Skip to content

chore(deps)(deps): bump the production-dependencies group across 1 directory with 34 updates - #25

Closed
dependabot[bot] wants to merge 0 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-3452c9cfb3
Closed

chore(deps)(deps): bump the production-dependencies group across 1 directory with 34 updates#25
dependabot[bot] wants to merge 0 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-3452c9cfb3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown

Bumps the production-dependencies group with 33 updates in the / directory:

Package From To
@base-ui/react 1.2.0 1.6.0
@hookform/resolvers 5.2.2 5.5.7
@neondatabase/serverless 1.0.2 1.1.0
@sentry/nextjs 10.49.0 10.68.0
@tanstack/react-query 5.90.21 5.101.4
@tanstack/react-virtual 3.13.23 3.14.8
@tiptap/extension-mention 3.20.5 3.29.0
@tiptap/extension-placeholder 3.20.5 3.29.0
@tiptap/react 3.20.5 3.29.0
@tiptap/starter-kit 3.20.5 3.29.0
@upstash/redis 1.37.0 1.38.0
better-auth 1.6.9 1.6.25
cloudinary 2.9.0 2.10.0
date-fns 4.1.0 4.4.0
framer-motion 12.35.2 12.42.2
geist 1.7.0 1.7.2
ioredis 5.10.1 5.11.1
jose 6.2.2 6.2.4
libphonenumber-js 1.12.40 1.13.9
next 16.1.6 16.2.12
nuqs 2.8.9 2.9.2
posthog-js 1.372.1 1.407.2
radix-ui 1.4.3 1.6.7
react 19.2.3 19.2.8
react-colorful 5.6.1 5.8.0
react-dom 19.2.3 19.2.8
react-hook-form 7.71.2 7.83.0
react-phone-number-input 3.4.16 3.4.17
react-resizable-panels 4.7.2 4.12.2
resend 6.10.0 6.18.0
shadcn 4.0.0 4.15.0
tailwind-merge 3.5.0 3.6.0
zod 4.3.6 4.4.3

Updates @base-ui/react from 1.2.0 to 1.6.0

Release notes

Sourced from @​base-ui/react's releases.

v1.6.0

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Collapsible

Combobox

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.6.0

Jun 18, 2026

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Collapsible

Combobox

... (truncated)

Commits
  • b34551d [code-infra] Fix package publishing (#5074)
  • 615b0e8 [release] v1.6.0 (#5064)
  • 8b7ca5d [test] Restore slider listener spies (#5072)
  • 2502524 [combobox][autocomplete] Document open requirement for the inline prop (#...
  • 4c33d74 [slider] Fix touchend listener accumulation leak (#5070)
  • d169cd5 [combobox] Fix autofill and selected state edge cases (#4972)
  • 2d8b8f6 [avatar] Fix image status edge cases (#4835)
  • ee3c13a [select] Skip disabled items in typeahead and fix multiple-mode serialization...
  • b167c85 [drawer] Commit swipe on primary-button release (#5057)
  • e972d74 [combobox] Avoid re-rendering every item on each keystroke (#4964)
  • Additional commits viewable in compare view

Updates @hookform/resolvers from 5.2.2 to 5.5.7

Release notes

Sourced from @​hookform/resolvers's releases.

v5.5.7

5.5.7 (2026-07-26)

Bug Fixes

  • npm install fails with ERESOLVE conflict between @​hookform/resolvers@​5.4.3 and valibot versions (#865) (722ef6e)

v5.5.6

5.5.6 (2026-07-26)

Bug Fixes

  • module not found when importing zodResolver under Zod v3 (#864) (8df10b0)

v5.5.5

5.5.5 (2026-07-26)

Bug Fixes

  • yup resolver overrides ref property in errors object with validation metadata when using checkbox input (#863) (0f70063)

v5.5.4

5.5.4 (2026-07-26)

Bug Fixes

  • AJV Resolver - When ajv schema contains default for certain properties, getValues() returns the form data with properties overwritten (#862) (c4b6aab)

v5.5.3

5.5.3 (2026-07-26)

Bug Fixes

  • Conditional/dynamic schema resolution no longer working (#861) (f8d6533)

v5.5.2

5.5.2 (2026-07-26)

Bug Fixes

  • Zod v4 locale and global error customization not picked up (#860) (2126efc)

v5.5.1

5.5.1 (2026-07-25)

... (truncated)

Commits
  • 722ef6e fix: npm install fails with ERESOLVE conflict between @​hookform/resolvers@​5.4...
  • 8df10b0 fix: module not found when importing zodResolver under Zod v3 (#864)
  • 75f2dcd close #773
  • 0d2bdbf close #664
  • 0f70063 fix: yup resolver overrides ref property in errors object with validation met...
  • c4b6aab fix: AJV Resolver - When ajv schema contains default for certain properties, ...
  • e2a8d16 close #760
  • f8d6533 fix: Conditional/dynamic schema resolution no longer working (#861)
  • 2126efc fix: Zod v4 locale and global error customization not picked up (#860)
  • 0721f88 add unit test (#859)
  • Additional commits viewable in compare view

Updates @neondatabase/serverless from 1.0.2 to 1.1.0

Changelog

Sourced from @​neondatabase/serverless's changelog.

1.1.0 (2026-04-09)

Type declarations are now fully inlined (some were previously re-exported from @types/pg and @types/node). The new types greatly reduce the size of the package with dependencies, and should be compatible in normal usage. The code that is actually run remains unchanged.

A few advanced type-level patterns could be affected. Code that depends on exact type identity with the @types/pg exports, that relies on declare module 'pg' augmentation flowing through these exports, or that assumes Buffer-specific types in places now declared as Uint8Array may need updated types.

Commits
  • d8d42fc 1.1.0
  • aeda724 Updated release instructions in DEVELOP.md and preversion script
  • 55f6b42 Add comment to src/shims/pg/index.d.ts about maintenance
  • accf39a Inline all TypeScript types for a significant install size reduction (#206)
  • 013ae38 Add prisma generate before packages tests (#200)
  • 2571f25 Switch CI workflows to protected runner group (#198)
  • 010888d Harden CI: disable third-party scripts, add release cooldown, and tighten per...
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​neondatabase/serverless since your current version.


Updates @sentry/nextjs from 10.49.0 to 10.68.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.68.0

  • feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
  • feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
  • feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
  • feat(server-utils): Allow integrations to be part of marker (#22094)
  • feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
  • feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
  • feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
  • feat(v10): Add url.full and url.path to http.server spans (#22533)
  • feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
  • feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
  • feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
  • feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
  • feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
  • feat(v10/core): Add instrumentStateGraph API (#22491)
  • feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
  • feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
  • feat(v10/react-router): Make instrumentation API the default (#22525)
  • fix(cloudflare,deno,node): Align types of vercelai (#22343)
  • fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)
  • fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)
  • fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)
  • fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)
  • fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)
  • fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)
  • fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)
  • chore: Add external contributor to CHANGELOG.md (#22342)
  • chore: Add external contributor to CHANGELOG.md (#22405)
  • chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)
  • chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)
  • chore(size-limit): weekly auto-bump (#22182)
  • ci(v10): Add v10 to build and license-compliance branch filters (#22499)
  • feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)
  • ref(server-utils): Remove unneeded orchestrion config (#22384)
  • ref(server-utils): Small fastify cleanup (#22385)
  • test: Remove unnecessary test waits (#22383)
  • test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)
  • test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @​psh4607 and @​trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.68.0

  • feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
  • feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
  • feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
  • feat(server-utils): Allow integrations to be part of marker (#22094)
  • feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
  • feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
  • feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
  • feat(v10): Add url.full and url.path to http.server spans (#22533)
  • feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
  • feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
  • feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
  • feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
  • feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
  • feat(v10/core): Add instrumentStateGraph API (#22491)
  • feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
  • feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
  • feat(v10/react-router): Make instrumentation API the default (#22525)
  • fix(cloudflare,deno,node): Align types of vercelai (#22343)
  • fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)
  • fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)
  • fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)
  • fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)
  • fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)
  • fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)
  • fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)
  • chore: Add external contributor to CHANGELOG.md (#22342)
  • chore: Add external contributor to CHANGELOG.md (#22405)
  • chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)
  • chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)
  • chore(size-limit): weekly auto-bump (#22182)
  • ci(v10): Add v10 to build and license-compliance branch filters (#22499)
  • feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)
  • ref(server-utils): Remove unneeded orchestrion config (#22384)
  • ref(server-utils): Small fastify cleanup (#22385)
  • test: Remove unnecessary test waits (#22383)
  • test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)
  • test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @​psh4607 and @​trinitiwowka. Thank you for your contributions!

10.67.0

... (truncated)

Commits
  • b4396c3 release: 10.68.0
  • be21e8c meta(changelog): Update changelog for 10.68.0 (#22566)
  • fb0987f feat(v10): Add http.route attribute to http.server spans with parameteriz...
  • f7bd901 feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
  • ed3a8c8 feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
  • 20227f9 feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
  • 3e5625e feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
  • d924551 test(v10/cloudflare): Add Vite-build support to the integration-test runner (...
  • 11fed03 feat(v10/cloudflare): Read wrangler config and resolve the Sentry options mod...
  • a540764 feat(v10): Add url.full and url.path to http.server spans (#22533)
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.90.21 to 5.101.4

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.4
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-next-experimental@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-persist-client@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.4
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.4

@​tanstack/react-query-devtools@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.3
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-next-experimental@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-persist-client@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.3
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query@​5.101.3

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.4

5.101.3

Patch Changes

  • Updated dependencies [7e3c822]:
    • @​tanstack/query-core@​5.101.3

5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2

5.101.1

Patch Changes

  • Updated dependencies [9eff92e]:
    • @​tanstack/query-core@​5.101.1

5.101.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.0

5.100.14

Patch Changes

  • fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)

  • Updated dependencies []:

    • @​tanstack/query-core@​5.100.14

5.100.13

Patch Changes

  • Updated dependencies [d423168]:
    • @​tanstack/query-core@​5.100.13

... (truncated)

Commits
  • 86bb8a6 ci: Version Packages (#11094)
  • 181ea82 ci: Version Packages (#11089)
  • 6d55b07 test({react,preact}-query): use the '.then()' convention consistently (#11085)
  • 44f38df test({react,preact,solid}-query/useInfiniteQuery): inline the shared 'fetchIt...
  • d1558c1 test({react,preact}-query/usePrefetchQuery): inline the 'generateQueryFn' fac...
  • 99690d1 test({react,preact}-query/usePrefetchInfiniteQuery): inline single-use helper...
  • 10770f0 test({react,preact}-query/usePrefetchInfiniteQuery): inline the shared 'Suspe...
  • dbd5a86 test({react,preact}-query/usePrefetchQuery): inline the shared 'Suspended' co...
  • b955f60 test({react,preact}-query/useSuspenseQuery): assert the 'loading' fallback is...
  • b9c657e test({react,preact}-query/usePrefetchQuery): assert the 'Loading...' fallback...
  • Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.13.23 to 3.14.8

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.8

Patch Changes

  • #1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

  • Updated dependencies [7ae32b5]:

    • @​tanstack/virtual-core@​3.17.6

@​tanstack/react-virtual@​3.14.7

Patch Changes

@​tanstack/react-virtual@​3.14.6

Patch Changes

@​tanstack/react-virtual@​3.14.5

Patch Changes

@​tanstack/react-virtual@​3.14.4

Patch Changes

@​tanstack/react-virtual@​3.14.3

Patch Changes

  • #1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

  • Updated dependencies [ef69ea3]:

    • @​tanstack/virtual-core@​3.17.1

@​tanstack/react-virtual@​3.14.2

Patch Changes

@​tanstack/react-virtual@​3.14.1

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.8

Patch Changes

  • #1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

  • Updated dependencies [7ae32b5]:

    • @​tanstack/virtual-core@​3.17.6

3.14.7

Patch Changes

3.14.6

Patch Changes

3.14.5

Patch Changes

3.14.4

Patch Changes

3.14.3

Patch Changes

  • #1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

  • Updated dependencies [ef69ea3]:

    • @​tanstack/virtual-core@​3.17.1

3.14.2

Patch Changes

... (truncated)

Commits

Updates @tiptap/extension-mention from 3.20.5 to 3.29.0

Release notes

Sourced from @​tiptap/extension-mention's releases.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection highlight over the emptied document instead of a text cursor. deleteSelection now collapses the selection to a cursor.
  • Fix input rules crashing when the matched text spans an inline atom node like a mention.
  • Node view getPos() now returns undefined instead of throwing when the position cannot be resolved yet, for example when React 19 renders a node view component while the editor view is still updating.
  • Fixed onContentError throwing when calling editor.commands from inside the handler on initial load with invalid content. The editor now has a usable state (seeded from the stripped fallback document) before onContentError fires.
  • Fix editor.$pos() returning the wrong node inside container nodes, for example the list item instead of the list.
  • Add insertDefaultBlock to insert the default textblock allowed at a position. It accepts an optional position, attributes, content, and selection-update option.
  • Updated dependencies [e9942fc]
    • @​tiptap/pm@​3.29.0

@​tiptap/extension-find-and-replace

Minor Changes

  • Added a new @tiptap/extension-find-and-replace extension. It searches the document for a term, highlights all matches with decorations, and replaces the current or all matches. Supports case-sensitive, whole-word, and RE2-compatible regex search, plus commands to jump between results. Regex search avoids catastrophic backtracking but does not support lookarounds or backreferences.

@​tiptap/pm

Patch Changes

  • Bump prosemirror-model to ^1.25.11, fixing pasting content copied from the editor in...

    Description has been truncated

@dependabot @github

dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Jul 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
clientflow Ready Ready Preview Aug 8, 2026 11:55pm

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-3452c9cfb3 branch from 5cb35f0 to 654a46d Compare July 21, 2026 16:54
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-3452c9cfb3 branch from 654a46d to 03bef82 Compare July 26, 2026 17:21
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-3452c9cfb3 branch from 03bef82 to f31f2b3 Compare July 26, 2026 17:36
@kapoor08 kapoor08 closed this Aug 8, 2026
@kapoor08
kapoor08 force-pushed the dependabot/npm_and_yarn/production-dependencies-3452c9cfb3 branch from f31f2b3 to c3d9c0b Compare August 8, 2026 17:13
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-3452c9cfb3 branch August 8, 2026 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant