refactor: Bump react-draggable from 4.7.0 to 4.7.2

[dependabot]

Bumps react-draggable from 4.7.0 to 4.7.2.

Changelog

Sourced from react-draggable's changelog.

4.7.2 (Sep 16, 2026)

• Fix: ESM consumers under moduleResolution: node16/nodenext no longer resolve the CommonJS type declaration. The exports map carried a single condition-independent "types" key, so the import entry was typed by build/cjs/cjs.d.ts — a CJS declaration, since the package has no "type": "module" — which made a default import resolve to the module namespace and <Draggable> fail with TS2604/TS2786. Each condition now declares its own types, pointing the ESM entry at the cjs.d.mts tsup already emits. Regression in 4.6.0; types-only, no runtime change. (closes #816)
• Internal: the build contract check now asserts that exports types each condition separately, and type-checks a real ESM consumer against the built package under nodenext — resolving through exports rather than a paths mapping, which is what let this regression through.

4.7.1 (Jul 28, 2026)

• Fix: props are no longer marked required under React 18 TypeScript. Regression in 4.6.0. The propTypes static was a required member of the public type; React 18's JSX LibraryManagedAttributes consults propTypes when it is required, and doing so cancels the optionality defaultProps normally grants. React 19 ignores propTypes, which is why the v19-only type check missed it. make lint now also type-checks the public surface against @types/react@18. (#809, closes #807)
• Fix: guard the process access in the debug logger so browser bundlers that do not shim process no longer crash on import. (#810, closes #806)

Commits

• fc6286a release v4.7.2
• 576628c chore: restore missing security resolutions + close esbuild/uuid alerts (#823)
• a995fb5 chore: clear dependabot security alerts (#821)
• 194ecfc build: pin packageManager to yarn 1.22.22 (#820)
• 01989d2 fix: type each exports condition so ESM consumers get ESM types (#817)
• 087337f build: check npm before the tag-is-tip check in the release gate
• bcbaa8e build: make the release flow refuse to publish a bad state
• 2a2bfc0 test(build): fail the build on an unguarded process reference (#806)
• 0c95645 release v4.7.1
• 24a8fb3 Merge PR #809: fix partial/undefined props under React 18 TypeScript
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 1bf9f914-9e89-47ef-ad5c-0a6c65927fd8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.