Bump the build group with 5 updates

[dependabot]

Bumps the build group with 5 updates:

Package	From	To
@types/react	19.2.2	19.2.7
@types/react-dom	19.2.2	19.2.3
nhsuk-frontend	10.1.0	10.2.0
rollup	4.52.5	4.53.3
caniuse-lite	1.0.30001753	1.0.30001757

Updates @types/react from 19.2.2 to 19.2.7

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.2 to 19.2.3

Commits

• See full diff in compare view

Updates nhsuk-frontend from 10.1.0 to 10.2.0

Release notes

Sourced from nhsuk-frontend's releases.

v10.2.0

10.2.0 - 1 December 2025

🆕 New features

Use the password input component to help users accessibly enter passwords

The password input component allows users to choose:

• whether their passwords are visible or not
• to enter their passwords in plain text

This helps users use longer and more complex passwords without needing to remember what they've already typed.

This was added in [pull request #1574: Uplift GOV.UK Frontend password input component](nhsuk/nhsuk-frontend#1574).

Smaller versions of buttons

You can now use smaller versions of buttons by adding the nhsuk-button--small class.

This was added in [pull request #1643: Add small buttons and inline form groups](nhsuk/nhsuk-frontend#1643).

Add inline buttons to text inputs and select menus

You can now add inline buttons to text inputs and select menus using the formGroup.afterInput Nunjucks options.

{{ input({
  formGroup: {
    afterInput: {
      html: button({
        text: "Search",
        classes: "nhsuk-button--small"
      })
    }
  }
}) }}

This was added in [pull request #1643: Add small buttons and inline form groups](nhsuk/nhsuk-frontend#1643).

Updated Nunjucks macro options for nested items

For consistency with other components with nested items, we’ve added new Nunjucks macro options:

• Action link and skip link html option
• Checkboxes and radios item classes option
• Contents list item html, classes and attributes options
• Summary list action item classes and attributes options

... (truncated)

Changelog

Sourced from nhsuk-frontend's changelog.

10.2.0 - 1 December 2025

🆕 New features

Use the password input component to help users accessibly enter passwords

The password input component allows users to choose:

• whether their passwords are visible or not
• to enter their passwords in plain text

This helps users use longer and more complex passwords without needing to remember what they've already typed.

This was added in [pull request #1574: Uplift GOV.UK Frontend password input component](nhsuk/nhsuk-frontend#1574).

Smaller versions of buttons

You can now use smaller versions of buttons by adding the nhsuk-button--small class.

This was added in [pull request #1643: Add small buttons and inline form groups](nhsuk/nhsuk-frontend#1643).

Add inline buttons to text inputs and select menus

You can now add inline buttons to text inputs and select menus using the formGroup.afterInput Nunjucks options.

{{ input({
  formGroup: {
    afterInput: {
      html: button({
        text: "Search",
        classes: "nhsuk-button--small"
      })
    }
  }
}) }}

This was added in [pull request #1643: Add small buttons and inline form groups](nhsuk/nhsuk-frontend#1643).

Updated Nunjucks macro options for nested items

For consistency with other components with nested items, we’ve added new Nunjucks macro options:

• Action link and skip link html option
• Checkboxes and radios item classes option
• Contents list item html, classes and attributes options
• Summary list action item classes and attributes options

This was added in [pull request #1683: Update Nunjucks macro options for nested items](nhsuk/nhsuk-frontend#1683).

... (truncated)

Commits

• cddf165 Merge pull request #1721 from nhsuk/release-permissions
• bd29e51 Add GitHub Actions contents: write permission for releases
• d38dee7 Merge pull request #1720 from nhsuk/changelog-url-typo
• 9c3dc04 Update package version to v10.2.0
• 56ee991 Fix typo in changelog entry for PR #1699
• bbf47c4 Add dependabot cooldown (#1705)
• f39a365 Merge pull request #1708 from nhsuk/heading-size
• 193d7dc Merge pull request #1709 from nhsuk/box-sizing-revert
• 6075a00 Revert "Remove global box-sizing"
• 4de4c86 Revert "Maintain Sass import backwards compatibility"
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for nhsuk-frontend since your current version.

Updates rollup from 4.52.5 to 4.53.3

Release notes

Sourced from rollup's releases.

v4.53.3

4.53.3

2025-11-19

Bug Fixes

• Fix an error where too many modules where flagged for having an unused external import (#6182)
• Fix an error where an assignment was wrongly tree-shaken when mutating it (#6183)

Pull Requests

• #6171: Add test-install CI job to test packaging, installation and importing of rollup package (@​antoninkriz, @​lukastaegert)
• #6174: Re-enable TypeScript test (@​lukastaegert)
• #6180: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6182: Tracing the importers chain for exported variables in external module (@​TrickyPi, @​lukastaegert)
• #6183: Check if left side is included when checking if assigning to an assignment has side effects (@​lukastaegert)

v4.53.2

4.53.2

2025-11-10

Bug Fixes

• Do not throw when using invalid escape sequences in template literals (#6177)

Pull Requests

• #6177: handle TemplateElement with null cooked value (@​TrickyPi)

v4.53.1

4.53.1

2025-11-07

Bug Fixes

• Fix install script (#6172)

Pull Requests

• #6172: fix: move patch-package from postinstall to prepare script (@​mshima)

v4.53.0

4.53.0

2025-11-07

Features

... (truncated)

Changelog

Sourced from rollup's changelog.

4.53.3

2025-11-19

Bug Fixes

• Fix an error where too many modules where flagged for having an unused external import (#6182)
• Fix an error where an assignment was wrongly tree-shaken when mutating it (#6183)

Pull Requests

• #6171: Add test-install CI job to test packaging, installation and importing of rollup package (@​antoninkriz, @​lukastaegert)
• #6174: Re-enable TypeScript test (@​lukastaegert)
• #6180: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6182: Tracing the importers chain for exported variables in external module (@​TrickyPi, @​lukastaegert)
• #6183: Check if left side is included when checking if assigning to an assignment has side effects (@​lukastaegert)

4.53.2

2025-11-10

Bug Fixes

• Do not throw when using invalid escape sequences in template literals (#6177)

Pull Requests

• #6177: handle TemplateElement with null cooked value (@​TrickyPi)

4.53.1

2025-11-07

Bug Fixes

• Fix install script (#6172)

Pull Requests

• #6172: fix: move patch-package from postinstall to prepare script (@​mshima)

4.53.0

2025-11-07

Features

• Improve rendering performance by caching generated variable names (#5947)

Pull Requests

... (truncated)

Commits

• 998b595 4.53.3
• ef834c2 Tracing the importers chain for exported variables in external module (#6182)
• fb21d56 Check if left side is included when checking if assigning to an assignment ha...
• 4b4581d Add test-install CI job to test packaging, installation and importing of roll...
• 18ee41b fix(deps): lock file maintenance minor/patch updates (#6180)
• f0a80d1 Re-enable TypeScript test (#6174)
• d8b0150 4.53.2
• 4f43f03 handle TemplateElement with null cooked value (#6177)
• e3bdcdf 4.53.1
• 96b5453 fix: move patch-package from postinstall to prepare script (#6172)
• Additional commits viewable in compare view

Updates caniuse-lite from 1.0.30001753 to 1.0.30001757

Commits

• 617831e Update caniuse-db 1.0.30001757
• 53dbb77 Update caniuse-db 1.0.30001756
• 42da0d5 Update caniuse-db 1.0.30001755
• a088d8c Update caniuse-db 1.0.30001754
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[colinrotherham]

@dependabot ignore nhsuk-frontend

[dependabot]

OK, I won't notify you about nhsuk-frontend again, unless you unignore it.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.