chore(deps): update react-draggable requirement from ^4.6.0 to ^4.7.0 in /superset-frontend/packages/superset-ui-core

[dependabot]

Updates the requirements on react-draggable to permit the latest version.

Changelog

Sourced from react-draggable's changelog.

4.7.0 (Jun 18, 2026)

• Feature: add a nonce prop to support a strict Content Security Policy. It's applied to the dynamically-injected user-select <style> element so a style-src policy without 'unsafe-inline' no longer blocks it. When omitted, webpack's __webpack_nonce__ global is used if available. enableUserSelectHack={false} remains a no-prop opt-out. (#808, closes #791)
• Internal: de-duplicate redundant tsc compilation in the build/CI pipeline.

4.6.0 (May 29, 2026)

• Internal: Migrate library source from Flow to TypeScript. Types are now generated from source instead of hand-maintained, eliminating Flow/TypeScript drift. The build uses tsup (CommonJS + ESM + generated declarations) with webpack for the UMD bundle. No public API change — the CommonJS export shape (module.exports === Draggable, plus .default and .DraggableCore), the UMD ReactDraggable global, and the shipped type surface are all unchanged. (#805)
• Feature: ship an ESM build and an exports map alongside the existing CommonJS entry, so the package can be imported natively in both module systems. (#805)
• Fix: treat ctrl+click as a right-click on macOS so it no longer starts a drag. (#786)
• Fix: remove a global module declaration from the TypeScript types to prevent type pollution. (#787)
• Internal: Support React 19 (dependency upgrade and nodeRef-based browser tests).
• Internal: Migrate the test suite from Karma/Jasmine to Vitest, expand unit coverage, and run CI across Node 20, 22, and 24. (#785, #788)
• Docs: Modernize the README and publish a GitHub Pages demo site. (#790)

4.5.0 (Jun 25, 2025)

• Internal: Update clsx version (#754)
• Fix: bounds="selector" functionality when in a Shadow DOM tree. (#763)
• Perf: Update nodeRef type for React v19 compatibility (#769)
• Fix: forgotten requestAnimationFrame call (#773)
• Perf: setState in lifecycles + forced reflow (#556)
• Fix: add allowMobileScroll prop to allow for clicks to optionally pass through on mobile (#760)

4.4.6 (Sep 27, 2023)

• Fix: state inconsistency in React 18 #699
• Internal: devDependencies updates

4.4.5 (Apr 26, 2022)

• Fix: grid prop unused in handleDragStop #621
• Fix: children prop missing in TypeScript definition #648
• Internal: Various devDep updates

4.4.4 (Aug 27, 2021)

• Fix: Ensure documentElement.style actually exists. Fixes crashes in some obscure environments. #574 #575
• Fix: Add react/react-dom as peerDependencies again to fix Yarn PnP
• Size: Replace classnames with clsx to save a few bytes
• Internal: Additional tests on ref functionality and additional README content on nodeRef
• Internal: Lots of devDependencies updates
• Docs: Various README and demo updates, see git commits

4.4.3 (June 8, 2020)

• Add nodeRef to TypeScript definitions

4.4.2 (May 14, 2020)

... (truncated)

Commits

• a0b6e21 release v4.7.0
• 4551b5d ci: dedup redundant tsc compilation in build/CI
• 5611b11 feat: add nonce prop for CSP-compliant user-select style injection (#808)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[bito-code-review]

Bito Automatic Review Skipped - Files Excluded

Bito didn't auto-review this change because all changed files are in the exclusion list for automatic reviews. No action is needed if you didn't intend for the agent to review it. Otherwise, to manually trigger a review, type /review in a comment and save.
You can change the excluded files settings here, or contact your Bito workspace admin at evan@preset.io.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.49%. Comparing base (7e17c70) to head (3750bbd).

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #41445   +/-   ##
=======================================
  Coverage   64.49%   64.49%           
=======================================
  Files        2664     2664           
  Lines      146080   146080           
  Branches    33696    33696           
=======================================
  Hits        94209    94209           
  Misses      50163    50163           
  Partials     1708     1708           

Flag	Coverage Δ
javascript	68.92% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dependabot]

Looks like react-draggable is up-to-date now, so this is no longer needed.