chore(deps): bump the minor-and-patch group with 13 updates - #500
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the minor-and-patch group with 13 updates: | Package | From | To | | --- | --- | --- | | [@mux/mux-player-react](https://github.com/muxinc/elements/tree/HEAD/packages/mux-player-react) | `3.13.3` | `3.13.4` | | [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.74.0` | `10.75.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.103.1` | | [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `11.0.2` | `11.1.0` | | [kysely](https://github.com/kysely-org/kysely) | `0.29.5` | `0.29.6` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.46.0` | `1.47.0` | | [mapbox-gl](https://github.com/mapbox/mapbox-gl-js) | `3.30.0` | `3.31.0` | | [pg-boss](https://github.com/timgit/pg-boss) | `12.32.0` | `12.33.1` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.433.1` | `1.434.0` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.52.2` | `5.52.4` | | [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer) | `8.0.1` | `8.0.2` | | [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.0` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` | Updates `@mux/mux-player-react` from 3.13.3 to 3.13.4 - [Release notes](https://github.com/muxinc/elements/releases) - [Changelog](https://github.com/muxinc/elements/blob/main/packages/mux-player-react/CHANGELOG.md) - [Commits](https://github.com/muxinc/elements/commits/@mux/mux-player-react@3.13.4/packages/mux-player-react) Updates `@sentry/nextjs` from 10.74.0 to 10.75.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.75.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.74.0...10.75.0) Updates `@tanstack/react-query` from 5.102.8 to 5.103.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.1/packages/react-query) Updates `google-auth-library` from 11.0.2 to 11.1.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v11.1.0/core/packages/google-auth-library-nodejs) Updates `kysely` from 0.29.5 to 0.29.6 - [Release notes](https://github.com/kysely-org/kysely/releases) - [Commits](kysely-org/kysely@v0.29.5...v0.29.6) Updates `lucide-react` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.47.0/packages/lucide-react) Updates `mapbox-gl` from 3.30.0 to 3.31.0 - [Release notes](https://github.com/mapbox/mapbox-gl-js/releases) - [Changelog](https://github.com/mapbox/mapbox-gl-js/blob/main/CHANGELOG.md) - [Commits](mapbox/mapbox-gl-js@v3.30.0...v3.31.0) Updates `pg-boss` from 12.32.0 to 12.33.1 - [Release notes](https://github.com/timgit/pg-boss/releases) - [Commits](timgit/pg-boss@12.32.0...12.33.1) Updates `posthog-js` from 1.433.1 to 1.434.0 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.433.1...posthog-js@1.434.0) Updates `posthog-node` from 5.52.2 to 5.52.4 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.52.4/packages/node) Updates `@types/nodemailer` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/nodemailer) Updates `jsdom` from 30.0.1 to 30.1.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.0.1...v30.1.0) Updates `prettier` from 3.9.6 to 3.9.8 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.8) --- updated-dependencies: - dependency-name: "@mux/mux-player-react" dependency-version: 3.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@sentry/nextjs" dependency-version: 10.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@tanstack/react-query" dependency-version: 5.103.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: google-auth-library dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: kysely dependency-version: 0.29.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: mapbox-gl dependency-version: 3.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pg-boss dependency-version: 12.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: posthog-js dependency-version: 1.434.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: posthog-node dependency-version: 5.52.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/nodemailer" dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: jsdom dependency-version: 30.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
3 tasks
joaquimds
added a commit
that referenced
this pull request
Sep 22, 2026
…ride Combines the four green Dependabot PRs into one lockfile: - minor-and-patch group (13 updates, #500) - sanity 6.13.2 -> 6.15.0 (#501) - trpc 11.18.0 -> 11.19.0 (#502) - vitest 5.0.1, @vitejs/plugin-react 5.2.0 -> 6.1.1 (#503) Replaces the @sanity/runtime-cli-scoped adm-zip override with a global ^0.6.1 override so @module-federation/dts-plugin also picks up the fix for GHSA-7q85-xj36-vmfc (high). npm audit drops from 14 findings to 6. The remaining 6 are transitive via minio (query-string, stream-json) and @react-email/preview-server (esbuild); the patched releases are ESM-only or major bumps that would break the CommonJS consumers, so they wait on upstream. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Member
|
Superseded by #507 (combined dependency sweep). |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/minor-and-patch-5e19003607
branch
September 22, 2026 14:02
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 13 updates:
3.13.33.13.410.74.010.75.05.102.85.103.111.0.211.1.00.29.50.29.61.46.01.47.03.30.03.31.012.32.012.33.11.433.11.434.05.52.25.52.48.0.18.0.230.0.130.1.03.9.63.9.8Updates
@mux/mux-player-reactfrom 3.13.3 to 3.13.4Release notes
Sourced from @mux/mux-player-react's releases.
Changelog
Sourced from @mux/mux-player-react's changelog.
Commits
276bc44chore: release main (#1358)Updates
@sentry/nextjsfrom 10.74.0 to 10.75.0Release notes
Sourced from @sentry/nextjs's releases.
... (truncated)
Changelog
Sourced from @sentry/nextjs's changelog.
Commits
9ffb58crelease: 10.75.0664c906meta(changelog): Update changelog for 10.75.0 (#24446)e3e7accfix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)4bb51d1feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...738f17efix(v10/core): Don't instrument the SDK's own envelope requests (#24276)f63c56afix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...0e24355fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)ac3ea13fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)9235d43fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...e2deda0feat(v10/core): AcceptCollectBehaviorshorthand for `dataCollection.httpHe...Updates
@tanstack/react-queryfrom 5.102.8 to 5.103.1Release notes
Sourced from @tanstack/react-query's releases.
... (truncated)
Changelog
Sourced from @tanstack/react-query's changelog.
Commits
c08f576ci: Version Packages (#11511)19ccf27ci: Version Packages (#11339)2da46cdchore(*): use eslint description syntax for grandfathered 'no-restricted-synt...58ad3e2fix: isolate TypeScript test output (#11503)d63afc7Simplifed query methods/internal tests new lint (#11347)23fbdc3test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...50680b9test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...0b326b6test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...a1119e5ref(hydration): remove outdated dehydratedAt fallback (#11436)1a51bb8docs(*): clarify 'Promise.all' only waits for all mutateAsync calls when they...Updates
google-auth-libraryfrom 11.0.2 to 11.1.0Release notes
Sourced from google-auth-library's releases.
Changelog
Sourced from google-auth-library's changelog.
Commits
3cc13fechore: release main (#9295)3ff5ae9chore: update .nycrc, Contributing.md, and .gitignore across packages (#9144)1ea27c9feat: PNPM workspace (#8973)de587e3chore: linter eslint fix (#9088)Updates
kyselyfrom 0.29.5 to 0.29.6Release notes
Sourced from kysely's releases.
Commits
2fefd4c0.29.62feb1f3chore: bumps dependencies. (#2045)b596221fix: allow immutable columns indoUpdateSet'swhere. (#2043)b9674dfchore(CONTRIBUTING): llm contribution farming accounts.90fe25cchore(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 in ...6582fb6chore(deps-dev): bump tsx from 4.23.11 to 4.23.12 (#1984)b497657chore(deps-dev): bump shiki from 4.4.2 to 4.4.3 (#1982)44c4782chore(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 (#1987)20e5d15chore(deps-dev): bump mysql2 from 3.23.2 to 3.23.3 (#1983)93cb9adUpdate link to Migrator API docs (#1991)Updates
lucide-reactfrom 1.46.0 to 1.47.0Release notes
Sourced from lucide-react's releases.
Commits
Updates
mapbox-glfrom 3.30.0 to 3.31.0Release notes
Sourced from mapbox-gl's releases.
Changelog
Sourced from mapbox-gl's changelog.
Commits
ae6c3e2v3.31.0. Bump versions537ef03Skip HD tiles and flatten when no provider is visible9709f42[DRIVE3D-3870] Fix carpet view-depth bias in tunnels958340fGL JS v3.31.0-rc.1a06fa9cBump@mapbox/mapbox-gl-supportedfrom 4.0.0 to 4.1.0 (internal-18833)75c9a7eBump the eslint-dependencies group with 4 updates (internal-18830)4bf6135Bump postcss-cli from 11.0.1 to 12.0.0 (internal-18834)135cb5eFix crash when a landmarks don't have height data on a nodeab89e66Update changelog83159a4Bump cssnano from 9.0.1 to 9.0.2 (internal-18836)Updates
pg-bossfrom 12.32.0 to 12.33.1Release notes
Sourced from pg-boss's releases.
... (truncated)
Commits
5bb7a00Merge pull request #906 from timgit/claim-timer-anchorf24616aversioning for release57b0b09fix(clock): accept a claim at exactly the interval, for TestClock2376d14fix: anchor the interval claims to the claim instead of a fixed gridf4233b2add crdb migration test to cid63ae11Merge pull request #904 from timgit/clock-followups5d4faf8fix(clock): undo the session opt-in whatever happens to the release569fd86fix(clock): seed the clock row in the batch that installs the override4cb89e5fix(pglite): wait out every reapply a leader change starts57ebc6bupdates from reviewUpdates
posthog-jsfrom 1.433.1 to 1.434.0Release notes
Sourced from posthog-js's releases.
... (truncated)
Commits
90c7afbchore: update versions and lockfile [version bump]5e86154feat(metrics): use OTel attribute names for network request durations (#5014)3fb8954chore: update versions and lockfile [version bump]be40430chore(mcp): enable model capture and conversation correlation by default (#4924)d5123fcchore: update versions and lockfile [version bump]614e508fix(react-native): compose source maps after Babel transforms (#5006)63944c7chore: update versions and lockfile [version bump]c8e53fafix(replay): make canvas capture failures self-diagnosable (#4960)0257a29refactor(surveys): share shuffling across web and React Native (#4977)63f55dcchore: update versions and lockfile [version bump]Updates
posthog-nodefrom 5.52.2 to 5.52.4Release notes
Sourced from posthog-node's releases.
Changelog
Sourced from posthog-node's changelog.
Commits
bba9db4chore: update versions and lockfile [version bump]39a8980fix(core): declare the evaluation runtime on /flags requests (#4885)8aecf43chore: update versions and lockfile [version bump]07c1045fix(error-tracking): link causes and aggregate members in one event (#4941)Updates
@types/nodemailerfrom 8.0.1 to 8.0.2Commits
Updates
jsdomfrom 30.0.1 to 30.1.0Release notes
Sourced from jsdom's releases.