Skip to content

chore(deps)(deps): bump the production-minor-patch group across 1 directory with 24 updates - #105

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-a5be7a32fd
Open

chore(deps)(deps): bump the production-minor-patch group across 1 directory with 24 updates#105
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-a5be7a32fd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 24 updates in the / directory:

Package From To
@upstash/redis 1.38.0 1.38.2
@graphql-tools/schema 10.0.36 10.0.38
@graphql-tools/graphql-file-loader 8.1.16 8.1.18
@graphql-tools/load 8.1.13 8.1.15
@graphql-tools/utils 11.2.0 11.2.2
graphql-ws 6.0.8 6.2.1
jose 6.2.3 6.2.8
ws 8.21.0 8.21.2
@auth/prisma-adapter 2.11.2 2.11.3
@nosecone/next 1.8.0 1.9.1
@sentry/nextjs 10.64.0 10.69.0
@tanstack/react-virtual 3.14.5 3.14.9
immer 11.1.11 11.1.16
katex 0.17.0 0.18.1
lucide-react 1.24.0 1.30.0
next-intl 4.13.1 4.13.5
nosecone 1.8.0 1.9.1
radix-ui 1.6.3-rc.1783608040088 1.6.7
tailwindcss 4.3.2 4.3.3
@hono/zod-validator 0.8.0 0.9.0
hono 4.12.28 4.13.1
@cf-wasm/resvg 0.3.4 0.4.0
@prisma/adapter-neon 7.9.0-dev.19 7.9.1
@prisma/client 7.9.0-dev.19 7.9.1

Updates @upstash/redis from 1.38.0 to 1.38.2

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.2

Patch Changes

  • c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times

@​upstash/redis@​1.38.1

Patch Changes

  • bd7a19f: Add a quick tip about creating a database via https://upstash.com/start-redis to the warnings shown when the Redis url or token is missing. On Cloudflare, the warning shown when both the url and the token are missing now names both wrangler secret put commands instead of only one.
Commits
  • fc3089b chore: version packages (#1441)
  • c0f5ad7 fix: deduplicate telemetry header values in mergeTelemetry (#1440)
  • e45fb78 chore: version packages (#1439)
  • bd7a19f DX-2866: add start-redis tip to missing url/token warnings (#1438)
  • 8cf6209 fix: stabilize flaky evalshaRo test by waiting for script replication
  • 3024bb2 DX-2750: add ai sdk telemetry to redis search example (#1437)
  • bf3f48a chore: add resource section to README (#1435)
  • 27f7253 docs: add quick tip for fast Redis database setup
  • e93fef5 fix: add allowBuilds for pnpm 11 compatibility (#1434)
  • See full diff in compare view

Updates @graphql-tools/schema from 10.0.36 to 10.0.38

Changelog

Sourced from @​graphql-tools/schema's changelog.

10.0.38

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/merge@​9.2.2

10.0.37

Patch Changes

  • Updated dependencies [615c1a2]:
    • @​graphql-tools/utils@​11.2.1
    • @​graphql-tools/merge@​9.2.1
Commits

Updates @graphql-tools/graphql-file-loader from 8.1.16 to 8.1.18

Changelog

Sourced from @​graphql-tools/graphql-file-loader's changelog.

8.1.18

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/import@​7.1.18

8.1.17

Patch Changes

  • Updated dependencies [615c1a2]:
    • @​graphql-tools/utils@​11.2.1
    • @​graphql-tools/import@​7.1.17
Commits

Updates @graphql-tools/load from 8.1.13 to 8.1.15

Changelog

Sourced from @​graphql-tools/load's changelog.

8.1.15

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/schema@​10.0.38

8.1.14

Patch Changes

  • Updated dependencies [615c1a2]:
    • @​graphql-tools/utils@​11.2.1
    • @​graphql-tools/schema@​10.0.37
Commits
  • 11f0a21 chore(release): update monorepo packages versions (#8303)
  • 3c27f9a chore(release): update monorepo packages versions (#8284)
  • 16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
  • See full diff in compare view

Updates @graphql-tools/utils from 11.2.0 to 11.2.2

Changelog

Sourced from @​graphql-tools/utils's changelog.

11.2.2

Patch Changes

  • #8302 e90719b Thanks @​pbomb! - fix mergeDeep to treat explicit undefined property values as overrides rather than skipping them, distinct from an absent property

11.2.1

Patch Changes

  • #8204 615c1a2 Thanks @​pbomb! - fix mergeDeep to treat null property values as explicit overrides rather than skipping them
Commits
  • 11f0a21 chore(release): update monorepo packages versions (#8303)
  • e90719b fix(utils): treat explicit undefined as an override in mergeDeep (#8302)
  • 3c27f9a chore(release): update monorepo packages versions (#8284)
  • 615c1a2 fix(utils): treat null as explicit value in mergeDeep, only skip undefined (#...
  • 15a67f8 build(deps): bump the actions-deps group across 1 directory with 5 updates (#...
  • 16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
  • See full diff in compare view

Updates graphql-ws from 6.0.8 to 6.2.1

Release notes

Sourced from graphql-ws's releases.

v6.2.1

Patch Changes

v6.2.0

Minor Changes

v6.1.1

Patch Changes

  • #680 3fdd82f Thanks @​kkhys! - Disposing of a client event listener twice no longer removes an unrelated listener

    The unsubscribe function returned by client.on spliced at indexOf(listener) without checking for -1, so removing an already-removed listener would splice(-1, 1) and silently drop the most recently registered listener of the same event. This happens in practice without any double-dispose by the user: emits iterate over a copy of the listeners, so a one-shot internal listener that already unlistened itself during a nested emit (e.g. when client.terminate() is called from within a closed/error listener) is re-invoked from the copy and unlistens again, knocking out registered closed/error listeners.

v6.1.0

Minor Changes

Changelog

Sourced from graphql-ws's changelog.

6.2.1

Patch Changes

6.2.0

Minor Changes

6.1.1

Patch Changes

  • #680 3fdd82f Thanks @​kkhys! - Disposing of a client event listener twice no longer removes an unrelated listener

    The unsubscribe function returned by client.on spliced at indexOf(listener) without checking for -1, so removing an already-removed listener would splice(-1, 1) and silently drop the most recently registered listener of the same event. This happens in practice without any double-dispose by the user: emits iterate over a copy of the listeners, so a one-shot internal listener that already unlistened itself during a nested emit (e.g. when client.terminate() is called from within a closed/error listener) is re-invoked from the copy and unlistens again, knocking out registered closed/error listeners.

6.1.0

Minor Changes

Commits
  • 839ca7d Upcoming Release Changes (#684)
  • 61731f0 Import type WebSocketServer directly from 'ws' (#660)
  • af4f5c9 Upcoming Release Changes (#683)
  • 1e70c1a feat(server): Add parse option for custom GraphQL parsing (#682)
  • 716eb36 Upcoming Release Changes (#681)
  • 3fdd82f fix(client): don't remove an unrelated listener when disposing of an already-...
  • ea0d083 chore: no need for registry url
  • 0b69b9b Upcoming Release Changes (#679)
  • 8bbad60 chore: downgrade uws for node 20
  • 3675e0d chore: bump uws
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql-ws since your current version.


Updates jose from 6.2.3 to 6.2.8

Release notes

Sourced from jose's releases.

v6.2.8

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Fixes

  • require own JOSE properties for presence checks (90ab09c)

Refactor

v6.2.6

Fixes

  • types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)
  • stop claiming the JWK "use" parameter is used during import (47a07b2)
  • update CHANGELOG.md (fc51bf5)

Refactor

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.8 (2026-08-03)

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

6.2.7 (2026-08-01)

Fixes

  • require own JOSE properties for presence checks (90ab09c)

Refactor

6.2.6 (2026-07-31)

Fixes

  • types: accept host CryptoKey declarations (b48a15b)

6.2.5 (2026-07-29)

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)

... (truncated)

Commits
  • 8b768eb chore(release): 6.2.8
  • 1500459 refactor: name the "alg" source in unsupported algorithm failures
  • 714f870 fix: reject a non-string "alg" in EmbeddedJWK
  • 925f3bb refactor: index the JWS and JWE registries without a wrapper
  • 505c383 fix: enforce a single recipient when decrypting dir and ECDH-ES
  • 514831d chore(deps): bump the actions group with 3 updates
  • 45965db chore: cleanup after release
  • 60b941f chore(release): 6.2.7
  • 90ab09c fix: require own JOSE properties for presence checks
  • 767d7f1 refactor: reduce bundle size
  • Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.21.2

Release notes

Sourced from ws's releases.

8.21.2

Bug fixes

  • Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • 787ebf2 [dist] 8.21.2
  • b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
  • e4bb883 [security] Use GitHub PVR as main reporting channel
  • 2eb3be0 [test] Skip test on Node.js versions where it does not apply
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • a2f4e7c [fix] Count empty fragments toward the limit (#2329)
  • e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
  • Additional commits viewable in compare view

Updates @auth/prisma-adapter from 2.11.2 to 2.11.3

Release notes

Sourced from @​auth/prisma-adapter's releases.

@​auth/prisma-adapter@​2.11.3

Other

  • @​auth/core: dependency update (8a933f95)
Commits
  • 5af7357 chore(release): bump package version(s) [skip ci]
  • 8a933f9 fix(core): document that getToken returns null for malformed authorization he...
  • 5b1aa47 chore(ci): pin surrealdb test server to the v2 image for the 1.3 client (#13468)
  • 1116034 Chore/nodemailer 8 peer deps (#13434)
  • 7b35fc3 fix(docs): repair docs build broken by floating TypeScript resolution (#13450)
  • b24abfa fix(proxy): override Vercel build command so it doesn't run turbo (#13448)
  • a99514b chore(deps): resolve remaining Dependabot alerts via cross-major dependency u...
  • d008b9b Merge commit from fork
  • af42d8f chore: lint (#13446)
  • e707770 Merge commit from fork
  • Additional commits viewable in compare view

Updates @nosecone/next from 1.8.0 to 1.9.1

Release notes

Sourced from @​nosecone/next's releases.

v1.9.1

1.9.1 (2026-07-15)

🪲 Bug Fixes

  • ip: update verify-ranges script paths for src/dist layout (#6143) (83fdb74)
  • publish: include @​arcjet/sensitive-info-rampart in publish workflow (#6145) (a5d0a8b)

v1.9.0

1.9.0 (2026-07-15)

🚀 New Features

  • add Rampart model backend to localDetectSensitiveInfo (#6141) (a77cacc)
  • sensitive-info-rampart: add on-device Rampart NER backend (#6120) (f2b9e44)

🪲 Bug Fixes

  • arcjet-guard: detect and recycle silently dropped HTTP/2 connections (#6137) (742cb4b)
  • arcjet-guard: make connection recycling single-flight per session generation (#6138) (ca0883c)

🧹 Miscellaneous Chores

  • seed release-please manifest for sensitive-info-rampart (#6142) (39ec65f)

🔨 Build System

  • deps-dev: bump ws from 7.5.10 to 7.5.12 in /examples/remix-express (#6140) (bc91c59)
  • deps: bump morgan from 1.10.1 to 1.11.0 in /examples/react-router-middleware (#6139) (d91afca)
  • deps: bump morgan from 1.10.1 to 1.11.0 in /examples/remix-express (#6135) (f5c1135)

✅ Continuous Integration

  • publish: pass dist-tag via --tag and drop publishConfig.tag (#6133) (a429662)
Changelog

Sourced from @​nosecone/next's changelog.

1.9.1 (2026-07-15)

🧹 Miscellaneous Chores

  • @​nosecone/next: Synchronize arcjet-js versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • nosecone bumped from 1.9.0 to 1.9.1

1.9.0 (2026-07-15)

✅ Continuous Integration

  • publish: pass dist-tag via --tag and drop publishConfig.tag (#6133) (a429662)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • nosecone bumped from 1.8.0 to 1.9.0
Commits

Updates @sentry/nextjs from 10.64.0 to 10.69.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.69.0

Important Changes

  • feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

  • feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)
  • feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)
  • feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#22767)
  • fix(v10/cloudflare): Prevent AI provider skips (#22771)
  • fix(v10/core): Summarize SQLite upserts so Durable Object cf_ spans stay filtered (#22766)
  • fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • fix(v10/gatsby): Add React 19 to peer dependency range (#22675)
  • fix(v10/node): Unpin @apm-js-collab/code-transformer-bundler-plugins (#22678)
  • fix(v10/server-utils): Do not inject dc into client bundle (#22765)
  • test(v10/cloudflare): Pin mcp as agent depends on it (#22769)

Bundle size 📦

Path Size
@​sentry/browser 27.11 KB
@​sentry/browser - with treeshaking flags 25.59 KB
@​sentry/browser (incl. Tracing) 45.51 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.25 KB
@​sentry/browser (incl. Tracing, Profiling) 50.15 KB
@​sentry/browser (incl. Tracing, Replay) 83.84 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.71 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.44 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.79 KB
@​sentry/browser (incl. Feedback) 43.88 KB
@​sentry/browser (incl. sendFeedback) 31.79 KB
@​sentry/browser (incl. FeedbackAsync) 36.8 KB
@​sentry/browser (incl. Metrics) 28.17 KB
@​sentry/browser (incl. Logs) 28.39 KB
@​sentry/browser (incl. Metrics & Logs) 29.07 KB
@​sentry/react 28.87 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.69.0

Important Changes

  • feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

  • feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)
  • feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)
  • feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#22767)
  • fix(v10/cloudflare): Prevent AI provider skips (#22771)
  • fix(v10/core): Summarize SQLite upserts so Durable Object cf_ spans stay filtered (#22766)
  • fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • fix(v10/gatsby): Add React 19 to peer dependency range (#22675)
  • fix(v10/node): Unpin @apm-js-collab/code-transformer-bundler-plugins (#22678)
  • fix(v10/server-utils): Do not inject dc into client bundle (#22765)
  • test(v10/cloudflare): Pin mcp as agent depends on it (#22769)

10.68.0

  • feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
  • feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
  • feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
  • feat(server-utils): Allow integrations to be part of marker (#22094)
  • feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
  • feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
  • feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
  • feat(v10): Add url.full and url.path to http.server spans (#22533)
  • feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
  • feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
  • feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
  • feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
  • feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
  • feat(v10/core): Add instrumentStateGraph API (#22491)
  • feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
  • feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
  • feat(v10/react-router): Make instrumentation API the default (#22525)

... (truncated)

Commits
  • 417af5d release: 10.69.0
  • e7cf605 meta(changelog): Update changelog for 10.69.0 (#22807)
  • 7c5a00e fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • df53214 feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • e96e15e feat(v10/cloudflare): Add Spotlight integration for local dev event forwardin...
  • ea4a322 fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • 6a84103 feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • f0c3569 feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • 0516355 feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#2...
  • d3a6e52 fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#2...
  • Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.5 to 3.14.9

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.9

Patch Changes

  • Updated dependencies [a5417b4]:
    • @​tanstack/virtual-core@​3.17.7

@​tanstack/react-virtual@​3.14.8

Patch Changes

  • #1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

  • Updated dependencies [7ae32b5]:

    • @​tanstack/virtual-core@​3.17.6

@​tanstack/react-virtual@​3.14.7

Patch Changes

@​tanstack/react-virtual@​3.14.6

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.9

Patch Changes

  • Updated dependencies [a5417b4]:
    • @​tanstack/virtual-core@​3.17.7

3.14.8

Patch Changes

  • #1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

  • Updated dependencies [7ae32b5]:

    • @​tanstack/virtual-core@​3.17.6

3.14.7

Patch Changes

3.14.6

Patch Changes

Commits

@dependabot
chore(deps)(deps): bump the production-minor-patch group across 1 dir…
e9916b4 
…ectory with 24 updates

Bumps the production-minor-patch group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.0` | `1.38.2` |
| [@graphql-tools/schema](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/schema) | `10.0.36` | `10.0.38` |
| [@graphql-tools/graphql-file-loader](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/loaders/graphql-file) | `8.1.16` | `8.1.18` |
| [@graphql-tools/load](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/load) | `8.1.13` | `8.1.15` |
| [@graphql-tools/utils](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/utils) | `11.2.0` | `11.2.2` |
| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | `6.0.8` | `6.2.1` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.8` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.2` |
| [@auth/prisma-adapter](https://github.com/nextauthjs/next-auth) | `2.11.2` | `2.11.3` |
| [@nosecone/next](https://github.com/arcjet/arcjet-js/tree/HEAD/nosecone-next) | `1.8.0` | `1.9.1` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.64.0` | `10.69.0` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.5` | `3.14.9` |
| [immer](https://github.com/immerjs/immer) | `11.1.11` | `11.1.16` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.17.0` | `0.18.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.24.0` | `1.30.0` |
| [next-intl](https://github.com/amannn/next-intl) | `4.13.1` | `4.13.5` |
| [nosecone](https://github.com/arcjet/arcjet-js/tree/HEAD/nosecone) | `1.8.0` | `1.9.1` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.3-rc.1783608040088` | `1.6.7` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.2` | `4.3.3` |
| [@hono/zod-validator](https://github.com/honojs/middleware/tree/HEAD/packages/zod-validator) | `0.8.0` | `0.9.0` |
| [hono](https://github.com/honojs/hono) | `4.12.28` | `4.13.1` |
| [@cf-wasm/resvg](https://github.com/fineshopdesign/cf-wasm/tree/HEAD/packages/resvg) | `0.3.4` | `0.4.0` |
| [@prisma/adapter-neon](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-neon) | `7.9.0-dev.19` | `7.9.1` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.9.0-dev.19` | `7.9.1` |



Updates `@upstash/redis` from 1.38.0 to 1.38.2
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.0...@upstash/redis@1.38.2)

Updates `@graphql-tools/schema` from 10.0.36 to 10.0.38
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/schema/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/schema@10.0.38/packages/schema)

Updates `@graphql-tools/graphql-file-loader` from 8.1.16 to 8.1.18
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/loaders/graphql-file/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/graphql-file-loader@8.1.18/packages/loaders/graphql-file)

Updates `@graphql-tools/load` from 8.1.13 to 8.1.15
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/load/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/load@8.1.15/packages/load)

Updates `@graphql-tools/utils` from 11.2.0 to 11.2.2
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/utils/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/utils@11.2.2/packages/utils)

Updates `graphql-ws` from 6.0.8 to 6.2.1
- [Release notes](https://github.com/enisdenjo/graphql-ws/releases)
- [Changelog](https://github.com/enisdenjo/graphql-ws/blob/master/CHANGELOG.md)
- [Commits](enisdenjo/graphql-ws@v6.0.8...v6.2.1)

Updates `jose` from 6.2.3 to 6.2.8
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.8)

Updates `ws` from 8.21.0 to 8.21.2
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.2)

Updates `@auth/prisma-adapter` from 2.11.2 to 2.11.3
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/@auth/prisma-adapter@2.11.2...@auth/prisma-adapter@2.11.3)

Updates `@nosecone/next` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/arcjet/arcjet-js/releases)
- [Changelog](https://github.com/arcjet/arcjet-js/blob/main/nosecone-next/CHANGELOG.md)
- [Commits](https://github.com/arcjet/arcjet-js/commits/v1.9.1/nosecone-next)

Updates `@sentry/nextjs` from 10.64.0 to 10.69.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.69.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.64.0...10.69.0)

Updates `@tanstack/react-virtual` from 3.14.5 to 3.14.9
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.9/packages/react-virtual)

Updates `immer` from 11.1.11 to 11.1.16
- [Release notes](https://github.com/immerjs/immer/releases)
- [Commits](immerjs/immer@v11.1.11...v11.1.16)

Updates `katex` from 0.17.0 to 0.18.1
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.17.0...v0.18.1)

Updates `lucide-react` from 1.24.0 to 1.30.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react)

Updates `next-intl` from 4.13.1 to 4.13.5
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.13.1...v4.13.5)

Updates `nosecone` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/arcjet/arcjet-js/releases)
- [Changelog](https://github.com/arcjet/arcjet-js/blob/main/nosecone/CHANGELOG.md)
- [Commits](https://github.com/arcjet/arcjet-js/commits/v1.9.1/nosecone)

Updates `radix-ui` from 1.6.3-rc.1783608040088 to 1.6.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui)

Updates `tailwindcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `@hono/zod-validator` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/honojs/middleware/releases)
- [Changelog](https://github.com/honojs/middleware/blob/main/packages/zod-validator/CHANGELOG.md)
- [Commits](https://github.com/honojs/middleware/commits/@hono/zod-validator@0.9.0/packages/zod-validator)

Updates `hono` from 4.12.28 to 4.13.1
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.28...v4.13.1)

Updates `@cf-wasm/resvg` from 0.3.4 to 0.4.0
- [Release notes](https://github.com/fineshopdesign/cf-wasm/releases)
- [Changelog](https://github.com/fineshopdesign/cf-wasm/blob/main/packages/resvg/CHANGELOG.md)
- [Commits](https://github.com/fineshopdesign/cf-wasm/commits/@cf-wasm/resvg@0.4.0/packages/resvg)

Updates `@prisma/adapter-neon` from 7.9.0-dev.19 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/adapter-neon)

Updates `@prisma/client` from 7.9.0-dev.19 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/client)

---
updated-dependencies:
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/schema"
  dependency-version: 10.0.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/graphql-file-loader"
  dependency-version: 8.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/load"
  dependency-version: 8.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/utils"
  dependency-version: 11.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: graphql-ws
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: jose
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: ws
  dependency-version: 8.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@auth/prisma-adapter"
  dependency-version: 2.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@nosecone/next"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: immer
  dependency-version: 11.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: katex
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: next-intl
  dependency-version: 4.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: nosecone
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: radix-ui
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@hono/zod-validator"
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: hono
  dependency-version: 4.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@cf-wasm/resvg"
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@prisma/adapter-neon"
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@prisma/client"
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nextcalc-pro Ready Ready Preview Aug 10, 2026 1:34pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants