build(deps): bump react-draggable from 4.7.1 to 4.7.2

[dependabot]

Bumps react-draggable from 4.7.1 to 4.7.2.

Changelog

Sourced from react-draggable's changelog.

4.7.2 (Sep 16, 2026)

• Fix: ESM consumers under moduleResolution: node16/nodenext no longer resolve the CommonJS type declaration. The exports map carried a single condition-independent "types" key, so the import entry was typed by build/cjs/cjs.d.ts — a CJS declaration, since the package has no "type": "module" — which made a default import resolve to the module namespace and <Draggable> fail with TS2604/TS2786. Each condition now declares its own types, pointing the ESM entry at the cjs.d.mts tsup already emits. Regression in 4.6.0; types-only, no runtime change. (closes #816)
• Internal: the build contract check now asserts that exports types each condition separately, and type-checks a real ESM consumer against the built package under nodenext — resolving through exports rather than a paths mapping, which is what let this regression through.

Commits

• fc6286a release v4.7.2
• 576628c chore: restore missing security resolutions + close esbuild/uuid alerts (#823)
• a995fb5 chore: clear dependabot security alerts (#821)
• 194ecfc build: pin packageManager to yarn 1.22.22 (#820)
• 01989d2 fix: type each exports condition so ESM consumers get ESM types (#817)
• 087337f build: check npm before the tag-is-tip check in the release gate
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 13c3fe65-1b4e-40f1-888c-5a1c0ed57b3a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	66.61%	2357 / 3538
🔵	Statements	65.08%	2434 / 3740
🔵	Functions	63.57%	452 / 711
🔵	Branches	51.72%	1154 / 2231

File Coverage

No changed files found.

Generated in workflow #3073 for commit 7ff4ff4 by the Vitest Coverage Report Action

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	react-draggable@​4.7.1 ⏵ 4.7.2				+5

View full report