Bump @radix-ui/react-dropdown-menu from 2.1.6 to 2.1.16

[dependabot]

Bumps @radix-ui/react-dropdown-menu from 2.1.6 to 2.1.16.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[netlify]

✅ Deploy Preview for programmer-sh ready!

Name	Link
🔨 Latest commit	3c42329
🔍 Latest deploy log	https://app.netlify.com/projects/programmer-sh/deploys/689da270405e740008900acf
😎 Deploy Preview	https://deploy-preview-23--programmer-sh.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[infrabaseai]

🛡️ Security Analysis Results

Found 2 security issues:

Severity	Issue	File	Line	Recommendation
🔴 Critical	Duplicate dependency key in snapshot section	pnpm-lock.yaml:6230	6230	Remove one of the duplicated @radix-ui/primitive entrie...
🟡 Warning	Manual edits in pnpm-lock.yaml may corrupt lock...	pnpm-lock.yaml:1	1	Always use pnpm CLI to modify the lockfile. Do not hand-e...

📋 Detailed Descriptions

🔴 Duplicate dependency key in snapshot section

File: pnpm-lock.yaml (Line 6230-6240)

Description: In the snapshot block of pnpm-lock.yaml, the entry for @radix-ui/react-dismissable-layer@1.1.11 defines the same dependency key ('@radix-ui/primitive') twice, pointing to two different versions (1.1.3 and 2.1.3). In YAML/JSON this causes the first declaration to be silently overwritten by the second, likely breaking the intended resolution of @radix-ui/primitive for this package.

💡 Recommendation: Remove one of the duplicated @radix-ui/primitive entries under @radix-ui/react-dismissable-layer@1.1.11. Ensure only the correct version (likely 2.x for the newer Radix primitive) is listed. Then regenerate the lockfile via pnpm install to verify integrity.

---

🟡 Manual edits in pnpm-lock.yaml may corrupt lockfile

File: pnpm-lock.yaml (Line 1-1000)

Description: The pnpm-lock.yaml file is auto-generated by pnpm and should not be hand-edited. The massive manual diff risks introducing invalid entries or mismatched integrity checks, leading to inconsistent installs across environments. For example, dozens of new resolution and snapshot entries were added by hand rather than via pnpm install or pnpm update.

Recommendation:

1. Discard manual changes to pnpm-lock.yaml.
2. Update package.json (e.g. bumping a dependency version) and then run pnpm install or pnpm update @radix-ui/react-dropdown-menu to regenerate the lockfile cleanly.
3. Commit only the regenerated lockfile.

💡 Recommendation: Always use pnpm CLI to modify the lockfile. Do not hand-edit pnpm-lock.yaml.

📊 Summary

• 🔴 Critical: 1
• 🟡 Warning: 1

---

🤖 Analysis powered by Infrabase AI