chore(deps)(deps-dev): bump the development-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the development-dependencies group with 5 updates in the / directory:

Package	From	To
@types/react-dom	19.2.4	19.2.5
lerna	10.0.0	10.0.1
vitest	4.1.10	4.1.11
@types/plotly.js	3.0.10	3.0.13
@theia/cli	1.74.1	1.75.0

Updates @types/react-dom from 19.2.4 to 19.2.5

Commits

• See full diff in compare view

Updates lerna from 10.0.0 to 10.0.1

Release notes

Sourced from lerna's releases.

v10.0.1

10.0.1 (2026-08-19)

Bug Fixes

• missing peer dependency in lerna 10 (#4412) (06b8acb)
• skip unnecessary package managers during release (#4413) (ed46de5)

Changelog

Sourced from lerna's changelog.

10.0.1 (2026-08-19)

Bug Fixes

• missing peer dependency in lerna 10 (#4412) (06b8acb)

Commits

• 35d15a1 chore(misc): publish 10.0.1
• 06b8acb fix: missing peer dependency in lerna 10 (#4412)
• e50e1a9 chore(deps): bump tar to 7.5.22 (#4406)
• See full diff in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Updates @types/plotly.js from 3.0.10 to 3.0.13

Commits

• See full diff in compare view

Updates @theia/cli from 1.74.1 to 1.75.0

Release notes

Sourced from @​theia/cli's releases.

Eclipse Theia v1.75.0

What's Changed

• Release Notes
• Breaking Changes

Contributors

@​alectimison-maker, @​AlexandraBuzila, @​ankitsharma101, @​CamilleLetavernier, @​codingcat40, @​dr14-make, @​EhabY, @​eneufeld, @​kachurun, @​lucas-koehler, @​MatthewKhouzam, @​mehedi-107, @​ndoschek, @​safisa, @​sdirix, @​sgraband, @​xai

New Contributors 🚀

• @​mehedi-107 made their first contribution in eclipse-theia/theia#17868
• @​EhabY made their first contribution in eclipse-theia/theia#17864
• @​codingcat40 made their first contribution in eclipse-theia/theia#17940

---

Full Changelog: eclipse-theia/theia@v1.74.0...v1.75.0

Changelog

Sourced from @​theia/cli's changelog.

1.75.0 - 8/27/2026

• [ai] added gemini-3.7-flash to the default models #17947 - Contributed on behalf of STMicroelectronics
• [ai-anthropic] dropped thinking blocks without thinking text or signature when replaying a conversation, which Anthropic rejects with a 400 and which made every retry of an agent tool loop fail identically #17905
• [ai-chat] fixed a listener leak when streaming rebuilds response content, which leaked one listener per streamed token after a tool call #17883
• [ai-chat] guarded getOrRestoreSession against concurrent restores of the same session, which registered the session twice and made every getActiveSession() call throw until reload #17916 - Contributed on behalf of K2view
• [ai-chat] notified agents about external file changes: the new per-session FileReadTracker records the content an agent was handed, AbstractChatAgent.invoke appends the list of files that changed since, and writeFileContent / suggestFileContent refuse to overwrite a file that changed since it was read #17863
• [ai-chat, ai-core] improved slash command parsing: /word is only treated as a command when it resolves to a command or prompt fragment, command names must be terminated by whitespace or end of input, and command arguments stop at the end of their own line #17889
• [ai-chat-ui] forced the chat input suggest widget to open upwards, so it is no longer hidden behind the bottom panel when the chat is in the main area #17890
• [ai-core] deferred the initial skill scan off the frontend startup blocking path, so startContributions() no longer waits for a full filesystem scan of the skill directories #17843
• [ai-core] waited for the preference service in addition to the workspace before the initial skill scan, so configured skill directories are included #17929
• [ai-ide] added an opt-in "Memory" prompt capability that lets agents maintain a wiki-style knowledge base per workspace, stored in the workspace metadata store and exposed to prompts via the new {{memoryDirectory}} variable #17865
• [ai-ide] clarified the skill file tool description for nested skill references #17879
• [ai-ide] fixed toggling an AI configuration category on single click #17958
• [ai-ide] improved support for accessing open editors in AI agents, via a prompt fragment referencing the openEditors variable (enabled by default in Universal, Architect and Coder) and a contribution that adds the open editors to the chat context, guarded by a user preference #17755
• [ai-ide] refined the coder agent system prompt #17815
• [ai-mcp, ai-chat-ui] added support for MCP apps, including HTML app results from tool calls and a CSP-hardened app iframe #17489
• [ai-ollama] resolved anyOf types in tool parameter schemas #17489
• [ai-registry] added Agent Plugins, artifacts that bundle skills and MCP servers and are endorsed as a unit in the AI registry: a new Agent Plugins section in the Extensions view (searchable with @agent-plugins), content-hash verified installation into ~/.agents/plugins, per-spec handling of plugin.json and mcp.json, qualified skill names, and installation from theia://install-plugin?id=<pluginId> #17931
• [ai-registry] auto-updated installed skills and MCP servers: the registry is checked once per window load and updates are applied or offered following a user-scoped default preference with per-artifact overrides, set from a new gear context menu on the skill and MCP entry cards #17887
• [application-manager, bundle-plugin, cli] removed the webpack bundler; theia build now always bundles with esbuild, and the new compressAssetsPlugin of @theia/bundle-plugin emits the pre-compressed .gz frontend assets that webpack's CompressionPlugin used to produce #17935 - Contributed on behalf of STMicroelectronics
• [cli] fixed download:plugins hard-exiting after fetching, so the command can be composed in build scripts #17896
• [core] added Node.js 26 support and dropped Node.js 22: engines.node is now >=24, the CI matrix runs Node 24 and 26, node-gyp was bumped to 13, REMOTE_NODE_VERSION and the native dependency workflow follow the Node version of the shipped Electron release, and private-test-setup moved from module.register() to module.registerHooks(). Node 24 stays the recommended default #17936 - Contributed on behalf of STMicroelectronics
• [core] cancelled superseded activation checks in ApplicationShell.assertActivated by using matching window.setTimeout / window.clearTimeout APIs #17895 - Contributed by Alec Timison
• [core] compiled all packages with React's automatic JSX runtime (jsx: react-jsx, jsxImportSource: @theia/core/shared/react), so .tsx files only need to import React when they use React.* types or APIs. Added the @theia/core/shared/react/jsx-runtime and @theia/core/shared/react/jsx-dev-runtime re-exports so the generated JSX calls resolve to @theia/core's shared React instance. Adopters are not required to switch #17932
• [core] dropped stale tree refreshes in TreeImpl.refresh when the node no longer belongs to the tree after resolveChildren resolved, which logged Child node '<path>' does not belong to this tree on every startup and could re-insert removed subtrees #17886
• [core] forced a full response when re-issuing the browser connection token: If-None-Match / If-Modified-Since are dropped when the presented token is missing or stale, so a 304 behind a reverse proxy no longer discards the fresh cookie and rejects every WebSocket handshake #17762
• [core] imported the third-party base styles (Lumino, perfect-scrollbar) before Theia's own styles, restoring the pre-1.72 cascade order. This fixes the tree search box never appearing when typing in a tree, and the .lm-SplitPanel-handle and .lm-DockPanel-overlay z-indexes #17873
• [core] kept hover tooltips stable and interactive: the hover host stays hidden while it is measured, and the chat session item no longer cancels the hover on mouse-leave, so the pointer can move onto the tooltip #17958
• [core] migrated the remaining console statements to the unified named ILogger #17763
• [core] re-exported react-dom/server as @theia/core/shared/react-dom/server #17932
• [core] replaced the deprecated unload event with pagehide, so the layout is saved on close where Chrome's permissions policy disables unload. The WindowService.onUnload API is unchanged #17870
• [core] translation update for version 1.75.0 #17961
• [core] upgraded npm dependencies after 1.74.1 #17909 - Contributed on behalf of STMicroelectronics
• [core, monaco] fixed Monaco theme CSS, SelectComponent dropdown placement, and the OS font class in secondary windows #17874
• [core, toolbar] fixed toolbar areas being draggable/text-selectable, dragging through them into the underlying panel content or main toolbar sections #17940
• [electron] upgraded Electron from 42.3.0 to 42.8.1 #17914 - Contributed on behalf of STMicroelectronics
• [filesystem] tolerated FSEvents reporting the watched root in the file watcher tests #17943
• [getting-started] added Open Walkthrough to the Help menu and removed the fixed height that always left the walkthrough view scrollable #17958
• [getting-started, plugin-ext, core] implemented the VS Code contributes.walkthroughs contribution point, so extensions can contribute guided walkthroughs to the Welcome page. Adds the new WalkthroughService owning registration, when evaluation, step completion and persisted progress, support for the onCommand, onContext, onSettingChanged, extensionInstalled, onView and onLink completion events, and CommandRegistry.registerAlias so executing a Theia command also fires the events of its VS Code alias #17309
• [monaco] fell back to the editor theme matching the color theme's declared type instead of always to the dark default, so light themes without their own editorTheme no longer render inverted #17864
• [plugin-ext] deployed backend, headless and frontend plugins concurrently #17867
• [plugin-ext] fixed unhandled Unknown Webview promise rejections in the plugin host: $reveal, $setTitle, $setIconPath, $setHtml and $setOptions now no-op when the webview has already been disposed, the same way VS Code's MainThreadWebviews does #17956
• [plugin-ext] moved scanner, manifest, and localization helpers to @theia/plugin-utils #17758
• [plugin-ext-vscode] added VS Code editor group navigation commands #17742
• [plugin-utils] added @theia/plugin-utils for shared plugin manifest utilities; browser-only builds prepare plugins into hostedPlugin/ with list.json #17758
• [plugin-utils] kept the hc-light UI theme of a plugin theme #17958
• [preferences] deferred the construction of PreferencesWidget until it is needed, instead of on startup #17877
• [private-eslint-plugin] added the named-logger-check ESLint rule that enforces the named ILogger conventions #17687
• [scm] added Go to Current History Item and View as List / View as Tree actions to the history graph toolbar, matching VS Code's Source Control Graph #17923

... (truncated)

Commits

• 52f32db v1.75.0
• 0263890 core: update re-exports for v1.75.0
• 9b546e6 docs: update changelog for 1.75.0
• ec82e4e Translation update for version 1.75.0 (#17961)
• 7222d8f test(filesystem): tolerate FSEvents reporting the watched root (#17943)
• 60b9d68 fix(core,toolbar): disable dragging on toolbar areas (#17940)
• ae3148a feat(terminal-manager): support moving the view to a secondary window (#17945)
• 117642b fix(core): keep hover tooltips stable and interactive
• fc3a589 fix(plugin-utils): keep the hc-light ui theme of a plugin theme
• e4f0533 fix(ai-ide): toggle an AI configuration category on single click
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.