Bump react-window from 1.8.11 to 2.2.7

[dependabot]

Bumps react-window from 1.8.11 to 2.2.7.

Release notes

Sourced from react-window's releases.

2.2.7

• Fixed a problem with project logo not displaying correctly in the README for the Firefox browser.

2.2.6

• useDynamicRowHeight should not instantiate ResizeObserver when server-rendering

2.2.5

• Use defaultHeight/defaultWidth prop to server render initial set of rows/cells
• Adjust TypeScript return type for rowComponent/cellComponent to work around a ReactNode vs ReactElement mismatch caused by #875

2.2.4

• Update README docs

2.2.3

• Update TS Doc comments for List and Grid imperative methods to specify when a method throws.
• Throw a RangeError (instead of a regular Error) if an invalid index is passed to one of the imperative scroll-to methods.

2.2.2

The return type of List and Grid components is explicitly annotated as ReactElement. The return type of rowComponent and cellComponent changed from ReactNode to ReactElement. This was done to fix TypeScript warnings for React versions 18.0 - 18.2. (See issue #875)

2.2.1

• Fix possible scroll-jump scenario with useDynamicRowHeight

2.2.0

• Support for dynamic row heights via new useDynamicRowHeight hook.

const rowHeight = useDynamicRowHeight({
  defaultRowHeight: 50
});
return <List rowHeight={rowHeight} {...rest} />;

• Smaller NPM bundle; (docs are no longer included as part of the bundle due to the added size)

---

Documentation at: https://react-window-9gegorjnr-brian-vaughns-projects.vercel.app/

2.1.2

Prevent ResizeObserver API from being called at all if an explicit List height (or Grid width and height) is provided.

Thanks to @​tnajdek for the PR!

---

Documentation at: https://react-window-8cygyvomv-brian-vaughns-projects.vercel.app/

2.1.1

... (truncated)

Changelog

Sourced from react-window's changelog.

2.2.7

• Fixed a problem with project logo not displaying correctly in the README for the Firefox browser.

2.2.6

• useDynamicRowHeight should not instantiate ResizeObserver when server-rendering

2.2.5

• Use defaultHeight/defaultWidth prop to server render initial set of rows/cells
• Adjust TypeScript return type for rowComponent/cellComponent to work around a ReactNode vs ReactElement mismatch caused by #875

2.2.4

• Update README docs

2.2.3

• Update TS Doc comments for List and Grid imperative methods to specify when a method throws.
• Throw a RangeError (instead of a regular Error) if an invalid index is passed to one of the imperative scroll-to methods.

2.2.2

The return type of List and Grid components is explicitly annotated as ReactElement. The return type of rowComponent and cellComponent changed from ReactNode to ReactElement. This was done to fix TypeScript warnings for React versions 18.0 - 18.2. (See issue #875)

2.2.1

• Fix possible scroll-jump scenario with useDynamicRowHeight

2.2.0

• Support for dynamic row heights via new useDynamicRowHeight hook.

const rowHeight = useDynamicRowHeight({
  defaultRowHeight: 50
});
return <List rowHeight={rowHeight} {...rest} />;

• Smaller NPM bundle; (docs are no longer included as part of the bundle due to the added size)

2.1.2

Prevent ResizeObserver API from being called at all if an explicit List height (or Grid width and height) is provided.

2.1.1

... (truncated)

Commits

• b7e8457 2.2.6 -> 2.2.7
• dc23245 Fixed a problem with project logo not displaying correctly in the README for ...
• 0138b13 Tweaked how-it-works graphic style
• 2b98251 2.2.5 -> 2.2.6
• 6222edc useDynamicRowHeight: Don't instantiate ResizeObserver when server-rendering (...
• 69330f4 Fix example
• 8433914 Update docs to clarify that Grid cells can't be auto-sized
• 7969e5a Fix docs typo
• dff578f 2.2.4 -> 2.2.5
• b26f7da 2.2.5 (#896)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: pr: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Great job, @dependabot[bot]! 🎉 Thank you for submitting your pull request to CodeHarborHub. We appreciate your contribution and enthusiasm! Our team will review it soon. If you have any questions or need further assistance, feel free to reach out. Thanks for contributing!

[github-actions]

⚡️ Lighthouse Report for the Deploy Preview of this PR 🚀

🔗 Site: CodeHarborHub | Live Site

URL 🌐	Performance	Accessibility	Best Practices	SEO	📊
/	🔴 35	🟡 77	🟡 75	🟢 100	📄
/docs	🟡 52	🟡 87	🟢 96	🟢 100	📄
/courses	🟡 56	🟡 86	🟢 96	🟢 100	📄
/showcase	🟡 51	🟡 87	🟡 75	🟡 86	📄
/community	🟡 58	🟡 86	🟢 96	🟢 100	📄

[deepsource-io]

DeepSource Code Review

We reviewed changes in 9d632d6...e6275f2 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Jun 3, 2026 1:20a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[github-actions]

This PR has been automatically closed due to inactivity from the owner for 15 days.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.