deps: bump the dependency-updates group across 1 directory with 7 updates

[dependabot]

Bumps the dependency-updates group with 7 updates in the / directory:

Package	From	To
@primer/react	38.27.0	38.29.0
framer-motion	12.40.0	12.42.0
postcss	8.5.15	8.5.16
@npmcli/template-oss	5.1.0	5.1.1
prettier	3.8.3	3.9.1
semver	7.8.2	7.8.5
tar	7.5.16	7.5.19

Updates @primer/react from 38.27.0 to 38.29.0

Release notes

Sourced from @​primer/react's releases.

@​primer/react@​38.29.0

Minor Changes

• #8009 2cf75b5 Thanks @​joshblack! - Update CSS build options to compile down :is() selectors

• #7994 8cb7f6d Thanks @​TylerJDev! - ActionList: Adds tooltipDirection prop to ActionList.TrailingAction

• #7867 4ec4248 Thanks @​llastflowers! - Add data-component attributes and associated tests for ActionMenu, AnchoredOverlay, Autocomplete, and NavList

• #7897 1f7b8af Thanks @​liuliu-dev! - Add support for the as prop on TreeView.Item. This enables rendering the treeitem as a different element (e.g. as="a" for native anchors, or a custom router-link component) while preserving all existing keyboard, focus, and ARIA behavior.

  When as is omitted, the existing markup is unchanged: an <li> is rendered as the role="treeitem" element. When as is provided, the polymorphic element is rendered as the treeitem and is wrapped in an <li role="none"> so the markup remains valid (a <ul role="tree"> may only directly contain <li> elements).

Patch Changes

• #7976 1fac927 Thanks @​copilot-swe-agent! - NavList: add a small gap between items for readability, including before expanded sub-navs, behind the primer_react_action_list_item_gap feature flag

• #7999 eada357 Thanks @​copilot-swe-agent! - Breadcrumbs: Improve rendering performance and refresh the overflow menu when breadcrumb content changes without changing the number of items.

• #7929 48c34ca Thanks @​joshblack! - FilteredActionList: Make body skeleton widths stable for server rendering

• #7985 969c874 Thanks @​joshblack! - AnchoredOverlay: Render the popover target attribute correctly for popover anchors

• #7984 06fdad4 Thanks @​joshblack! - CircleBadge, ActionList: Prevent internal props from rendering on DOM elements

• #7978 e3f655c Thanks @​copilot-swe-agent! - PageHeader.ParentLink: Forward unknown props (e.g. to) to the underlying element, enabling client-side routing with polymorphic as.

• #7930 f32ac0f Thanks @​copilot-swe-agent! - Blankslate: reduce size="small" padding to var(--base-size-16) for denser layouts

@​primer/react@​38.28.0

Minor Changes

• #7888 45be31b Thanks @​TylerJDev! - AnchoredOverlay: Extend cssAnchorPositioningSettings with a fallbackStrategy ('default' | 'none' | 'opposite-side') to control CSS anchor positioning fallback behavior when native CSS anchor positioning is active.

• #7923 6a7e130 Thanks @​dylanatsmith! - Card: Add layout="compact" prop for a compact card layout with tighter spacing, no icon background, and smaller title

• #7922 55b7b04 Thanks @​dylanatsmith! - InlineMessage: Make variant prop optional, defaulting to the standard foreground color with an info icon

• #7889 3af5edc Thanks @​llastflowers! - Add data-component attributes and associated tests for PageHeader, PageLayout, Pagehead, Popover, Portal, and ProgressBar

• #7964 0f0f79f Thanks @​TylerJDev! - AnchoredOverlay: Add cssAnchorPositioningSettings prop to allow opting out of native CSS anchor positioning (via disable), and use it in SelectPanel so the modal variant stays manually centered instead of being repositioned by CSS anchor positioning.

Patch Changes

... (truncated)

Commits

• 195cf4e Release tracking (#7980)
• ccaa1ea Remove internal @​primer/react entrypoint imports (#8011)
• 8542056 refactor: include prettier in doc-gen build externals (#8004)
• 7b613f1 Fix failing GitHub Actions job react-compiler (#8014)
• eada357 perf(Breadcrumbs): derive overflow in render; refresh menu on content change ...
• c5b4bd4 test(vitest): enable console enforcement and document env override (#7986)
• 969c874 test: fix async console warnings (#7985)
• 06fdad4 fix: prevent internal props rendering to DOM (#7984)
• 16b26e1 feat: add @​primer/react-canvas package (#7996)
• 2cf75b5 feat: add support for compiling :is() selectors (#8009)
• Additional commits viewable in compare view

Updates framer-motion from 12.40.0 to 12.42.0

Changelog

Sourced from framer-motion's changelog.

[12.42.0] 2026-06-24

Changed

• animateView: Layers are automatically grouped to match their DOM-hierarchy. New .group(false) method opts-out.

Fixed

• animateView: Auto-crop is now aspect-ratio aware, disabling crops for matching aspect-ratios.
• animateView: Disabled automatic border-radius animation.

[12.41.0] 2026-06-23

Added

• animateView: Moves from Motion+ Early Access and alpha to main library.
• animateView: .add() resolves a CSS selector or Element to automatically generate, apply and remove view-transition-name.
• animateView: .new() and .old() configures values to animate on new and old layers.
• animateView: .layout() can set a custom transition on the size/position animation of the currently selected elements.
• animateView: Group layers now automatically crop with children set to cover, with border-radius animating from old radius to new. .crop(false) disables this behaviour.
• animateView: .class(name) tags currently selected elements with a view-transition-class as a custom CSS hook.

Fixed

• AnimatePresence: Prevent stuck exit animations when children interrupt.
• drag: Child e.stopPropagation() no longer break drag end.
• Fixing Next.js OOM on Windows when importing via motion package.
• animateLayout: Improve handling of parallel/interleaved calls.

Changed

• animateView: .enter() and .exit() now refer specifically to new and old layers where there are no matching old or new layers.
• animateView: Interrupted transition setups now return resolved animation rather than throwing.

Commits

• 9c84145 v12.42.0
• 60d7c72 Add view-transition group nesting and aspect-aware cropping
• 6437276 Updating
• f0f893e v12.41.0
• c0c53cb Updating changelog
• 18c3e3e Removing plans
• 378fc4c Merge pull request #3761 from motiondivision/worktree-view-target
• 94ea505 Merge branch 'main' into worktree-view-target
• de65f6b Fade auto morph crossfades over the spring's visual duration
• f8af239 Let an explicit duration override the inherited spring on a view layer
• Additional commits viewable in compare view

Updates postcss from 8.5.15 to 8.5.16

Release notes

Sourced from postcss's releases.

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

Changelog

Sourced from postcss's changelog.

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

Commits

• 92ccc93 Release 8.5.16 version
• 818bdd6 Update formatting
• 46e4510 Fix Input#origin() returning incorrect position (#2036)
• 34942ce Fix tests
• d4feed6 Don't clone root-less child nodes in container constructor (#2097)
• da323fc Revert version update to fix old Node.js on CI
• 8863369 Update dependencies
• 3828982 Preserve node raws when rehydrating a JSON AST (#2100)
• d1e80b8 Fix Node#rangeBy() ignoring index 0 (#2091)
• b91e4a6 Fix Node.js 26 tests
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates @npmcli/template-oss from 5.1.0 to 5.1.1

Release notes

Sourced from @​npmcli/template-oss's releases.

v5.1.1

5.1.1 (2026-06-16)

Dependencies

• a27b22f #565 proc-log@7.0.0
• 82f11bb #565 npm-package-arg@14.0.0
• ca93491 #565 json-parse-even-better-errors@6.0.0
• 136b1d1 #565 ini@7.0.0
• 179c55a #565 hosted-git-info@10.1.1
• 9431c8a #565 @npmcli/package-json@8.0.0
• 5c5c680 #565 @npmcli/git@8.0.0
• 80307fb #565 @npmcli/arborist@10.0.0-pre.0.0

Changelog

Sourced from @​npmcli/template-oss's changelog.

