deps: bump the safe-dependencies group across 2 directories with 28 updates

[dependabot]

Bumps the safe-dependencies group with 23 updates in the / directory:

Package	From	To
@tanstack/react-query	5.90.11	5.90.20
@ugrc/utah-design-system	1.34.0	1.34.1
betterknown	1.1.1	1.2.0
firebase	12.6.0	12.8.0
firebase-functions	7.0.0	7.0.3
react	19.2.1	19.2.3
@types/react	19.2.7	19.2.9
react-aria	3.44.0	3.45.0
react-aria-components	1.13.0	1.14.0
react-content-loader	7.1.1	7.1.2
react-dom	19.2.1	19.2.3
react-error-boundary	6.0.0	6.1.0
react-stately	3.42.0	3.43.0
@typescript-eslint/eslint-plugin	8.48.1	8.53.0
@vitejs/plugin-react	5.1.1	5.1.2
autoprefixer	10.4.22	10.4.23
eslint	9.39.1	9.39.2
firebase-tools	14.26.0	14.27.0
lucide-react	0.544.0	0.562.0
prettier	3.7.4	3.8.0
prettier-plugin-packagejson	2.5.20	2.5.22
tailwindcss	3.4.18	3.4.19
vite	7.2.6	7.3.1

Bumps the safe-dependencies group with 7 updates in the /functions directory:

Package	From	To
eslint	9.39.1	9.39.2
firebase-tools	14.26.0	14.27.0
@esri/arcgis-rest-feature-service	4.4.1	4.8.0
@esri/arcgis-rest-request	4.7.3	4.8.0
@google-cloud/cloud-sql-connector	1.8.4	1.9.0
ky	1.14.1	1.14.3
better-sqlite3	12.5.0	12.6.2

Updates @tanstack/react-query from 5.90.11 to 5.90.20

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-persist-client@​5.90.20

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.91.17
  • @​tanstack/react-query@​5.90.18

@​tanstack/react-query@​5.90.20

Patch Changes

• Updated dependencies [e7258c5]:
  • @​tanstack/query-core@​5.90.20

@​tanstack/react-query-persist-client@​5.90.19

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.91.16
  • @​tanstack/react-query@​5.90.17

@​tanstack/react-query@​5.90.19

Patch Changes

• Updated dependencies [53fc74e]:
  • @​tanstack/query-core@​5.90.19

@​tanstack/react-query-persist-client@​5.90.18

Patch Changes

• Updated dependencies [4be3ad7]:
  • @​tanstack/react-query@​5.90.16
  • @​tanstack/query-persist-client-core@​5.91.15

@​tanstack/react-query@​5.90.18

Patch Changes

• Updated dependencies [dea1614]:
  • @​tanstack/query-core@​5.90.18

@​tanstack/react-query@​5.90.17

Patch Changes

• Updated dependencies [269351b]:
  • @​tanstack/query-core@​5.90.17

@​tanstack/react-query@​5.90.16

Patch Changes

• fix(react-query): allow retryOnMount when throwOnError is function (#9338)

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.90.20

Patch Changes

• Updated dependencies [e7258c5]:
  • @​tanstack/query-core@​5.90.20

5.90.19

Patch Changes

• Updated dependencies [53fc74e]:
  • @​tanstack/query-core@​5.90.19

5.90.18

Patch Changes

• Updated dependencies [dea1614]:
  • @​tanstack/query-core@​5.90.18

5.90.17

Patch Changes

• Updated dependencies [269351b]:
  • @​tanstack/query-core@​5.90.17

5.90.16

Patch Changes

• fix(react-query): allow retryOnMount when throwOnError is function (#9338)

• Updated dependencies [7f47906]:

  • @​tanstack/query-core@​5.90.16

5.90.15

Patch Changes

• Updated dependencies [fccef79]:
  • @​tanstack/query-core@​5.90.15

5.90.14

Patch Changes

• Updated dependencies [d576092]:
  • @​tanstack/query-core@​5.90.14

... (truncated)

Commits

• 7ac4e20 ci: Version Packages (#10067)
• 9ff3de7 Upgrade to Vitest v4 (#9862)
• 0525ad1 ci: Version Packages (#10047)
• 53fc74e fix(query-core): fix combine not updating when queries change with stable ref...
• 64d5d62 ci: Version Packages (#10045)
• dea1614 fix(query-core): avoid throwing promise errors when data exists (#10025)
• bf7f47e ci: Version Packages (#10033)
• 44c3cb9 test(react-query/ssr): add 'useQueries' test for SSR (#9996)
• 167db32 ci: Version Packages (#10005)
• 4be3ad7 fix(react-query): allow retryOnMount when throwOnError is function (#9336) (#...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​tanstack/react-query since your current version.

Updates @ugrc/utah-design-system from 1.34.0 to 1.34.1

Release notes

Sourced from @​ugrc/utah-design-system's releases.

utah-design-system: v1.34.1

1.34.1 (2026-01-14)

Bug Fixes

• social-media: replace link component with native anchor tag (1dcd020)

Commits

• d4b6be7 chore: release main
• cf8b81a chore(deps): bump the ci-dependencies group with 2 updates
• 836421a fix(monorepo): finish removing layer selector
• 1dcd020 fix(social-media): replace link component with native anchor tag
• 96591b7 chore(layer-selector): deprecate
• a768a51 docs: update readme
• e53c067 chore(monorepo): remove unused file
• See full diff in compare view

Updates betterknown from 1.1.1 to 1.2.0

Release notes

Sourced from betterknown's releases.

v1.2.0

Minor Changes

• 3ca5284: Support for stringifying according to OGC SFA 1.2.0 standard. Specifically, this changes the MULTIPOINT syntax: in 1.2.0, a MULTIPOINT looks like MULTIPOINT ((1 2),(3 4)). In previous versions, it looks like MULTIPOINT (1 2,3 4).

  You can choose a specific version by supplying an options argument to geoJsonToWkt:

  geoJSONToWkt(
    {
      type: "MultiPoint",
      coordinates: [
        [1, 2],
        [3, 4],
      ],
    },
    { version: "1.2.0" }
  );

  There is no version option for parsing WKT at this point, because it cleanly parses 1.1.1 and 1.2.0 already.

Changelog

Sourced from betterknown's changelog.

1.2.0

Minor Changes

• 3ca5284: Support for stringifying according to OGC SFA 1.2.0 standard. Specifically, this changes the MULTIPOINT syntax: in 1.2.0, a MULTIPOINT looks like MULTIPOINT ((1 2),(3 4)). In previous versions, it looks like MULTIPOINT (1 2,3 4).

  You can choose a specific version by supplying an options argument to geoJsonToWkt:

  geoJSONToWkt(
    {
      type: "MultiPoint",
      coordinates: [
        [1, 2],
        [3, 4],
      ],
    },
    { version: "1.2.0" }
  );

  There is no version option for parsing WKT at this point, because it cleanly parses 1.1.1 and 1.2.0 already.

Commits

• 09ea548 Version Packages (#27)
• 3ca5284 Support stringifying into 1.2.1 standard (#26)
• See full diff in compare view

Updates firebase from 12.6.0 to 12.8.0

Release notes

Sourced from firebase's releases.

firebase@12.8.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.7.0

Minor Changes

• 2ecf78b #8890 (fixes #8859) - Add support for AbortSignal, allowing requests to be aborted.

• 5579b38 #9424 - Added ability to specify thinking levels in thinkingConfig.

• f044045 #9440 - Update default hybrid-in-cloud model to gemini-2.5-flash-lite.

firebase@12.8.0

Minor Changes

• 83e6864 #9356 - Release Firestore Pipelines for Enterprise edition in public preview.

• 2ecf78b #8890 (fixes #8859) - Add support for AbortSignal, allowing requests to be aborted.

• 5579b38 #9424 - Added ability to specify thinking levels in thinkingConfig.

• f044045 #9440 - Update default hybrid-in-cloud model to gemini-2.5-flash-lite.

• b282744 #9449 - Web support for ABT and Rollouts

Patch Changes

• Updated dependencies [83e6864, 2ecf78b, 5579b38, f044045, b282744]:
• @​firebase/firestore@​4.10.0
• @​firebase/app@​0.14.7
• @​firebase/ai@​2.7.0
• @​firebase/remote-config@​0.8.0
• @​firebase/firestore-compat@​0.4.4
• @​firebase/app-compat@​0.5.7
• @​firebase/remote-config-compat@​0.2.21

@​firebase/firestore@​4.10.0

Minor Changes

• 83e6864 #9356 - Release Firestore Pipelines for Enterprise edition in public preview.

@​firebase/remote-config@​0.8.0

Minor Changes

... (truncated)

Commits

• 817151e Version Packages (#9453)
• 15b7420 Merge main into release
• efc0117 test(e2e): force jest to use browser (#9455)
• e4aadfe Merge main into release
• d5ff5a4 test(e2e): update jest (#9451)
• b282744 feat(rc): Web support for ABT & Rollouts (#9449)
• 5579b38 feat(ai): Add thinking levels parameter (#9424)
• 2ecf78b feat(ai): Add support for AbortSignal (#8890)
• 6b3aecf build(firestore): Strip forgotten export warnings from pipelines api reports ...
• f044045 fix(ai): update hybrid in-cloud default model to gemini 2.5 flash lite (#9440)
• Additional commits viewable in compare view

Updates firebase-functions from 7.0.0 to 7.0.3

Release notes

Sourced from firebase-functions's releases.

v7.0.3

• Internal improvements.

v7.0.2

• Export param types (SecretParam, StringParam, etc.) from firebase-functions/params for type annotations. (#1789)
• Remove attemptDeadlineSeconds in v2 scheduled functions. (#1776)
• Allow JsonSecretParam in function secrets option arrays. (#1788)

v7.0.1

• Fix "Dual-Package Hazard" for parameterized configuration in ESM projects. (#1780)

Commits

• b654b85 7.0.3
• 8f65eaf Hide onGraphRequest API for now. (#1792)
• e7cb2ef Initial FDC resolver support in functions SDK. (#1784)
• cfba53d [firebase-release] Removed change log and reset repo after 7.0.2 release
• e6d5c66 7.0.2
• a35cc87 7.0.2-rc.0
• bb407c6 fix: export param types from firebase-functions/params (#1789)
• fd0e291 fix: allow JsonSecretParam in secrets array (#1788)
• 3577d9b feat: remove attemptDeadlineSeconds in v2 scheduled functions (#1776)
• b024089 [firebase-release] Removed change log and reset repo after 7.0.1 release
• Additional commits viewable in compare view

Updates react from 19.2.1 to 19.2.3

Release notes

Sourced from react's releases.

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

Commits

• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.9

Commits

• See full diff in compare view

Updates react-aria from 3.44.0 to 3.45.0

Commits

• 602e586 Publish
• bd84160 chore: replacing internationalized OG with updated React Aria icon (#9350)
• cd3c588 docs: Homepage updates and fixes (#9344)
• 3ad9c26 fix: v3 menus alternative approach (#9345)
• f208529 chore: remove alpha for release (#9351)
• 8fabbed docs: Style macro reference table refactor (#9329)
• e5bb07b chore: fix broken link in migrating docs (#9347)
• e4cae96 fix: testing bugs in NumberField, Tooltip, and Popover (#9342)
• 0caa399 docs: add shouldCloseOnPress to RAC Tooltip docs (#9341)
• 6c29f7a fix: fix firstDayOfWeek styling in S2 DateRangePicker (#9340)
• Additional commits viewable in compare view

Updates react-aria-components from 1.13.0 to 1.14.0

Release notes

Sourced from react-aria-components's releases.

December 16, 2025 Release

Wrapping up this year with a bang and our most exciting release yet! Meet our new website. We heard your feedback and have reimagined the docs to be more concise and make greater use of interactive examples using prop controls. Code examples have been refined to highlight what matters most, and real-world app examples show how all these pieces come together. The new search experience includes image previews and category and library filtering, helping you find what you need faster. There are more component examples, new guides, AI-friendly page markdown, and MCP servers, all wrapped up in a fresh new look. 🎁 Explore the updated experience of React Aria.

Along with our new look, we have released a stable version of Spectrum 2, a major update to Adobe’s Design System built on top of React Aria Components. Spectrum 2 delivers modern, refined components with better accessibility, performance, and styling flexibility using style macros. Use our updated search to browse the new components, or visit our migration guide to learn how to upgrade. Check it out!

As usual, we have included various new features and bug fixes, including support for animated Tab transitions in React Aria, and inline TableView editing in React Spectrum. Thank you to all our contributors in this release and from this past year. We hope you enjoy the updates, see you in 2026!

• React Aria release notes
• React Spectrum release notes

Commits

• 602e586 Publish
• bd84160 chore: replacing internationalized OG with updated React Aria icon (#9350)
• cd3c588 docs: Homepage updates and fixes (#9344)
• 3ad9c26 fix: v3 menus alternative approach (#9345)
• f208529 chore: remove alpha for release (#9351)
• 8fabbed docs: Style macro reference table refactor (#9329)
• e5bb07b chore: fix broken link in migrating docs (#9347)
• e4cae96 fix: testing bugs in NumberField, Tooltip, and Popover (#9342)
• 0caa399 docs: add shouldCloseOnPress to RAC Tooltip docs (#9341)
• 6c29f7a fix: fix firstDayOfWeek styling in S2 DateRangePicker (#9340)
• Additional commits viewable in compare view

Updates react-content-loader from 7.1.1 to 7.1.2

Release notes

Sourced from react-content-loader's releases.

v7.1.2

7.1.2 (2026-01-22)

Bug Fixes

• hydration: use useId for dom variant (#325) (c8a6b6c)

Commits

• c8a6b6c fix(hydration): use useId for dom variant (#325)
• See full diff in compare view

Updates react-dom from 19.2.1 to 19.2.3

Release notes

Sourced from react-dom's releases.

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

Commits

• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• See full diff in compare view

Updates react-error-boundary from 6.0.0 to 6.1.0

Release notes

Sourced from react-error-boundary's releases.

6.1.0

• #235: Fix error type (Error -> unknown)
• Export getErrorMessage helper method

6.0.3

• Removed react-dom from peer dependencies list; it was accidentally added during a previous internal refactor

6.0.2

Updated README and generated TS docs

6.0.1

Updated README and generated docs

Commits

• 86c0509 6.0.4 -> 6.1.0
• 9aea72a Fix error type (Error -> unknown) (#235)
• 186ae40 6.0.2 -> 6.0.3
• bc1e74b 6.0.1 -> 6.0.2
• 9d2cb82 Tweaked FAQ header
• e39086d Update react-lib-tools dep
• 6a51a1a Add FAQ section to docs
• f33ab81 Update react-lib-tools dep
• 27d8a8f Replace og.svg with og.png
• ea18878 Update react-lib-tools dep
• Additional commits viewable in compare view

Updates react-stately from 3.42.0 to 3.43.0

Release notes

Sourced from react-stately's releases.

July 22, 2025 Release

Happy summer! This release adds support for async loading and infinite scrolling, improves form integration and drag and drop interactions, and adds support for additional DOM events and attributes.

The new LoadMoreItem components supported in ListBox, GridList, Table, and Tree enables infinite scrolling. These trigger the loading of additional pages of items and display a loading spinner. Multiple LoadMoreItems can be rendered within a collection too, enabling loading multiple levels of a tree or sections of data from different APIs.

We've also opened up the React Aria Components API to pass through more DOM events and attributes. This improves integration with other libraries, for example making it possible to use another library's menu with a React Aria button.

As always, thanks so much to everyone who contributed to this release!

Full release notes

June 5, 2025 Release

Drop everything! Drag and drop support in React Aria Tree has been released! 🫳🎤 This supports moving items within a tree or between collection components, with full keyboard and screen reader accessibility. It's interoperable with our existing drag and drop support in components like Table and GridList, and with third party apps via native HTML APIs. Check out our previous blog post on drag and drop to learn about the interactions, and our new Tree drag and drop documentation.

This release also includes some highly requested bug fixes, including scrollbar layout shifts when opening popovers and modals, date picker interaction improvements, and enhancements to our form components.

As always, thank you to our community for their support and contributions!

Full Release Notes

Commits

• 602e586 Publish
• bd84160 chore: replacing internationalized OG with updated React Aria icon (#9350)
• cd3c588 docs: Homepage updates and fixes (#9344)
• 3ad9c26 fix: v3 menus alternative approach (#9345)
• f208529 chore: remove alpha for release (#9351)
• 8fabbed docs: Style macro reference table refactor (#9329)
• e5bb07b chore: fix broken link in migrating docs (#9347)
• e4cae96 fix: testing bugs in NumberField, Tooltip, and Popover (#9342)
• 0caa399 docs: add shouldCloseOnPress to RAC Tooltip docs (#9341)
• 6c29f7a fix: fix firstDayOfWeek styling in S2 DateRangePicker (#9340)
• Additional commits viewable in compare view

Updates @types/react from 19.2.7 to 19.2.9

Commits

• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.48.1 to 8.53.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

• eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)
• eslint-plugin: add rule [strict-void-return] (#9707)
• project-service: allow passing Partial<ts.server.ServerHost> to project service (#11932)

🩹 Fixes

• eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
• eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
• typescript-estree: forbid type-only import with both default and named specifiers (#11930)
• typescript-estree: fix syntax check for using declaration (#11910)
• typescript-estree: forbid invalid class implements (#11934)
• typescript-estree: forbid invalid "import equals" declaration (#11936)
• typescript-estree: forbid invalid extends and implements in interface declaration (#11935)

❤️ Thank You

• auvred @​auvred
• Brad Zacher @​bradzacher
• fisker Cheung @​fisker
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger
• Niki @​phaux
• Nikita
• SungHyun627 @​SungHyun627
• Will Harney @​wjhsf

You can read about our versioning strategy and releases on our website.

v8.52.0

8.52.0 (2026-01-05)

🚀 Features

• eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)
• typescript-estree: add tseslint.com redirects for CLI outputs (#11895)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)
• eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)

❤️ Thank You

• Josh Goldberg ✨

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.53.0 (2026-01-12)

🚀 Features

• eslint-plugin: add rule [strict-void-return] (#9707)
• eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
• eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
• typescript-estree: forbid invalid extends and implements in interface declaration (#11935)
• typescript-estree: forbid invalid class implements (#11934)
• typescript-estree: forbid type-only import with both default and named specifiers (#11930)

❤️ Thank You

• Brad Zacher @​bradzacher
• fisker Cheung @​fisker
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger
• Niki @​phaux
• Nikita
• SungHyun627 @​SungHyun627
• Will Harney @​wjhsf

You can read about our versioning strategy and releases on our website.

8.52.0 (2026-01-05)

🚀 Features

• eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)

🩹 Fixes

• eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)
• eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)

❤️ Thank You

• Josh Goldberg ✨
• Ulrich Stark

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

🚀 Features

... (truncated)

Commits

• 3021ede chore(release): publish 8.53.0
• 722ab62 fix(eslint-plugin): [no-useless-default-assignment] fix false positive for pa...
• 92fcf3e feat(eslint-plugin): add rule [strict-void-return] (#9707)
• 3fb0381 docs(eslint-plugin): [no-useless-default-assignment] fix misformatted link (#...
• 62ee26e feat(eslint-plugin): [no-unused-vars] add a fixer to remove unused imports (#...
• c4d5a56 fix(eslint-plugin): replace unclear "error typed" with more helpful descrip...
• 3ac7735 fix(typescript-estree): forbid invalid extends and implements in interfac...
• a8b924b fix(typescript-estree): forbid invalid class implements (#11934)
• a98ec1f fix(typescript-estree): forbid type-only import with both default and named s...
• 9ddd571 chore(release): publish 8.52.0
• Additional commits viewable in compare view

Updates @vitejs/plugin-react from 5.1.1 to 5.1.2

Changelog

Sourced from @​vitejs/plugin-react's changelog.

5.1.2 (2025-12-08)

Commits

• f127a24 release: plugin-react@5.1.2
• db1c665 fix(react): newer full bundle mode compat (#1011)
• 1f372b6 fix(deps): update all non-major dependencies (#1008)
• d52455e fix(deps): update react 19.2.1 (#998)
• bcda041 fix(deps): update all non-major dependencies (#995)
• c80546d fix(deps): update all non-major dependencies (#982)
• See full diff in compare view

Updates autoprefixer from 10.4.22 to 10.4.23

Release notes

Sourced from autoprefixer's releases.

10.4.23

• Reduced dependencies (by @​hyperz111).

Changelog

Sourced from autoprefixer's changelog.

10.4.23

• Reduced dependencies (by @​hyperz111).

Commits

• 212ba3c Release 10.4.23 version
• 7f62fb6 Update dependencies
• c455bb1 chore: inline and simplify normalize-range (#1539)
• See full diff in compare view

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

• 9278324 9.39.2
• 542266a ...

  Description has been truncated