[dependabot]

Bumps @launchpad-ui/components from 0.4.4 to 0.25.0.

Release notes

Sourced from @​launchpad-ui/components's releases.

@​launchpad-ui/components@​0.25.0

Minor Changes

• #2009 52a9e67 Thanks @​apucacao! - Add ./styles/base.css and ./styles/themes.css subpath exports so consumers can import this package's base and theme stylesheets by package specifier instead of a path into its source tree. Both exports name the unbuilt stylesheet, so a consumer that compiles this package's CSS to its own output location still resolves them, and both files are now part of the published package.

Patch Changes

• #2009 52a9e67 Thanks @​apucacao! - Broke a circular workspace dependency between box, components and vars. box's own story used @launchpad-ui/components only for Button, which @launchpad-ui/button already exports, so the story now imports Button from there and box no longer needs components at all. With that edge gone, components can declare @launchpad-ui/box and @launchpad-ui/vars as devDependencies, which its own stories already imported without declaring. The stories that document tokens and icons using higher-level components moved into components, the package that sits above the ones they document, so no lower-level package needs a dependency that points back up. Story titles are unchanged, and no test or story behaviour changed; the only visible effect is each package's published manifest.

• #2009 52a9e67 Thanks @​apucacao! - Every generated CSS Module class name in this package gets a new hash prefix. One stylesheet here now imports the shared media queries through @launchpad-ui/tokens/media-queries.css instead of a path into that package's build output, and scoped class names are hashed from stylesheet content, so changing that line reseeds every class the package emits. Each class keeps its readable suffix and changes only in the prefix.

  The styles themselves are unchanged: comparing the built CSS with the hash prefixes renamed consistently gives an identical file. The published JavaScript and CSS are generated together and agree with each other, so importing this package normally is unaffected. If you have a selector or a test that targets one of these generated class names directly, it needs updating.

• #2009 52a9e67 Thanks @​apucacao! - Moved the shared test render helper each package's tests used into its own workspace package, @launchpad-ui/test-utils, and declared it as a devDependency instead of reaching for it by relative path. No test behaviour changed. The only visible effect is a new devDependency entry in this package's published manifest, which is not installed by consumers.

• Updated dependencies [52a9e67, 52a9e67]:

  • @​launchpad-ui/tokens@​0.19.0
  • @​launchpad-ui/icons@​0.26.7

@​launchpad-ui/components@​0.24.4

Patch Changes

• #2004 567a715 Thanks @​cmwinters! - Top-align the MenuItem selection checkbox with the item label so it matches icon alignment when a description is present.

@​launchpad-ui/components@​0.24.3

Patch Changes

• Updated dependencies [df6666b]:
  • @​launchpad-ui/tokens@​0.18.0

... (truncated)

Changelog

Sourced from @​launchpad-ui/components's changelog.

0.25.0

Minor Changes

• #2009 52a9e67 Thanks @​apucacao! - Add ./styles/base.css and ./styles/themes.css subpath exports so consumers can import this package's base and theme stylesheets by package specifier instead of a path into its source tree. Both exports name the unbuilt stylesheet, so a consumer that compiles this package's CSS to its own output location still resolves them, and both files are now part of the published package.

Patch Changes

• #2009 52a9e67 Thanks @​apucacao! - Broke a circular workspace dependency between box, components and vars. box's own story used @launchpad-ui/components only for Button, which @launchpad-ui/button already exports, so the story now imports Button from there and box no longer needs components at all. With that edge gone, components can declare @launchpad-ui/box and @launchpad-ui/vars as devDependencies, which its own stories already imported without declaring. The stories that document tokens and icons using higher-level components moved into components, the package that sits above the ones they document, so no lower-level package needs a dependency that points back up. Story titles are unchanged, and no test or story behaviour changed; the only visible effect is each package's published manifest.

• #2009 52a9e67 Thanks @​apucacao! - Every generated CSS Module class name in this package gets a new hash prefix. One stylesheet here now imports the shared media queries through @launchpad-ui/tokens/media-queries.css instead of a path into that package's build output, and scoped class names are hashed from stylesheet content, so changing that line reseeds every class the package emits. Each class keeps its readable suffix and changes only in the prefix.

  The styles themselves are unchanged: comparing the built CSS with the hash prefixes renamed consistently gives an identical file. The published JavaScript and CSS are generated together and agree with each other, so importing this package normally is unaffected. If you have a selector or a test that targets one of these generated class names directly, it needs updating.

• #2009 52a9e67 Thanks @​apucacao! - Moved the shared test render helper each package's tests used into its own workspace package, @launchpad-ui/test-utils, and declared it as a devDependency instead of reaching for it by relative path. No test behaviour changed. The only visible effect is a new devDependency entry in this package's published manifest, which is not installed by consumers.

• Updated dependencies [52a9e67, 52a9e67]:

  • @​launchpad-ui/tokens@​0.19.0
  • @​launchpad-ui/icons@​0.26.7

0.24.4

Patch Changes

• #2004 567a715 Thanks @​cmwinters! - Top-align the MenuItem selection checkbox with the item label so it matches icon alignment when a description is present.

0.24.3

Patch Changes

... (truncated)

Commits

• 5f4134f chore: version packages (#2010)
• 52a9e67 refactor: remove the package cycles and import siblings by specifier (#2009)
• 3a57241 chore: version packages (#2008)
• 567a715 fix(components): top-align MenuItem checkbox with label (#2004)
• 6f5ae87 chore: version packages (#2005)
• 4f7d63d chore: version packages (#1998)
• 566eb9b fix(components): make the breadcrumbs separator color independent of styleshe...
• 7277433 chore: version packages (#1995)
• 1da37b3 chore: version packages (#1991)
• b240b87 feat(components): add data-lp-variant and data-lp-indicator styling hooks (#1...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​launchpad-ui/components since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Overview
Upgrades @launchpad-ui/components from 0.4.4 to 0.25.0 in internal/dev_server/ui (package.json and package-lock.json only). No application source changes.

The lockfile reflects a major packaging shift for that library: it no longer bundles the full react-aria / react-aria-components / toast stack as direct dependencies and instead declares peer dependencies on newer react-aria, react-aria-components, react-stately, react-router, and optional react-hook-form, with peers documented for React 19 while this app still pins React 18.3.1. Nested copies of @launchpad-ui/tokens (~0.19) and @launchpad-ui/icons (~0.26.7) come in under components, alongside the app’s existing direct pins on older core / icons / tokens versions.

Reviewers should confirm npm ci, npm run build, and npm test for the dev server UI still pass, and watch for peer-dep warnings or subtle styling/API regressions on screens that import from @launchpad-ui/components (forms, buttons, list boxes, progress, etc.).

^{Reviewed by Cursor Bugbot for commit ef7f007. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ef7f007. Configure here.}

[cursor]

React 19 peer mismatch

High Severity

@launchpad-ui/components 0.25.0 now peers react and react-dom at ^19, and its nested @launchpad-ui/icons 0.26.7 does the same. The UI still pins 18.3.1. Dialogs, selects, and other RAC wrappers that assume React 19 (including ref-as-prop) can fail when the dev server UI loads.

Additional Locations (2)

• internal/dev_server/ui/package.json#L22-L24
• internal/dev_server/ui/package-lock.json#L1272-L1285

 

^{Reviewed by Cursor Bugbot for commit ef7f007. Configure here.}

[cursor]

Icons and tokens version skew

High Severity

0.25.0 pulls @launchpad-ui/icons ~0.26.7 and @launchpad-ui/tokens ~0.19.0 as nested copies, while the app still depends on icons 0.18.13 and tokens 0.11.3. IconProvider and App.css bind the old packages, so IconButton and component styles read a different IconContext and token set than the rest of the UI.

Additional Locations (1)

• internal/dev_server/ui/package-lock.json#L1266-L1315

 

^{Reviewed by Cursor Bugbot for commit ef7f007. Configure here.}