5.1.1 (2026-06-16)

Dependencies

• a27b22f #565 proc-log@7.0.0
• 82f11bb #565 npm-package-arg@14.0.0
• ca93491 #565 json-parse-even-better-errors@6.0.0
• 136b1d1 #565 ini@7.0.0
• 179c55a #565 hosted-git-info@10.1.1
• 9431c8a #565 @npmcli/package-json@8.0.0
• 5c5c680 #565 @npmcli/git@8.0.0
• 80307fb #565 @npmcli/arborist@10.0.0-pre.0.0

Commits

• a9dabb9 chore: release 5.1.1 (#566)
• a27b22f deps: proc-log@7.0.0
• 82f11bb deps: npm-package-arg@14.0.0
• ca93491 deps: json-parse-even-better-errors@6.0.0
• 136b1d1 deps: ini@7.0.0
• 179c55a deps: hosted-git-info@10.1.1
• 9431c8a deps: @​npmcli/package-json@​8.0.0
• 5c5c680 deps: @​npmcli/git@​8.0.0
• 80307fb deps: @​npmcli/arborist@​10.0.0-pre.0.0
• See full diff in compare view

Updates prettier from 3.8.3 to 3.9.1

Release notes

Sourced from prettier's releases.

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.1

diff

CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

Bug details prettier/prettier#18016

3.9.0

diff

🔗 Release Notes

3.8.5

diff

Flow: Support readonly as a variance annotation (#19022 by @​marcoww6)

Flow now accepts readonly as a property variance annotation, equivalent to + (covariant/read-only).

// Input
type T = {
  readonly foo: string,
};
// Prettier 3.8.4
SyntaxError
// Prettier 3.8.5
type T = {
readonly foo: string,
};

3.8.4

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a
</tr></table> 

... (truncated)

Commits

• c47654c Release 3.9.1
• 06159aa Fix bug in release script
• 4bc5ab4 Update file-entry-cache to 11.1.5 (#19483)
• b7fd58b Release @prettier/plugin-oxc@0.2.0 and @prettier/plugin-hermes@0.2.0
• 3006400 Revert changes in release script
• 7bef7db Git blame ignore 3.9.0
• bb817b1 Bump Prettier dependency to 3.9.0
• 05cf896 Clean changelog_unreleased
• 79f6cdf Disable finished steps
• 3613b1e Add blog post for v3.9 (#19414)
• Additional commits viewable in compare view

Updates semver from 7.8.2 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

• 9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@​chatman-media)

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

• e583226 #874 reject numeric segments after x-ranges (@​pupuking723)

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

• 046da7f #872 align caret includePrerelease lower bounds (#872) (@​wayyoungboy)

Chores

• 3485dda #866 bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@​dependabot[bot])

Changelog

Sourced from semver's changelog.

7.8.5 (2026-06-19)

Bug Fixes

• 9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@​chatman-media)

7.8.4 (2026-06-09)

Bug Fixes

• e583226 #874 reject numeric segments after x-ranges (@​pupuking723)

7.8.3 (2026-06-08)

Bug Fixes

• 046da7f #872 align caret includePrerelease lower bounds (#872) (@​wayyoungboy)

Chores

• 3485dda #866 bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@​dependabot[bot])

Commits

• 6e05b76 chore: release 7.8.5 (#879)
• 9c8692a fix: include prereleases in tilde range lower bound with includePrerelease (#...
• 8640bd6 chore: release 7.8.4 (#875)
• e583226 fix: reject numeric segments after x-ranges
• 6b77aa8 chore: release 7.8.3 (#873)
• 3485dda chore: bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866)
• 046da7f fix: align caret includePrerelease lower bounds (#872)
• See full diff in compare view

Updates tar from 7.5.16 to 7.5.19

Commits

• be440da 7.5.19
• 2812e93 add maxDecompressionRatio guard against explosive decompression
• 9ecd4d2 7.5.18
• 9e78bf0 refuse to let header size be less than 0
• e02a4e9 pax: parse values according to known types
• 9cbdb31 7.5.17
• 7a635c2 terminate pax strings on nul bytes
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions