fix(deps): update grafana dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@grafana/data (source)	11.5.3 -> 12.0.0						major
@grafana/data (source)	^11.3.0-199826 -> ^12.0.0					devDependencies	major
@grafana/faro-web-sdk (source)	1.13.3 -> 1.18.1					dependencies	minor
@grafana/runtime (source)	11.5.3 -> 12.0.0						major
@grafana/schema (source)	11.5.3 -> 12.0.0						major
@grafana/ui (source)	11.5.3 -> 12.0.0						major
grafana/grafana-enterprise	11.5.3 -> 12.0.0						major

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

grafana/grafana (@​grafana/data)

v12.0.0: 12.0.0

Compare Source

Download page
What's new highlights

Features and enhancements

• Alerting: API to convert submitted Prometheus rules to GMA #​102231, @​fayzal-g
• Alerting: Add HMAC signature config to the webhook integration #​100960, @​alexander-akhmetov
• Alerting: Add MissingSeriesEvalsToResolve to the APIs #​102150, @​alexander-akhmetov
• Alerting: Add UI migration feature toggle #​102217, @​tomratcliffe
• Alerting: Add backend support for keep_firing_for #​100750, @​alexander-akhmetov
• Alerting: Add details and edit pages for groups #​100884, @​konrad147
• Alerting: Add keep_firing_for and Recovering state #​103248, @​soniaAguilarPeiron
• Alerting: Add migration to clean up rule versions table #​102484, @​yuri-tceretian
• Alerting: Add missing_series_evals_to_resolve option to alert rule form #​102808, @​tomratcliffe
• Alerting: Delete permanently deleted alert rules. #​102960, @​soniaAguilarPeiron
• Alerting: Detect target folder rules and show warning #​103673, @​soniaAguilarPeiron
• Alerting: Migration UI #​102010, @​soniaAguilarPeiron
• Alerting: Recover deleted alert rules #​101869, @​yuri-tceretian
• Alerting: Remove constraints for uniqueness of rule title #​102067, @​yuri-tceretian
• Alerting: Remove feature flag alertingNoDataErrorExecution #​102156, @​yuri-tceretian
• Alerting: Sequential evaluation of rules in group #​98829, @​yuri-tceretian
• Alerting: Skip rules that are managed by plugins when importing datasource-managed rules #​103573, @​soniaAguilarPeiron
• Alerting: Stop allowing manual editing/restore of internal AM config via settings #​103884, @​tomratcliffe
• Alerting: Template preview enhancements #​103817, @​JacobsonMT
• Alerting: Update alerting module to 58ba6c6 #​102812, @​yuri-tceretian
• Alerting: Use 'Grafana IRM' wording in alerting contact point #​102014, @​brojd
• Alerting: Webhook Improvements - Templateable Payloads #​103818, @​JacobsonMT
• AppChrome: Move kiosk button into profile menu #​103600, @​torkelo
• AppPlatform: Introduce experimental Github integration for dashboard configuration management #​96329, @​MissingRoberto
• Authorization: Add group to role DisplayName to make filtered list more clear #​102950, @​forsethc
• Azure Monitor: Add logs query builder #​99055, @​alyssabull
• Azure: Mark Azure Prometheus exemplars as GA and enable by default #​100595, @​aangelisc
• AzureMonitor: Improve selection of Basic Logs tables in the query builder #​103820, @​aangelisc
• BrowseDashboards: Switch to list view if sort is set #​102196, @​Clarity-89
• Checkbox: Add z-index to description #​103847, @​Clarity-89
• Chore: Promoting feature toggle pluginsSriChecks GA #​102212, @​tolzhabayev
• CloudMigrations: Add sorting and error filtering to Snapshot Results backend #​102753, @​mmandrus
• CloudMigrations: Change onPremToCloudMigrations feature toggle to GA #​103212, @​dana-axinte
• CloudMigrations: Enable high-level resource type selection #​103011, @​macabu
• CloudMigrations: Implement table sorting in the UI #​103061, @​mmandrus
• CloudWatch: Migrate to aws-sdk-go-v2 #​103106, @​njvrzm
• Cloudwatch: Do not parse log query grouping field to float #​102244, @​iwysiu
• Cloudwatch: Migrate to aws-sdk-go-v2 #​99643, @​njvrzm
• Cloudwatch: Revert aws sdk go v2 #​103644, @​iwysiu
• Config: Removes setting viewers_can_edit #​102275, @​eleijonmarck
• Dashboard Restore: Remove experimental functionality under feature flag dashboardRestore for now - this will be reworked #​103204, @​stephaniehingtgen
• Dashboards: Add Dashboard Schema validation (1) #​103662, @​marcoabreu
• Dashboards: Add a config setting that limits the number of series that will be displayed in a panel. Users can opt in to render all series. #​103405, @​oscarkilhed
• Dashboards: Prevent saving to a non-existent folder #​103503, @​stephaniehingtgen
• Dashboards: Prevent version restore to same data #​102665, @​stephaniehingtgen
• Dependencies: Bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.3 #​102555, @​dependabot[bot]
• Docs: Standard Datetime units limited to millisecond precision #​103610, @​axelavargas
• ElasticSearch: Improve index pattern error messaging and docs #​103899, @​idastambuk
• ElasticSearch: Make script field input a text area #​103708, @​idastambuk
• Extensions: Expose new observable APIs for accessing components and links #​103063, @​leventebalogh
• Feat: Make expressions work with plugins that set alerting:false but backend:true in their plugin.json files #​102232, @​tolzhabayev
• FlameGraphPanel: Add units to standard options (#​89815) #​102720, @​snyderdan
• Frontend: Remove Angular #​99760, @​jackw
• Go: Bump to 1.24.2 #​103521, @​Proximyst
• Go: Bump to 1.24.2 (Enterprise)
• I18n: Add 13 new languages for translations #​102971, @​joshhunt
• Influx: Support PDC for Influx SQL #​103032, @​aangelisc
• JWT: Add org role mapping support to the JWT provider #​101584, @​QuentinBisson
• K8s: Dashboards: Add fine grained access control checks to /apis #​104418, @​stephaniehingtgen
• K8s: Enable kubernetesClientDashboardsFolders by default #​103843, @​stephaniehingtgen
• LBAC for data sources: PublicPreview and self serve enablement #​102276, @​eleijonmarck
• Live: Remove queryOverLive and live-service-web-worker experimental feature flags #​103518, @​ryantxu
• Logs Panel: Add ISO8601 date to log download files #​102932, @​gtk-grafana
• Logs Table: Add new Controls component to Explore #​103467, @​matyax
• Logs: Add new Controls component to Explore #​103401, @​matyax
• Logs: Always keep displayed fields with changed queries #​102493, @​svennergr
• Logs: Clean up Explore meta information #​103801, @​matyax
• Logs: Prevent automatic scrolling on refresh after changing scroll position #​102463, @​matyax
• MetricsDrilldown: Advance exploreMetricsUseExternalAppPlugin feature toggle stage #​102137, @​NWRichmond
• MetricsDrilldown: Advance exploreMetricsUseExternalAppPlugin to GA #​103653, @​NWRichmond
• MetricsDrilldown: Mark exploreMetricsUseExternalAppPlugin as not frontend-only #​102942, @​NWRichmond
• MetricsDrilldown: Remove legacy Metrics Drilldown code paths #​103845, @​NWRichmond
• MetricsDrilldown: Restore link to Metrics Drilldown from Explore #​104075, @​NWRichmond
• NodeGraph: Add node graph algorithm layout option #​102760, @​joey-grafana
• Plugins: Remove plugin dependency version (Enterprise)
• Plugins: Remove sort by options from plugins catalog #​102862, @​oshirohugo
• Plugins: Remove support for secrets manager plugins #​101467, @​wbrowne
• Plugins: Remove support for secrets manager plugins (Enterprise)
• Plugins: Remove userStorageAPI feature toggle #​102915, @​oshirohugo
• Prometheus: Add back @​lezer/highlight to dev dependency #​102632, @​idastambuk
• Prometheus: Add support for cloud partners Prometheus data sources #​103482, @​kevinwcyu
• Prometheus: Enable Combobox metric select by default #​101045, @​joshhunt
• Prometheus: Enable prometheusRunQueriesInParallel feature toggle by default #​102127, @​itsmylife
• RecordedQueries: Deprecate recorded queries UI messaging (Enterprise)
• Security: Update JWT library (CVE-2025-30204) #​102715, @​Proximyst
• Tempo: Add support for ad-hoc filters #​102448, @​ifrost
• Tempo: Remove aggregate by #​98474, @​joey-grafana
• TraceView: Add scope attributes to span details #​103173, @​joey-grafana
• TraceView: Render all links in span details #​101881, @​ifrost
• Traces: Preinstall Traces Drilldown app with Grafana #​102986, @​ifrost

Bug fixes

• Alerting: Fix Simple condition threshold inputs with negative values. #​102976, @​soniaAguilarPeiron
• Alerting: Fix display of Normal (Updated) in alert history #​102476, @​tomratcliffe
• Alerting: Fix rule instances table #​102290, @​konrad147
• Alerting: Make nested folders work in Alert List Panel #​103550, @​tomratcliffe
• Alerting: Remove rule type switch for modified export mode #​102287, @​konrad147
• Alerting: Simplified alert rule toggle bug fixes #​102119, @​gillesdemey
• Alertmanager: Add Role-Based Access Control via reqAction Field #​101543, @​olegpixel
• App Platform: Pin bleve to fix CVE-2022-31022 #​102513, @​Proximyst
• AppChrome/MegaMenu: Fixes issue with default state being initialised to undocked #​103507, @​torkelo
• AppTitle: Fix overflowing text #​103583, @​tskarhed
• Azure: Ensure basic logs queries are limited to a single resource #​103588, @​aangelisc
• CloudWatch: Import new grafana-aws-sdk with PDC fix #​103249, @​njvrzm
• ColorPicker: Fixed height when switching tabs #​103304, @​DanMPA
• Dashboard: Fix Core Panel Migrations - table panel #​102146, @​axelavargas
• DashboardScenePage: Correct slug in self referencing data links #​100048, @​Sergej-Vlasov
• Dashboards: Fix duplicate provisioning when errors occur on title-only based provisioning #​102249, @​stephaniehingtgen
• Dashboards: Fix panel link to Grafana Metrics Drilldown #​103759, @​NWRichmond
• Fix: Change secure_json_data column data type to medium text only MYSQL #​102557, @​s4kh
• GrafanaUI: Prevent ToolbarButton from submitting form #​102228, @​kozhuhds
• GrafanaUI: Remove blurred background from overlay backdrops to improve performance #​103563, @​joshhunt
• LDAP test: Fix page crash #​102587, @​ashharrison90
• Navigation: Fix bookmarks when Grafana is running under subpath #​102679, @​matejkubinec
• PanelEdit: Fixes suggestions not applying options or field config #​102675, @​torkelo
• PluginProxy: Fix nil pointer in OAuth forwarding #​103626, @​moustafab
• Plugins: Fix better UX for disabled Angular plugins #​101333, @​hugohaggmark
• Plugins: Fix support for adhoc filters with raw queries in InfluxDB #​101966, @​beejeebus
• Renderer: Fix regression on callback URL in plugin mode #​103787, @​AgnesToulet
• SQL: Fix builder crashes when any in selected #​102871, @​zoltanbedi
• SSE: Fix goroutine leak in math operation expression parsing #​102380, @​kylebrandt
• Tempo: Add fixes for broken exemplars #​103298, @​joey-grafana

Breaking changes

• Alerting: Make $value return the query value in case when a single datasource is used #​102301, @​alexander-akhmetov
• Alerting: Relax permissions for access a rule #​103664, @​moustafab
• Alerting: Remove feature toggles relating to Loki Alert State History #​103540, @​rwwiv
• Alerting: Remove the POST endpoint for the internal Grafana Alertmanager config #​103819, @​rwwiv
• Anonymous: Enforce org role Viewer setting #​102070, @​eleijonmarck
• Chore: Enable Grafana version check when installing plugins #​103176, @​andresmgot
• Chore: Enabling failWrongDSUID by default in Grafana 12 #​102192, @​tolzhabayev
• Config: Removes setting viewers_can_edit #​101767, @​eleijonmarck
• Frontend: Remove Angular (Enterprise)
• Plugin Extensions: Clean up the deprecated APIs #​102102, @​leventebalogh
• Plugins: Remove plugin dependency version #​103728, @​wbrowne
• Tempo: Remove traceQLStreaming feature toggle #​103619, @​adrapereira

Plugin development fixes & changes

• Combobox: add grouping functionality #​100603, @​eledobleefe
• Grafana UI: Add columnGap + rowGap to Stack/Grid #​102883, @​ashharrison90
• Grafana UI: Clearly separate multiple warnings by using HTML tags #​97979, @​zenador

v11.6.1: 11.6.1

Compare Source

Download page
What's new highlights

Features and enhancements

• Chore: Update JWT library (CVE-2025-30204) #​102727, @​grambbledook
• DashboardScenePage: Correct slug in self referencing data links #​103854, @​Sergej-Vlasov
• Dependencies: Bump github.com/redis/go-redis/v9 to 9.7.3 to address CVE-2025-29923 #​102863, @​macabu
• Go: Bump to 1.24.2 #​103523, @​Proximyst
• Go: Bump to 1.24.2 (Enterprise)
• GrafanaUI: Use safePolygon close handler for interactive tooltips instead of a delay #​102869, @​mthorning
• Prometheus: Add support for cloud partners Prometheus data sources #​103941, @​kevinwcyu

Bug fixes

• Alertmanager: Add Role-Based Access Control via reqAction Field #​103479, @​olegpixel
• GrafanaUI: Remove blurred background from overlay backdrops to improve performance #​103647, @​joshhunt
• InfluxDB: Fix nested variable interpolation #​104096, @​aangelisc
• LDAP test: Fix page crash #​102684, @​ashharrison90
• Org redirection: Fix linking between orgs #​102870, @​ashharrison90
• Security: Fix CVE-2025-3454
• Security: Fix CVE-2025-2703
• Security: Fix CVE-2025-3260

v11.6.0: 11.6.0

Compare Source

Download page
What's new highlights

Features and enhancements

• API keys: Migrate API keys to service accounts at startup #​96924, @​dmihai
• AccessControl: Allow plugin roles to include plugins:write #​101089, @​gamab
• Alerting: Add DAG errors to alert rule creation and view #​99423, @​soniaAguilarPeiron
• Alerting: Add Jira integration to cloud AMs #​100482, @​soniaAguilarPeiron
• Alerting: Add alert rule version history - part1 #​99490, @​soniaAguilarPeiron
• Alerting: Add migration to clean up rule versions table #​102562, @​yuri-tceretian
• Alerting: Add multiple threshold operators #​99516, @​paulojmdias
• Alerting: Add tracking for the mode used in query and notifications step when c… #​100824, @​soniaAguilarPeiron
• Alerting: Adding color option for slack receiver #​99615, @​wymangr
• Alerting: Allow selection of recording rule write target on per-rule basis. #​101778, @​stevesg
• Alerting: Allow specifying uid for new rules added to groups #​99858, @​moustafab
• Alerting: Improve template testing by trying non-root scopes #​101471, @​JacobsonMT
• Alerting: Include time range in template dashboard and panel urls #​101095, @​JacobsonMT
• Alerting: Keep the latest version of deleted rule in version table #​101481, @​yuri-tceretian
• Alerting: Promote alertingSaveStateCompressed flag to public preview #​99935, @​alexander-akhmetov
• Alerting: Remove ID and OrgID from hash calculation #​100140, @​yuri-tceretian
• Alerting: Remove feature toggle alertingNoNormalState #​99905, @​yuri-tceretian
• Alerting: Remove rule group edit from single rule editor #​100191, @​gillesdemey
• Alerting: Return 404 when /api/ruler/grafana/api/v1/rules/{Namespace}/{Groupname} does not exist #​100264, @​fayzal-g
• Alerting: Rule history restore feature #​100609, @​soniaAguilarPeiron
• Alerting: Support Jira Integration #​100480, @​yuri-tceretian
• Alerting: Track if new gm rules are created with queries and expressions transformable to simple mode #​101121, @​soniaAguilarPeiron
• Alerting: Update IRM copies in Configuration Tracker #​100069, @​teodosii
• Alerting: Update design of rule details tab and add updated by #​99895, @​tomratcliffe
• Alerting: Update irm links for incident and oncall in case new irm plugin is present #​99952, @​soniaAguilarPeiron
• Alerting: Use exponential backoff in the remote Alertmanager readiness check #​99756, @​santihernandezc
• Alerting: Use uid instead of id in AnnotationsStateHistory #​101207, @​soniaAguilarPeiron
• Auth: Add IP address login attempt validation #​98123, @​colin-stuart
• Auth: Add support for the TlsSkipVerify parameter to JWT Auth #​91514, @​Ret2Me
• Auth: Make ssoSettingsSAML GA and enabled by default #​101766, @​mgyongyosi
• Azure Monitor: Filter namespaces by resource group #​100325, @​alyssabull
• Azure: Resource picker improvements #​101462, @​aangelisc
• Azure: Variable editor and resource picker improvements #​101695, @​alyssabull
• Badge: Add darkgrey color #​100699, @​Clarity-89
• Canvas: One click links and actions #​99616, @​adela-almasan
• Chore: Bump Go to 1.23.7 #​101576, @​macabu
• Chore: Bump Go to 1.23.7 (Enterprise)
• Chore: Bump github.com/expr-lang/expr to v1.17.0 to address CVE-2025-29786 #​102533, @​macabu
• Chore: Remove sqlQuerybuilderFunctionParameters feature toggle #​100809, @​zoltanbedi
• CloudWatch: Track Logs Insights query language #​100254, @​idastambuk
• Configuration tracker: Update copy in IRM and point to new IRM slack integration #​100440, @​teodosii
• Dashboard: Folder move unexpected behavior #​100394, @​yincongcyincong
• Dashboards: Allow custom quick time ranges specified in dashboard model #​93724, @​sknaumov
• Dashboards: Monitor dashboard loading performance #​99629, @​dprokop
• Dashboards: Remove default empty string from variable create view #​98922, @​yincongcyincong
• Dashboards: WeekStart is now of type WeekStart | undefined instead of string #​101123, @​oscarkilhed
• DesignSystem: Menu and popover styling update to use new elevated background token #​100255, @​torkelo
• Docker: Use our own glibc 2.40 binaries #​99903, @​DanCech
• Docs: Add a note on query caching for Cloudwatch datasource #​100180, @​idastambuk
• Drilldown: Require datasources:explore RBAC action #​101366, @​svennergr
• Elasticsearch: Remove frontend testDatasource method #​99894, @​idastambuk
• Elasticsearch: Replace level in adhoc filters with level field name #​100315, @​iwysiu
• Elasticsearch: Replace term size dropdown with text input #​99718, @​iwysiu
• Explore: Add hide_logs_download and hide button to download logs #​99512, @​svennergr
• Explore: Move drilldown apps from Explore to a new navbar item "Drilldown" #​100409, @​adrapereira
• ExploreMetrics: Add toggle to enable routing to externalized Explore Metrics app plugin #​99481, @​NWRichmond
• Feat: OSS connections page state filter and update all added #​100688, @​s4kh
• Features: Remove openSearchBackendFlowEnabled feature toggle #​99068, @​idastambuk
• Folders: Add validation that folder is not a parent of itself #​101569, @​stephaniehingtgen
• Geomap: WebGL for Marker Layer #​95457, @​drew08t
• Grafana/ui: Export UsersIndicator #​100698, @​Clarity-89
• Graphite: Compare query builder query to raw query #​101104, @​bossinc
• Histogram: Handle multiple native histograms #​98404, @​domasx2
• Image Renderer: Add support for SSL in plugin mode #​98009, @​nmarrs
• ImportDashboards: Use NestedFolderPicker #​99696, @​joshhunt
• Loki: Removal of Resolution in query editors #​101860, @​svennergr
• Menu: Uniform padding to make menu item hover state look better #​100275, @​torkelo
• MetricsDrilldown: Update name of queryless metrics experience #​100675, @​yangkb09
• MultiCombobox: Export from grafana/ui #​100368, @​Clarity-89
• NodeGraph: Improve view traces for uninstrumented services #​98442, @​edvard-falkskar
• PluginExtensions: Added support for sharing functions #​98888, @​theSuess
• PluginExtensions: Added support for sharing functions (Enterprise)
• PluginExtensions: Exposing registry meta for components returned via usePluginComponents #​100587, @​mckn
• Plugins: Improve plugin details UX for core plugins #​99830, @​oshirohugo
• Plugins: Remove managedPluginsInstall feature toggle #​100416, @​oshirohugo
• Plugins: Remove managedPluginsInstall feature toggle (Enterprise)
• Plugins: Remove uninstall plugin step from cli plugins update-all #​101632, @​oshirohugo
• Prometheus: Get the utcOffset value of timezone when it's specified #​99910, @​itsmylife
• Prometheus: Remove query assistant and related components #​100669, @​edwardcqian
• QueryOptions: Handle invalid time shift values #​101670, @​ivanortegaalba
• RBAC: Remove accessControlOnCall feature toggle #​101222, @​gamab
• RBAC: Remove accessControlOnCall feature toggle (Enterprise)
• Reporting: Add email subject support (Enterprise)
• Security: Update to Go 1.23.5 (Enterprise)
• Tempo: Support TraceQL instant metrics queries #​99732, @​joey-grafana
• Tempo: TraceQL metrics streaming #​99037, @​adrapereira
• Time regions: Add option for cron syntax to support complex schedules #​99548, @​leeoniya
• TimePicker: Ability to manually specify quick ranges #​101465, @​Sergej-Vlasov
• TimeRangePicker: Options list padding #​100343, @​torkelo
• TopNav: Move news into profile menu #​99535, @​bergquist
• Trace View: Add link from the Trace View to the Profiles Drilldown #​101422, @​joey-grafana
• Transformation: Add support for variables to ALL transformations #​100225, @​dprokop
• Transformations: Add round() to Unary mode of Add field from calc #​101295, @​leeoniya
• VizActions: Add confirmation message #​100012, @​adela-almasan
• grafana-ui: Update InlineField error prop type to React.ReactNode #​100347, @​Clarity-89

Bug fixes

• Alerting: Add error handling for missing data source #​101508, @​gillesdemey
• Alerting: Call RLock() before reading sendAlertsTo map #​99812, @​santihernandezc
• Alerting: Disable create rule menu item from panel when unifiedAlerting is disabled #​100701, @​soniaAguilarPeiron
• Alerting: Fix KeyValueMap input bug #​101367, @​soniaAguilarPeiron
• Alerting: Fix crash when invalid matcher is used in silence query params #​101500, @​gillesdemey
• Alerting: Fix evaluation of rules with no-op math expressions #​101436, @​moustafab
• Alerting: Fix exporting new rule with a new group #​101404, @​soniaAguilarPeiron
• Alerting: Fix fieldSelector encoding #​99751, @​gillesdemey
• Alerting: Fix inheritance of the timing options for policy tree #​99398, @​gillesdemey
• Alerting: Fix notification templates layout #​101232, @​gillesdemey
• Alerting: Fix state reason #​101530, @​yuri-tceretian
• Alerting: Fix token-based Slack image upload to work with channel names #​100988, @​JacobsonMT
• App Platform: Pin bleve to fix CVE-2022-31022 #​102531, @​Proximyst
• App: Fix web app behaviour on iOS #​100382, @​ashharrison90
• Auth: Fix AzureAD config UI's ClientAuthentication dropdown #​100752, @​mgyongyosi
• Auth: Fix redirect with JWT auth URL login #​100295, @​mgyongyosi
• AuthN: Refetch user on "ErrUserAlreadyExists" #​100346, @​kalleep
• Caching: Fix duplicate metric registration for cache size (Enterprise)
• CloudWatch: Fix condition for running annotation queries to require dimensions #​101660, @​kevinwcyu
• Combobox: Fix list not being virtualized initially in some cases #​100188, @​tskarhed
• Dashboard: Fix for overwriting an edited dashboard in the old architecture #​100247, @​bfmatei
• Dashboard: Fix the unintentional time range and variables updates on saving

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Scenes is no longer part of these dependency bumps so should be good to go!