Bump the major group with 40 updates

[dependabot]

Bumps the major group with 40 updates:

Package	From	To
@fortawesome/fontawesome-svg-core	6.7.2	7.1.0
@fortawesome/free-brands-svg-icons	6.7.2	7.1.0
@fortawesome/free-solid-svg-icons	6.7.2	7.1.0
@fortawesome/react-fontawesome	0.2.2	3.1.0
@headlessui/react	1.7.19	2.2.9
@tweenjs/tween.js	23.1.3	25.0.0
@xstate/react	4.1.3	6.0.0
diff	7.0.0	8.0.2
@types/diff	7.0.2	8.0.0
openid-client	5.7.1	6.8.1
react	18.3.1	19.2.0
@types/react	18.3.20	19.2.0
react-dom	18.3.1	19.2.0
@types/react-dom	18.3.6	19.2.0
react-hotkeys-hook	4.6.2	5.1.0
react-router-dom	6.30.0	7.9.3
ua-parser-js	1.0.40	2.0.5
uuid	11.1.0	13.0.0
web-vitals	3.5.2	5.1.0
yargs	17.7.2	18.0.0
@biomejs/biome	1.9.4	2.2.5
@electron/fuses	1.8.0	2.0.0
@electron/notarize	2.5.0	3.1.0
@testing-library/react	15.0.7	16.3.0
@types/node	22.14.1	24.7.0
@types/uuid	9.0.8	11.0.0
@vitejs/plugin-react	4.4.1	5.0.4
cross-env	7.0.3	10.1.0
electron	34.5.1	38.2.1
eslint	8.57.1	9.37.0
eslint-plugin-jest	28.11.0	29.0.1
eslint-plugin-react-hooks	5.2.0	6.1.1
happy-dom	17.4.4	19.0.2
jest-environment-jsdom	29.7.0	30.2.0
pixelmatch	5.3.0	7.1.0
tailwindcss	3.4.17	4.1.14
vite	5.4.19	7.1.9
vite-tsconfig-paths	4.3.2	5.1.4
rollup	4.40.0	4.52.4
@types/glob	8.1.0	9.0.0

Updates @fortawesome/fontawesome-svg-core from 6.7.2 to 7.1.0

Release notes

Sourced from @​fortawesome/fontawesome-svg-core's releases.

Release 7.1.0

Change log available at https://fontawesome.com/docs/changelog/

Release 7.0.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.0.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• 41cfe64 Release 7.1.0 (#20810)
• b476ed9 Release 7.0.1 (#20792)
• c482aa2 Fix README Upgrading link (#20726)
• 161db08 Fix docs link
• 14189d0 Release 7.0.0 (#20715)
• 8ff114b Initial commit for 7
• See full diff in compare view

Updates @fortawesome/free-brands-svg-icons from 6.7.2 to 7.1.0

Release notes

Sourced from @​fortawesome/free-brands-svg-icons's releases.

Release 7.1.0

Change log available at https://fontawesome.com/docs/changelog/

Release 7.0.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.0.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• 41cfe64 Release 7.1.0 (#20810)
• b476ed9 Release 7.0.1 (#20792)
• c482aa2 Fix README Upgrading link (#20726)
• 161db08 Fix docs link
• 14189d0 Release 7.0.0 (#20715)
• 8ff114b Initial commit for 7
• See full diff in compare view

Updates @fortawesome/free-solid-svg-icons from 6.7.2 to 7.1.0

Release notes

Sourced from @​fortawesome/free-solid-svg-icons's releases.

Release 7.1.0

Change log available at https://fontawesome.com/docs/changelog/

Release 7.0.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.0.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• 41cfe64 Release 7.1.0 (#20810)
• b476ed9 Release 7.0.1 (#20792)
• c482aa2 Fix README Upgrading link (#20726)
• 161db08 Fix docs link
• 14189d0 Release 7.0.0 (#20715)
• 8ff114b Initial commit for 7
• See full diff in compare view

Updates @fortawesome/react-fontawesome from 0.2.2 to 3.1.0

Release notes

Sourced from @​fortawesome/react-fontawesome's releases.

v3.1.0

3.1.0 (2025-10-03)

Features

• custom cssPrefix support (ad42835)
• layers: add support for layers with FontAwesomeLayers component (2c84902)

Bug Fixes

• better export path for CustomPrefixProvider (663cd25)
• browser-support: don't use string.replaceAll to fix safari 12 support (1776e3a)

Testing

• layers: add unit tests for FontAwesomeLayers (d31480b)
• utils: unit tests for withPrefix utility (982f649)

Documentation

• add inline documentation for CustomPrefixProvider (46f69d4)
• remove .env requirement (c942c6a)

Chores

• release: use @​semantic-release/exec for multi-publish rather than third-party plugin (5a47e13)

Release 3.0.2

3.0.2 (2025-09-01)

Bug Fixes

• constants: resolve JSON import errors for vite/remix users (850a804)
• test: flaky converter performance test in CI (8f43f0e)
• WCAG: correctly read aria-label and ensure aria-hidden is false when label present (19ddeb3)

Testing

• converter: fix unit test for aria-label handling (8c49cdc)
• remove flaky test (f9605ab)
• remove unnecessary test conditionals for v5 (fd5bf9b)

Chores

• don't include release notes in release commit (78ce3f8)
• dx: integrate semantic-release and commitlint (de5b958)
• remove dependency on semver (066019b)
• update release config for better changelogs (7d2c242)

CI/CD

... (truncated)

Changelog

Sourced from @​fortawesome/react-fontawesome's changelog.

3.1.0 (2025-10-03)

Features

• custom cssPrefix support (ad42835)
• layers: add support for layers with FontAwesomeLayers component (2c84902)

Bug Fixes

• better export path for CustomPrefixProvider (663cd25)
• browser-support: don't use string.replaceAll to fix safari 12 support (1776e3a)

Testing

• layers: add unit tests for FontAwesomeLayers (d31480b)
• utils: unit tests for withPrefix utility (982f649)

Documentation

• add inline documentation for CustomPrefixProvider (46f69d4)
• remove .env requirement (c942c6a)

Chores

• release: use @​semantic-release/exec for multi-publish rather than third-party plugin (5a47e13)

3.1.0 (2025-10-03)

Features

• custom cssPrefix support (ad42835)
• layers: add support for layers with FontAwesomeLayers component (2c84902)

Bug Fixes

• better export path for CustomPrefixProvider (663cd25)
• browser-support: don't use string.replaceAll to fix safari 12 support (1776e3a)

Testing

• layers: add unit tests for FontAwesomeLayers (d31480b)
• utils: unit tests for withPrefix utility (982f649)

Documentation

• add inline documentation for CustomPrefixProvider (46f69d4)
• remove .env requirement (c942c6a)

Chores

... (truncated)

Commits

• a7fb315 chore(release): 3.1.0 [skip ci]
• 72f6fe2 Merge pull request #603 from FortAwesome/fix/safari-12-support
• 1776e3a fix(browser-support): don't use string.replaceAll to fix safari 12 support
• 463be70 Merge pull request #601 from FortAwesome/feat/layers-support
• 982f649 test(utils): unit tests for withPrefix utility
• d31480b test(layers): add unit tests for FontAwesomeLayers
• 2c84902 feat(layers): add support for layers with FontAwesomeLayers component
• 663cd25 fix: better export path for CustomPrefixProvider
• 09b5a26 Merge pull request #599 from FortAwesome/chore/custom-prefix-provider-docs
• 46f69d4 docs: add inline documentation for CustomPrefixProvider
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lordofbacon, a new releaser for @​fortawesome/react-fontawesome since your current version.

Updates @headlessui/react from 1.7.19 to 2.2.9

Release notes

Sourced from @​headlessui/react's releases.

@​headlessui/react@​v2.2.9

Fixed

• Improve focus management in shadow DOM roots (#3794)
• Don't accidentally open the Combobox when touching the ComboboxButton while dragging on mobile (#3795)
• Ensure sibling Dialog components are scrollable on mobile (#3796)
• Infer Combobox type based on onChange handler (#3798)
• Allow home/end key default behavior inside ComboboxInput when Combobox is closed (#3798)
• Ensure interacting with a Dialog on iOS works after interacting with a disallowed area (#3801)
• Freeze Listbox values as soon as a value is selected (#3802)
• Ensure refs are forwarded when freezing data (#3390)
• Do not serialize React components into form fields (49e9e8e)

@​headlessui/react@​v2.2.8

Fixed

• Ensure we are not freezing data when the static prop is used (#3779)
• Ensure onChange types are contravariant instead of bivariant (#3781)
• Support <summary> as a focusable element inside <details> (#3389)
• Fix Maximum update depth exceeded crash when using transition prop (#3782)
• Ensure pressing Tab in the ComboboxInput, correctly syncs the input value (#3785)
• Ensure --button-width and --input-width have the latest value (#3786)
• Fix 'Invalid prop data-headlessui-state supplied to React.Fragment' warning (#3788)
• Ensure element in ref callback is always connected when rendering in a Portal (#3789)
• Ensure form state is up to date when using uncontrolled components (#3790)
• Ensure data-open on ComboboxInput is up to date (#3791)
• Ensure changing the immediate prop value on the Combobox component works as expected (#3792)

@​headlessui/react@​v2.2.7

Fixed

• Fix incorrect double invocation of menu items, listbox options and combobox options (#3766)
• Fix memory leak in SSR environment (#3767)
• Ensure programmatic .click() on MenuButton ref works (#3768)
• Don't activate hovered items while using the keyboard (#3769)

@​headlessui/react@​v2.2.6

Fixed

• Fix immediately closing Listbox by requiring some cursor movement (#3762)

@​headlessui/react@​v2.2.5

Fixed

• Fix listbox closing immediately after opening on touch devices (#3755)

@​headlessui/react@​v2.2.4

Fixed

• Fix Combobox error (unexpected undefined) when using virtual mode (#3734)

... (truncated)

Changelog

Sourced from @​headlessui/react's changelog.

[2.2.9] - 2025-09-25

Fixed

• Improve focus management in shadow DOM roots (#3794)
• Don't accidentally open the Combobox when touching the ComboboxButton while dragging on mobile (#3795)
• Ensure sibling Dialog components are scrollable on mobile (#3796)
• Infer Combobox type based on onChange handler (#3798)
• Allow home/end key default behavior inside ComboboxInput when Combobox is closed (#3798)
• Ensure interacting with a Dialog on iOS works after interacting with a disallowed area (#3801)
• Freeze Listbox values as soon as a value is selected (#3802)
• Ensure refs are forwarded when freezing data (#3390)
• Do not serialize React components into form fields (49e9e8e)

[2.2.8] - 2025-09-12

Fixed

• Ensure we are not freezing data when the static prop is used (#3779)
• Ensure onChange types are contravariant instead of bivariant (#3781)
• Support <summary> as a focusable element inside <details> (#3389)
• Fix Maximum update depth exceeded crash when using transition prop (#3782)
• Ensure pressing Tab in the ComboboxInput, correctly syncs the input value (#3785)
• Ensure --button-width and --input-width have the latest value (#3786)
• Fix 'Invalid prop data-headlessui-state supplied to React.Fragment' warning (#3788)
• Ensure element in ref callback is always connected when rendering in a Portal (#3789)
• Ensure form state is up to date when using uncontrolled components (#3790)
• Ensure data-open on ComboboxInput is up to date (#3791)
• Ensure changing the immediate prop value on the Combobox component works as expected (#3792)

[2.2.7] - 2025-07-30

Fixed

• Fix incorrect double invocation of menu items, listbox options and combobox options (#3766)
• Fix memory leak in SSR environment (#3767)
• Ensure programmatic .click() on MenuButton ref works (#3768)
• Don't activate hovered items while using the keyboard (#3769)

[2.2.6] - 2025-07-24

Fixed

• Fix immediately closing Listbox by requiring some cursor movement (#3762)

[2.2.5] - 2025-07-23

Fixed

• Fix listbox closing immediately after opening on touch devices (#3755)

... (truncated)

Commits

• 589ea90 2.2.9 - @​headlessui/react
• bba75c7 update changelog
• ca536ed update changelog
• 49e9e8e do not serialize React components into form fields
• 2a647a7 Ensure refs are forwarded when freezing data (#3390)
• da2fa94 Freeze values as soon as possible (#3802)
• 6b5709a Fix touch actions on iOS after entering disallowed area (#3801)
• 433b174 Allow home/end key default behavior inside ComboboxInput when Combobox is...
• 31b3e47 Infer Combobox type based on onChange handler (#3798)
• b0615ad Ensure sibling Dialog components are scrollable on mobile (#3796)
• Additional commits viewable in compare view

Updates @tweenjs/tween.js from 23.1.3 to 25.0.0

Release notes

Sourced from @​tweenjs/tween.js's releases.

v25.0.0 - end of the end

BREAKING: no longer auto-start tweens by default when calling tween.update(). To restore previous behavior for the whole app, set the static Tween.autoStartOnUpdate property to true.

fix: make the end() method work better by setting the end time to start + duration instead of Infinity.

Full Changelog: tweenjs/tween.js@v24.0.0...v25.0.0

v24.0.0 - groupies!

This release finally deprecates usage of TWEEN as a default Group. All new Tweens now default to having no group, and must be explicitly added to a group if desired. Plus some other improvements to related to groups, including breaking changes (see below for all details and how to migrate if affected).

What's Changed

• Tiny readme fix for import-map example code. by @​Bug-Reaper in tweenjs/tween.js#685
• do not default to global TWEEN group for new Tweens, do not auto-add/remove tweens from groups, and update docs accordingly by @​trusktr in tweenjs/tween.js#688

New Contributors

• @​Bug-Reaper made their first contribution in tweenjs/tween.js#685

---

More Details

  feat: do not automatically add/remove a tween to/from its associated group, and do not automatically add new Tweens to the global TWEEN group by default.

feat: the tween.group(group) method now has a reciprocal tween.remove() method that will remove a tween from its associated group, and unassociate the group. tween.group() without an arg is no longer valid, see breaking changes and migration below.

fix: when a tween is stopped before its end time, do not allow its update method to continue, therefore preventing logic (f.e. repeat logic) from being triggered

docs: improved the docs, adding some missing information, removing all examples of the global TWEEN group which has been deprecated, and adding docs on how to manage groups of tweens. Also updated samples to use import syntax for importing Tween, avoiding the use of the TWEEN UMD global variable which has been deprecated.

feat: A new Group.allStopped() method returns true if all tweens in a group are not playing (i.e. stopped, and not paused), otherwise false. Useful for stopping an animation loop once all tweens in a group have finished their animation.

deprecated: Methods on TWEEN that come from Group are now deprecated to be removed in a future major version. Migrate forward by making a new Group instead of using TWEEN as a group.

deprecated: The UMD script that creates a global TWEEN variable is deprecated to be removed in a future major version.

deprecated: The CommonJS build is deprecated to be removed in a future major version.

BREAKING:

• Tweens are no longer automatically added or removed from groups by default when you call any Tween methods such as start(), stop(), or pause(), and the preserve parameter to Group.update() now defaults to true and is deprecated to be removed in a future major version.
  • MIGRATION: To keep old behavior for a while, explicitly call group.update() with false for the second parameter. To migrate forward, do not rely on automatic add/remove of tweens, and instead add/remove tweens to/from groups manually.
• Group.update() no longer returns a boolean indicating if all tweens have been removed.
  • MIGRATION: Don't rely on auto-add/remove to/from groups. This boolean return was previously useful for stopping an animation loop once all tweens were finished animating. Instead, use the new Group.allStopped() method to check if all tweens in a group are stopped in order to determine whether or not to continue an animation loop.
• The second group parameter to Tween.constructor now defaults to undefined instead of the global TWEEN group. Additionally it accepts a value of true to restore the old default behavior. The true value is deprecated and will be removed in a future major version.
  • MIGRATION: For the time being the parameter can be set to true to restore the old behavior. To migrate forward, use tween.group(group) or group.add(tween) instead.
• The argless tween.group() signature has been removed.

... (truncated)

Commits

• eb07dd2 v25.0.0
• 79fd510 BREAKING: no longer auto-start tweens by default when calling tween.update()....
• c92f761 v24.0.0
• 20169e2 Merge pull request #688 from tweenjs/default-to-no-global-group
• f28f069 feat: do not automatically add/remove a tween to/from its associated group
• 2469f1c Merge pull request #685 from Bug-Reaper/patch-1
• 68d91ce ✍️ : Adds missing letter "m" in importmap example.
• 0b1d4cf ✍️ : Fix path for module-map example (missing dot)
• See full diff in compare view

Updates @xstate/react from 4.1.3 to 6.0.0

Release notes

Sourced from @​xstate/react's releases.

@​xstate/react@​6.0.0

Patch Changes

• Updated dependencies [e07a7cd8462473188a0fb646a965e61be1ce6ae3]:
  • [email protected]

@​xstate/react@​5.0.5

Patch Changes

• Updated dependencies [479c74b83fa77c57c48f54cf0e9dcfab5fe6cae5]:
  • [email protected]

@​xstate/react@​5.0.4

Patch Changes

• Updated dependencies [b453b2d72ba12d0fe46a995f9ccced8000fd0cc9]:
  • [email protected]

@​xstate/react@​5.0.3

Patch Changes

• #5223 9e1de554c4ebf49997b717fada540951d01f511c Thanks @​davidkpiano! - Added React 19 as a peer dependency.

@​xstate/react@​5.0.2

Patch Changes

• Updated dependencies [d99df1d8f4fe49145c9974465b65028bf19b365f]:
  • [email protected]

@​xstate/react@​5.0.1

Patch Changes

• Updated dependencies [bf6119a7310a878afbf4f5b01f5e24288f9a0f16]:
  • [email protected]

@​xstate/react@​5.0.0

Patch Changes

• #5109 d67b71dd25d457a2a59f2c943db13f50fab7ec3d Thanks @​davidkpiano! - Add React 19 as a peer dependency

• Updated dependencies [8c4b70652acaef2702f32435362e4755679a516d]:

  • [email protected]

Commits

• f10575a Version Packages (#5294)
• acc285d Move to vitest (updated) (#5293)
• e07a7cd [core] Move graph/test utils to core (#5287)
• dc4d511 Fix lockfile issue
• f9d04bb Update examples and templates
• cc5fa24 Version Packages (#5290)
• 9d375d6 refactor: fix typos (#5292)
• 479c74b Remove outdated context parameter reference from provide method (#5289)
• 77d7dc5 Version Packages (#5285)
• d8a3456 Synchronize the alien-signals algorithm to 2.0.4 (#5280)
• Additional commits viewable in compare view

Updates diff from 7.0.0 to 8.0.2

Changelog

Sourced from diff's changelog.

8.0.2

• #616 Restored compatibility of diffSentences with old Safari versions. This was broken in 8.0.0 by the introduction of a regex with a lookbehind assertion; these weren't supported in Safari prior to version 16.4.
• #612 Improved tree shakeability by marking the built CJS and ESM packages with sideEffects: false.

8.0.1

• #610 Fixes types for diffJson which were broken by 8.0.0. The new bundled types in 8.0.0 only allowed diffJson to be passed string arguments, but it should've been possible to pass either strings or objects (and now is). Thanks to Josh Kelley for the fix.

8.0.0

• #580 Multiple tweaks to diffSentences:
  • tokenization no longer takes quadratic time on pathological inputs (reported as a ReDOS vulnerability by Snyk); is now linear instead
  • the final sentence in the string is now handled the same by the tokenizer regardless of whether it has a trailing punctuation mark or not. (Previously, "foo. bar." tokenized to ["foo.", " ", "bar."] but "foo. bar" tokenized to ["foo.", " bar"] - i.e. whether the space between sentences was treated as a separate token depended upon whether the final sentence had trailing punctuation or not. This was arbitrary and surprising; it is no longer the case.)
  • in a string that starts with a sentence end, like "! hello.", the "!" is now treated as a separate sentence
  • the README now correctly documents the tokenization behaviour (it was wrong before)
• #581 - fixed some regex operations used for tokenization in diffWords taking O(n^2) time in pathological cases
• #595 - fixed a crash in patch creation functions when handling a single hunk consisting of a very large number (e.g. >130k) of lines. (This was caused by spreading indefinitely-large arrays to .push() using .apply or the spread operator and hitting the JS-implementation-specific limit on the maximum number of arguments to a function, as shown at https://stackoverflow.com/a/56809779/1709587; thus the exact threshold to hit the error will depend on the environment in which you were running JsDiff.)
• #596 - removed the merge function. Previously JsDiff included an undocumented function called merge that was meant to, in some sense, merge patches. It had at least a couple of serious bugs that could lead to it returning unambiguously wrong results, and it was difficult to simply "fix" because it was unclear precisely what it was meant to do. For now, the fix is to remove it entirely.
• #591 - JsDiff's source code has been rewritten in TypeScript. This change entails the following changes for end users:

  • the diff package on npm now includes its own TypeScript type definitions. Users who previously used the @types/diff npm package from DefinitelyTyped should remove that dependency when upgrading JsDiff to v8.

    Note that the transition from the DefinitelyTyped types to JsDiff's own type definitions includes multiple fixes and also removes many exported types previously used for options arguments to diffing and patch-generation functions. (There are now different exported options types for abortable calls - ones with a timeout or maxEditLength that may give a result of undefined - and non-abortable calls.) See the TypeScript section of the README for some usage tips.

  • The Diff object is now a class. Custom extensions of Diff, as described in the "Defining custom diffing behaviors" section of the README, can therefore now be done by writing a class CustomDiff extends Diff and overriding methods, instead of the old way based on prototype inheritance. (I think code that did things the old way should still work, though!)

  • diff/lib/index.es6.js and diff/lib/index.mjs no longer exist, and the ESM version of the library is no longer bundled into a single file.

  • The ignoreWhitespace option for diffWords is no longer included in the type declarations. The effect of passing ignoreWhitespace: true has always been to make diffWords just call diffWordsWithSpace instead, which was confusing, because that behaviour doesn't seem properly described as "ignoring" whitespace at all. The property remains available to non-TypeScript applications for the sake of backwards compatibility, but TypeScript applications will now see a type error if they try to pass ignoreWhitespace: true to diffWords and should change their code to call diffWordsWithSpace instead.

  • JsDiff no longer purports to support ES3 environments. (I'm pretty sure it never truly did, despite claiming to in its README, since even the 1.0.0 release used Array.map which was added in ES5.)

• #601 - diffJson's stringifyReplacer option behaves more like JSON.stringify's replacer argument now. In particular:
  • Each key/value pair now gets passed through the replacer once instead of twice
  • The key passed to the replacer when the top-level object is passed in as value is now "" (previously, was undefined), and the key passed with an array element is the array index as a string, like "0" or "1" (previously was whatever the key for the entire array was). Both the new behaviours match that of JSON.stringify.
• #602 - diffing functions now consistently return undefined when called in async mode (i.e. with a callback). Previously, there was an odd quirk where they would return true if the strings being diffed were equal and undefined otherwise.

Commits

• 4f5c473 v8.0.2
• 2717fd8 Fix diffSentences for old Safari versions (#616)
• d3f3bf5 Fix broken diffWords test (#617)
• 27e6c81 Fix typo in scripts (#614)
• 732416a Improve tree shakability (#612)
• 0365f4b Tweak example of using a Chinese word segmenter to one where the segmenter se...
• a5cf0db v8.0.1
• 0307063 Fix types for diffJson (#610)
• f87a74c v8.0.0 released (#607)
• 8e81ac5 Upgrade build deps to latest versions with yarn upgrade --latest (#605)
• Additional commits viewable in compare view

Updates @types/diff from 7.0.2 to 8.0.0

Commits

• See full diff in compare view

Updates openid-client from 5.7.1 to 6.8.1

Release notes

Sourced from openid-client's releases.

v6.8.1

Refactor

• workaround dpop nonce caching caveats with customFetch (a9eb50f)

v6.8.0

Features

• respect retry-after in CIBA and Device Authorization Grant polling (6ce3411)

Documentation

• remove mention of Edge Runtime from the readme (2e41ad5)

v6.7.1

Fixes

• passport: include req.host from express@5 for ease of use in express@4 (81f6c12)

v6.7.0

Features

• support for the ML-DSA Algorithm Identifiers (9543da5)

v6.6.4

Fixes

• recognize N_A in the token exchange grant (770b177)

v6.6.3

Documentation

• fix TokenEndpointResponseHelpers.claims() note (b77c786)

Refactor

• passport: allow custom logic to drive initiating auth requests (0b57115), closes #811

v6.6.2

Fixes

• RFC8414: strip any terminating "/" when pathname is present (e884302)

v6.6.1

Revert

• revert to use 302 instead of 303 for the redirect (54f2170)

... (truncated)

Changelog

Sourced from openid-client's changelog.

6.8.1 (2025-09-27)

Refactor

• workaround dpop nonce caching caveats with customFetch (a9eb50f)

6.8.0 (2025-09-11)

Features

• respect retry-after in CIBA and Device Authorization Grant polling (6ce3411)

Documentation

• remove mention of Edge Runtime from the readme (2e41ad5)

6.7.1 (2025-08-29)

Fixes

• passport: include req.host from express@5 for ease of use in express@4 (81f6c12)

6.7.0 (2025-08-27)

Features

• support for the ML-DSA Algorithm Identifiers (9543da5)

6.6.4 (2025-08-12)

Fixes

• recognize N_A in the token exchange grant (770b177)

6.6.3 (2025-08-05)

Documentation

• fix TokenEndpointResponseHelpers.claims() note (b77c786)

Refactor

... (truncated)

Commits

• 00990b9 chore(release): 6.8.1
• a9eb50f refactor: workaround dpop nonce caching caveats with customFetch
• 60d7639 chore: bump packages
• ba4040c chore: cleanup after release
• 9d70a05 chore(release): 6.8.0
• 6ce3411 feat: respect retry-after in CIBA and Device Authorization Grant polling
• d26f7a3 chore: bump oidc-provider
• c98e068 chore: bump typedoc and typescript
• 2e41ad5 docs: remove mention of Edge Runtime from the readme
• 3e11c6c chore: cleanup after releas...

  Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
modeling-app	Error			Oct 7, 2025 1:50pm

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.