Javascript dependency: Bump react-arborist from 3.16.0 to 4.0.1 in /web

[dependabot]

Bumps react-arborist from 3.16.0 to 4.0.1.

Release notes

Sourced from react-arborist's releases.

v4.0.1

Fixes

• Dragging no longer makes the drag preview lag behind the pointer: hovers reach the store at most once per animation frame, and only rows whose drop highlight changes re-render. (The internal tree.state.nodes.drag.destinationParentId / destinationIndex fields moved to tree.state.dnd; use tree.dragDestinationParent / tree.dragDestinationIndex instead.) (#385)

v4.0.0

Breaking Changes

• react-dnd and react-dnd-html5-backend are now peer dependencies instead of bundled dependencies — install them alongside react-arborist (npm install react-arborist react-dnd react-dnd-html5-backend). This fixes a global singleton conflict (#319) where apps that also used react-dnd ended up with two independent copies of the library, causing drag-and-drop to silently break or throw "Cannot have two HTML5 backends at the same time." Both peers must be v16 (^16), and both are required even when you pass your own dndBackend / dndManager, because the drag preview calls into react-dnd-html5-backend on every drag. react-dnd v16 is ESM-only, and react-arborist now ships a single ESM build too (the CommonJS dist/main build is gone), so import and require load the same copy instead of two copies with separate React contexts. require("react-arborist") from CommonJS relies on require(esm), unflagged from Node 22.12 — now the engines.node floor, which package managers check at install time, so installing v4 requires Node ≥ 22.12 even for bundler and browser consumers. CommonJS TypeScript projects on Node module resolution need module: "nodenext" (TypeScript ≥ 5.8) or "node20" (TypeScript ≥ 5.9); "node16" and "node18" report TS1479. Jest users must add react-arborist to the transformIgnorePatterns exception list alongside react-dnd (see the README). The package also declares an exports map: react-arborist and react-arborist/package.json resolve as before, but deep imports such as react-arborist/dist/module/... are no longer resolvable. The react and react-dom peer floor rises from 16.14 to 18: the build now imports react/jsx-runtime and useSyncExternalStore directly from React, which older versions can't provide to ESM consumers. (#371)

Fixes

• @types/react-window is now a regular dependency instead of a dev dependency. react-arborist's public type declarations reference react-window types (onScroll, outerElementType, innerElementType, tree.list, scroll alignment), so without it TypeScript reported TS7016 under skipLibCheck: false and silently typed those as any otherwise. (#371)

Changelog

Sourced from react-arborist's changelog.

Version 4.0.1

Fixes

• Dragging no longer makes the drag preview lag behind the pointer: hovers reach the store at most once per animation frame, and only rows whose drop highlight changes re-render. (The internal tree.state.nodes.drag.destinationParentId / destinationIndex fields moved to tree.state.dnd; use tree.dragDestinationParent / tree.dragDestinationIndex instead.) (#385)

Version 4.0.0

Breaking Changes

• react-dnd and react-dnd-html5-backend are now peer dependencies instead of bundled dependencies — install them alongside react-arborist (npm install react-arborist react-dnd react-dnd-html5-backend). This fixes a global singleton conflict (#319) where apps that also used react-dnd ended up with two independent copies of the library, causing drag-and-drop to silently break or throw "Cannot have two HTML5 backends at the same time." Both peers must be v16 (^16), and both are required even when you pass your own dndBackend / dndManager, because the drag preview calls into react-dnd-html5-backend on every drag. react-dnd v16 is ESM-only, and react-arborist now ships a single ESM build too (the CommonJS dist/main build is gone), so import and require load the same copy instead of two copies with separate React contexts. require("react-arborist") from CommonJS relies on require(esm), unflagged from Node 22.12 — now the engines.node floor, which package managers check at install time, so installing v4 requires Node ≥ 22.12 even for bundler and browser consumers. CommonJS TypeScript projects on Node module resolution need module: "nodenext" (TypeScript ≥ 5.8) or "node20" (TypeScript ≥ 5.9); "node16" and "node18" report TS1479. Jest users must add react-arborist to the transformIgnorePatterns exception list alongside react-dnd (see the README). The package also declares an exports map: react-arborist and react-arborist/package.json resolve as before, but deep imports such as react-arborist/dist/module/... are no longer resolvable. The react and react-dom peer floor rises from 16.14 to 18: the build now imports react/jsx-runtime and useSyncExternalStore directly from React, which older versions can't provide to ESM consumers. (#371)

Fixes

• @types/react-window is now a regular dependency instead of a dev dependency. react-arborist's public type declarations reference react-window types (onScroll, outerElementType, innerElementType, tree.list, scroll alignment), so without it TypeScript reported TS7016 under skipLibCheck: false and silently typed those as any otherwise. (#371)

Commits

• a4c7805 v4.0.1
• 6ca6dfc Improved drag and drop performance (#385)
• 10859eb Write .js extensions in source imports and drop fix-esm-extensions (#388)
• bbb5b38 v4.0.0
• 33acbff feat!: promote react-dnd to peer dependency, require v16 and Node ≥22 (#371)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: pgadmin-org/pgadmin4/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 5886903f-e544-4e7a-a740-6ddcc0ca82f3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}