chore(deps): bump the frontend-runtime-major group in /frontend with 3 updates

[dependabot]

Bumps the frontend-runtime-major group in /frontend with 3 updates: react-dropzone, @types/node and jsdom.

Updates react-dropzone from 19.1.1 to 20.0.0

Release notes

Sourced from react-dropzone's releases.

v20.0.0

20.0.0 (2026-08-02)

• feat!: drop Node 20, upgrade jsdom to v30 (01fc05c)

BREAKING CHANGES

• minimum supported Node.js is now 22

v19.3.0

19.3.0 (2026-08-02)

Features

• group MIME types in accept (closes #1189) (02e7886)

v19.2.0

19.2.0 (2026-08-01)

Features

• add paste-to-upload support (closes #1210) (18fc412)

Commits

• 01fc05c feat!: drop Node 20, upgrade jsdom to v30
• 02e7886 feat: group MIME types in accept (closes #1189)
• c54ba5a docs: document using react-dropzone with Tauri (closes #1316)
• 18fc412 feat: add paste-to-upload support (closes #1210)
• b0505de chore(deps): bump waku from 1.0.0-beta.6 to 1.0.0-beta.8 (#1488)
• 5fc34a3 chore(deps): bump the minor group across 1 directory with 3 updates
• 3e97b96 chore(deps): bump the patch group across 1 directory with 6 updates (#1492)
• e9fc73e docs: document directory selection via webkitdirectory (closes #1344)
• See full diff in compare view

Updates @types/node from 22.19.1 to 26.1.2

Commits

• See full diff in compare view

Updates jsdom from 29.1.1 to 30.0.1

Release notes

Sourced from jsdom's releases.

v30.0.1

• Fixed getComputedStyle() with calc() and other functions throwing an exception, which regressed in v30.0.0. (@​asamuzaK)
• Sped up up range operations on large documents (@​leonidaz)

v30.0.0

Breaking changes:

• Node.js minimum version raised to ^22.22.2 || ^24.15.0 || >=26.0.0.

Other changes:

• Added CSS.escape() and CSS.supports() functions. (@​asamuzaK)
• Added 'background-position-x' and 'background-position-y' CSS properties. (@​olagokemills)
• Fixed getComputedStyle() to convert length values into pixels. (@​asamuzaK)
• Fixed CSS function serialization, e.g., in the return value of getPropertyValue(). (@​asamuzaK)
• Fixed the type of error thrown by document.evaluate() (@​dokson)

Commits

• 6584485 30.0.1
• 0c51df6 Update dependencies and dev dependencies
• 32adb34 Bump @​asamuzakjp/dom-selector
• 70f014a Speed up range operations on large documents
• 250d7ee Partially fix getComputedStyle with calc()
• 20a01fc 30.0.0
• 8c8e583 Precompute WPT expectation matches
• f32245c Bump Node.js floor and dependencies
• 03ef23b Add background-position longhands
• ded056f Test CSS.escape() with numeric IDs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

PR Context Summary

• Linked issue(s): none
• Referenced but not closing: #1189, #1210, #1316, #1488, #1492, #1344
• PR author trusted by GitHub: no
• Dependabot PR: yes
• PR assignee synced from linked issue: no change
• Macroscope review status: Waiting for under-review or ready-to-merge before triggering Macroscope.

Suggested issue links

• No strong issue match found yet.

Use Fixes #123 or Closes #123 in the PR body when one of the suggestions is the intended issue.
Manual rerun: Actions > PR Context Triage > Run workflow > set pr_number and force_review=true.

[Abhash-Chakraborty]

Holding this one rather than merging with the rest of today's batch. The other five went in (#439, #440, #442, #443, #441); this group needs splitting first.

The problem is that it bundles one runtime major with two dev-only ones, and CI cannot catch a regression in the runtime one:

Package	19.1.1 → 20.0.0 etc.	Where	Risk
react-dropzone	19 → 20	dependencies	Real. See below.
@types/node	22 → 26	devDependencies	Real, but different. See below.
jsdom	29 → 30	devDependencies	Low — test environment only.

react-dropzone is on the upload page, and nothing tests it. frontend/src/app/upload/page.tsx calls useDropzone twice (single-file and bulk-ZIP modes) using accept, maxSize, maxFiles, multiple, disabled, onDrop, and fileRejections. The only upload test in the suite is upload-queue.test.ts, which covers queue logic and never renders the dropzone. So a green frontend-check here means the app compiles, not that dragging a file still works — and upload is the app's primary ingest path.

@types/node 22 → 26 disagrees with the runtime. ci.yml:161 pins node-version: 22 and frontend/Dockerfile:3 pins node:22-alpine. Bumping the type definitions to 26 tells TypeScript that Node 26 APIs exist, while everything that actually runs is Node 22. That compiles clean and fails at runtime — which is precisely the CI/image drift described in #396. It should follow the Node 24 LTS move in that issue, not lead it.

Suggested split:

1. jsdom 29 → 30 alone — mergeable on CI evidence.
2. @types/node — hold until ci: build the Docker images in PR CI, then align Node to 24 LTS #396 lands the Node bump, then move both pins and the types together.
3. react-dropzone 19 → 20 alone, with a manual check of both dropzones (single + bulk ZIP, an oversized file, and a rejected file type to confirm fileRejections still populates). Worth reading the v20 changelog for accept/fileRejections changes specifically.

@dependabot ignore this major version is not right here — these should land, just not together and not blind. Happy to take (1) immediately if you want it off the queue.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.