deps: bump the dependency-updates group with 8 updates

[dependabot]

Bumps the dependency-updates group with 8 updates:

Package	From	To
@primer/react	38.9.0	38.10.0
framer-motion	12.29.2	12.33.0
postcss-preset-env	11.1.2	11.1.3
eslint-plugin-primer-react	8.5.1	8.5.2
minimatch	10.1.1	10.1.2
pacote	21.1.0	21.2.0
semver	7.7.3	7.7.4
tap	21.5.0	21.5.1

Updates @primer/react from 38.9.0 to 38.10.0

Release notes

Sourced from @​primer/react's releases.

@​primer/react@​38.10.0

Minor Changes

• #7488 fe85519 Thanks @​koesie10! - DataTable: Add externalSorting prop to disable client-side sorting

Commits

• 4a9b756 Release tracking (#7496)
• 4f43e82 Remove deprecated component exports from @​primer/styled-react (#7499)
• fe85519 DataTable: Add externalSorting prop to disable client-side sorting (#7488)
• 5516f3f Remove primer_react_action_list_item_as_button feature flag (#7477)
• ffceef5 Delete ExternalTooltipVersion_1 IconButton story (#7486)
• See full diff in compare view

Updates framer-motion from 12.29.2 to 12.33.0

Changelog

Sourced from framer-motion's changelog.

[12.33.0] 2026-02-05

Added

• <motion />: New propagate.tap prop prevents tap gestures from propagating to parents.

[12.32.0] 2026-02-05

Added

• transition.inherit: When true, inherit transition values from less-specific transitions.

[12.31.3] 2026-02-05

Fixed

• <motion />: Ensure animation state is reset after being re-suspended.
• Prevent stale values when mixing transitionEnd and transition.type: false.
• Drag: Fix "sticky" throw velocity on initial interaciton.
• Drag: Ensure catching a thrown element kills its velocity.

[12.31.2] 2026-02-05

Fixed

• onHoverStart and onHoverEnd first argument now correctly typed as PointerEvent.
• whileHover: No longer persists after drag end.
• AnimatePresence: Allow changing mode prop.

[12.31.1] 2026-02-04

Added

• Drag constraints updated even when draggable or constraints resize outside of React renders.

[12.31.0] 2026-02-03

Added

• animate: Support for bi-directional callbacks within animation sequences.

Fixed

• Ensure onPan never fires before onPanStart.

[12.30.1] 2026-02-03

Fixed

• Allow drag to be initiated by child a and button elements.

... (truncated)

Commits

• fde47ac v12.33.0
• 4849b3a Updating changelog
• 6a1edd6 Merge pull request #3539 from motiondivision/event-propagation
• 0fec416 Adding changelog updates
• b962d09 v12.32.0
• 69b1c97 Updating changelog
• 972e556 Merge pull request #3538 from motiondivision/motion-config-merge-transition
• d4c0bcd refactor(gestures): Rename stopTapPropagation to propagate={{ tap: false }}
• cd4ec23 v12.31.3
• 461273f Updating changelog
• Additional commits viewable in compare view

Updates postcss-preset-env from 11.1.2 to 11.1.3

Changelog

Sourced from postcss-preset-env's changelog.

11.1.3

February 6, 2026

• Updated @csstools/postcss-text-decoration-shorthand to 5.0.2 (patch)

Commits

• See full diff in compare view

Updates eslint-plugin-primer-react from 8.5.1 to 8.5.2

Release notes

Sourced from eslint-plugin-primer-react's releases.

v8.5.2

Patch Changes

• #488 e27c83b Thanks @​siddharthkp! - utils/casing-matches: Prevent ReDoS vulnerability

Changelog

Sourced from eslint-plugin-primer-react's changelog.

8.5.2

Patch Changes

• #488 e27c83b Thanks @​siddharthkp! - utils/casing-matches: Prevent ReDoS vulnerability

Commits

• 1918558 Version Packages (#489)
• daec60a Bump @​typescript-eslint/rule-tester from 8.53.1 to 8.54.0 (#494)
• 013510f Bump @​typescript-eslint/rule-tester from 8.53.0 to 8.53.1 (#491)
• 8a81dbb Bump globals from 17.0.0 to 17.1.0 (#492)
• e27c83b casing-matches.ts: Fix regex warnings from code scanning (#488)
• See full diff in compare view

Updates minimatch from 10.1.1 to 10.1.2

Commits

• fde70d1 10.1.2
• 05210d8 update deps
• ba4093c update workflows and package stuff
• See full diff in compare view

Updates pacote from 21.1.0 to 21.2.0

Release notes

Sourced from pacote's releases.

v21.2.0

21.2.0 (2026-02-06)

Features

• db21624 #442 implement gitSubdir according to npa spec (#442) (@​Kakadus)
• c2a4217 #443 add allowRemote, allowFile, allowDirectory (#443) (@​wraithgar)

Changelog

Sourced from pacote's changelog.

21.2.0 (2026-02-06)

Features

• db21624 #442 implement gitSubdir according to npa spec (#442) (@​Kakadus)
• c2a4217 #443 add allowRemote, allowFile, allowDirectory (#443) (@​wraithgar)

Commits

• 27cc5e1 chore: release 21.2.0 (#444)
• db21624 feat: implement gitSubdir according to npa spec (#442)
• c2a4217 feat: add allowRemote, allowFile, allowDirectory (#443)
• See full diff in compare view

Updates semver from 7.7.3 to 7.7.4

Release notes

Sourced from semver's releases.

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

• a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@​mldangelo)

Documentation

• 1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@​mldangelo)

Dependencies

• 120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

• 44d7130 #824 bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@​dependabot[bot])
• 7073576 #820 reorder parameters in invalid-versions.js test (#820) (@​reggi)
• 5816d4c #829 bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829) (@​dependabot[bot], @​npm-cli-bot)

Changelog

Sourced from semver's changelog.

7.7.4 (2026-01-16)

Bug Fixes

• a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@​mldangelo)

Documentation

• 1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@​mldangelo)

Dependencies

• 120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

• 44d7130 #824 bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@​dependabot[bot])
• 7073576 #820 reorder parameters in invalid-versions.js test (#820) (@​reggi)
• 5816d4c #829 bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829) (@​dependabot[bot], @​npm-cli-bot)

Commits

• 5993c2e chore: release 7.7.4 (#839)
• 120968b deps: @​npmcli/template-oss@​4.29.0 (#840)
• a29faa5 fix(cli): pass options to semver.valid() for loose version validation (#835)
• 1d28d5e docs: fix typos and update -n CLI option documentation (#836)
• 5816d4c chore: bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829)
• ab9e28a chore: bump @​npmcli/template-oss from 4.27.1 to 4.28.0 (#827)
• 44d7130 chore: bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824)
• 7073576 chore: reorder parameters in invalid-versions.js test (#820)
• 16a35f5 chore: bump @​npmcli/template-oss from 4.26.0 to 4.27.1 (#823)
• 3a3459d chore: bump @​npmcli/template-oss from 4.25.1 to 4.26.0 (#818)
• See full diff in compare view

Updates tap from 21.5.0 to 21.5.1

Commits

• 8dfae92 update versions
• 72c290e lockfile update
• 9711580 update pagefind version
• d9f5970 update tshy and foreground-child
• 6352163 update jackspeak and cliui
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
tap	[>= 18.a, < 19]
tap	[>= 19.a, < 20]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions