This is a todo list on the various dependencies that need updating. I already created a PR that makes a number of minor/patch release updates which all looked safe.

So far, I didn't touch the following dependencies below, since these will need a bit more care & testing:

• Astro had several minor version updates (5.7 → 5.14). I don't think there are breaking changes though. (@blms)
• @supabase/ssr had a minor version update (0.6 → 0.7). (@blms)
• @supabase/supabase-js had multiple minor version updates (2.49 → 2.58). (@blms)
• @uppy/core and @uppy/xhr-upload had major version upgrades (4 → 5). Note: we previously had a problem with a regression bug in uppy/xhr-upload, which broke image uploads to IIIF cloud, and had it pinned to v3.6.1 for a while. This bug seems to have been resolved in v4 (which we are currently using), but it's definitely something we should test for. (@blms)
• nodemailer had a major version upgrade (6 → 7) (@blms)
• react-window had a major version upgrade (1 → 2). We are using this in the IIIF thumbnail view and I think there are breaking API changes (@rsimon).
• es-lint(dev dependency) had minor version updates, which are probably safe. (@blms)
• typescript (dev dependency) had a minor version update, which is probably safe (@rsimon).

Upgrades on our own libraries:

• @recogito/text-annotator, @recogito/text-annotator-tei and @recogito/react-text-annotator. These had a minor version update with changes to selection handling and the React text popup, and improvements to the highlight renderer . There are no breaking changes, but we should thoroughly test for regressions in plaintext and TEI views. The text popup also has a new asPortal prop which we (probably) need to enable to maintain current behavior (@rsimon).
• @recogito/pdf-annotator and @recogito/react-pdf-annotator. There are no breaking changes either, but we should test for regressions – especially because the new version includes a major PDF.js update (PDF.js 4 → 5). Also: the new renderer has additional init options for highlight smoothing we should leverage (@rsimon).
• @recogito/studio-sdk. Shouldn't have any breaking changes. But we should test with the existing plugins (@rsimon).
• cozy-iiif had minor version updates (0.2 → 0.4). I think all of them are safe, but will double-check (@rsimon).