Merge remote-tracking branch 'origin/staging' into develop

frontend/package.json

@@ -56,61 +56,61 @@
     "@penpot/text-editor": "workspace:./text-editor",
     "@penpot/tokenscript": "workspace:./packages/tokenscript",
     "@penpot/ui": "workspace:./packages/ui",
-    "@playwright/test": "1.59.0",
-    "@storybook/addon-docs": "10.1.11",
-    "@storybook/addon-themes": "10.1.11",
-    "@storybook/addon-vitest": "10.1.11",
-    "@storybook/react-vite": "10.1.11",
+    "@playwright/test": "1.59.1",
+    "@storybook/addon-docs": "10.3.5",
+    "@storybook/addon-themes": "10.3.5",
+    "@storybook/addon-vitest": "10.3.5",
+    "@storybook/react-vite": "10.3.5",
     "@tokens-studio/sd-transforms": "1.2.11",
-    "@types/node": "^25.0.3",
-    "@vitest/browser": "4.0.18",
-    "@vitest/browser-playwright": "^4.0.18",
-    "@vitest/coverage-v8": "4.0.18",
-    "@zip.js/zip.js": "2.8.11",
-    "autoprefixer": "^10.4.21",
+    "@types/node": "^25.5.2",
+    "@vitest/browser": "4.1.3",
+    "@vitest/browser-playwright": "^4.1.3",
+    "@vitest/coverage-v8": "4.1.3",
+    "@zip.js/zip.js": "2.8.26",
+    "autoprefixer": "^10.4.27",
     "compression": "^1.8.1",
     "concurrently": "^9.2.1",
     "date-fns": "^4.1.0",
-    "esbuild": "^0.27.4",
+    "esbuild": "^0.28.0",
     "eventsource-parser": "^3.0.6",
     "express": "^5.1.0",
     "fancy-log": "^2.0.0",
     "getopts": "^2.3.0",
-    "gettext-parser": "^8.0.0",
+    "gettext-parser": "^9.0.2",
     "highlight.js": "^11.10.0",
     "js-beautify": "^1.15.4",
-    "jsdom": "^27.4.0",
-    "lodash": "^4.17.21",
+    "jsdom": "^29.0.2",
+    "lodash": "^4.18.1",
     "lodash.debounce": "^4.0.8",
     "map-stream": "0.0.7",
-    "marked": "^15.0.12",
+    "marked": "^17.0.5",
     "mkdirp": "^3.0.1",
     "mustache": "^4.2.0",
-    "nodemon": "^3.1.10",
+    "nodemon": "^3.1.14",
     "npm-run-all": "^4.1.5",
     "opentype.js": "^1.3.4",
-    "p-limit": "^6.2.0",
-    "playwright": "1.59.0",
-    "postcss": "^8.5.4",
+    "p-limit": "^7.3.0",
+    "playwright": "1.59.1",
+    "postcss": "^8.5.8",
     "postcss-clean": "^1.2.2",
     "postcss-modules": "^6.0.1",
     "postcss-scss": "^4.0.9",
-    "prettier": "3.5.3",
+    "prettier": "3.8.1",
     "pretty-time": "^1.1.0",
     "prop-types": "^15.8.1",
     "randomcolor": "^0.6.2",
-    "react": "19.2.3",
-    "react-dom": "19.2.3",
-    "react-error-boundary": "^6.1.0",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "react-error-boundary": "^6.1.1",
     "react-virtualized": "^9.22.6",
-    "rimraf": "^6.0.1",
+    "rimraf": "^6.1.3",
     "rxjs": "8.0.0-alpha.14",
-    "sass": "^1.89.0",
-    "sass-embedded": "^1.89.0",
+    "sass": "^1.98.0",
+    "sass-embedded": "^1.98.0",
     "sax": "^1.4.1",
     "scheduler": "^0.27.0",
     "source-map-support": "^0.5.21",
-    "storybook": "10.1.11",
+    "storybook": "10.3.5",
     "style-dictionary": "5.0.0-rc.1",
     "stylelint": "^17.4.0",
     "stylelint-config-standard-scss": "^17.0.0",
@@ -119,14 +119,14 @@
     "svg-sprite": "^2.0.4",
     "tdigest": "^0.1.2",
     "tinycolor2": "^1.6.0",
-    "typescript": "^5.9.2",
-    "ua-parser-js": "2.0.7",
-    "vite": "^7.3.1",
-    "vitest": "^4.0.18",
-    "wait-on": "^9.0.3",
+    "typescript": "^6.0.2",
+    "ua-parser-js": "2.0.9",
+    "vite": "^8.0.7",
+    "vitest": "^4.1.3",
+    "wait-on": "^9.0.4",
     "wasm-pack": "^0.13.1",
     "watcher": "^2.3.1",
-    "workerpool": "^9.3.2",
+    "workerpool": "^10.0.1",
     "xregexp": "^5.1.2"
   }
 }

frontend/packages/ui/package.json

@@ -16,20 +16,20 @@
   "devDependencies": {
     "@babel/core": "^7.14.5",
     "@babel/preset-react": "^7.14.5",
-    "@storybook/react": "10.2.0",
-    "@storybook/react-vite": "10.2.0",
-    "@testing-library/dom": "10.4.0",
-    "@testing-library/react": "16.3.0",
-    "@types/react": "^19.0.0",
+    "@storybook/react": "10.3.5",
+    "@storybook/react-vite": "10.3.5",
+    "@testing-library/dom": "10.4.1",
+    "@testing-library/react": "16.3.2",
+    "@types/react": "^19.2.14",
     "@types/react-dom": "^19.0.0",
-    "@vitejs/plugin-react": "^4.2.0",
+    "@vitejs/plugin-react": "^6.0.1",
     "babel-plugin-react-compiler": "^1.0.0",
-    "eslint-plugin-import": "2.31.0",
-    "eslint-plugin-jsx-a11y": "6.10.1",
-    "eslint-plugin-react": "7.35.0",
+    "eslint-plugin-import": "2.32.0",
+    "eslint-plugin-jsx-a11y": "6.10.2",
+    "eslint-plugin-react": "7.37.5",
     "eslint-plugin-react-hooks": "7.0.1",
     "react-compiler-runtime": "^1.0.0",
-    "storybook": "10.2.0",
+    "storybook": "10.3.5",
     "vite-plugin-dts": "^4.5.4"
   },
   "peerDependencies": {

frontend/patches/@zip.js__zip.js@2.8.26.patch

@@ -0,0 +1,17 @@
+diff --git a/lib/zip-core-base.js b/lib/zip-core-base.js
+index 142155c8c3ab1a6caa7c370e8a2931a954556ca9..61b0fe6efb91312f437750e0002218f218afad8b 100644
+--- a/lib/zip-core-base.js
++++ b/lib/zip-core-base.js
+@@ -28,12 +28,6 @@
+ 
+ import { configure } from "./core/configuration.js";
+ 
+-try {
+-	configure({ baseURI: import.meta.url });
+-} catch {
+-	// ignored
+-}
+-
+ export * from "./zip-core-reader.js";
+ export * from "./zip-core-writer.js";
+ export {

frontend/pnpm-workspace.yaml

@@ -1,11 +1,11 @@
-patchedDependencies:
-  '@zip.js/zip.js@2.8.11': patches/@zip.js__zip.js@2.8.11.patch
-
-shamefullyHoist: true
-
 packages:
   - "packages/draft-js"
   - "packages/mousetrap"
   - "packages/tokenscript"
   - "text-editor"
   - "packages/ui"
+
+patchedDependencies:
+  '@zip.js/zip.js@2.8.26': patches/@zip.js__zip.js@2.8.26.patch
+
+shamefullyHoist: true

frontend/src/app/main/ui/ds/controls/numeric_input.scss

@@ -71,6 +71,6 @@
 }
 
 .button-tooltip {
-  inline-size: var($sz-28);
+  inline-size: $sz-28;
   block-size: 100%;
 }