[dependabot]

Bumps the frontend-libs group with 1 update: dexie.

Updates dexie from 4.4.6 to 4.4.7

Release notes

Sourced from dexie's releases.

Dexie v4.4.7

This maintenance release fixes query, live-query, bulk-update, and database lifecycle edge cases; improves production bundler compatibility; makes Dexie Cloud sync retries recover faster; and restores compatibility with legacy Dexie exports.

Related Package Releases

Package	Version
dexie	4.4.7
dexie-cloud-addon	4.4.16
dexie-react-hooks	4.4.0 (no change)
y-dexie	4.4.0 (no change)
dexie-export-import	4.4.2
dexie-cloud-common	1.0.60

Bug Fixes

dexie@4.4.7

• Fix empty query branches in unions — Empty anyOf() and reversed between() clauses no longer suppress matches from other branches in an or() query; a standalone empty clause still returns no results. (#2319)
• Fix live-query change detection and cancellation — Mutations for valid falsy primary keys such as 0 and the empty string now trigger matching live queries, and late errors from superseded runs are ignored. (#2324, #2353)
• Harden bulkUpdate() — Changes to nested or compound primary keys now throw ConstraintError, and bulkUpdate() works when called before the database has opened. (#2320, #2334)
• Fix database lifecycle and opening edge cases — hasBeenClosed() now reports the closed state correctly; Safari-like environments without a global indexedDB get a clear missing-API error, while an explicitly supplied indexedDB implementation can still be opened. (#2340, #2342)
• Improve production bundle compatibility — Package exports now resolve to the unminified build in production, avoiding downstream double-minification issues. The minified bundle remains in the package, but production exports may now select the unminified distribution. (#2344)

dexie-cloud-addon@4.4.16

• Wake local sync retries on reconnect or foregrounding — A scheduled retry can resume promptly when connectivity returns or the app becomes visible, rather than waiting through the remaining backoff; retry behavior avoids overlapping requests and clears stale worker state on close. (#2351)

dexie-export-import@4.4.2

• Import legacy hidden-primary-key exports — Legacy exports that encode the schema as the string "null" are normalized and imported instead of being rejected as a primary-key mismatch. (#2329)

Contributors

Release coordination: @​dfahlander. Thanks to @​buildwithakhila, @​chatman-media, @​claude, @​cpruijsen, @​liz709, @​morgan-coded, @​ShangYJQ, @​tarann26, @​theblang, and @​zzoraemon043 for code, documentation, sample-app, and package changes. Automated dependency updates were contributed by @​dependabot[bot].

Commits

• da6b2b8 fix: add repository metadata for cloud common publish
• aadf00a chore: prepare coordinated Dexie release
• d31ca47 fix(WhereClause): empty anyOf()/between() no longer empties an or()-union (#1...
• ff98f7e fix(live-query): react on mutations of falsy but valid primary keys (issue #2...
• 84fd2cf Reject bulkUpdate changes to nested and compound primary keys (#2320)
• 4fae8d4 fix: db.hasBeenClosed() never returned true (#2340)
• b21d7d4 fix(dexie-export-import): tolerate legacy schema:"null" when importing a hidd...
• c376e46 fix(open): skip the Safari 14 workaround when the global indexedDB is missing...
• c8b2eb5 Fix todo app navbar dropdown button nesting (#2343)
• dccc3c5 fix(dexie-cloud): wake local sync retries on reconnect (#2350) (#2351)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, engine. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	dexie@​4.4.6 ⏵ 4.4.7	+1			+3

View full report