chore(deps): bump the npm-minor-and-patch group across 1 directory with 19 updates by dependabot[bot] · Pull Request #197 · writer/aperio

dependabot · 2026-09-21T10:37:40Z

Bumps the npm-minor-and-patch group with 19 updates in the / directory:

Package	From	To
@bufbuild/protobuf	`2.14.0`	`2.15.0`
@connectrpc/connect	`2.1.2`	`2.2.0`
@connectrpc/connect-web	`2.1.2`	`2.2.0`
@prisma/adapter-pg	`7.9.1`	`7.10.0`
@prisma/client	`7.9.1`	`7.10.0`
lucide-react	`1.33.0`	`1.47.0`
next	`16.3.1`	`16.3.5`
protobufjs	`8.7.2`	`8.8.0`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
tailwind-merge	`3.6.0`	`3.7.0`
zod	`4.4.3`	`4.6.5`
@types/node	`26.2.0`	`26.6.1`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
autoprefixer	`10.5.4`	`10.6.1`
prisma	`7.9.1`	`7.10.0`
tsx	`4.23.12`	`4.23.13`
puppeteer	`25.8.0`	`25.11.0`

Updates @bufbuild/protobuf from 2.14.0 to 2.15.0

Release notes

Sourced from @bufbuild/protobuf's releases.

v2.15.0

What's Changed

Add plugin option map_imports to point imports at packages by @anuraaga in bufbuild/protobuf-es#1528

Full Changelog: bufbuild/protobuf-es@v2.14.1...v2.15.0

v2.14.1

What's Changed

This release deprecates configureTextEncoding() from @bufbuild/protobuf/wire. If you run @bufbuild/protobuf in an environment that does not provide the Text Encoding API, please migrate to a polyfill that installs TextEncoder (with the methods encode and optionally encodeInto) and TextDecoder (with the fatal: true constructor argument and the decode method) on globalThis instead. Please see #1517 for the rationale.

Apply import_extension only to relative import paths by @timostamm in bufbuild/protobuf-es#1515

Stop sharing the text encoding implementation via globalThis by @timostamm in bufbuild/protobuf-es#1517

Full Changelog: bufbuild/protobuf-es@v2.14.0...v2.14.1

Commits

f72f529 Release 2.15.0 (#1535)
09c98f1 Release 2.14.1 (#1518)
a24d613 Stop sharing the text encoding implementation via globalThis (#1517)
See full diff in compare view

Updates @connectrpc/connect from 2.1.2 to 2.2.0

Release notes

Sourced from @connectrpc/connect's releases.

v2.2.0

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers: the request gate is a function that runs after the request headers are available. Throwing a ConnectError in the gate rejects a request before messages are read, decompressed, or parsed. Use this option to reject unauthenticated requests instead of interceptors. See the documentation for details.

We also recommend that you configure a message size limit for your server, see the readMaxBytes option.

Disallow propagation of protocol headers by @ajeetdsouza in connectrpc/connect-es#1717

Fix Http2SessionManager.verify() never settling when the connection closes during verification by @jackyzha0 in connectrpc/connect-es#1746

Drop support for Node.js 20 by @ajeetdsouza in connectrpc/connect-es#1777

Add requestGate handler option by @timostamm in connectrpc/connect-es#1781

Stop delivering stream messages after cancellation by @ajeetdsouza in connectrpc/connect-es#1792

Enable gRPC in Cloudflare conformance tests by @mar-cf in connectrpc/connect-es#1774

New Contributors

@jackyzha0 made their first contribution in connectrpc/connect-es#1746

@mar-cf made their first contribution in connectrpc/connect-es#1774

Full Changelog: connectrpc/connect-es@v2.1.2...v2.2.0

Commits

378bb8f Release 2.2.0 (#1796)
d0c2c0f Stop delivering stream messages after cancellation (#1792)
f16eb17 Simplify tests with type-narrowing assertions (#1782)
2548dac Add requestGate handler option (#1781)
86dc519 Use mock timers for timeout test (#1778)
61900e4 Bump @bufbuild/buf from 1.66.1 to 1.72.0 (#1762)
e86b489 Migrate jasmine to node:test (#1730)
a8e1588 Disallow propagation of protocol headers (#1717)
See full diff in compare view

Updates @connectrpc/connect-web from 2.1.2 to 2.2.0

Release notes

Sourced from @connectrpc/connect-web's releases.

v2.2.0

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers: the request gate is a function that runs after the request headers are available. Throwing a ConnectError in the gate rejects a request before messages are read, decompressed, or parsed. Use this option to reject unauthenticated requests instead of interceptors. See the documentation for details.

We also recommend that you configure a message size limit for your server, see the readMaxBytes option.

Disallow propagation of protocol headers by @ajeetdsouza in connectrpc/connect-es#1717

Fix Http2SessionManager.verify() never settling when the connection closes during verification by @jackyzha0 in connectrpc/connect-es#1746

Drop support for Node.js 20 by @ajeetdsouza in connectrpc/connect-es#1777

Add requestGate handler option by @timostamm in connectrpc/connect-es#1781

Stop delivering stream messages after cancellation by @ajeetdsouza in connectrpc/connect-es#1792

Enable gRPC in Cloudflare conformance tests by @mar-cf in connectrpc/connect-es#1774

New Contributors

@jackyzha0 made their first contribution in connectrpc/connect-es#1746

@mar-cf made their first contribution in connectrpc/connect-es#1774

Full Changelog: connectrpc/connect-es@v2.1.2...v2.2.0

Commits

378bb8f Release 2.2.0 (#1796)
fca66b5 Bump webdriverio from 9.31.2 to 9.31.4 in the webdriver group (#1784)
355b1fd Bump webdriverio from 9.19.2 to 9.31.2 in the webdriver group across 1 direct...
e10098f Remove Browserstack tests (#1731)
e86b489 Migrate jasmine to node:test (#1730)
See full diff in compare view

Updates @prisma/adapter-pg from 7.9.1 to 7.10.0

Release notes

Sourced from @prisma/adapter-pg's releases.

7.10.0

Prisma ORM 7.10.0

Prisma ORM 7.10.0 introduces a compatibility package for running Prisma 7 alongside newer Prisma versions, secures Prisma Studio's local server, and includes fixes across Prisma Client and the PostgreSQL, MariaDB, Neon, SQLite, and Prisma Postgres Serverless adapters.

Highlights

Run Prisma 7 alongside Prisma 8

This release introduces @prisma/prisma7, a compatibility package that lets you retain a matching Prisma 7 CLI and configuration while installing Prisma 8 in the same project.

Once 7.10.0 is released, a side-by-side installation can use:
npm install --save-dev prisma@8 @prisma/prisma7@7.10.0
npm install @prisma/client@7.10.0
Use prisma for the directly installed Prisma 8 CLI and prisma7 for Prisma 7:
npx prisma --version
npx prisma7 --version
npx prisma7 generate
npx prisma7 migrate dev
npx prisma7 db push
Prisma 7 now prefers version-specific configuration files, allowing its configuration to coexist with Prisma 8's prisma.config.* files:
// prisma7.config.ts
import { defineConfig } from '@prisma/prisma7/config'
export default defineConfig({
schema: 'prisma/schema.prisma',
migrations: {
path: 'prisma/migrations',
},
})
Without an explicit --config option, Prisma 7 searches for:

Root-level prisma7.config.* files.

.config/prisma7.* files.

Existing prisma.config.* files as a backwards-compatible fallback.

The supported extensions are .js, .ts, .mjs, .cjs, .mts, and .cts. An explicit config path always takes precedence:

... (truncated)

Commits

3fa65ac fix(p2002): correct modelName in nested create unique constraint errors #2959...
a180209 fix(adapter-pg): map PostgreSQL deadlocks to P2034 (#29717)
800f1d1 fix(adapter-pg): preserve constraint name for unique violations (23505) (#29587)
7ef2104 fix(postgres): handle SQLSTATE 23001 for RESTRICT violations (#29554)
See full diff in compare view

Updates @prisma/client from 7.9.1 to 7.10.0

Release notes

Sourced from @prisma/client's releases.

7.10.0

Prisma ORM 7.10.0

Prisma ORM 7.10.0 introduces a compatibility package for running Prisma 7 alongside newer Prisma versions, secures Prisma Studio's local server, and includes fixes across Prisma Client and the PostgreSQL, MariaDB, Neon, SQLite, and Prisma Postgres Serverless adapters.

Highlights

Run Prisma 7 alongside Prisma 8

This release introduces @prisma/prisma7, a compatibility package that lets you retain a matching Prisma 7 CLI and configuration while installing Prisma 8 in the same project.

Once 7.10.0 is released, a side-by-side installation can use:
npm install --save-dev prisma@8 @prisma/prisma7@7.10.0
npm install @prisma/client@7.10.0
Use prisma for the directly installed Prisma 8 CLI and prisma7 for Prisma 7:
npx prisma --version
npx prisma7 --version
npx prisma7 generate
npx prisma7 migrate dev
npx prisma7 db push
Prisma 7 now prefers version-specific configuration files, allowing its configuration to coexist with Prisma 8's prisma.config.* files:
// prisma7.config.ts
import { defineConfig } from '@prisma/prisma7/config'
export default defineConfig({
schema: 'prisma/schema.prisma',
migrations: {
path: 'prisma/migrations',
},
})
Without an explicit --config option, Prisma 7 searches for:

Root-level prisma7.config.* files.

.config/prisma7.* files.

Existing prisma.config.* files as a backwards-compatible fallback.

The supported extensions are .js, .ts, .mjs, .cjs, .mts, and .cts. An explicit config path always takes precedence:

... (truncated)

Commits

05c1b88 Teach Prisma 7 to prefer versioned config files (#30020)
cf2bc1f Rename prisma7 package to @prisma/prisma7 (#30002)
ce5a34c Complete downstream actionable Prisma 7 guidance propagation (#29994)
3f13ec6 Complete CLI-owned prisma7 distribution identity (#29969)
179ba0c feat(prisma7): add side-by-side CLI wrapper (#29949)
3fa65ac fix(p2002): correct modelName in nested create unique constraint errors #2959...
6b6d9e9 chore(deps): update engines to 7.10.0-4.0edf323efd1d98336f3f0a68684b56f689b90...
b64e33c chore(deps): update engines to 7.10.0-3.9d90ce2c89d5c95a1148aef15e5561ab6c490...
2046f9b feat(client): expose ModelName to compute function in Result extensions (#29782)
f2b3abd chore(deps): update engines to 7.10.0-1.6d040c802892de6d56c7e0061b7a10b3e6a0c...
Additional commits viewable in compare view

Updates lucide-react from 1.33.0 to 1.47.0

Release notes

Sourced from lucide-react's releases.

Version 1.47.0

What's Changed

feat(icons): add lambda icon by @UbaidUllah9962 in lucide-icons/lucide#4017

feat(icons): delegated faucet icon from lab by @karsa-mistmere in lucide-icons/lucide#4764

feat(icons): added door-closed-package icon by @karsa-mistmere in lucide-icons/lucide#4814

feat(icons): added 'nepali-rupee' icon by @sarajdhakal in lucide-icons/lucide#4608

feat(icons): added tube-lotion icon by @AlecRust in lucide-icons/lucide#4029

feat(icons): Added cupcake icon by @briz123 in lucide-icons/lucide#3000

feat(icons): added square-dashed-x icon by @EthanHazel in lucide-icons/lucide#4535

feat(icons): add rotate-cw-clock icon by @gkkconan in lucide-icons/lucide#3979

fix(icons): remove path from save-off by @HPRILLER in lucide-icons/lucide#4848

fix(icons): changed calendar-chevrons-right by @karsa-mistmere in lucide-icons/lucide#4865

fix(icons): changed broccoli icon by @jguddas in lucide-icons/lucide#4871

feat(icons): added square-dashed-plus by @psjdev in lucide-icons/lucide#4849

New Contributors

@UbaidUllah9962 made their first contribution in lucide-icons/lucide#4017

@sarajdhakal made their first contribution in lucide-icons/lucide#4608

@AlecRust made their first contribution in lucide-icons/lucide#4029

@gkkconan made their first contribution in lucide-icons/lucide#3979

@HPRILLER made their first contribution in lucide-icons/lucide#4848

@psjdev made their first contribution in lucide-icons/lucide#4849

Full Changelog: lucide-icons/lucide@1.46.0...1.47.0

Version 1.46.0

What's Changed

feat(icons): Added new icons: clef-g, clef-f and clef-c by @rrod497 in lucide-icons/lucide#4083

chore(deps-dev): bump astro from 7.3.0 to 7.3.2 in the astro-deps group by @dependabot[bot] in lucide-icons/lucide#4860

feat(icons): added monitor-pc icon by @karsa-mistmere in lucide-icons/lucide#4791

Full Changelog: lucide-icons/lucide@1.45.0...1.46.0

Version 1.45.0

What's Changed

feat(icons): added calendar-chevrons-right icon by @AlexandrePhilibert in lucide-icons/lucide#3565

feat(icons): added building-complex-plus icon by @tylerkade in lucide-icons/lucide#4758

feat(icons): add hourglass-cog icon by @lazerg in lucide-icons/lucide#4635

feat(icons): added mouth & mouth-off by @karsa-mistmere in lucide-icons/lucide#4787

feat(icons): added iv-bag icon by @karsa-mistmere in lucide-icons/lucide#4821

fix(icons): changed lectern icon by @UsamaKhan in lucide-icons/lucide#2925

feat(icons): add layout-arrow-right and layout-arrow-down by @samuelalake in lucide-icons/lucide#4541

feat(icons): added park icon by @skajosborn in lucide-icons/lucide#3177

fix(icons): changed album, book-marked, folder-bookmark icons by @karsa-mistmere in lucide-icons/lucide#3043

fix(icons): correct misspelled tags by @decknamec in lucide-icons/lucide#4836

feat(icons): added houses icon by @danielbayley in lucide-icons/lucide#3241

feat(icons): added notebook-dot icon by @elenakovelskikh in lucide-icons/lucide#3228

feat(icons): add messages-circle icon by @Mirazstudio-offical in lucide-icons/lucide#4754

feat(icons): added plant-pot icon by @vqh2602 in lucide-icons/lucide#3122

... (truncated)

Commits

94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
See full diff in compare view

Updates next from 16.3.1 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)

next/image: Reject empty images when reading/writing to the disk cache (#98186)

Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)

Add CSP nonce to script tags of loading and template files (#98403)

Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

Commits

ca2c75e v16.3.5
14fb290 [backport] Fix use cache prerender signal retention (#98448)
2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
4b56cee [16.3.x] Backport docs fixes (#98317)
5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
d9eac96 [16.3.x] next/image: skip 0-byte entries when initializing disk LRU cache (#9...
84b35fe [test] Fix 16.3 deploy test assertions (#98133)
14f9c1a [16.3.x][ci] Run flake detection and new deploy tests when merged and on back...
Additional commits viewable in compare view

Updates protobufjs from 8.7.2 to 8.8.0

Release notes

Sourced from protobufjs's releases.

protobufjs: v8.8.0

8.8.0 (2026-08-26)

Features

Support Edition 2026 (#2414) (8845d2a)

Bug Fixes

Harden ProtoJSON and Text Format parsing (#2418) (9f0bc74)

Limit Any.fromObject recursion (#2419) (3dd064e)

Preserve symbol visibility (#2415) (ef47921)

Respect declared lengths while decoding (#2420) (1650d74)

Changelog

Sourced from protobufjs's changelog.

8.8.0 (2026-08-26)

Features

Support Edition 2026 (#2414) (8845d2a)

Bug Fixes

deps: update protoc-gen-es benchmark target to v2.14.0 (#2411) (2fd85aa)

Harden ProtoJSON and Text Format parsing (#2418) (9f0bc74)

Limit Any.fromObject recursion (#2419) (3dd064e)

Preserve symbol visibility (#2415) (ef47921)

Respect declared lengths while decoding (#2420) (1650d74)

Commits

1169f5d chore: release master (#2412)
824faea chore(deps-dev): Bump brace-expansion from 1.1.11 to 1.1.18 (#2421)
3d84b37 chore: Update jsdoc-template submodule
d0046ce chore(deps): update dev dependencies (#2407)
1650d74 fix: Respect declared lengths while decoding (#2420)
9f0bc74 fix: Harden ProtoJSON and Text Format parsing (#2418)
3dd064e fix: Limit Any.fromObject recursion (#2419)
ef47921 fix: Preserve symbol visibility (#2415)
8845d2a feat: Support Edition 2026 (#2414)
2fd85aa fix(deps): update protoc-gen-es benchmark target to v2.14.0 (#2411)
See full diff in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, Description has been truncated

…th 19 updates Bumps the npm-minor-and-patch group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.14.0` | `2.15.0` | | [@connectrpc/connect](https://github.com/connectrpc/connect-es/tree/HEAD/packages/connect) | `2.1.2` | `2.2.0` | | [@connectrpc/connect-web](https://github.com/connectrpc/connect-es/tree/HEAD/packages/connect-web) | `2.1.2` | `2.2.0` | | [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.9.1` | `7.10.0` | | [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.9.1` | `7.10.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.33.0` | `1.47.0` | | [next](https://github.com/vercel/next.js) | `16.3.1` | `16.3.5` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `8.7.2` | `8.8.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` | | [prisma](https://github.com/prisma/prisma-cli/tree/HEAD/packages/prisma) | `7.9.1` | `7.10.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.8.0` | `25.11.0` | Updates `@bufbuild/protobuf` from 2.14.0 to 2.15.0 - [Release notes](https://github.com/bufbuild/protobuf-es/releases) - [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.15.0/packages/protobuf) Updates `@connectrpc/connect` from 2.1.2 to 2.2.0 - [Release notes](https://github.com/connectrpc/connect-es/releases) - [Commits](https://github.com/connectrpc/connect-es/commits/v2.2.0/packages/connect) Updates `@connectrpc/connect-web` from 2.1.2 to 2.2.0 - [Release notes](https://github.com/connectrpc/connect-es/releases) - [Commits](https://github.com/connectrpc/connect-es/commits/v2.2.0/packages/connect-web) Updates `@prisma/adapter-pg` from 7.9.1 to 7.10.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.10.0/packages/adapter-pg) Updates `@prisma/client` from 7.9.1 to 7.10.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.10.0/packages/client) Updates `lucide-react` from 1.33.0 to 1.47.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.47.0/packages/lucide-react) Updates `next` from 16.3.1 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.1...v16.3.5) Updates `protobufjs` from 8.7.2 to 8.8.0 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v8.7.2...protobufjs-v8.8.0) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `zod` from 4.4.3 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.5) Updates `@types/node` from 26.2.0 to 26.6.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `autoprefixer` from 10.5.4 to 10.6.1 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.4...10.6.1) Updates `prisma` from 7.9.1 to 7.10.0 - [Release notes](https://github.com/prisma/prisma-cli/releases) - [Commits](https://github.com/prisma/prisma-cli/commits/HEAD/packages/prisma) Updates `tsx` from 4.23.12 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.12...v4.23.13) Updates `puppeteer` from 25.8.0 to 25.11.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](puppeteer/puppeteer@puppeteer-v25.8.0...puppeteer-v25.11.0) --- updated-dependencies: - dependency-name: "@bufbuild/protobuf" dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@connectrpc/connect" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@connectrpc/connect-web" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@prisma/adapter-pg" dependency-version: 7.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@prisma/client" dependency-version: 7.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: lucide-react dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: next dependency-version: 16.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: protobufjs dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: autoprefixer dependency-version: 10.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: prisma dependency-version: 7.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: puppeteer dependency-version: 25.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-21T10:37:41Z

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

chore(deps): bump the npm-minor-and-patch group across 1 directory with 19 updates - #197

chore(deps): bump the npm-minor-and-patch group across 1 directory with 19 updates#197
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-2913cf0799

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.15.0

What's Changed

v2.14.1

What's Changed

v2.2.0

What's Changed

New Contributors

v2.2.0

What's Changed

New Contributors

7.10.0

Prisma ORM 7.10.0

Highlights

Run Prisma 7 alongside Prisma 8

7.10.0

Prisma ORM 7.10.0

Highlights

Run Prisma 7 alongside Prisma 8

Version 1.47.0

What's Changed

New Contributors

Version 1.46.0

What's Changed

Version 1.45.0

What's Changed

v16.3.5

v16.3.4

Credits

v16.3.3

v16.3.2

Core Changes

Credits

protobufjs: v8.8.0

8.8.0 (2026-08-26)

Features

Bug Fixes

8.8.0 (2026-08-26)

Features

Bug Fixes

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading