Bump the minor-and-patch group across 1 directory with 16 updates by dependabot[bot] · Pull Request #75 · monashcoding/monmap

dependabot · 2026-10-29T04:39:33Z

Bumps the minor-and-patch group with 16 updates in the / directory:

Package	From	To
@types/node	`24.19.1`	`24.19.2`
dotenv	`18.0.6`	`18.0.9`
@base-ui/react	`1.8.0`	`1.9.0`
@dagrejs/dagre	`3.1.1`	`3.1.3`
@next/third-parties	`16.4.2`	`16.4.3`
better-auth	`1.7.7`	`1.7.13`
jose	`6.2.12`	`6.2.13`
lucide-react	`1.53.0`	`1.61.0`
posthog-js	`1.438.3`	`1.438.21`
posthog-node	`5.55.1`	`5.57.2`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
@next/bundle-analyzer	`16.4.0`	`16.4.3`
eslint-config-next	`16.3.8`	`16.4.3`
postcss	`8.5.29`	`8.5.31`
prettier	`3.9.9`	`3.9.10`

Updates @types/node from 24.19.1 to 24.19.2

Commits

See full diff in compare view

Updates dotenv from 18.0.6 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

Permit DOTENV_PATH being empty string with the CLI (#1076)

18.0.8 (2026-10-14)

Changed

Fast parser should strip appended extra quotes (#1073)

Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

Treat undefined settings like quiet: true as null rather than falsey (#1070)

CLI should honor DOTENV_QUIET setting in .env file (#1071)

Commits

8d1ab85 18.0.9
59a40ce changelog
88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
e2fe95e 18.0.8
7aa712a type detail improvement
53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
0b4843a changelog
Additional commits viewable in compare view

Updates @base-ui/react from 1.8.0 to 1.9.0

Release notes

Sourced from @base-ui/react's releases.

v1.9.0

General changes

Export CssVariables and DataAttributes types (#5243) by @superhooman

Fix stale focused field state (#5345) by @atomiks

Fix animation waits retaining detached elements (#5719) by @flaviendelangle

Keep item registration in sync when items change under Strict Mode (#5862) by @atomiks

Avoid re-rendering inactive triggers on open and close (#5865) by @atomiks

Accordion

Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @cpruijsen

Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @atomiks

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Alert Dialog

Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Autocomplete

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Checkbox

Prefer aria-label over associated labels (#5787) by @atomiks

Collapsible

Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @atomiks

Finish closing when the render function removes the panel (#5890) by @michaldudak

Restore animations when a removed panel reopens (#5891) by @michaldudak

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Combobox

Fix stale chip focus after returning to the input (#5879) by @mdm317

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Fix label focus in Shadow DOM (#5871) by @lyzno1

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Reset typeahead state when closing without moving focus (#5816) by @mdm317

Accept readonly arrays for multiple values (#5710) by @MonstraG

Share item indicator implementation (#5728) by @flaviendelangle

Improve mount performance of large lists (#5819) by @atomiks

Combine item store subscriptions (#5863) by @atomiks

Dialog

... (truncated)

Changelog

Sourced from @base-ui/react's changelog.

v1.9.0

Oct 9, 2026

General changes

Export CssVariables and DataAttributes types (#5243) by @superhooman

Fix stale focused field state (#5345) by @atomiks

Fix animation waits retaining detached elements (#5719) by @flaviendelangle

Keep item registration in sync when items change under Strict Mode (#5862) by @atomiks

Avoid re-rendering inactive triggers on open and close (#5865) by @atomiks

Accordion

Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @cpruijsen

Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @atomiks

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Alert Dialog

Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Autocomplete

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Checkbox

Prefer aria-label over associated labels (#5787) by @atomiks

Collapsible

Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @atomiks

Finish closing when the render function removes the panel (#5890) by @michaldudak

Restore animations when a removed panel reopens (#5891) by @michaldudak

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Combobox

Fix stale chip focus after returning to the input (#5879) by @mdm317

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Fix label focus in Shadow DOM (#5871) by @lyzno1

