deps: bump the dependency-updates group with 6 updates

[dependabot]

Bumps the dependency-updates group with 6 updates:

Package	From	To
@primer/octicons-react	19.24.0	19.24.1
@primer/react	38.19.0	38.20.0
postcss	8.5.9	8.5.10
eslint-plugin-react-hooks	7.0.1	7.1.1
prettier	3.8.2	3.8.3
tap	21.6.3	21.7.1

Updates @primer/octicons-react from 19.24.0 to 19.24.1

Release notes

Sourced from @​primer/octicons-react's releases.

v19.24.1

Patch Changes

• #1190 38dfb0d4 Thanks @​francinelucca! - Allow data-component attribute to be overridden by consumers

Changelog

Sourced from @​primer/octicons-react's changelog.

19.24.1

Patch Changes

• #1190 38dfb0d4 Thanks @​francinelucca! - Allow data-component attribute to be overridden by consumers

Commits

• 8608de5 Version Packages (#1191)
• 38dfb0d Chore: make data-component attribute overridable (#1190)
• 31c133c Bump picomatch from 2.2.3 to 2.3.2 in /lib/octicons_node (#1189)
• See full diff in compare view

Updates @primer/react from 38.19.0 to 38.20.0

Release notes

Sourced from @​primer/react's releases.

@​primer/react@​38.20.0

Minor Changes

• #7723 ec6c88f Thanks @​liuliu-dev! - Add Card component with subcomponents: Card.Icon, Card.Image, Card.Heading, Card.Description, Card.Menu, and Card.Metadata

• #7725 d7b9313 Thanks @​TylerJDev! - AnchoredOverlay: Remove polyfill for CSS Anchor Positioning, use primer/behaviors as fallback. Ensure overlays take available space.

• #7752 d7380a7 Thanks @​liuliu-dev! - Breadcrumbs: Graduate primer_react_breadcrumbs_overflow_menu feature flag, making the overflow menu behavior always-on.

• #7733 b9211db Thanks @​francinelucca! - Overlay: Graduate primer_react_overlay_max_height_clamp_to_viewport feature flag

  The max-height of overlays is now clamped to the viewport height by default using min(size, 100dvh). This prevents overlays from extending beyond the viewport on smaller screens.

• #7698 5c34ab4 Thanks @​hectahertz! - Timeline: add variant prop to Timeline.Badge for built-in color schemes (accent, success, attention, severe, danger, done, open, closed, sponsors)

Patch Changes

• #7738 f5f2869 Thanks @​francinelucca! - ActionMenu, Table: Fix component mutation issue where Object.assign was modifying original @primer/react components. Now uses wrapper components to avoid side effects.

• #7747 b7dfb78 Thanks @​copilot-swe-agent! - Fix IssueLabelToken text contrast in light theme by updating the lightness-switch formula to use a division-based approach that properly produces a binary switch value for selecting black vs white text

• #7739 efa7af8 Thanks @​copilot-swe-agent! - Spinner: Remove feature flag primer_react_spinner_synchronize_animations, treat it as always enabled.

• #7746 30206c4 Thanks @​jonrohan! - Update TokenTextContainer line-height to use primer primitives CSS variable var(--base-text-lineHeight-normal)

Commits

• aeffb84 Release tracking 38.20.0 (#7740)
• 5c34ab4 feat(Timeline): add variant prop to Timeline.Badge (#7698)
• d7380a7 remove primer_react_breadcrumbs_overflow_menu feature flag (#7752)
• 30dfb69 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#7687)
• d7b9313 Replace polyfill with useAnchoredPosition (#7725)
• efa7af8 chore: remove primer_react_spinner_synchronize_animations feature flag (#7739)
• 5402c71 chore: update @​github/relative-time-element to 5.0.0 (#7741)
• 94c96a4 fix(ActionList): replace deprecated --control-medium-lineBoxHeight with --bas...
• b9211db chore: graduate primer_react_overlay_max_height_clamp_to_viewport (#7733)
• b7dfb78 fix(IssueLabelToken): Fix lightness-switch formula for label text contrast (#...
• Additional commits viewable in compare view

Updates postcss from 8.5.9 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

Changelog

Sourced from postcss's changelog.

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

Commits

• 33b9790 Release 8.5.10 version
• 536c79e Escape </style> in CSS output (#2074)
• afa96b2 Update dependencies (#2073)
• effe88b Typo (#2072)
• 3ee79a2 Thread model (#2071)
• 2e0683d Create incident response docs (#2070)
• See full diff in compare view

Updates eslint-plugin-react-hooks from 7.0.1 to 7.1.1

Release notes

Sourced from eslint-plugin-react-hooks's releases.

eslint-plugin-react-hooks@7.1.1 (April 17, 2026)

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

• Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #36307)

eslint-plugin-react-hooks@7.1.0 (April 16, 2026)

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

• Add ESLint v10 support. (@​nicolo-ribaudo in #35720)
• Skip compilation for non-React files to improve performance. (@​josephsavona in #35589)
• Fix exhaustive deps bug with Flow type casting. (@​jorge-cab in #35691)
• Fix useEffectEvent checks in component syntax. (@​jbrown215 in #35041)
• Improved set-state-in-effect validation with fewer false negatives. (@​jorge-cab in #35134, @​josephsavona in #35147, @​jackpope in #35214, @​chesnokov-tony in #35419, @​jsleitor in #36107)
• Improved ref validation for non-mutating functions and event handler props. (@​josephsavona in #35893, @​kolvian in #35062)
• Compiler now reports all errors instead of stopping at the first. (@​josephsavona in #35873–#35884)
• Improved source locations and error display in compiler diagnostics. (@​nathanmarks in #35348, @​josephsavona in #34963)

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.1.1

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

• Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #36307)

7.1.0

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

• Add ESLint v10 support. (@​nicolo-ribaudo in #35720)
• Skip compilation for non-React files to improve performance. (@​josephsavona in #35589)
• Fix exhaustive deps bug with Flow type casting. (@​jorge-cab in #35691)
• Fix useEffectEvent checks in component syntax. (@​jbrown215 in #35041)
• Improved set-state-in-effect validation with fewer false negatives. (@​jorge-cab in #35134, @​josephsavona in #35147, @​jackpope in #35214, @​chesnokov-tony in #35419, @​jsleitor in #36107)
• Improved ref validation for non-mutating functions and event handler props. (@​josephsavona in #35893, @​kolvian in #35062)
• Compiler now reports all errors instead of stopping at the first. (@​josephsavona in #35873–#35884)
• Improved source locations and error display in compiler diagnostics. (@​nathanmarks in #35348, @​josephsavona in #34963)

Commits

• See full diff in compare view

Updates prettier from 3.8.2 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

• SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @​kovsu)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

Commits

• d7108a7 Release 3.8.3
• 177f908 Prevent trailing comma in SCSS if() function (#18471)
• 1cd4066 Release @​prettier/plugin-oxc@​0.1.4
• a8700e2 Update oxc-parser to v0.125.0
• 752157c Fix tests
• 053fd41 Bump Prettier dependency to 3.8.2
• 904c636 Clean changelog_unreleased
• dc1f7fc Update dependents count
• See full diff in compare view

Updates tap from 21.6.3 to 21.7.1

Commits

• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
tap	[>= 18.a, < 19]
tap	[>= 19.a, < 20]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.