Skip to content

chore(deps): bump the trpc group with 4 updates - #502

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/trpc-438223ccbb
Closed

chore(deps): bump the trpc group with 4 updates#502
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/trpc-438223ccbb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the trpc group with 4 updates: @trpc/client, @trpc/next, @trpc/server and @trpc/tanstack-react-query.

Updates @trpc/client from 11.18.0 to 11.19.0

Release notes

Sourced from @​trpc/client's releases.

v11.19.0

What's Changed

New Contributors

... (truncated)

Commits

Updates @trpc/next from 11.18.0 to 11.19.0

Release notes

Sourced from @​trpc/next's releases.

v11.19.0

What's Changed

New Contributors

... (truncated)

Commits

Updates @trpc/server from 11.18.0 to 11.19.0

Release notes

Sourced from @​trpc/server's releases.

v11.19.0

What's Changed

New Contributors

... (truncated)

Commits
  • fcc6bca v11.19.0
  • 55e26d3 build(deps): patch security advisories in www and examples (#7581)
  • fd2d085 build(deps): patch security advisories in packages/* (#7580)
  • c2609f9 build(deps): upgrade vitest to v5 (#7578)
  • 65bbb0b build(deps): upgrade prettier to 3.9.6 (#7577)
  • 352da1c build(deps): upgrade eslint to v10 (#7576)
  • 72af4af build(deps): upgrade typescript to v7 for packages/* (#7575)
  • 1ab54bf build(deps): upgrade tsdown to 0.23.0 (#7574)
  • c6a4f9b build(deps): upgrade node to 24.21.0 and @​types/node to v24 (#7571)
  • 6a118b0 fix(server): match lazy router keys on a path boundary in getProcedureAtPath ...
  • Additional commits viewable in compare view

Updates @trpc/tanstack-react-query from 11.18.0 to 11.19.0

Release notes

Sourced from @​trpc/tanstack-react-query's releases.

v11.19.0

What's Changed

New Contributors

... (truncated)

Commits
  • fcc6bca v11.19.0
  • fd2d085 build(deps): patch security advisories in packages/* (#7580)
  • c2609f9 build(deps): upgrade vitest to v5 (#7578)
  • 65bbb0b build(deps): upgrade prettier to 3.9.6 (#7577)
  • 352da1c build(deps): upgrade eslint to v10 (#7576)
  • 72af4af build(deps): upgrade typescript to v7 for packages/* (#7575)
  • 1ab54bf build(deps): upgrade tsdown to 0.23.0 (#7574)
  • c6a4f9b build(deps): upgrade node to 24.21.0 and @​types/node to v24 (#7571)
  • e35b998 fix(tanstack-react-query): subscriptionOptions(skipToken).enabled incorrectly...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the trpc group with 4 updates
b31fccf 
Bumps the trpc group with 4 updates: [@trpc/client](https://github.com/trpc/trpc/tree/HEAD/packages/client), [@trpc/next](https://github.com/trpc/trpc/tree/HEAD/packages/next), [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server) and [@trpc/tanstack-react-query](https://github.com/trpc/trpc/tree/HEAD/packages/tanstack-react-query).


Updates `@trpc/client` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/client)

Updates `@trpc/next` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/next)

Updates `@trpc/server` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/server)

Updates `@trpc/tanstack-react-query` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/tanstack-react-query)

---
updated-dependencies:
- dependency-name: "@trpc/client"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: trpc
- dependency-name: "@trpc/next"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: trpc
- dependency-name: "@trpc/server"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: trpc
- dependency-name: "@trpc/tanstack-react-query"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: trpc
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@joaquimds joaquimds mentioned this pull request Sep 22, 2026
Merged
3 tasks
joaquimds added a commit that referenced this pull request Sep 22, 2026
@joaquimds @claude
chore(deps): dependency sweep (Dependabot #500-#503) and adm-zip over…
d6c904b 
…ride

Combines the four green Dependabot PRs into one lockfile:
- minor-and-patch group (13 updates, #500)
- sanity 6.13.2 -> 6.15.0 (#501)
- trpc 11.18.0 -> 11.19.0 (#502)
- vitest 5.0.1, @vitejs/plugin-react 5.2.0 -> 6.1.1 (#503)

Replaces the @sanity/runtime-cli-scoped adm-zip override with a global
^0.6.1 override so @module-federation/dts-plugin also picks up the fix
for GHSA-7q85-xj36-vmfc (high). npm audit drops from 14 findings to 6.

The remaining 6 are transitive via minio (query-string, stream-json)
and @react-email/preview-server (esbuild); the patched releases are
ESM-only or major bumps that would break the CommonJS consumers, so
they wait on upstream.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@joaquimds

joaquimds commented Sep 22, 2026

Copy link
Copy Markdown
Member

Superseded by #507 (combined dependency sweep).

@joaquimds joaquimds closed this Sep 22, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/trpc-438223ccbb branch September 22, 2026 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@joaquimds