chore(deps): bump the javascript-dependencies group across 1 directory with 16 updates by dependabot[bot] · Pull Request #29 · SingularityCoLabs/Aether

dependabot · 2026-09-21T22:28:49Z

Bumps the javascript-dependencies group with 16 updates in the / directory:

Package	From	To
@bufbuild/buf	`1.72.0`	`1.73.0`
@bufbuild/protoc-gen-es	`2.14.0`	`2.15.0`
prettier	`3.9.6`	`3.9.8`
@bufbuild/protobuf	`2.14.0`	`2.15.0`
@connectrpc/connect	`2.1.2`	`2.2.0`
@connectrpc/connect-web	`2.1.2`	`2.2.0`
lucide-react	`1.31.0`	`1.47.0`
next	`16.3.1`	`16.3.5`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
tailwind-merge	`3.6.0`	`3.7.0`
@playwright/test	`1.62.1`	`1.63.0`
@types/node	`26.2.0`	`26.6.1`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
eslint-config-next	`16.3.1`	`16.3.5`

Updates @bufbuild/buf from 1.72.0 to 1.73.0

Release notes

Sourced from @bufbuild/buf's releases.

v1.73.0

Fix buf format dropping comments next to commas or semicolons in message literals.

Fix compilation failing to resolve symbols re-exported through import public when the re-exporting file also reaches those symbols through a non-public import.

Fix LSP go to definition not resolving across files inside dependency and well-known-type files, and release workspaces when their last open file closes to free resources.

Fix LSP finding only a subset of references to symbols declared in dependencies, including well-known types.

Fix buf format non-idempotent trailing comment formatting.

Update built-in Well-Known Types to Protobuf v35.1.

Fix managed mode setting java_multiple_files on Edition 2024 files, which is not allowed and causes code generation to fail.

Changelog

Sourced from @bufbuild/buf's changelog.

[v1.73.0] - 2026-09-11

Fix buf format dropping comments next to commas or semicolons in message literals.

Fix compilation failing to resolve symbols re-exported through import public when the re-exporting file also reaches those symbols through a non-public import.

Fix LSP go to definition not resolving across files inside dependency and well-known-type files, and release workspaces when their last open file closes to free resources.

Fix LSP finding only a subset of references to symbols declared in dependencies, including well-known types.

Fix buf format non-idempotent trailing comment formatting.

Update built-in Well-Known Types to Protobuf v35.1.

Fix managed mode setting java_multiple_files on Edition 2024 files, which is not allowed and causes code generation to fail.

Commits

8b7368b Release v1.73.0 (#4673)
bc2b635 Bump protocompile (#4672)
5303e6b Update error message for canceled root context (#4671)
3639fc3 Add audit commit names (#4670)
37122b2 Make upgrade (#4668)
92aa508 Stop setting java_multiple_files for edition 2024 sources (#4664)
01ff315 Make upgrade (#4662)
3b50cde Update protovalidate-go and cel-go (#4663)
318a492 Export invalid filter type error returned by FilterImage (#4659)
704103b Bump protoc version to v35.1 (#4655)
Additional commits viewable in compare view

Updates @bufbuild/protoc-gen-es from 2.14.0 to 2.15.0

Release notes

Sourced from @bufbuild/protoc-gen-es's releases.

v2.15.0

What's Changed

Add plugin option map_imports to point imports at packages by @anuraaga in bufbuild/protobuf-es#1528

Full Changelog: bufbuild/protobuf-es@v2.14.1...v2.15.0

v2.14.1

What's Changed

This release deprecates configureTextEncoding() from @bufbuild/protobuf/wire. If you run @bufbuild/protobuf in an environment that does not provide the Text Encoding API, please migrate to a polyfill that installs TextEncoder (with the methods encode and optionally encodeInto) and TextDecoder (with the fatal: true constructor argument and the decode method) on globalThis instead. Please see #1517 for the rationale.

Apply import_extension only to relative import paths by @timostamm in bufbuild/protobuf-es#1515

Stop sharing the text encoding implementation via globalThis by @timostamm in bufbuild/protobuf-es#1517

Full Changelog: bufbuild/protobuf-es@v2.14.0...v2.14.1

Commits

f72f529 Release 2.15.0 (#1535)
11b6a72 Add map_imports option as the official way to point imports at packages (#1528)
09c98f1 Release 2.14.1 (#1518)
See full diff in compare view

Updates prettier from 3.9.6 to 3.9.8

Release notes

Sourced from prettier's releases.

3.9.8

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @seiyab)

🔗 Changelog

3.9.7

Support Angular 22.2

Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by `@seiyab`)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by `@Austin1serb`, `@giaBaoJS`)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by `@fisker`)

... (truncated)

Commits

4f2ab67 Release 3.9.8
3d82af8 Update Regex related dependencies (#20082)
5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
5b142ed Release Release @prettier/plugin-hermes@0.2.3, @prettier/plugin-oxc@0.2.3, an...
0df8eb8 Bump Prettier dependency to 3.9.7
3cf6c8c Clean changelog_unreleased
0449af3 Release 3.9.7
43cd5b0 Allow verify markdown test with mdx parser
ab8c911 Fix test on Node.js v26 (#19927)
4a5adf9 Fix tests
Additional commits viewable in compare view

Updates @bufbuild/protobuf from 2.14.0 to 2.15.0

Release notes

Sourced from @bufbuild/protobuf's releases.

v2.15.0

What's Changed

Add plugin option map_imports to point imports at packages by @anuraaga in bufbuild/protobuf-es#1528

Full Changelog: bufbuild/protobuf-es@v2.14.1...v2.15.0

v2.14.1

What's Changed

This release deprecates configureTextEncoding() from @bufbuild/protobuf/wire. If you run @bufbuild/protobuf in an environment that does not provide the Text Encoding API, please migrate to a polyfill that installs TextEncoder (with the methods encode and optionally encodeInto) and TextDecoder (with the fatal: true constructor argument and the decode method) on globalThis instead. Please see #1517 for the rationale.

Apply import_extension only to relative import paths by @timostamm in bufbuild/protobuf-es#1515

Stop sharing the text encoding implementation via globalThis by @timostamm in bufbuild/protobuf-es#1517

Full Changelog: bufbuild/protobuf-es@v2.14.0...v2.14.1

Commits

f72f529 Release 2.15.0 (#1535)
09c98f1 Release 2.14.1 (#1518)
a24d613 Stop sharing the text encoding implementation via globalThis (#1517)
See full diff in compare view

Updates @connectrpc/connect from 2.1.2 to 2.2.0

Release notes

Sourced from @connectrpc/connect's releases.

v2.2.0

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers: the request gate is a function that runs after the request headers are available. Throwing a ConnectError in the gate rejects a request before messages are read, decompressed, or parsed. Use this option to reject unauthenticated requests instead of interceptors. See the documentation for details.

We also recommend that you configure a message size limit for your server, see the readMaxBytes option.

Disallow propagation of protocol headers by @ajeetdsouza in connectrpc/connect-es#1717

Fix Http2SessionManager.verify() never settling when the connection closes during verification by @jackyzha0 in connectrpc/connect-es#1746

Drop support for Node.js 20 by @ajeetdsouza in connectrpc/connect-es#1777

Add requestGate handler option by @timostamm in connectrpc/connect-es#1781

Stop delivering stream messages after cancellation by @ajeetdsouza in connectrpc/connect-es#1792

Enable gRPC in Cloudflare conformance tests by @mar-cf in connectrpc/connect-es#1774

New Contributors

@jackyzha0 made their first contribution in connectrpc/connect-es#1746

@mar-cf made their first contribution in connectrpc/connect-es#1774

Full Changelog: connectrpc/connect-es@v2.1.2...v2.2.0

Commits

378bb8f Release 2.2.0 (#1796)
d0c2c0f Stop delivering stream messages after cancellation (#1792)
f16eb17 Simplify tests with type-narrowing assertions (#1782)
2548dac Add requestGate handler option (#1781)
86dc519 Use mock timers for timeout test (#1778)
61900e4 Bump @bufbuild/buf from 1.66.1 to 1.72.0 (#1762)
e86b489 Migrate jasmine to node:test (#1730)
a8e1588 Disallow propagation of protocol headers (#1717)
See full diff in compare view

Updates @connectrpc/connect-web from 2.1.2 to 2.2.0

Release notes

Sourced from @connectrpc/connect-web's releases.

v2.2.0

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers: the request gate is a function that runs after the request headers are available. Throwing a ConnectError in the gate rejects a request before messages are read, decompressed, or parsed. Use this option to reject unauthenticated requests instead of interceptors. See the documentation for details.

We also recommend that you configure a message size limit for your server, see the readMaxBytes option.

Disallow propagation of protocol headers by @ajeetdsouza in connectrpc/connect-es#1717

Fix Http2SessionManager.verify() never settling when the connection closes during verification by @jackyzha0 in connectrpc/connect-es#1746

Drop support for Node.js 20 by @ajeetdsouza in connectrpc/connect-es#1777

Add requestGate handler option by @timostamm in connectrpc/connect-es#1781

Stop delivering stream messages after cancellation by @ajeetdsouza in connectrpc/connect-es#1792

Enable gRPC in Cloudflare conformance tests by @mar-cf in connectrpc/connect-es#1774

New Contributors

@jackyzha0 made their first contribution in connectrpc/connect-es#1746

@mar-cf made their first contribution in connectrpc/connect-es#1774

Full Changelog: connectrpc/connect-es@v2.1.2...v2.2.0

Commits

378bb8f Release 2.2.0 (#1796)
fca66b5 Bump webdriverio from 9.31.2 to 9.31.4 in the webdriver group (#1784)
355b1fd Bump webdriverio from 9.19.2 to 9.31.2 in the webdriver group across 1 direct...
e10098f Remove Browserstack tests (#1731)
e86b489 Migrate jasmine to node:test (#1730)
See full diff in compare view

Updates lucide-react from 1.31.0 to 1.47.0

Release notes

Sourced from lucide-react's releases.

Version 1.47.0

What's Changed

feat(icons): add lambda icon by @UbaidUllah9962 in lucide-icons/lucide#4017

feat(icons): delegated faucet icon from lab by @karsa-mistmere in lucide-icons/lucide#4764

feat(icons): added door-closed-package icon by @karsa-mistmere in lucide-icons/lucide#4814

feat(icons): added 'nepali-rupee' icon by @sarajdhakal in lucide-icons/lucide#4608

feat(icons): added tube-lotion icon by @AlecRust in lucide-icons/lucide#4029

feat(icons): Added cupcake icon by @briz123 in lucide-icons/lucide#3000

feat(icons): added square-dashed-x icon by @EthanHazel in lucide-icons/lucide#4535

feat(icons): add rotate-cw-clock icon by @gkkconan in lucide-icons/lucide#3979

fix(icons): remove path from save-off by @HPRILLER in lucide-icons/lucide#4848

fix(icons): changed calendar-chevrons-right by @karsa-mistmere in lucide-icons/lucide#4865

fix(icons): changed broccoli icon by @jguddas in lucide-icons/lucide#4871

feat(icons): added square-dashed-plus by @psjdev in lucide-icons/lucide#4849

New Contributors

@UbaidUllah9962 made their first contribution in lucide-icons/lucide#4017

@sarajdhakal made their first contribution in lucide-icons/lucide#4608

@AlecRust made their first contribution in lucide-icons/lucide#4029

@gkkconan made their first contribution in lucide-icons/lucide#3979

@HPRILLER made their first contribution in lucide-icons/lucide#4848

@psjdev made their first contribution in lucide-icons/lucide#4849

Full Changelog: lucide-icons/lucide@1.46.0...1.47.0

Version 1.46.0

What's Changed

feat(icons): Added new icons: clef-g, clef-f and clef-c by @rrod497 in lucide-icons/lucide#4083

chore(deps-dev): bump astro from 7.3.0 to 7.3.2 in the astro-deps group by @dependabot[bot] in lucide-icons/lucide#4860

feat(icons): added monitor-pc icon by @karsa-mistmere in lucide-icons/lucide#4791

Full Changelog: lucide-icons/lucide@1.45.0...1.46.0

Version 1.45.0

What's Changed

feat(icons): added calendar-chevrons-right icon by @AlexandrePhilibert in lucide-icons/lucide#3565

feat(icons): added building-complex-plus icon by @tylerkade in lucide-icons/lucide#4758

feat(icons): add hourglass-cog icon by @lazerg in lucide-icons/lucide#4635

feat(icons): added mouth & mouth-off by @karsa-mistmere in lucide-icons/lucide#4787

feat(icons): added iv-bag icon by @karsa-mistmere in lucide-icons/lucide#4821

fix(icons): changed lectern icon by @UsamaKhan in lucide-icons/lucide#2925

feat(icons): add layout-arrow-right and layout-arrow-down by @samuelalake in lucide-icons/lucide#4541

feat(icons): added park icon by @skajosborn in lucide-icons/lucide#3177

fix(icons): changed album, book-marked, folder-bookmark icons by @karsa-mistmere in lucide-icons/lucide#3043

fix(icons): correct misspelled tags by @decknamec in lucide-icons/lucide#4836

feat(icons): added houses icon by @danielbayley in lucide-icons/lucide#3241

feat(icons): added notebook-dot icon by @elenakovelskikh in lucide-icons/lucide#3228

feat(icons): add messages-circle icon by @Mirazstudio-offical in lucide-icons/lucide#4754

feat(icons): added plant-pot icon by @vqh2602 in lucide-icons/lucide#3122

... (truncated)

Commits

94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
See full diff in compare view

Updates next from 16.3.1 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)

next/image: Reject empty images when reading/writing to the disk cache (#98186)

Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)

Add CSP nonce to script tags of loading and template files (#98403)

Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

Commits

ca2c75e v16.3.5
14fb290 [backport] Fix use cache prerender signal retention (#98448)
2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
4b56cee [16.3.x] Backport docs fixes (#98317)
5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
d9eac96 [16.3.x] next/image: skip 0-byte entries when initializing disk LRU cache (#9...
84b35fe [test] Fix 16.3 deploy test assertions (#98133)
14f9c1a [16.3.x][ci] Run flake detection and new deploy tests when merged and on back...
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, Description has been truncated

…y with 16 updates Bumps the javascript-dependencies group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@bufbuild/buf](https://github.com/bufbuild/buf) | `1.72.0` | `1.73.0` | | [@bufbuild/protoc-gen-es](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protoc-gen-es) | `2.14.0` | `2.15.0` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` | | [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.14.0` | `2.15.0` | | [@connectrpc/connect](https://github.com/connectrpc/connect-es/tree/HEAD/packages/connect) | `2.1.2` | `2.2.0` | | [@connectrpc/connect-web](https://github.com/connectrpc/connect-es/tree/HEAD/packages/connect-web) | `2.1.2` | `2.2.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.47.0` | | [next](https://github.com/vercel/next.js) | `16.3.1` | `16.3.5` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.1` | `16.3.5` | Updates `@bufbuild/buf` from 1.72.0 to 1.73.0 - [Release notes](https://github.com/bufbuild/buf/releases) - [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md) - [Commits](bufbuild/buf@v1.72.0...v1.73.0) Updates `@bufbuild/protoc-gen-es` from 2.14.0 to 2.15.0 - [Release notes](https://github.com/bufbuild/protobuf-es/releases) - [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.15.0/packages/protoc-gen-es) Updates `prettier` from 3.9.6 to 3.9.8 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.8) Updates `@bufbuild/protobuf` from 2.14.0 to 2.15.0 - [Release notes](https://github.com/bufbuild/protobuf-es/releases) - [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.15.0/packages/protobuf) Updates `@connectrpc/connect` from 2.1.2 to 2.2.0 - [Release notes](https://github.com/connectrpc/connect-es/releases) - [Commits](https://github.com/connectrpc/connect-es/commits/v2.2.0/packages/connect) Updates `@connectrpc/connect-web` from 2.1.2 to 2.2.0 - [Release notes](https://github.com/connectrpc/connect-es/releases) - [Commits](https://github.com/connectrpc/connect-es/commits/v2.2.0/packages/connect-web) Updates `lucide-react` from 1.31.0 to 1.47.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.47.0/packages/lucide-react) Updates `next` from 16.3.1 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.1...v16.3.5) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `@playwright/test` from 1.62.1 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.1...v1.63.0) Updates `@types/node` from 26.2.0 to 26.6.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `eslint-config-next` from 16.3.1 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/eslint-config-next) --- updated-dependencies: - dependency-name: "@bufbuild/buf" dependency-version: 1.73.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@bufbuild/protoc-gen-es" dependency-version: 2.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: prettier dependency-version: 3.9.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: javascript-dependencies - dependency-name: "@bufbuild/protobuf" dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@connectrpc/connect" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@connectrpc/connect-web" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: lucide-react dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: next dependency-version: 16.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: javascript-dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@playwright/test" dependency-version: 1.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@types/node" dependency-version: 26.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dependencies - dependency-name: eslint-config-next dependency-version: 16.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: javascript-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Dependency updates javascript Pull requests that update javascript code labels Sep 21, 2026

Navigation Menu

chore(deps): bump the javascript-dependencies group across 1 directory with 16 updates - #29

chore(deps): bump the javascript-dependencies group across 1 directory with 16 updates#29
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/javascript-dependencies-19a06a6cff

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.73.0

[v1.73.0] - 2026-09-11

v2.15.0

What's Changed

v2.14.1

What's Changed

3.9.8

3.9.7

3.9.8

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

3.9.7

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

v2.15.0

What's Changed

v2.14.1

What's Changed

v2.2.0

What's Changed

New Contributors

v2.2.0

What's Changed

New Contributors

Version 1.47.0

What's Changed

New Contributors

Version 1.46.0

What's Changed

Version 1.45.0

What's Changed

v16.3.5

v16.3.4

Credits

v16.3.3

v16.3.2

Core Changes

Credits

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by `@seiyab`)

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by `@Austin1serb`, `@giaBaoJS`)

JavaScript: Fix embedded template literal idempotency (#19725 by `@fisker`)