
• Improve UUID generation. (#13658)
• Clean up repository structure and APIs. (#13657)
• Remove unreachable revalidation logic in useFieldArray. (#13654)

Thanks to @​dfedoryshchev, @​zigzagdev, @​official-burak, @​Jaybhade, @​candymask0712, and @​bluebill1049 for their contributions! 🎉

Changelog

Sourced from react-hook-form's changelog.

[7.86.0] - 2026-08-22

Added

• Type-safe getErrors method

Performance

• Improve createFormControl
• Improve clone object check
• Avoid cloning values in unregister without subscribers

Fixed

• Field array update leaving stale errors and touched state at the updated index
• flatten discarding File and Blob values instead of treating them as leaf nodes
• validateField not passing the field error to setCustomValidity when criteriaMode is all
• hasValidation treating falsy but valid values (min: 0, max: 0, minLength: 0, maxLength: 0, required: '') as no validation
• setValue targeting a nested leaf not notifying a Controller registered on a field array item root
• setValues not updating fields registered under an object or array value
• useWatch returning a stale value on name change when the new value is null
• unregister inverting keepDirty when broadcasting isDirty

Commits

• 33860b4 7.86.0
• e5b117b 🐞 fix(unregister): keepDirty inverted when broadcasting isDirty (#13669)
• 64ec9bc 🐞 fix: useWatch returns stale value on name change when new value is null (#1...
• dead471 🦌 fix(setValues): update fields registered under an object or array value (#1...
• 1ca83d2 🪖 close #13664 notify a Controller registered on a field array item root when...
• 06e4efd 🚚 perf: avoid cloning values in unregister without subscribers (#13662)
• 9b7af71 🐞 fix has validation check issue (#13661)
• 51e3309 🗜️ chore: remove any (#13660)
• 1c5ff08 🤖 fix ts error ignore on getCheckboxValues (#13659)
• 7223514 🧛 improve uuid function (#13658)
• Additional commits viewable in compare view

Updates react-i18next from 17.0.11 to 17.0.12

Changelog

Sourced from react-i18next's changelog.

17.0.12

• fix(IcuTrans): key-less icu.macro nodes (<Trans>Welcome, {name}!</Trans>, <Select>, <Plural> without i18nKey) rendered an empty string since 17.0.0. The macro now emits <IcuTrans defaultTranslation="…"> without a key and IcuTrans passed undefined to t(), which returns ''. Like Trans, IcuTrans now uses defaultTranslation as the key when i18nKey is not provided.

Commits

• ea721fb 17.0.12
• 6c2a71e fix(IcuTrans): use defaultTranslation as key when no i18nKey is given
• 258c96d chore(examples): upgrade all example apps off unmaintained toolchains
• b8677c8 chore: update dependencies to close dependabot alerts
• aa9c92b docs: point Trans component links at the current docs (#1929)
• See full diff in compare view

Updates zustand from 5.0.14 to 5.0.15

Release notes

Sourced from zustand's releases.

v5.0.15

Fix some issues in devtools and persist middleware.

What's Changed

• fix(devtools): correct V8 stack regex when source path contains spaces by @​dai-shi with @​Copilot in pmndrs/zustand#3531
• fix(persist): clearStorage() should invalidate concurrent async rehydration by @​dai-shi with @​Copilot in pmndrs/zustand#3555

Full Changelog: pmndrs/zustand@v5.0.14...v5.0.15

Commits

• 2115efb v5.0.15
• 1f531ba chore(deps): update dev dependencies (#3560)
• aa6d2a1 docs: add zustand-devtools-bridge (#3559)
• 3febf8c fix(persist): clearStorage() should invalidate concurrent async rehydration (...
• f44cecc fix(devtools): correct V8 stack regex when source path contains spaces (#3531)
• beca84e fix: update broken README links from docs/guides/ to docs/learn/guides/ (#3542)
• 038f496 docs(persist): clarify createJSONStorage behavior and warn about production u...
• a1f685c docs: fix missing code highlights in tic-tac-toe tutorial (#3527)
• 07cee61 docs: fix missing highlight on setXIsNext line in tic-tac-toe tutorial (#3524)
• 566b5bf Fix dead link in README.md: update immer guide path (#3519)
• Additional commits viewable in compare view

Updates @tanstack/eslint-plugin-query from 5.101.4 to 5.102.3

Changelog

Sourced from @​tanstack/eslint-plugin-query's changelog.

5.102.3

5.102.2

5.102.1

5.102.0

Patch Changes

• #11212 279bb55 - TypeScript 7 compatibility

• #11188 3bc8edf - Fix false-positive warnings in no-unstable-deps rule caused by Object.prototype property lookups (toString, valueOf, etc.).

• #11115 8582702 - Remove unused helper functions from the internal ASTUtils object (getNestedIdentifiers, getNestedReturnStatements, getClosestVariableDeclarator, mapKeyNodeToText, and mapKeyNodeToBaseText). They were not referenced by any rule and are not part of the public API.

Commits

• 730b3aa ci: Version Packages (#11276)
• 388bbaf ci: Version Packages (#11265)
• bc423b3 ci: Version Packages (#11261)
• 5743468 ci: Version Packages (#11206)
• 267154c chore: tsup -> tsdown (#11222)
• 8582702 refactor(eslint-plugin-query): remove unused ast-utils helpers (#11115)
• 279bb55 chore: update to ts 7 and move cut-off to 5.6 (#11212)
• 3bc8edf fix(eslint-plugin-query): avoid prototype property false-positives in no-unst...
• See full diff in compare view

Updates @types/node from 26.2.0 to 26.3.0

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.4 to 19.2.5

Commits

• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.66.0 to 8.68.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#12086)
• utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

• eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
• eslint-plugin: [unified-signatures] report identical signatures (#12678)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
• website: playground crashes on extends configs (#12608)
• website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Josh Goldberg ✨
• Niki @​phaux
• Thiago Barbosa
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.68.0 (2026-08-24)

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#12086)

🩹 Fixes

• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
• eslint-plugin: [unified-signatures] report identical signatures (#12678)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
• eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Niki @​phaux
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 8f4e00a chore(release): publish 8.68.0
• db30514 feat(eslint-plugin): [strict-void-return] add fix suggestions (#12086)
• 9690339 test(eslint-plugin): [prefer-optional-chain] use createRuleTesterWithTypes ...
• abe9011 fix(eslint-plugin): [no-empty-object-type] ignore suggestions that result in ...
• 79c16e7 chore(eslint-plugin): extract FunctionSignature and enum comparison utils (#1...
• 2442e30 test(eslint-plugin): [no-floating-promises] format test snippets (#12723)
• 3596323 fix(eslint-plugin): [no-floating-promises] setting ignoreVoid: false result...
• 956a339 fix(eslint-plugin): [no-unnecessary-type-assertion] prevent stack overflow in...
• 55f6d5d chore: enable source maps (#12677)
• 3aefb6a test: improve vitest performance with isolate: false (#12703)
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.66.0 to 8.68.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#12086)
• utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

• eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
• eslint-plugin: [unified-signatures] report identical signatures (#12678)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
• website: playground crashes on extends configs (#12608)
• website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Josh Goldberg ✨
• Niki @​phaux
• Thiago Barbosa
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

ChangelogDescription has been truncated

[potiuk]

cc @bbovenzi @pierrejeambrun @jason810496 — flagging you as the recent maintainers of the core UI and .github/dependabot.yml, since the durable fix belongs in the dependabot/pnpm configuration rather than in this PR.

Heads-up: dependabot dropped this lockfile's pnpm.overrides — fix pushed

package.json here carries a pnpm.overrides block, which pnpm mirrors into pnpm-lock.yaml. Dependabot regenerated the lockfile without applying those overrides, so the overrides: section vanished from the lockfile entirely — it is present on the target branch. Every frozen install then fails with:

ERR_PNPM_LOCKFILE_CONFIG_MISMATCH  Cannot proceed with the frozen installation.
The current "overrides" configuration doesn't match the value found in the lockfile

That is what broke ts-compile-lint-ui here.

I regenerated the lockfile with the repo-pinned pnpm 10.28.1 and pushed it to this branch. pnpm install --frozen-lockfile now succeeds and the previously failing hook passes locally.

Why this wants a maintainer's eye: those overrides are security-advisory pins — tar, prismjs, handlebars, minimatch, rollup, flatted, happy-dom and others. Merged as dependabot generated it, this PR would have silently removed those pins from the lockfile in addition to breaking the build. This is not specific to this PR: it will recur on every UI dependabot PR in this repo until dependabot is configured or worked around to preserve the overrides.

Two notes on the diff: it is large because re-resolution also drops stale (supports-color@…) peer suffixes — a full pnpm install produces byte-identical output, so this is not a --lockfile-only artifact. And because a human pushed to this branch, dependabot will no longer rebase it.

---

Drafted-by: Claude Code (Opus 5); reviewed by @potiuk before posting

[potiuk]

The dropped-pnpm.overrides problem behind the lockfile fix on this branch is now tracked in #72298.

The regenerated lockfile here is a per-PR workaround; the durable fix (and working out why dependabot drops the block on some updates but not others) is tracked in that issue.

---

Drafted-by: Claude Code (Opus 5); reviewed by @potiuk before posting