Skip to content

chore(deps)(deps): bump the production-minor-patch group across 1 directory with 25 updates - #103

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-028a900233
Closed

chore(deps)(deps): bump the production-minor-patch group across 1 directory with 25 updates#103
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-028a900233

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 25 updates in the / directory:

Package From To
@upstash/redis 1.38.0 1.38.1
@graphql-tools/schema 10.0.36 10.0.38
@graphql-tools/graphql-file-loader 8.1.16 8.1.18
@graphql-tools/load 8.1.13 8.1.15
@graphql-tools/utils 11.2.0 11.2.2
graphql-ws 6.0.8 6.2.0
jose 6.2.3 6.2.5
ws 8.21.0 8.21.1
@auth/prisma-adapter 2.11.2 2.11.3
@nosecone/next 1.8.0 1.9.1
@sentry/nextjs 10.64.0 10.69.0
@tanstack/react-virtual 3.14.5 3.14.9
immer 11.1.11 11.1.15
katex 0.17.0 0.18.1
lucide-react 1.24.0 1.28.0
motion 12.42.2 12.43.0
next-intl 4.13.1 4.13.4
nosecone 1.8.0 1.9.1
radix-ui 1.6.3-rc.1783608040088 1.6.7
tailwindcss 4.3.2 4.3.3
@hono/zod-validator 0.8.0 0.9.0
hono 4.12.28 4.12.33
@cf-wasm/resvg 0.3.4 0.3.5
@prisma/adapter-neon 7.9.0-dev.19 7.9.1
@prisma/client 7.9.0-dev.19 7.9.1

Updates @upstash/redis from 1.38.0 to 1.38.1

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.1

Patch Changes

  • bd7a19f: Add a quick tip about creating a database via https://upstash.com/start-redis to the warnings shown when the Redis url or token is missing. On Cloudflare, the warning shown when both the url and the token are missing now names both wrangler secret put commands instead of only one.
Commits
  • e45fb78 chore: version packages (#1439)
  • bd7a19f DX-2866: add start-redis tip to missing url/token warnings (#1438)
  • 8cf6209 fix: stabilize flaky evalshaRo test by waiting for script replication
  • 3024bb2 DX-2750: add ai sdk telemetry to redis search example (#1437)
  • bf3f48a chore: add resource section to README (#1435)
  • 27f7253 docs: add quick tip for fast Redis database setup
  • e93fef5 fix: add allowBuilds for pnpm 11 compatibility (#1434)
  • See full diff in compare view

Updates @graphql-tools/schema from 10.0.36 to 10.0.38

Changelog

Sourced from @​graphql-tools/schema's changelog.

10.0.38

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/merge@​9.2.2

10.0.37

Patch Changes

  • Updated dependencies [615c1a2]:
    • @​graphql-tools/utils@​11.2.1
    • @​graphql-tools/merge@​9.2.1
Commits

Updates @graphql-tools/graphql-file-loader from 8.1.16 to 8.1.18

Changelog

Sourced from @​graphql-tools/graphql-file-loader's changelog.

8.1.18

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/import@​7.1.18

8.1.17

Patch Changes

  • Updated dependencies [615c1a2]:
    • @​graphql-tools/utils@​11.2.1
    • @​graphql-tools/import@​7.1.17
Commits

Updates @graphql-tools/load from 8.1.13 to 8.1.15

Changelog

Sourced from @​graphql-tools/load's changelog.

8.1.15

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/schema@​10.0.38

8.1.14

Patch Changes

  • Updated dependencies [615c1a2]:
    • @​graphql-tools/utils@​11.2.1
    • @​graphql-tools/schema@​10.0.37
Commits
  • 11f0a21 chore(release): update monorepo packages versions (#8303)
  • 3c27f9a chore(release): update monorepo packages versions (#8284)
  • 16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
  • See full diff in compare view

Updates @graphql-tools/utils from 11.2.0 to 11.2.2

Changelog

Sourced from @​graphql-tools/utils's changelog.

11.2.2

Patch Changes

  • #8302 e90719b Thanks @​pbomb! - fix mergeDeep to treat explicit undefined property values as overrides rather than skipping them, distinct from an absent property

11.2.1

Patch Changes

  • #8204 615c1a2 Thanks @​pbomb! - fix mergeDeep to treat null property values as explicit overrides rather than skipping them
Commits
  • 11f0a21 chore(release): update monorepo packages versions (#8303)
  • e90719b fix(utils): treat explicit undefined as an override in mergeDeep (#8302)
  • 3c27f9a chore(release): update monorepo packages versions (#8284)
  • 615c1a2 fix(utils): treat null as explicit value in mergeDeep, only skip undefined (#...
  • 15a67f8 build(deps): bump the actions-deps group across 1 directory with 5 updates (#...
  • 16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
  • See full diff in compare view

Updates graphql-ws from 6.0.8 to 6.2.0

Release notes

Sourced from graphql-ws's releases.

v6.2.0

Minor Changes

v6.1.1

Patch Changes

  • #680 3fdd82f Thanks @​kkhys! - Disposing of a client event listener twice no longer removes an unrelated listener

    The unsubscribe function returned by client.on spliced at indexOf(listener) without checking for -1, so removing an already-removed listener would splice(-1, 1) and silently drop the most recently registered listener of the same event. This happens in practice without any double-dispose by the user: emits iterate over a copy of the listeners, so a one-shot internal listener that already unlistened itself during a nested emit (e.g. when client.terminate() is called from within a closed/error listener) is re-invoked from the copy and unlistens again, knocking out registered closed/error listeners.

v6.1.0

Minor Changes

Changelog

Sourced from graphql-ws's changelog.

6.2.0

Minor Changes

6.1.1

Patch Changes

  • #680 3fdd82f Thanks @​kkhys! - Disposing of a client event listener twice no longer removes an unrelated listener

    The unsubscribe function returned by client.on spliced at indexOf(listener) without checking for -1, so removing an already-removed listener would splice(-1, 1) and silently drop the most recently registered listener of the same event. This happens in practice without any double-dispose by the user: emits iterate over a copy of the listeners, so a one-shot internal listener that already unlistened itself during a nested emit (e.g. when client.terminate() is called from within a closed/error listener) is re-invoked from the copy and unlistens again, knocking out registered closed/error listeners.

6.1.0

Minor Changes

Commits
  • af4f5c9 Upcoming Release Changes (#683)
  • 1e70c1a feat(server): Add parse option for custom GraphQL parsing (#682)
  • 716eb36 Upcoming Release Changes (#681)
  • 3fdd82f fix(client): don't remove an unrelated listener when disposing of an already-...
  • ea0d083 chore: no need for registry url
  • 0b69b9b Upcoming Release Changes (#679)
  • 8bbad60 chore: downgrade uws for node 20
  • 3675e0d chore: bump uws
  • 0f78663 chore: bump node version
  • a6a792a chore(release): permissions write-all
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql-ws since your current version.


Updates jose from 6.2.3 to 6.2.5

Release notes

Sourced from jose's releases.

v6.2.5

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)
  • stop claiming the JWK "use" parameter is used during import (47a07b2)
  • update CHANGELOG.md (fc51bf5)

Refactor

  • assert key shape and type from the entry (971057e)
  • avoid 32-bit truncation of the AES-CBC-HMAC AAD bit length (1c8c6e9)
  • correct swapped JWE unprotected header type error messages (894c498)
  • describe each JWS algorithm once (7375028)
  • discriminate a key once (0b59a69)
  • fold single-consumer modules into their consumers (c2f0ca3)
  • generate and import keys from the entry (da69b68)
  • keep JWE out of the JWKS and embedded-JWK paths (241dd48)
  • keep JWS and JWE out of each other's bundles (2a98564)
  • parse a Protected Header in one place (30f72af)
  • resolve the content encryption algorithm once (98b50ab)
  • tighten key property checks (fe0dc3b)
  • types: add discriminated JOSE error types (f7f764e)
  • types: add JOSE identifier unions and JWK narrowing (2a20f49)
  • types: improve key and result inference (cb25e77)
  • types: trim published declaration comments (544f179)
  • unify base64 decode errors (3a91833)
  • validate each token once rather than once per layer (bbdae09)
  • write each algorithm identifier once (73d83b5)

v6.2.4

Documentation

  • update README.md and SECURITY.md to reflect passed EOL dates (2a84032)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.5 (2026-07-29)

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)
  • stop claiming the JWK "use" parameter is used during import (47a07b2)
  • update CHANGELOG.md (fc51bf5)

Refactor

  • assert key shape and type from the entry (971057e)
  • avoid 32-bit truncation of the AES-CBC-HMAC AAD bit length (1c8c6e9)
  • correct swapped JWE unprotected header type error messages (894c498)
  • describe each JWS algorithm once (7375028)
  • discriminate a key once (0b59a69)
  • fold single-consumer modules into their consumers (c2f0ca3)
  • generate and import keys from the entry (da69b68)
  • keep JWE out of the JWKS and embedded-JWK paths (241dd48)
  • keep JWS and JWE out of each other's bundles (2a98564)
  • parse a Protected Header in one place (30f72af)
  • resolve the content encryption algorithm once (98b50ab)
  • tighten key property checks (fe0dc3b)
  • types: add discriminated JOSE error types (f7f764e)
  • types: add JOSE identifier unions and JWK narrowing (2a20f49)
  • types: improve key and result inference (cb25e77)
  • types: trim published declaration comments (544f179)
  • unify base64 decode errors (3a91833)
  • validate each token once rather than once per layer (bbdae09)
  • write each algorithm identifier once (73d83b5)

6.2.4 (2026-07-21)

... (truncated)

Commits
  • 3bac350 chore(release): 6.2.5
  • 544f179 refactor(types): trim published declaration comments
  • ef6b73e ci: enforce the family split and check the built dist
  • c2f0ca3 refactor: fold single-consumer modules into their consumers
  • 0b59a69 refactor: discriminate a key once
  • 30f72af refactor: parse a Protected Header in one place
  • 73d83b5 refactor: write each algorithm identifier once
  • da69b68 refactor: generate and import keys from the entry
  • 971057e refactor: assert key shape and type from the entry
  • 98b50ab refactor: resolve the content encryption algorithm once
  • Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • a2f4e7c [fix] Count empty fragments toward the limit (#2329)
  • e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
  • 4ea355d [doc] Document 32-bit signed integer coercion for option values
  • 2120f4c [example] Remove uuid dependency
  • 4c534a6 [security] Add latest vulnerability to SECURITY.md
  • See full diff in compare view

Updates @auth/prisma-adapter from 2.11.2 to 2.11.3

Release notes

Sourced from @​auth/prisma-adapter's releases.

@​auth/prisma-adapter@​2.11.3

Other

  • @​auth/core: dependency update (8a933f95)
Commits
  • 5af7357 chore(release): bump package version(s) [skip ci]
  • 8a933f9 fix(core): document that getToken returns null for malformed authorization he...
  • 5b1aa47 chore(ci): pin surrealdb test server to the v2 image for the 1.3 client (#13468)
  • 1116034 Chore/nodemailer 8 peer deps (#13434)
  • 7b35fc3 fix(docs): repair docs build broken by floating TypeScript resolution (#13450)
  • b24abfa fix(proxy): override Vercel build command so it doesn't run turbo (#13448)
  • a99514b chore(deps): resolve remaining Dependabot alerts via cross-major dependency u...
  • d008b9b Merge commit from fork
  • af42d8f chore: lint (#13446)
  • e707770 Merge commit from fork
  • Additional commits viewable in compare view

Updates @nosecone/next from 1.8.0 to 1.9.1

Release notes

Sourced from @​nosecone/next's releases.

v1.9.1

1.9.1 (2026-07-15)

🪲 Bug Fixes

  • ip: update verify-ranges script paths for src/dist layout (#6143) (83fdb74)
  • publish: include @​arcjet/sensitive-info-rampart in publish workflow (#6145) (a5d0a8b)

v1.9.0

1.9.0 (2026-07-15)

🚀 New Features

  • add Rampart model backend to localDetectSensitiveInfo (#6141) (a77cacc)
  • sensitive-info-rampart: add on-device Rampart NER backend (#6120) (f2b9e44)

🪲 Bug Fixes

  • arcjet-guard: detect and recycle silently dropped HTTP/2 connections (#6137) (742cb4b)
  • arcjet-guard: make connection recycling single-flight per session generation (#6138) (ca0883c)

🧹 Miscellaneous Chores

  • seed release-please manifest for sensitive-info-rampart (#6142) (39ec65f)

🔨 Build System

  • deps-dev: bump ws from 7.5.10 to 7.5.12 in /examples/remix-express (#6140) (bc91c59)
  • deps: bump morgan from 1.10.1 to 1.11.0 in /examples/react-router-middleware (#6139) (d91afca)
  • deps: bump morgan from 1.10.1 to 1.11.0 in /examples/remix-express (#6135) (f5c1135)

✅ Continuous Integration

  • publish: pass dist-tag via --tag and drop publishConfig.tag (#6133) (a429662)
Changelog

Sourced from @​nosecone/next's changelog.

1.9.1 (2026-07-15)

🧹 Miscellaneous Chores

  • @​nosecone/next: Synchronize arcjet-js versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • nosecone bumped from 1.9.0 to 1.9.1

1.9.0 (2026-07-15)

✅ Continuous Integration

  • publish: pass dist-tag via --tag and drop publishConfig.tag (#6133) (a429662)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • nosecone bumped from 1.8.0 to 1.9.0
Commits

Updates @sentry/nextjs from 10.64.0 to 10.69.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.69.0

Important Changes

  • feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

  • feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)
  • feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)
  • feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#22767)
  • fix(v10/cloudflare): Prevent AI provider skips (#22771)
  • fix(v10/core): Summarize SQLite upserts so Durable Object cf_ spans stay filtered (#22766)
  • fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • fix(v10/gatsby): Add React 19 to peer dependency range (#22675)
  • fix(v10/node): Unpin @apm-js-collab/code-transformer-bundler-plugins (#22678)
  • fix(v10/server-utils): Do not inject dc into client bundle (#22765)
  • test(v10/cloudflare): Pin mcp as agent depends on it (#22769)

Bundle size 📦

Path Size
@​sentry/browser 27.11 KB
@​sentry/browser - with treeshaking flags 25.59 KB
@​sentry/browser (incl. Tracing) 45.51 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.25 KB
@​sentry/browser (incl. Tracing, Profiling) 50.15 KB
@​sentry/browser (incl. Tracing, Replay) 83.84 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.71 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.44 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.79 KB
@​sentry/browser (incl. Feedback) 43.88 KB
@​sentry/browser (incl. sendFeedback) 31.79 KB
@​sentry/browser (incl. FeedbackAsync) 36.8 KB
@​sentry/browser (incl. Metrics) 28.17 KB
@​sentry/browser (incl. Logs) 28.39 KB
@​sentry/browser (incl. Metrics & Logs) 29.07 KB
@​sentry/react 28.87 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.69.0

Important Changes

  • feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

  • feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)
  • feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)
  • feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#22767)
  • fix(v10/cloudflare): Prevent AI provider skips (#22771)
  • fix(v10/core): Summarize SQLite upserts so Durable Object cf_ spans stay filtered (#22766)
  • fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • fix(v10/gatsby): Add React 19 to peer dependency range (#22675)
  • fix(v10/node): Unpin @apm-js-collab/code-transformer-bundler-plugins (#22678)
  • fix(v10/server-utils): Do not inject dc into client bundle (#22765)
  • test(v10/cloudflare): Pin mcp as agent depends on it (#22769)

10.68.0

  • feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
  • feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
  • feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
  • feat(server-utils): Allow integrations to be part of marker (#22094)
  • feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
  • feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
  • feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
  • feat(v10): Add url.full and url.path to http.server spans (#22533)
  • feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
  • feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
  • feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
  • feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
  • feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
  • feat(v10/core): Add instrumentStateGraph API (#22491)
  • feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
  • feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
  • feat(v10/react-router): Make instrumentation API the default (#22525)

... (truncated)

Commits
  • 417af5d release: 10.69.0
  • e7cf605 meta(changelog): Update changelog for 10.69.0 (#22807)
  • 7c5a00e fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • df53214 feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • e96e15e feat(v10/cloudflare): Add Spotlight integration for local dev event forwardin...
  • ea4a322 fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • 6a84103 feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • f0c3569 feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • 0516355 feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#2...
  • d3a6e52 fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#2...
  • Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.5 to 3.14.9

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.9

Patch Changes

  • Updated dependencies [a5417b4]:
    • @​tanstack/virtual-core@​3.17.7

@​tanstack/react-virtual@​3.14.8

Patch Changes

  • #1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

  • Updated dependencies [7ae32b5]:

    • @​tanstack/virtual-core@​3.17.6

@​tanstack/react-virtual@​3.14.7

Patch Changes

@​tanstack/react-virtual@​3.14.6

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.9

Patch Changes

  • Updated dependencies [a5417b4]:
    • @​tanstack/virtual-core@​3.17.7

3.14.8

Patch Changes

  • #1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same...

    Description has been truncated

@dependabot
chore(deps)(deps): bump the production-minor-patch group across 1 dir…
b9f17dc 
…ectory with 25 updates

Bumps the production-minor-patch group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.0` | `1.38.1` |
| [@graphql-tools/schema](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/schema) | `10.0.36` | `10.0.38` |
| [@graphql-tools/graphql-file-loader](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/loaders/graphql-file) | `8.1.16` | `8.1.18` |
| [@graphql-tools/load](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/load) | `8.1.13` | `8.1.15` |
| [@graphql-tools/utils](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/utils) | `11.2.0` | `11.2.2` |
| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | `6.0.8` | `6.2.0` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.5` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.1` |
| [@auth/prisma-adapter](https://github.com/nextauthjs/next-auth) | `2.11.2` | `2.11.3` |
| [@nosecone/next](https://github.com/arcjet/arcjet-js/tree/HEAD/nosecone-next) | `1.8.0` | `1.9.1` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.64.0` | `10.69.0` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.5` | `3.14.9` |
| [immer](https://github.com/immerjs/immer) | `11.1.11` | `11.1.15` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.17.0` | `0.18.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.24.0` | `1.28.0` |
| [motion](https://github.com/motiondivision/motion) | `12.42.2` | `12.43.0` |
| [next-intl](https://github.com/amannn/next-intl) | `4.13.1` | `4.13.4` |
| [nosecone](https://github.com/arcjet/arcjet-js/tree/HEAD/nosecone) | `1.8.0` | `1.9.1` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.3-rc.1783608040088` | `1.6.7` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.2` | `4.3.3` |
| [@hono/zod-validator](https://github.com/honojs/middleware/tree/HEAD/packages/zod-validator) | `0.8.0` | `0.9.0` |
| [hono](https://github.com/honojs/hono) | `4.12.28` | `4.12.33` |
| [@cf-wasm/resvg](https://github.com/fineshopdesign/cf-wasm/tree/HEAD/packages/resvg) | `0.3.4` | `0.3.5` |
| [@prisma/adapter-neon](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-neon) | `7.9.0-dev.19` | `7.9.1` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.9.0-dev.19` | `7.9.1` |



Updates `@upstash/redis` from 1.38.0 to 1.38.1
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.0...@upstash/redis@1.38.1)

Updates `@graphql-tools/schema` from 10.0.36 to 10.0.38
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/schema/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/schema@10.0.38/packages/schema)

Updates `@graphql-tools/graphql-file-loader` from 8.1.16 to 8.1.18
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/loaders/graphql-file/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/graphql-file-loader@8.1.18/packages/loaders/graphql-file)

Updates `@graphql-tools/load` from 8.1.13 to 8.1.15
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/load/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/load@8.1.15/packages/load)

Updates `@graphql-tools/utils` from 11.2.0 to 11.2.2
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/utils/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/utils@11.2.2/packages/utils)

Updates `graphql-ws` from 6.0.8 to 6.2.0
- [Release notes](https://github.com/enisdenjo/graphql-ws/releases)
- [Changelog](https://github.com/enisdenjo/graphql-ws/blob/master/CHANGELOG.md)
- [Commits](enisdenjo/graphql-ws@v6.0.8...v6.2.0)

Updates `jose` from 6.2.3 to 6.2.5
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.5)

Updates `ws` from 8.21.0 to 8.21.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.1)

Updates `@auth/prisma-adapter` from 2.11.2 to 2.11.3
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/@auth/prisma-adapter@2.11.2...@auth/prisma-adapter@2.11.3)

Updates `@nosecone/next` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/arcjet/arcjet-js/releases)
- [Changelog](https://github.com/arcjet/arcjet-js/blob/main/nosecone-next/CHANGELOG.md)
- [Commits](https://github.com/arcjet/arcjet-js/commits/v1.9.1/nosecone-next)

Updates `@sentry/nextjs` from 10.64.0 to 10.69.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.69.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.64.0...10.69.0)

Updates `@tanstack/react-virtual` from 3.14.5 to 3.14.9
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.9/packages/react-virtual)

Updates `immer` from 11.1.11 to 11.1.15
- [Release notes](https://github.com/immerjs/immer/releases)
- [Commits](immerjs/immer@v11.1.11...v11.1.15)

Updates `katex` from 0.17.0 to 0.18.1
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.17.0...v0.18.1)

Updates `lucide-react` from 1.24.0 to 1.28.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react)

Updates `motion` from 12.42.2 to 12.43.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.42.2...v12.43.0)

Updates `next-intl` from 4.13.1 to 4.13.4
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.13.1...v4.13.4)

Updates `nosecone` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/arcjet/arcjet-js/releases)
- [Changelog](https://github.com/arcjet/arcjet-js/blob/main/nosecone/CHANGELOG.md)
- [Commits](https://github.com/arcjet/arcjet-js/commits/v1.9.1/nosecone)

Updates `radix-ui` from 1.6.3-rc.1783608040088 to 1.6.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui)

Updates `tailwindcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `@hono/zod-validator` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/honojs/middleware/releases)
- [Changelog](https://github.com/honojs/middleware/blob/main/packages/zod-validator/CHANGELOG.md)
- [Commits](https://github.com/honojs/middleware/commits/@hono/zod-validator@0.9.0/packages/zod-validator)

Updates `hono` from 4.12.28 to 4.12.33
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.28...v4.12.33)

Updates `@cf-wasm/resvg` from 0.3.4 to 0.3.5
- [Release notes](https://github.com/fineshopdesign/cf-wasm/releases)
- [Changelog](https://github.com/fineshopdesign/cf-wasm/blob/main/packages/resvg/CHANGELOG.md)
- [Commits](https://github.com/fineshopdesign/cf-wasm/commits/@cf-wasm/resvg@0.3.5/packages/resvg)

Updates `@prisma/adapter-neon` from 7.9.0-dev.19 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/adapter-neon)

Updates `@prisma/client` from 7.9.0-dev.19 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/client)

---
updated-dependencies:
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/schema"
  dependency-version: 10.0.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/graphql-file-loader"
  dependency-version: 8.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/load"
  dependency-version: 8.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/utils"
  dependency-version: 11.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: graphql-ws
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: jose
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: ws
  dependency-version: 8.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@auth/prisma-adapter"
  dependency-version: 2.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@nosecone/next"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: immer
  dependency-version: 11.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: katex
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: motion
  dependency-version: 12.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: next-intl
  dependency-version: 4.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: nosecone
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: radix-ui
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@hono/zod-validator"
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: hono
  dependency-version: 4.12.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@cf-wasm/resvg"
  dependency-version: 0.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@prisma/adapter-neon"
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@prisma/client"
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nextcalc-pro Ready Ready Preview Aug 3, 2026 1:35pm

This was referenced Aug 3, 2026
Closed
Closed
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-minor-patch-028a900233 branch August 10, 2026 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants