chore(deps): bump the frontend group in /apps/platform with 15 updates

[dependabot]

Bumps the frontend group in /apps/platform with 15 updates:

Package	From	To
@tanstack/react-table	9.1.2	9.2.4
plotly.js-basic-dist-min	3.7.0	4.1.1
react	19.2.8	19.3.0
react-dom	19.2.8	19.3.0
react-router	8.3.0	8.4.0
@eslint/js	9.39.5	10.0.1
@testing-library/jest-dom	6.9.1	7.0.1
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.1	14.6.7
@vitejs/plugin-react	6.0.5	6.1.1
eslint	9.39.5	10.11.0
globals	17.9.0	17.12.0
jsdom	28.1.0	30.1.1
vite	8.2.1	8.3.1
vitest	4.1.11	5.0.2

Updates @tanstack/react-table from 9.1.2 to 9.2.4

Release notes

Sourced from @​tanstack/react-table's releases.

@​tanstack/react-table@​9.2.4

Patch Changes

• Updated dependencies [f72e516]:
  • @​tanstack/table-core@​9.2.4

@​tanstack/react-table@​9.2.3

Patch Changes

• Updated dependencies [468f267, 3b94648]:
  • @​tanstack/table-core@​9.2.3

Changelog

Sourced from @​tanstack/react-table's changelog.

9.2.4

Patch Changes

• Updated dependencies [f72e516]:
  • @​tanstack/table-core@​9.2.4

9.2.3

Patch Changes

• Updated dependencies [468f267, 3b94648]:
  • @​tanstack/table-core@​9.2.3

Commits

• d01c01b ci: Version Packages (#6580)
• f72e516 fix: Add realtime (w/ fake data) trading table example (#6561)
• 3bfc1bf ci: Version Packages (#6575)
• ac4f134 docs: add react compiler guide
• faa261b feat: support latest TanStack Devtools and refresh package versions (#6553)
• See full diff in compare view

Updates plotly.js-basic-dist-min from 3.7.0 to 4.1.1

Release notes

Sourced from plotly.js-basic-dist-min's releases.

v4.1.1

Changed

• Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
  • maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

• Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

v4.1.0

Added

• Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @​gokul-debugger for the contribution!
• Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @​rascal-sl for the contribution!

Changed

• Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

• Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @​CAOShurong for the contribution!
• Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]
• Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]
• Include type defs in appropriate partial bundles [#8001]
• Add TypeScript declarations for the modular lib/ entry points [#8009]
• Handle regex enum values when generating schema types [#8010]
• Include trace-contributed layout attributes in generated types [#8020]
• Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

v4.0.0

Added

• Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
• Enable TypeScript compatibility within the library and start exporting types [#7680]
• Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
• Use dashed markers in legend for shape traces with dash configured [#7845]
• Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
  • forward keeps sources on the left (horizontal) or top (vertical)
  • reversed moves them to the right or bottom
• Add sort option to Sankey links and nodes [#7873], with thanks to @​adamreeve for the contribution!
• Add support for MathJax v4 [#7898]
• Add top-level xPixel and yPixel keys to hover and click event data, corresponding to the pixel position of the cursor relative to the top-left corner of the graph div [#7966]
• When hoveranywhere is enabled, emit a plotly_unhover event when the cursor leaves the plot area [#7966]

Removed

• Breaking: Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]
  • These traces have been deprecated since v3. Use the equivalent *map traces going forward.
• Breaking: Drop support for MathJax v2 [#7898]
  • MathJax v3 and v4 are now supported in plotly.js
• Remove config attributes showLink, linkText, sendData, showSources, and showEditInChartStudio, as well as trace attribute stream, since all of these were associated with Chart Studio and are no longer needed [#7812]
• Remove all *src attributes, as well as layout.hidesources attribute, from the schema [#7829]
• Remove internal trace._fullInput property and other dead code related to the removed transforms feature. No user-facing changes expected [#7834]

Changed

... (truncated)

Changelog

Sourced from plotly.js-basic-dist-min's changelog.

plotly.js changelog

For more context information, please read through the release notes.

To see all merged commits on the main branch that will be part of the next plotly.js release, go to:

plotly/plotly.js@vX.Y.Z...main

where X.Y.Z is the semver of most recent plotly.js release.

[X.Y.Z] -- UNRELEASED

Changed

• Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
  • maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

• Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

[4.1.0] -- 2026-09-08

Added

• Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @​gokul-debugger for the contribution!
• Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @​rascal-sl for the contribution!

Changed

• Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

• Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @​CAOShurong for the contribution!
• Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]
• Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]
• Include type defs in appropriate partial bundles [#8001]
• Add TypeScript declarations for the modular lib/ entry points [#8009]
• Handle regex enum values when generating schema types [#8010]
• Include trace-contributed layout attributes in generated types [#8020]
• Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

[4.0.0] -- 2026-08-24

Added

• Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
• Enable TypeScript compatibility within the library and start exporting types [#7680]
• Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
• Use dashed markers in legend for shape traces with dash configured [#7845]
• Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
  • forward keeps sources on the left (horizontal) or top (vertical)

... (truncated)

Commits

• 0aabc3c 4.1.1
• b246393 updates for release v4.1.1
• 57e8cb5 Merge pull request #8037 from Lexachoc/doc-spikethickness-fix
• 08f0c6a Delete draftlogs/8037_fix.md
• e8f6a7d Merge pull request #8035 from plotly/cam/8031/upgrade-maplibre-v6
• f3d750b Remove errant space
• 67f45d7 Address PR feedback
• c69a597 update schema
• bcb3c6d add draftlog
• 139595d fix spikethickness description
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by aborrmann, a new releaser for plotly.js-basic-dist-min since your current version.

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• 2dc7da7 [test] Bump Jest to 30.4 (#37382)
• 4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
• dbc3750 Update required references to GitHub repo (#36752)
• 900ae09 [flow] Bump flow to v0.317.0 (#36701)
• fbb1370 [flow] Bump flow to v0.307.1 (#36199)
• 56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
• 74568e8 [Flight] Transport AggregateErrors.errors (#36156)
• e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
• db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
• 3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
• Additional commits viewable in compare view

Updates react-dom from 19.2.8 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32...

  Description has been truncated