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Reset typeahead state when closing without moving focus (#5816) by @mdm317

Accept readonly arrays for multiple values (#5710) by @MonstraG

... (truncated)

Commits

ad7ecda [release] v1.9.0 (#5906)
3296de3 [drawer] Avoid retaining unmounted drawers in DrawerProvider (#5921)
69c33b4 [drawer] Fix deferred touch swipes leaving the popup (#5922)
51b70db [menu] Strip internal filter components from public types (#5923)
8d8b98c [menu] Ignore filter input edits while the menu animates out (#5911)
aeba3eb [combobox][menu][select] Revert highlightItem imperative action (#5910)
ec6bf32 [field][select][combobox][slider] Fall back to the owner document when lookin...
1f112a5 [popups] Avoid re-rendering inactive triggers on open and close (#5865)
bc53db6 [fieldset] Await render in Legend disabled-state test (#5909)
147092e [test] Strengthen tests, add test lint rules and share copied suites (#5892)
Additional commits viewable in compare view

Updates @dagrejs/dagre from 3.1.1 to 3.1.3

Changelog

Sourced from @dagrejs/dagre's changelog.

v3.1.3

Fixes & Improvements

ESM & Package Exports (PR #516): Added "type": "module" to package.json and renamed the CommonJS bundle to dist/dagre.cjs so both ESM import and CommonJS require() resolve properly. Re-exported Graph with default generic parameters for backward compatibility.

Dynamic Layout State Isolation (PR #515): Scoped remembered dynamic layout state to the input graph rather than module-level state to prevent state leaks across layouts.

Cluster Edge Routing (PR #523): Restored internal edge routes inside clusters with custom rankdir directions.

Zero-Width Node Intersections (PR #524): Fixed vertical edge route intersection calculations with zero-width nodes.

Parallel Edge Subgraph Sorting (PR #522): Fixed sortSubgraph so each parallel-edge dummy node is paired at most once when laying out three or more parallel edges.

Flat Graph Conflict Scan Optimization (PR #520): Skipped findType2Conflicts scan when no border dummy nodes are present in flat graphs.

Release & Tooling (PR #526, PR #527): Added a preflight release check to ensure changelog.md is updated before releasing, and added .pre-commit-config.yaml to run tests.

Dependency Updates: Updated @dagrejs/graphlib to 4.0.6.

[3.1.0] - 2026

New Features

Per-Cluster Direction Support (PR #511): Each cluster/subgraph can now specify its own rankdir, ranksep, nodesep, and align settings. The layout engine recursively applies these settings, enabling complex nested cluster hierarchies with independent flow directions. Fully backward compatible with global rankdir and legacy layouts.

Dynamic Graph Layout Support (PR #512): Added support for dynamic graph layouts via useDynamic and corePath configuration options in LayoutConfig. Enables persistent node ordering and layout stability when modifying graph structures.

Refactoring & Fixes

TypeScript & Type Safety Improvements: Added ClusterNodeLabel and NodeCollection types, updated NodeLabel interfaces, and eliminated any type assertions across the codebase.

Nested Cluster Fixes: Resolved edge cases in nested cluster isolation and improved edge routing for cross-cluster edges.

[3.0.0] - 2026

Major Improvements: TypeScript Migration

Full TypeScript Rewrite (PR #509): Migrated the entire core codebase from JavaScript to TypeScript for improved type safety, better IDE autocompletion, and easier maintenance.

Native Type Definitions: Removed the need for external @types/dagre packages; high-quality types are now shipped directly with the library.

Modern Build Pipeline: * Replaced JSHint with ESLint for stricter code quality.

Replaced Browserify/Karma with modern bundling and testing tools.

Standardized project indentation to 2 spaces (aligning .eslintrc and .editorconfig).

Refactoring & Fixes

Dependency Cleanup: Removed deprecated dependencies including bower.json and legacy test configurations.

Module Exports: Standardized ESM and CommonJS exports to ensure compatibility with modern bundlers like Webpack 5, Vite, and Rollup.

Internal Logic: Refined internal graph traversal algorithms to utilize TypeScript interfaces, reducing "undefined" runtime errors.

[2.0.0] - Legacy Modernization

Major Changes

Organization Transfer: Formally moved the repository to the @dagrejs GitHub organization.

Package Renaming: Published under the @dagrejs/dagre npm scope.

Dropped Legacy Environments: Discontinued support for extremely old Node.js versions (pre-v10) and legacy browsers that do not support ES6 features.

Fixes

... (truncated)

Commits

a73acbf Bumping for release
a037580 Merge pull request #527 from dagrejs/check-release-notes
17757d9 Adding a check on release notes to the release
744d6e1 Bump version and set as pre-release
a5ea31c Building for release
89b75d9 Merge pull request #526 from dagrejs/pre-commit
09913ac chore: add .pre-commit-config.yaml to run tests
daa9324 Merge pull request #524 from dajiaohuang/fix/zero-width-edge-intersections-20...
77c6330 Merge branch 'master' into fix/zero-width-edge-intersections-20261015
a4cfd26 chore: revert dist changes and move tests to layout-test.ts
Additional commits viewable in compare view

Updates @next/third-parties from 16.4.2 to 16.4.3

Release notes

Sourced from @next/third-parties's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[lts-active] Fix extensionless Google font URLs in both bundlers (#100277)

[lts-active] Don't load the app-page runtime in proxy.ts (#100423)

[lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)

[lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)

[lts-active] test: Pin react-virtualized (#100545)

[lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)

[lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)

[lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @mischnic, @lukesandberg, @acdlite, @eps1lon, and @sokra for helping!

Commits

29bbeab v16.4.3
See full diff in compare view

Updates better-auth from 1.7.7 to 1.7.13

Release notes

Sourced from better-auth's releases.

v1.7.13

better-auth

Bug Fixes

Fixed type declarations so type-only exports are no longer listed as values, making a value import fail type checking instead of failing at runtime (#11985)

For detailed changes, see CHANGELOG

@better-auth/core

Features

Added token endpoint authentication options to the Vercel social provider, including dynamic OIDC tokens and private key JWT client assertions, without replacing the built-in sign-in flow (#11948)

Bug Fixes

Added tokenEndpointAuth: { method } to the Cloudflare provider and deprecated tokenEndpointAuthMethod, which remains supported (#11997)

For detailed changes, see CHANGELOG

@better-auth/stripe

Features

Added support for Stripe SDK v23 in the Stripe plugin (#11954)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@allenzhou101, @bytaesu, @godwit-bo

Full changelog: v1.7.12...v1.7.13

v1.7.12

[!IMPORTANT] Action required

If you use ID token sign-in with a provider that has no clientId, set clientId to every client ID your apps sign in with. (#11931)

better-auth

Bug Fixes

Fixed the JWT plugin to verify JWTs and session cookie-cache JWTs with the stored key's algorithm instead of the token header's, and to warn when signing or verifying a JWT without an issuer or audience (#11925)

Fixed OAuth callbacks completed through the OAuth proxy to run the same checks as the standard OAuth callback, including issuer and ID token nonce validation (#11930)

Fixed auth.api.getSession() to keep the original database error as error.cause when the session lookup fails (#11924)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.13

Patch Changes

#11985 9cb95fe Thanks @bytaesu! - Type declarations no longer list type-only exports as values, so importing one as a value now fails type checking instead of failing at runtime.

Updated dependencies [2712441, 1cf4b2c]:

@better-auth/core@1.7.13

@better-auth/drizzle-adapter@1.7.13

@better-auth/kysely-adapter@1.7.13

@better-auth/memory-adapter@1.7.13

@better-auth/mongo-adapter@1.7.13

@better-auth/prisma-adapter@1.7.13

@better-auth/telemetry@1.7.13

1.7.12

Patch Changes

#11925 fb48619 Thanks @bytaesu! - The JWT plugin now verifies JWTs and session cookie-cache JWTs with the algorithm of the stored key instead of the one named in the token header, and logs a warning when it signs or verifies a JWT without an issuer or audience.

#11924 681aa5c Thanks @bytaesu! - auth.api.getSession() now keeps the original database error as error.cause when the session lookup fails, so server code can tell a transient failure from a bug.

#11930 b18e3b8 Thanks @bytaesu! - OAuth callbacks completed through the OAuth proxy now run the same checks as the standard OAuth callback, including issuer and ID token nonce validation.

Updated dependencies [681aa5c, 4bc78ba, 876608d, 083a743, 492134a]:

@better-auth/core@1.7.12

@better-auth/drizzle-adapter@1.7.12

@better-auth/kysely-adapter@1.7.12

@better-auth/memory-adapter@1.7.12

@better-auth/mongo-adapter@1.7.12

@better-auth/prisma-adapter@1.7.12

@better-auth/telemetry@1.7.12

1.7.11

Patch Changes

#10719 bd65db0 Thanks @rendermani! - Recognize PostgreSQL int8 as a valid number type in migration diffs. Kysely's introspector reports pg_type.typname, so Better Auth's own bigint columns (such as the database-backed rate limiter's lastRequest) came back as int8 and were reported as a type mismatch on every run.

#11521 37a75c9 Thanks @aryan1306! - Fix database-backed rate limiting returning an excessively large X-Retry-After header instead of the remaining seconds in the rate-limit window.

Updated dependencies [ce96569, 2f6ca3f, dfd8dd2]:

@better-auth/core@1.7.11

@better-auth/drizzle-adapter@1.7.11

@better-auth/kysely-adapter@1.7.11

@better-auth/memory-adapter@1.7.11

@better-auth/mongo-adapter@1.7.11

@better-auth/prisma-adapter@1.7.11

@better-auth/telemetry@1.7.11

... (truncated)

Commits

7f61081 chore: release v1.7.13 (#11994)
ea3cbfd docs(organization): addMember requires userId (#12007)
2712441 refactor(cloudflare): standardize token endpoint auth options (#11997)
1cf4b2c feat(vercel): support token endpoint authentication strategies (#11948)
7a1ecde chore(deps): bump next to 16.4.2 (#11976)
f4260a9 chore: release v1.7.12 (#11922)
b18e3b8 fix(oauth-proxy): run the standard callback checks on proxied callbacks (#11930)
fb48619 fix(jwt): verify tokens with the stored key's algorithm (#11925)
681aa5c fix(session): keep the cause of session lookup failures (#11924)
52ab801 chore: release v1.7.11 (#11827)
Additional commits viewable in compare view

Updates jose from 6.2.12 to 6.2.13

Release notes

Sourced from jose's releases.

v6.2.13

Refactor

align terminology with JOSE specifications (bafcb74)

preserve underlying error causes (724ba24), closes #908

Changelog

Sourced from jose's changelog.

6.2.13 (2026-10-20)

Refactor

align terminology with JOSE specifications (bafcb74)

preserve underlying error causes (724ba24), closes #908

Commits

316b7f2 chore(release): 6.2.13
8106395 chore: bump packages
724ba24 refactor: preserve underlying error causes
b112a5e chore: bump packages
2a3a525 chore(deps-dev): bump workerd in /tap/workerd
8f540d8 chore(deps): bump the actions group with 3 updates
8d6c02b chore(deps-dev): bump electron from 44.0.0 to 44.4.5 in /tap/electron
55c959f ci: use gh run rerun for retries
5b00c64 ci: address zizmor findings and bump shared workflows
1761d7f chore: bump packages
Additional commits viewable in compare view

Updates lucide-react from 1.53.0 to 1.61.0

Release notes

Sourced from lucide-react's releases.

Version 1.61.0

What's Changed

feat(icons): added circle-chevrons-down, circle-chevrons-left, circle-chevrons-right and 1 more icons by @ypotti in lucide-icons/lucide#5025

New Contributors

@ypotti made their first contribution in lucide-icons/lucide#5025

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

Version 1.60.0

What's Changed

feat(icons): added tombstone icon by @ryck in lucide-icons/lucide#4929

feat(icons): added smartphone-user-round icon by @hitanshu-machhi in lucide-icons/lucide#4586

feat(icons): added bacon icon by @devkamani9313-lab in lucide-icons/lucide#4694

fix(site): Fix build by @ericfennis in lucide-icons/lucide#5033

chore(docs): Update icon count comparison with Feather Icons by @noahweidig in lucide-icons/lucide#5022

feat(icons): added letter-spacing icon by @madebyoz in lucide-icons/lucide#3038

chore(deps): bump the vue-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#5027

chore(deps-dev): bump react-native from 0.87.1 to 0.88.0 in the react-native-deps group by @dependabot[bot] in lucide-icons/lucide#5030

feat(icons): added line-height icon by @madebyoz in lucide-icons/lucide#3039

chore(deps-dev): bump the svelte-deps group across 1 directory with 2 updates by @dependabot[bot] in lucide-icons/lucide#5028

chore(deps): bump the react-deps group across 1 directory with 2 updates by @dependabot[bot] in lucide-icons/lucide#5026

feat(icons): added brain-off icon by @ej52 in lucide-icons/lucide#3535

feat(icons): added graph-hub icon by @Carlito-la-banane in lucide-icons/lucide#4974

feat(svelte): export __iconData and __iconNode across per-icon modules (#4936) by @ronitgupta138 in lucide-icons/lucide#4957

New Contributors

@hitanshu-machhi made their first contribution in lucide-icons/lucide#4586

@devkamani9313-lab made their first contribution in lucide-icons/lucide#4694

@noahweidig made their first contribution in lucide-icons/lucide#5022

@madebyoz made their first contribution in lucide-icons/lucide#3038

@ej52 made their first contribution in lucide-icons/lucide#3535

@Carlito-la-banane made their first contribution in lucide-icons/lucide#4974

@ronitgupta138 made their first contribution in lucide-icons/lucide#4957

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

Version 1.59.0

What's Changed

feat(docs): Adds search field to docs pages by @ericfennis in lucide-icons/lucide#5012

fix(icons): changed chess-queen icon by @karsa-mistmere in lucide-icons/lucide#4613

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

feat(docs): add third-party package lucide-jte by @sgruendel in lucide-icons/lucide#5000

chore(integration-tests): Add Svelte integration tests for @ucide/svelte by @ericfennis in lucide-icons/lucide#5005

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#5004

... (truncated)

Commits

fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
3f1255e chore(deps-dev): bump @vitejs/plugin-react (#4995)
949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
See full diff in compare view

Updates posthog-js from 1.438.3 to 1.438.21

Release notes

Sourced from posthog-js's releases.

posthog-js@1.438.21

1.438.21

Patch Changes

#5346 f91145d Thanks @sebxt! - Reject a prefilled survey rating of 0 on rating scales that start at 1. (2026-10-23)

#5399 02616e1 Thanks @ARXHHHH! - Ship the IE11 Math.trunc and Number.isInteger polyfills only in array.full.es5.js, so the modern bundles no longer trigger Lighthouse's "Legacy JavaScript" audit. (2026-10-23)

Updated dependencies [f827137, f91145d, 02616e1]:

@posthog/core@1.60.1

@posthog/browser-common@0.9.11

posthog-js@1.438.20

1.438.20

Patch Changes

#5292 d73e6c7 Thanks @sarmah-rup! - Read query params with form-encoding rules: an encoded plus (%2B) is kept as + instead of becoming a space, and values that contain = are no longer cut off. This fixes UTM, click ID and search keyword properties such as utm_term=c%2B%2B. (2026-10-23)

Updated dependencies [d73e6c7]:

@posthog/browser-common@0.9.10

posthog-js@1.438.19

1.438.19

Patch Changes

#4994 bcd33ce Thanks @dustinbyrne! - Share autocapture across browser SDKs while preserving existing event capture behavior. (2026-10-22)

Updated dependencies [bcd33ce]:

@posthog/browser-common@0.9.9

posthog-js@1.438.18

1.438.18

Patch Changes

#5189 2aacdcb Thanks @posthog! - Log why capture() dropped an event (capturing disabled or a bot user agent) when debug: true is set (2026-10-22)

#5383 0faf643 Thanks @sarankumar1325! - Conversations: the widget now comes back after reset(), and after a cookieless (on_reject) visitor calls opt_in_capturing(), instead of staying unavailable until the next page load. (2026-10-22)

posthog-js@1.438.17

1.438.17

Patch Changes

... (truncated)

Commits

a0b18d4 chore: update versions and lockfile [version bump]
f827137 fix(flags): fall back for incompatible local regex matching (#5354)
faacff0 fix(aio): keep content out of ai events in privacy mode (#5385)
02616e1 fix(browser): ship uuidv7 polyfills only in the es5 bundle (#5399)
d778694 fix(examples): use gpt-image-2.5-flare in the OpenAI image generation example...
c481b82 ci(release): name excluded approvers in the Slack approval request (#5379)

Bumps the minor-and-patch group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.19.1` | `24.19.2` | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.6` | `18.0.9` | | [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.8.0` | `1.9.0` | | [@dagrejs/dagre](https://github.com/dagrejs/dagre) | `3.1.1` | `3.1.3` | | [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties) | `16.4.2` | `16.4.3` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.7` | `1.7.13` | | [jose](https://github.com/panva/jose) | `6.2.12` | `6.2.13` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.53.0` | `1.61.0` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.438.3` | `1.438.21` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.55.1` | `5.57.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [@next/bundle-analyzer](https://github.com/vercel/next.js/tree/HEAD/packages/next-bundle-analyzer) | `16.4.0` | `16.4.3` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.8` | `16.4.3` | | [postcss](https://github.com/postcss/postcss) | `8.5.29` | `8.5.31` | | [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` | Updates `@types/node` from 24.19.1 to 24.19.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `dotenv` from 18.0.6 to 18.0.9 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.6...v18.0.9) Updates `@base-ui/react` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/mui/base-ui/releases) - [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/base-ui/commits/v1.9.0/packages/react) Updates `@dagrejs/dagre` from 3.1.1 to 3.1.3 - [Release notes](https://github.com/dagrejs/dagre/releases) - [Changelog](https://github.com/dagrejs/dagre/blob/master/changelog.md) - [Commits](dagrejs/dagre@v3.1.1...v3.1.3) Updates `@next/third-parties` from 16.4.2 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/third-parties) Updates `better-auth` from 1.7.7 to 1.7.13 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.7.13/packages/better-auth) Updates `jose` from 6.2.12 to 6.2.13 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.12...v6.2.13) Updates `lucide-react` from 1.53.0 to 1.61.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/lucide-react) Updates `posthog-js` from 1.438.3 to 1.438.21 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.438.3...posthog-js@1.438.21) Updates `posthog-node` from 5.55.1 to 5.57.2 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.57.2/packages/node) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@next/bundle-analyzer` from 16.4.0 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/next-bundle-analyzer) Updates `eslint-config-next` from 16.3.8 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/eslint-config-next) Updates `postcss` from 8.5.29 to 8.5.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.29...8.5.31) Updates `prettier` from 3.9.9 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.9...3.9.10) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.19.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dotenv dependency-version: 18.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@base-ui/react" dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@dagrejs/dagre" dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@next/third-parties" dependency-version: 16.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: better-auth dependency-version: 1.7.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: jose dependency-version: 6.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: posthog-js dependency-version: 1.438.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: posthog-node dependency-version: 5.57.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@next/bundle-analyzer" dependency-version: 16.4.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint-config-next dependency-version: 16.4.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: postcss dependency-version: 8.5.31 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 29, 2026

Navigation Menu

Repository navigation

Bump the minor-and-patch group across 1 directory with 16 updates - #75

Bump the minor-and-patch group across 1 directory with 16 updates#75
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-77a8a9610c

dependabot Bot commented on behalf of github Oct 29, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants