Conversation
Bumps the minor-and-patch group with 16 updates: | Package | From | To | | --- | --- | --- | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.93.1` | `2.95.3` | | [framer-motion](https://github.com/motiondivision/motion) | `12.29.2` | `12.34.0` | | [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `2.35.0` | `2.36.0` | | [next](https://github.com/vercel/next.js) | `16.1.5` | `16.1.6` | | [node-datachannel](https://github.com/murat-dogan/node-datachannel) | `0.32.0` | `0.32.1` | | [openai](https://github.com/openai/openai-node) | `6.16.0` | `6.18.0` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `24.36.0` | `24.37.2` | | [resend](https://github.com/resend/resend-node) | `6.8.0` | `6.9.1` | | [undici](https://github.com/nodejs/undici) | `7.19.1` | `7.21.0` | | [video.js](https://github.com/videojs/video.js) | `8.23.4` | `8.23.6` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.10` | `25.2.2` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.9` | `19.2.13` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.1.2` | `5.1.3` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.23` | `10.4.24` | | [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `17.2.4` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.1.5` | `16.1.6` | Updates `@supabase/supabase-js` from 2.93.1 to 2.95.3 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.95.3/packages/core/supabase-js) Updates `framer-motion` from 12.29.2 to 12.34.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.29.2...v12.34.0) Updates `isomorphic-dompurify` from 2.35.0 to 2.36.0 - [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases) - [Commits](kkomelin/isomorphic-dompurify@2.35.0...2.36.0) Updates `next` from 16.1.5 to 16.1.6 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.1.5...v16.1.6) Updates `node-datachannel` from 0.32.0 to 0.32.1 - [Release notes](https://github.com/murat-dogan/node-datachannel/releases) - [Commits](murat-dogan/node-datachannel@v0.32.0...v0.32.1) Updates `openai` from 6.16.0 to 6.18.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md) - [Commits](openai/openai-node@v6.16.0...v6.18.0) Updates `puppeteer` from 24.36.0 to 24.37.2 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](puppeteer/puppeteer@puppeteer-v24.36.0...puppeteer-v24.37.2) Updates `resend` from 6.8.0 to 6.9.1 - [Release notes](https://github.com/resend/resend-node/releases) - [Commits](resend/resend-node@v6.8.0...v6.9.1) Updates `undici` from 7.19.1 to 7.21.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.19.1...v7.21.0) Updates `video.js` from 8.23.4 to 8.23.6 - [Release notes](https://github.com/videojs/video.js/releases) - [Changelog](https://github.com/videojs/video.js/blob/main/CHANGELOG.md) - [Commits](videojs/video.js@v8.23.4...v8.23.6) Updates `@types/node` from 25.0.10 to 25.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.9 to 19.2.13 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@vitejs/plugin-react` from 5.1.2 to 5.1.3 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/[email protected]/packages/plugin-react) Updates `autoprefixer` from 10.4.23 to 10.4.24 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.23...10.4.24) Updates `dotenv` from 17.2.3 to 17.2.4 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](https://github.com/motdotla/dotenv/commits) Updates `eslint-config-next` from 16.1.5 to 16.1.6 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.6/packages/eslint-config-next) --- updated-dependencies: - dependency-name: "@supabase/supabase-js" dependency-version: 2.95.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: framer-motion dependency-version: 12.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: isomorphic-dompurify dependency-version: 2.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: node-datachannel dependency-version: 0.32.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: openai dependency-version: 6.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: puppeteer dependency-version: 24.37.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: resend dependency-version: 6.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: undici dependency-version: 7.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: video.js dependency-version: 8.23.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 25.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@vitejs/plugin-react" dependency-version: 5.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: autoprefixer dependency-version: 10.4.24 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dotenv dependency-version: 17.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint-config-next dependency-version: 16.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
Bumps the minor-and-patch group with 16 updates:
2.93.12.95.312.29.212.34.02.35.02.36.016.1.516.1.60.32.00.32.16.16.06.18.024.36.024.37.26.8.06.9.17.19.17.21.08.23.48.23.625.0.1025.2.219.2.919.2.135.1.25.1.310.4.2310.4.2417.2.317.2.416.1.516.1.6Updates
@supabase/supabase-jsfrom 2.93.1 to 2.95.3Release notes
Sourced from
@supabase/supabase-js's releases.... (truncated)
Changelog
Sourced from
@supabase/supabase-js's changelog.Commits
c74bde1docs(supabase): include cors module in TypeDoc generation (#2095)acd85d4chore(release): version 2.95.0 changelogs (#2094)c4a8a43feat(supabase): add canonical CORS headers export for edge functions (#2071)a867430chore(release): version 2.94.1 changelogs (#2089)edb3009chore(release): version 2.94.0 changelogs (#2085)7ec2df9feat(postgrest): add URL length validation and timeout protection (#2078)366b665chore(release): version 2.93.3 changelogs (#2076)de20d50chore(release): version 2.93.2 changelogs (#2068)91b36d7fix(supabase): revert client platform and runtime detection headers (#2067)6004430chore(release): version 2.93.1 changelogs (#2061)Updates
framer-motionfrom 12.29.2 to 12.34.0Changelog
Sourced from framer-motion's changelog.
... (truncated)
Commits
5adbf49v12.34.05f57695Updating changelogdeb5717Merge pull request #3549 from motiondivision/use-spring-waapib24d9fflatestec0446aScroll acceleration365b0adv12.33.29ebe1cfUpdating changelog836da23Fixing76d0775Fixing6e4c224Fix scroll-accelerate Cypress tests to check getAnimations() directlyUpdates
isomorphic-dompurifyfrom 2.35.0 to 2.36.0Commits
77d1437chore: Incremented project version.227f862Merge pull request #386 from kkomelin/dependabot/npm_and_yarn/jsdom-28.0.01f80b7cchore(deps): bump jsdom from 27.4.0 to 28.0.0cdfc27bMerge pull request #385 from kkomelin/dependabot/npm_and_yarn/vitest-4.0.182b8b07dchore(deps-dev): bump vitest from 4.0.17 to 4.0.184951404Merge pull request #384 from kkomelin/dependabot/npm_and_yarn/terser-5.46.09e2b51cchore(deps-dev): bump terser from 5.44.1 to 5.46.0d0a98c2Merge pull request #383 from kkomelin/dependabot/npm_and_yarn/vitest-4.0.1700deefdchore(deps-dev): bump vitest from 4.0.16 to 4.0.17Updates
nextfrom 16.1.5 to 16.1.6Release notes
Sourced from next's releases.
Commits
adf8c61v16.1.6098c0c0[backport][ci] Make gh auth status optional when triggering a release (#89100)a43df32Backport/docs fixes jan 25 16.1.x (#89124)d6d5734tweak LRU sentinel cache key (#89123)4324698backport: implement LRU cache with invocation ID scoping for minimal mode res...23c4649[backport] Upgrade to swc 54 (#88207) (#89103)Updates
node-datachannelfrom 0.32.0 to 0.32.1Release notes
Sourced from node-datachannel's releases.
Commits
1dc8bf4v0.32.125239ebMerge pull request #395 from Discord-RE/no-symbol-leak5809aaeIgnore macOSfc70c19Hide all symbols to prevent leakageUpdates
openaifrom 6.16.0 to 6.18.0Release notes
Sourced from openai's releases.
Changelog
Sourced from openai's changelog.
Commits
69d2b01release: 6.18.0bf5a096chore(internal): fix pagination internals not accepting option promisesaa24028fix(client): avoid removing abort listener too early6ae89c6chore(client): restructure abort controller bindinge70fa06fix(client): undo change to web search Find action3fd4d03codegen metadataf4e6a09codegen metadata4391e45fix(client): update type forfind_in_pageactiona05e900chore(client): do not parse responses with empty content-length243f44dfix(client): avoid memory leak with abort signalsUpdates
puppeteerfrom 24.36.0 to 24.37.2Release notes
Sourced from puppeteer's releases.
... (truncated)
Changelog
Sourced from puppeteer's changelog.
... (truncated)
Commits
b163ce4chore: release main (#14663)dea54fetest: increase protocol timeout in waittask test (#14649)771b885docs: document signal option in Page waitFor methods (#14648)0bb4703fix: improve ConsoleMessage text() results (#14662)af557b4chore(deps): bump webpack from 5.98.0 to 5.105.0 in /website (#14661)edeca35chore: Increase timeout values for Windows and other platforms (#14659)f0e14f0chore: release main (#14656)ad5cee0fix: roll to Firefox 147.0.3 (#14658)d2a5591fix: roll to Chrome 145.0.7632.46 (#14653)f59d642chore(deps): update chromium-bidi (#14655)Updates
resendfrom 6.8.0 to 6.9.1Release notes
Sourced from resend's releases.
Commits
e015620chore: bump to 6.9.1 (#816)6f0195afix(deps): update dependency next to v16.1.5 (#810)aec5a72chore: add react and react-dom as devDependencies (#814)e97db88fix(deps): update react monorepo (#811)fe07bd1chore(deps): update dependency@biomejs/biometo v2.3.13 (#806)f1baaecchore(deps): update pnpm to v10.28.2 (#807)8a8ebccfix(deps): update dependency mailparser to v3.9.1 (#809)2a48341chore: bump to 6.9.0 (#808)0d97792feat: add method to help with forwarding inbound emails (#797)f0dfcb0feat: export all interfaces from main index (#802)Updates
undicifrom 7.19.1 to 7.21.0Release notes
Sourced from undici's releases.
Commits
393c0daBumped v7.21.0 (#4813)47f9b96fix: set finalizer only for fetch responses (#4803)92e38fcfix: handle undefined __filename in bundled environments (#4812)283f2aafeat(#4230): Implement pingInterval for dispatching PING frames (#4296)9cc025bFix clientTtl cleanup race (#4807)fc8bb75fix: error stream instead of canceling (#4804)ff6bc5aAdd close method to WebSocketStream interface (#4802)dae4d91test: restore global dispatcher after fetch tests (#4790)072c17abuild(deps): bump actions/setup-node from 6.0.0 to 6.2.0 (#4796)6cc668dBumped v7.20.0 (#4792)Updates
video.jsfrom 8.23.4 to 8.23.6Release notes
Sourced from video.js's releases.
Changelog
Sourced from video.js's changelog.
Commits
e5b39058.23.6f3de5f3fix: revert minor change to test trusted publishing workflow e2e sans npm tok...d24abca8.23.5836d8cbfix: minor change to test trusted publishing workflow e2e20f8d76docs: Clarify copyright and project stewardship (#9104)Updates
@types/nodefrom 25.0.10 to 25.2.2Commits
Updates
@types/reactfrom 19.2.9 to 19.2.13Commits
Updates
@vitejs/plugin-reactfrom 5.1.2 to 5.1.3Changelog
Sourced from
@vitejs/plugin-react's changelog.Commits
cf0cb8arelease: [email protected]99e480cfix(deps): update all non-major dependencies (#1090)77f5e42fix(deps): update react 19.2.4 (#1084)e327da4fix(deps): update all non-major dependencies (#1083)3d3dbc2chore: add metadata for vite-plugin-registry (#1078)58dfb9dfix(deps): update all non-major dependencies (#1066)fefad3dfix(deps): update all non-major dependencies (#1048)36704dfchore: setup oxfmt for formatting (#997)54231d9docs(plugin-react): add docs for exclude option (#1046)6d203affix(deps): update all non-major dependencies (#1030)Updates
autoprefixerfrom 10.4.23 to 10.4.24Release notes
Sourced from autoprefixer's releases.
Changelog
Sourced from autoprefixer's changelog.
Commits
36692c2Release 10.4.24 version67df014Update dependencies032440eperf: reduce array allocations (#1542)Updates
dotenvfrom 17.2.3 to 17.2.4Changelog
Sourced from dotenv's changelog.
Commits
Updates
eslint-config-nextfrom 16.1.5 to 16.1.6Release notes
Sourced from eslint-config-next's releases.
Commits
adf8c61v16.1.6Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the...Description has been truncated