npm(deps-dev): bump @testing-library/user-event from 14.6.6 to 14.6.7 in /web in the testing-library group

[dependabot]

Bumps the testing-library group in /web with 1 update: @testing-library/user-event.

Updates @testing-library/user-event from 14.6.6 to 14.6.7

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

• normalize DataTransfer format aliases (#1326) (1e0020b)
• feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)

Commits

• 1e0020b fix: normalize DataTransfer format aliases (#1326)
• d4b0593 feature: Add iframe support for user.keyboard typing (#1275)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Bumps @testing-library/user-event from 14.6.6 to 14.6.7 in web, picking up fixes for DataTransfer format alias normalization and iframe support for keyboard typing.

No breaking changes or migration steps.

^{Written for commit 2b97027. Summary will update on new commits.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​testing-library/​user-event@​14.6.6 ⏵ 14.6.7	+1		+1

View full report

[claude]

Review

This is a routine Dependabot patch bump for a dev-only test dependency: @testing-library/user-event 14.6.6 → 14.6.7, touching only web/package.json and web/package-lock.json (no application source changes).

Code quality / best practices: N/A — no source code changed, so CLAUDE.md style conventions (React functional components, shadcn/ui usage, etc.) don't apply here.

Potential bugs: None expected. This is a patch release (semver patch) per the changelog:

• Normalizes DataTransfer format aliases (fix: normalize DataTransfer format aliases testing-library/user-event#1326)
• Adds iframe support for user.keyboard typing (feature: Add iframe support for user.keyboard typing testing-library/user-event#1275)

Neither change should affect existing usages of userEvent in this repo (DeviceCard.test.tsx, SimpleDeviceCard.test.tsx, GroupManagementPanel.test.tsx, DeviceHistoryDialog.test.tsx), which use standard userEvent.setup() / click / type APIs and don't touch DataTransfer or iframe typing.

Performance: No impact — dev-only test tooling, not shipped in the production bundle (web/bundle/).

Security: No new transitive dependencies introduced (lockfile diff only bumps the version/integrity hash of the existing package); no security concerns.

Test coverage: N/A — this PR doesn't add functionality, so no new tests are needed. Recommend confirming npm run test, npm run lint, npm run typecheck, and npm run build pass in CI before merging, per repo convention (I wasn't able to run these locally in this review sandbox due to lack of network/install access).

Overall: safe to merge once CI is green. No concerns.