chore(deps): bump the production-minor group across 1 directory with 20 updates by dependabot[bot] · Pull Request #892 · webhook-co/webhook

dependabot · 2026-10-07T03:03:09Z

Bumps the production-minor group with 20 updates in the / directory:

Package	From	To
lucide-react	`1.28.0`	`1.51.0`
next	`16.2.12`	`16.3.8`
pg	`8.22.0`	`8.23.1`
pg-cloudflare	`1.4.0`	`1.4.1`
react	`19.2.7`	`19.3.0`
react-dom	`19.2.7`	`19.3.0`
fast-xml-parser	`5.10.1`	`5.11.2`
zod	`4.4.3`	`4.6.5`
@modelcontextprotocol/sdk	`1.30.0`	`1.32.0`
agents	`0.20.1`	`0.26.0`
@sigstore/protobuf-specs	`0.5.1`	`0.5.2`
@sigstore/verify	`4.1.0`	`4.1.2`
ws	`8.21.1`	`8.22.0`
tailwind-merge	`3.6.0`	`3.7.0`
@remotion/bundler	`4.0.503`	`4.0.532`
@remotion/cli	`4.0.503`	`4.0.532`
@remotion/google-fonts	`4.0.503`	`4.0.532`
@remotion/renderer	`4.0.503`	`4.0.532`
@remotion/tailwind-v4	`4.0.503`	`4.0.532`
remotion	`4.0.503`	`4.0.532`

Updates lucide-react from 1.28.0 to 1.51.0

Release notes

Sourced from lucide-react's releases.

Version 1.51.0

What's Changed

fix(site): persist icon customizer by @karsa-mistmere in lucide-icons/lucide#4944

chore(deps): Upgrade to vite 8 by @ericfennis in lucide-icons/lucide#4950

feat(icons): added rugby-ball icon by @dev-mralph in lucide-icons/lucide#3496

chore(deps): bump the react-deps group across 1 directory with 3 updates by @dependabot[bot] in lucide-icons/lucide#4951

fix(react-native): stop forwarding arbitrary rest props to child shape elements by @cipherprofessor in lucide-icons/lucide#4903

test(lucide-solid): add Vite and SolidStart integration fixtures by @ericfennis in lucide-icons/lucide#4884

feat(icons): add door-closed-cog icon by @ajaxjiang96 in lucide-icons/lucide#4905

feat(icons): add text-align-justify-* icons by @HectorZaGa in lucide-icons/lucide#4942

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4939

chore(deps): Upgrade to vitest 5 by @ericfennis in lucide-icons/lucide#4953

feat(icons): added wind-arrow-up icon by @jamesgpearce in lucide-icons/lucide#4501

fix(github/actions): move to daily release flow by @karsa-mistmere in lucide-icons/lucide#4911

feat(@lucide/solid): Support for Solid 2.0 RC by @davedbase in lucide-icons/lucide#4751

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#4954

chore(deps): bump nuxt from 4.4.8 to 4.5.1 by @dependabot[bot] in lucide-icons/lucide#4949

feat(icons): added armenian-dram icon by @Elawphant in lucide-icons/lucide#4456

feat(icons): add kazakh-tenge icon by @hkayrad in lucide-icons/lucide#4925

New Contributors

@dev-mralph made their first contribution in lucide-icons/lucide#3496

@cipherprofessor made their first contribution in lucide-icons/lucide#4903

@HectorZaGa made their first contribution in lucide-icons/lucide#4942

@jamesgpearce made their first contribution in lucide-icons/lucide#4501

@davedbase made their first contribution in lucide-icons/lucide#4751

@Elawphant made their first contribution in lucide-icons/lucide#4456

@hkayrad made their first contribution in lucide-icons/lucide#4925

Full Changelog: lucide-icons/lucide@1.50.0...1.51.0

Version 1.50.0

What's Changed

fix(shared): escape attribute values in buildLucideSvg by @Saadanjum0 in lucide-icons/lucide#4940

fix(github/actions): use canonical metadata instructions for PR suggestions by @karsa-mistmere in lucide-icons/lucide#4910

fix(icons): replaced nut & nut-off with compliant designs by @karsa-mistmere in lucide-icons/lucide#4840

chore(deps-dev): bump @angular/router from 22.1.7 to 22.2.0 by @dependabot[bot] in lucide-icons/lucide#4945

chore(deps): bump next from 16.3.4 to 16.3.6 by @dependabot[bot] in lucide-icons/lucide#4946

chore(deps-dev): bump the svelte-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4918

test(integrations): add Vue integration fixtures for Vite, Nuxt and Vike by @ericfennis in lucide-icons/lucide#4882

feat(svelte): export context subpath by @vugarbbakhishov-hub in lucide-icons/lucide#4927

fix(lucide-preact): add Preact v11 compatibility by @JoviDeCroock in lucide-icons/lucide#4924

feat(icons): added layout-grid-circles icon by @karsa-mistmere in lucide-icons/lucide#4567

New Contributors

@Saadanjum0 made their first contribution in lucide-icons/lucide#4940

@JoviDeCroock made their first contribution in lucide-icons/lucide#4924

Full Changelog: lucide-icons/lucide@1.49.0...1.50.0

... (truncated)

Commits

98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
See full diff in compare view

Updates next from 16.2.12 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Server-Side Request Forgery in Image Optimization

Medium:

Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Pending use cache fill can leak Draft Mode content into regular responses and persisted pages

Cache leak across root param values in nested 'use cache' functions

Low:

Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @lukesandberg for helping!

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)

next/image: Reject empty images when reading/writing to the disk cache (#98186)

Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)

Add CSP nonce to script tags of loading and template files (#98403)

Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

... (truncated)

Commits

b0fad0d v16.3.8
719e4c6 [lts-active] Scope response cache keys to their source route (#218)
e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
4c20699 v16.3.7
2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
Additional commits viewable in compare view

Updates pg from 8.22.0 to 8.23.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg@8.23.0

Add support for query pipelineing.

Commits

0980cef Publish
2759b2c fix(pg): run a named statement with an empty text more than once (#3781)
7feb7df fix(pg): expose detail and hint on errors from the native client (#3780)
9683053 fix(pg): do not treat Sync as connection ending (#3772)
4589038 fix: validate server certificate against host when connecting to an IP addres...
9808955 cleanup: Fix typo in comment
2b02f64 fix: avoid mutating query config (#3720)
0cef6af Reject portal based queries in pipeline mode instead of misrouting rows (#3737)
2991480 Deprecate serializing invalid Dates (#3731)
c940d7c Fail pipelined queries when the connection dies instead of hanging (#3736)
Additional commits viewable in compare view

Updates pg-cloudflare from 1.4.0 to 1.4.1

Commits

0980cef Publish
5971813 fix(pg-cloudflare): prevent Client.end() from hanging (#3752)
c9e5761 fix: support callback as second argument to CloudflareSocket.write (#3747)
cd5ec59 fix(pg-cloudflare): safely end closed sockets (#3735)
See full diff in compare view

Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
Additional commits viewable in compare view

Updates react-dom from 19.2.7 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050,

…20 updates Bumps the production-minor group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.51.0` | | [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.8` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.1` | | [pg-cloudflare](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg-cloudflare) | `1.4.0` | `1.4.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.10.1` | `5.11.2` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.0` | | [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents) | `0.20.1` | `0.26.0` | | [@sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) | `0.5.1` | `0.5.2` | | [@sigstore/verify](https://github.com/sigstore/sigstore-js) | `4.1.0` | `4.1.2` | | [ws](https://github.com/websockets/ws) | `8.21.1` | `8.22.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@remotion/bundler](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.532` | | [@remotion/cli](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.532` | | [@remotion/google-fonts](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.532` | | [@remotion/renderer](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.532` | | [@remotion/tailwind-v4](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.532` | | [remotion](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.532` | Updates `lucide-react` from 1.28.0 to 1.51.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.51.0/packages/lucide-react) Updates `next` from 16.2.12 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.8) Updates `pg` from 8.22.0 to 8.23.1 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg) Updates `pg-cloudflare` from 1.4.0 to 1.4.1 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg-cloudflare@1.4.1/packages/pg-cloudflare) Updates `react` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `fast-xml-parser` from 5.10.1 to 5.11.2 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.10.1...v5.11.2) Updates `zod` from 4.4.3 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.5) Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.32.0) Updates `agents` from 0.20.1 to 0.26.0 - [Release notes](https://github.com/cloudflare/agents/releases) - [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md) - [Commits](https://github.com/cloudflare/agents/commits/agents@0.26.0/packages/agents) Updates `@sigstore/protobuf-specs` from 0.5.1 to 0.5.2 - [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md) - [Commits](sigstore/protobuf-specs@v0.5.1...v0.5.2) Updates `@sigstore/verify` from 4.1.0 to 4.1.2 - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/verify@4.1.0...@sigstore/verify@4.1.2) Updates `ws` from 8.21.1 to 8.22.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.1...8.22.0) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `@remotion/bundler` from 4.0.503 to 4.0.532 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.532) Updates `@remotion/cli` from 4.0.503 to 4.0.532 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.532) Updates `@remotion/google-fonts` from 4.0.503 to 4.0.532 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.532) Updates `@remotion/renderer` from 4.0.503 to 4.0.532 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.532) Updates `@remotion/tailwind-v4` from 4.0.503 to 4.0.532 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.532) Updates `remotion` from 4.0.503 to 4.0.532 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.532) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: pg dependency-version: 8.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: pg-cloudflare dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: fast-xml-parser dependency-version: 5.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: agents dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: "@sigstore/protobuf-specs" dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@sigstore/verify" dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: ws dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: "@remotion/bundler" dependency-version: 4.0.532 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@remotion/cli" dependency-version: 4.0.532 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@remotion/google-fonts" dependency-version: 4.0.532 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@remotion/renderer" dependency-version: 4.0.532 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@remotion/tailwind-v4" dependency-version: 4.0.532 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: remotion dependency-version: 4.0.532 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from choraria as a code owner October 7, 2026 03:03

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 7, 2026

github-actions Bot assigned choraria Oct 7, 2026

Navigation Menu

Repository navigation

chore(deps): bump the production-minor group across 1 directory with 20 updates - #892

chore(deps): bump the production-minor group across 1 directory with 20 updates#892
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-f17f11bba6

dependabot Bot commented on behalf of github Oct 7, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 7, 2026

Version 1.51.0

What's Changed

New Contributors

Version 1.50.0

What's Changed

New Contributors

v16.3.8

v16.3.7

Core Changes

Credits

v16.3.6

v16.3.5

v16.3.4

Credits

pg@8.23.0

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant