Skip to content

chore(deps): bump the npm-app-minor-and-patch group across 1 directory with 23 updates - #190

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/npm-app-minor-and-patch-644182c249
Open

chore(deps): bump the npm-app-minor-and-patch group across 1 directory with 23 updates#190
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/npm-app-minor-and-patch-644182c249

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-app-minor-and-patch group with 22 updates in the /app directory:

Package From To
@react-three/drei 10.7.7 10.7.8
@react-three/fiber 9.5.0 9.7.0
@react-three/postprocessing 3.0.4 3.1.1
@supabase/supabase-js 2.95.3 2.112.4
canvas 3.2.1 3.2.3
postprocessing 6.38.2 6.39.4
react 19.2.4 19.2.8
@types/react 19.2.13 19.2.18
react-dom 19.2.4 19.2.8
@types/react-dom 19.2.3 19.2.5
tailwind-merge 3.5.0 3.6.0
three 0.182.0 0.185.1
zod 4.3.6 4.5.4
@eslint/eslintrc 3.3.3 3.3.6
@tailwindcss/postcss 4.1.18 4.3.3
@testing-library/react 16.3.2 16.3.3
jest 30.3.0 30.5.0
jest-environment-jsdom 30.3.0 30.5.0
pg 8.18.0 8.23.0
postcss 8.5.23 8.5.26
ts-jest 29.4.6 29.4.12
tsx 4.23.12 4.23.13

Updates @react-three/drei from 10.7.7 to 10.7.8

Release notes

Sourced from @​react-three/drei's releases.

v10.7.8

10.7.8 (2026-08-05)

Bug Fixes

  • Add Chromatic badge to introduction.md (bd7bad3)
  • ci: support npm trusted publishing (#2760) (ffa15b9)
  • ci: use repository Node version in tests (6fdcd73)
  • docs: do not override docker_tag (c9d3d0d)
  • docs: pmndrs/docs:3 (032f1d6)
  • MeshTransmissionMaterial: backside rendering and perf improvements (#2759) (ea128ae)
  • wrong branch name (a039007)
Commits
  • ffa15b9 fix(ci): support npm trusted publishing (#2760)
  • ea128ae fix(MeshTransmissionMaterial): backside rendering and perf improvements (#2759)
  • 6a89ee3 chore(ci): remove CodeSandbox configuration
  • 6fdcd73 fix(ci): use repository Node version in tests
  • c9d3d0d fix(docs): do not override docker_tag
  • a039007 fix: wrong branch name
  • 032f1d6 fix(docs): pmndrs/docs:3
  • bd7bad3 fix: Add Chromatic badge to introduction.md
  • 9cc32c4 chore: use trusted publisher (#2598)
  • 563a6ce chore(storybook): upgrade to sb10 (#2594)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​react-three/drei since your current version.


Updates @react-three/fiber from 9.5.0 to 9.7.0

Release notes

Sourced from @​react-three/fiber's releases.

v9.7.0

The headline updates for this release are the reconciler fixes. We did a pass to harden what is there against react-dom as the standard.

  • R3F's internal children were not being reordered correctly. Basically, if React reordered children, our internal map would drift out of sync and this would cause subtle bugs. This is now fixed. Thanks to @​kvvasuu who reported it and @​wanxiankai who offered a solution.
  • Pierced props now reset properly. We had a bug where if a pierce prop was unset, the reconciler would try to reset it to a default value. However, it would set it to the base object instead of the pierced prop. This is fixed now.
// Initial render
<mesh position-x={5} />
// Later render: prop removed
<mesh />
// bug: would set it to the base object
mesh.x = 0 // !!!

  • Host props now update properly. Host props are ones that we supply such as dispose and onUpdate. These now update properly. This also caused a subtle bug where imperatively updated values could get overwritten unexpectedly after unsetting the value in React. This is all fixed. Note: attach is fixed on first set and ignored if you try to dynamically update it.
  • Properly batch instance reconstruction. This one is pretty technical and if you are curious check out the test in the attached PR. Basically, there was an edge case where if two instances needed to reconstruct (because the args updated), one could be ignore if the other bailed out of updates because of a React.memo or similar. It is likely a problem you never had, but your agent would curse if you did.
  • Event priorities match react-dom. React allows for prioritizing events, for example continuous events like wheel get a higher priority over impulse events like pointer. We copy from the best here and use the same list react-dom does.
  • Support reconciler microtasks. The React reconciler has a cool feature where it can queue microtasks to defer work based on the priorities we set earlier.

What's Changed

New Contributors

Full Changelog: pmndrs/react-three-fiber@v9.6.1...v9.7.0

v9.6.1

What's Changed

Full Changelog: pmndrs/react-three-fiber@v9.6.0...v9.6.1

... (truncated)

Commits

Updates @react-three/postprocessing from 3.0.4 to 3.1.1

Release notes

Sourced from @​react-three/postprocessing's releases.

v3.1.1

Patch release focused purely on compatibility - no behavior changes. It loosens peerDependencies that were accidentally over-constrained in 3.1.0.

What's Changed

Full Changelog: pmndrs/react-postprocessing@v3.1.0...v3.1.1

v3.1.0

This release is an internal rewrite of how effects apply prop changes - most of it is invisible unless you hit one of the bugs it fixes, but it puts every effect on the same reliable, live-updating foundation instead of each one reconstructing itself in ad hoc ways.

Added

  • EffectGroup: new component that groups effects into a single EffectPass with its own cheap enabled toggle, backed by a shared trailing CopyPass so disabling the last pass in a chain doesn't blank the canvas.
  • DepthPicking, useDepthPicking: new component + hook for reading world-space positions off the depth buffer, extracted from <Autofocus> into a reusable, standalone primitive. <DepthPicking> just mounts the vanilla DepthPickingPass and exposes readDepth via ref - renders nothing, updates nothing automatically. useDepthPicking turns a screen position into a world-space point on demand, auto-detecting the composer's own camera when used inside its <EffectComposer>, with an explicit camera override for calling it from outside that tree. <Autofocus> is now built on both internally, same external behavior.
  • EffectComposer: new autoRenderToScreen?: boolean prop (default true) - construction-time option, same treatment as depthBuffer/multisampling.
  • EffectComposer: new renderPass?: (scene, camera) => Pass prop - lets consumers supply their own scene/camera render pass
  • EffectComposer: new mergeMode?: 'auto' | 'all' | 'none' prop (default 'auto'). 'auto' merges effects into as few EffectPasses as possible while keeping at most one convolution effect per pass - matching what postprocessing itself actually allows. This is strictly better than the old unconditional "any convolution effect gets fully isolated" behavior. 'all' drops that safety limit entirely. 'none' gives every effect its own pass.
  • createEffectComponent: the internal effect-wrapping factory is now part of the public API, for wrapping your own zero-arg-constructible postprocessing effect classes the same way this library's own simple effects do.
  • N8AO: new enabled prop, wired into the same shared trailing-CopyPass safety net as EffectGroup (N8AO isn't a mergeable postprocessing Effect, so it needed its own toggle rather than going through EffectGroup directly).
  • Grid, Glitch: opacity now works - these never went through wrapEffect (the only place that handled it) before, so it was silently inert regardless of what the (missing) types suggested.
  • Outline, GodRays: warn in the console when mounted without <EffectComposer autoClear={false}> - both render an internal extra pass that silently produces wrong output (outlines don't render at all; GodRays occlusion looks wrong) without it.
  • Outline: visibleEdgeColor/hiddenEdgeColor now typed as ColorRepresentation (number | string | Color) instead of just number - the runtime already wrapped values in new Color(value), so string colors ("red", "#ff0000", etc.) always worked, the type just didn't say so.
  • LensFlare, ShockWave: lensPosition/position now accept ReactThreeFiber.Vector3 (a tuple or a single number, not just a Vector3 instance), matching how position props work everywhere else in the r3f ecosystem.

Changed

  • Effects whose postprocessing class can be constructed with zero arguments are now built on createEffectComponent: live props update the existing effect instance in place instead of reconstructing it on every change, and a ref now points to one stable instance across prop updates instead of a new one every render.
  • Effects that need real constructor args and can't use createEffectComponent similarly apply live props through useLiveDefaults instead of reconstructing the whole effect on every change.
  • EffectComposer: pass rebuild lifecycle rewritten - passes are now only rebuilt when the resolved effect/pass list actually changed, not on every unrelated React render.
  • SSAO: resolutionScale now falls back to the parent <EffectComposer>'s own resolutionScale prop when not set directly on <SSAO>, instead of always defaulting straight to 1.
  • Build: dist is no longer minified - the consumer's own bundler minifies anyway in a real production build, and this keeps stack traces/devtools readable when debugging into the library.

Fixed

  • SSAO: almost none of its props updated live on change - useMemo only depended on [camera, downSamplingPass, normalPass, resolutionScale], and props were never re-applied to the effect any other way. Changing color, intensity, radius, samples, worldProximityThreshold/worldProximityFalloff, or anything else did nothing until one of those four values happened to change too. Now applies live via useLiveDefaults.
  • DepthOfField: changing depthTexture reconstructed the whole effect - render targets and passes included - despite DepthOfFieldEffect.setDepthTexture() existing specifically to update an existing instance in place. Now applied live.
  • N8AO: config/quality changes mutate effect.configuration directly (a plain object outside r3f's reconciler) without ever calling invalidate(), so changes didn't repaint under <Canvas frameloop="demand">.
  • EffectComposer: sized itself off r3f's size, which drei's <View> overrides per-portal only on View's own re-renders - not kept live - so a composer nested in a <View> could go arbitrarily long without picking up a resize (in practice: staying offset/wrong-sized indefinitely). Now reads gl.getSize() directly instead, which isn't portal-scoped and can't be missed regardless of whether the component itself ever re-renders.

Removed

  • Pixelation, ShockWave: blendFunction/opacity props removed entirely. Both are mainUv-only shaders (no mainImage, verified against postprocessing's own pass-composition logic) - there's no color output to blend, so the props never did anything; they're gone rather than wired up. If you were passing either to <Pixelation>/<ShockWave>, remove them - they were already silent no-ops.

What's Changed

... (truncated)

Commits
  • 45bf9cb Merge pull request #378 from pmndrs/fix/loosen-peer-deps
  • 9e299a1 fix: loosen peerDependencies for react and three
  • 3e1f680 Merge pull request #377 from pmndrs/release/3.1.0
  • 59e71f7 Merge pull request #375 from pmndrs/docs-v4
  • d954afc chore: bump version to 3.1.0
  • 882f6a6 Update vignette example
  • bf50602 Merge branch 'master' into v4
  • 439b4b5 Merge pull request #376 from pmndrs/examples-links-update-docs
  • bb64964 docs: link effect examples to pmndrs/examples
  • 5efd083 ci: build the docs with pmndrs/docs@v4
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​react-three/postprocessing since your current version.


Updates @supabase/supabase-js from 2.95.3 to 2.112.4

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.4

2.112.4 (2026-08-24)

🩹 Fixes

  • auth: convert stolen-lock AbortError when acquireTimeout is 0 (#2616)
  • auth: warn on deprecated lock option and prevent unhandled refresh rejection (#2627)
  • postgrest: move override fixtures out of generated types, repair codegen (#2605)
  • realtime: respect custom logger for send() REST fallback warning (#2612)

❤️ Thank You

v2.112.4-canary.3

2.112.4-canary.3 (2026-08-24)

🩹 Fixes

  • auth: warn on deprecated lock option and prevent unhandled refresh rejection (#2627)

❤️ Thank You

v2.112.4-canary.2

2.112.4-canary.2 (2026-08-24)

🩹 Fixes

  • auth: convert stolen-lock AbortError when acquireTimeout is 0 (#2616)
  • realtime: respect custom logger for send() REST fallback warning (#2612)

❤️ Thank You

v2.112.4-canary.1

2.112.4-canary.1 (2026-08-12)

This was a version bump only, there were no code changes.

v2.112.4-canary.0

2.112.4-canary.0 (2026-08-11)

🩹 Fixes

  • postgrest: move override fixtures out of generated types, repair codegen (#2605)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.4 (2026-08-24)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: improve trace propagation sampling and diagnostics (#2604)
  • supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • supabase: forward db retry option (#2571)

❤️ Thank You

2.111.0 (2026-07-28)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.9 (2026-07-27)

... (truncated)

Commits
  • c7397c1 chore(supabase): bump supabase cli to 2.113.0 (#2606)
  • bbc167c chore(release): version 2.112.3 changelogs (#2608)
  • e44447c fix(supabase): improve trace propagation sampling and diagnostics (#2604)
  • 9f0358c fix(supabase): add trace context headers to canonical CORS allow-list (#2603)
  • 84beab1 chore(release): version 2.112.2 changelogs (#2599)
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
  • a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
  • Additional commits viewable in compare view

Updates canvas from 3.2.1 to 3.2.3

Release notes

Sourced from canvas's releases.

v3.2.3

Fixed

  • Fix building with gcc (#2559)

v3.2.2

Fixed

  • Fix dangling env pointer in image MIME data cleanup (#2550)
  • Fix ctx.direction not affected by ctx.save and ctx.restore
  • Preserve rest of PDF pages when changing width and height (#2538)
  • Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.
Changelog

Sourced from canvas's changelog.

3.2.3

Fixed

  • Fix building with gcc (#2559)

3.2.2

Fixed

  • Fix dangling env pointer in image MIME data cleanup (#2550)
  • Fix ctx.direction not affected by ctx.save and ctx.restore
  • Preserve rest of PDF pages when changing width and height (#2538)
  • Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.
Commits
  • f91598e v3.2.3
  • 1541544 PAGE_SIZE shouldn't be unsigned
  • ac82fa7 v3.2.2
  • 103a620 add the last flurry of commits to CHANGELOG
  • 7304c7a avoid integer overflow in getImageData
  • f9fcc5f avoid integer overflow in putImageData
  • 802a8ca avoid integer overflow in new ImageData
  • 9d1b478 wrap negative values passed to createImageData
  • 779483c bail early when setting zero-length image source
  • 22ed2b7 make canvas types unsigned
  • Additional commits viewable in compare view

Updates postprocessing from 6.38.2 to 6.39.4

Release notes

Sourced from postprocessing's releases.

v6.39.4

Requires three ≥ 0.168.0 < 0.186.0

What's Changed

  • TextureEffect: Fix potential null error #747, 3af6e77

Full Changelog: pmndrs/postprocessing@v6.39.3...v6.39.4

Special Thanks

Thanks @​juliangarnier and @​donmccurdy for the continued support! ❤️

v6.39.3

Requires three ≥ 0.168.0 < 0.186.0

What's Changed

  • EffectComposer: fix depth buffer format mismatch when depth-aware passes are added after the composer has already rendered #745, e19bfa3

Full Changelog: pmndrs/postprocessing@v6.39.2...v6.39.3

Special Thanks

Thanks @​juliangarnier and @​donmccurdy for the continued support! ✨

v6.39.2

Requires three ≥ 0.168.0 < 0.186.0

What's Changed

  • Update dependencies

Full Changelog: pmndrs/postprocessing@v6.39.1...v6.39.2

Special Thanks

Thanks @​juliangarnier and @​donmccurdy for the continued support! 🚀

v6.39.1

Requires three ≥ 0.168.0 < 0.185.0

What's Changed

  • Resolution: removed resizable property #742, 0933567
  • Updated dependencies

Full Changelog: pmndrs/postprocessing@v6.39.0...v6.39.1

Special Thanks

Thanks @​juliangarnier and @​donmccurdy for the continued support! ✨

v6.39.0

Requires three ≥ 0.168.0 < 0.184.0

ℹ️ The minimum version of three was raised to r168

... (truncated)

Commits

Updates react from 19.2.4 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 19.2.13 to 19.2.18

Commits

Updates react-dom from 19.2.4 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates @types/react-dom from 19.2.3 to 19.2.5

Commits

Updates tailwind-merge from 3.5.0 to 3.6.0

Release notes

Sourced from tailwind-merge's releases.

v3.6.0

New Features

Documentation

Other

Full Changelog: dcastil/tailwind-merge@v3.5.0...v3.6.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph, @​mike-healy and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • d54f7e5 v3.6.0
  • 638871a Update README to add info about Tailwind CSS v4.3 support
  • 39fc7b5 Revert "v3.6.0"
  • bd8390f v3.6.0
  • 802877c add v3.6.0 changelog
  • a35feda Merge pull request #665 from dcastil/renovate/rollup-plugin-babel-7.x
  • 940389c Merge pull request #667 from dcastil/renovate/release-drafter-release-drafter...
  • 005af6d pin to specific version
  • 5816ced implement breaking changes
  • 17041e1 Merge pull request #676 from dcastil/dependabot/npm_and_yarn/babel/plugin-tra...
  • Additional commits viewable in compare view

Updates three from 0.182.0 to 0.185.1

Commits

Updates zod from 4.3.6 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar
  • eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

@dependabot
chore(deps): bump the npm-app-minor-and-patch group across 1 director…
37f3030 
…y with 23 updates

Bumps the npm-app-minor-and-patch group with 22 updates in the /app directory:

| Package | From | To |
| --- | --- | --- |
| [@react-three/drei](https://github.com/pmndrs/drei) | `10.7.7` | `10.7.8` |
| [@react-three/fiber](https://github.com/pmndrs/react-three-fiber) | `9.5.0` | `9.7.0` |
| [@react-three/postprocessing](https://github.com/pmndrs/react-postprocessing) | `3.0.4` | `3.1.1` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.95.3` | `2.112.4` |
| [canvas](https://github.com/Automattic/node-canvas) | `3.2.1` | `3.2.3` |
| [postprocessing](https://github.com/pmndrs/postprocessing) | `6.38.2` | `6.39.4` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.13` | `19.2.18` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.8` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.5` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.5.0` | `3.6.0` |
| [three](https://github.com/mrdoob/three.js) | `0.182.0` | `0.185.1` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.5.4` |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.3` | `3.3.6` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.1.18` | `4.3.3` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.3.0` | `30.5.0` |
| [jest-environment-jsdom](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-jsdom) | `30.3.0` | `30.5.0` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.18.0` | `8.23.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.23` | `8.5.26` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.6` | `29.4.12` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |



Updates `@react-three/drei` from 10.7.7 to 10.7.8
- [Release notes](https://github.com/pmndrs/drei/releases)
- [Changelog](https://github.com/pmndrs/drei/blob/master/release.config.js)
- [Commits](pmndrs/drei@v10.7.7...v10.7.8)

Updates `@react-three/fiber` from 9.5.0 to 9.7.0
- [Release notes](https://github.com/pmndrs/react-three-fiber/releases)
- [Commits](pmndrs/react-three-fiber@v9.5.0...v9.7.0)

Updates `@react-three/postprocessing` from 3.0.4 to 3.1.1
- [Release notes](https://github.com/pmndrs/react-postprocessing/releases)
- [Commits](pmndrs/react-postprocessing@v3.0.4...v3.1.1)

Updates `@supabase/supabase-js` from 2.95.3 to 2.112.4
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.4/packages/core/supabase-js)

Updates `canvas` from 3.2.1 to 3.2.3
- [Release notes](https://github.com/Automattic/node-canvas/releases)
- [Changelog](https://github.com/Automattic/node-canvas/blob/master/CHANGELOG.md)
- [Commits](Automattic/node-canvas@v3.2.1...v3.2.3)

Updates `postprocessing` from 6.38.2 to 6.39.4
- [Release notes](https://github.com/pmndrs/postprocessing/releases)
- [Commits](pmndrs/postprocessing@v6.38.2...v6.39.4)

Updates `react` from 19.2.4 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.13 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.4 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `tailwind-merge` from 3.5.0 to 3.6.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.5.0...v3.6.0)

Updates `three` from 0.182.0 to 0.185.1
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `zod` from 4.3.6 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.5.4)

Updates `@eslint/eslintrc` from 3.3.3 to 3.3.6
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](eslint/eslintrc@eslintrc-v3.3.3...eslintrc-v3.3.6)

Updates `@tailwindcss/postcss` from 4.1.18 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@types/react` from 19.2.13 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `jest` from 30.3.0 to 30.5.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.0/packages/jest)

Updates `jest-environment-jsdom` from 30.3.0 to 30.5.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.0/packages/jest-environment-jsdom)

Updates `pg` from 8.18.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `postcss` from 8.5.23 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.23...8.5.26)

Updates `tailwindcss` from 4.1.18 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `ts-jest` from 29.4.6 to 29.4.12
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.6...v29.4.12)

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

---
updated-dependencies:
- dependency-name: "@react-three/drei"
  dependency-version: 10.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@react-three/fiber"
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@react-three/postprocessing"
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: canvas
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: postprocessing
  dependency-version: 6.39.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: tailwind-merge
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: three
  dependency-version: 0.185.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: jest
  dependency-version: 30.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: jest-environment-jsdom
  dependency-version: 30.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-minor-and-patch
- dependency-name: ts-jest
  dependency-version: 29.4.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 3, 2026
@dependabot
dependabot Bot requested a review from BitmapAsset as a code owner September 3, 2026 11:18
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 3, 2026
@vercel

vercel Bot commented Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
app Ready Ready Preview Sep 3, 2026 11:49am UTC
workspace Ready Ready Preview Sep 3, 2026 11:49am UTC

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@BitmapAsset BitmapAsset Awaiting requested review from BitmapAsset BitmapAsset is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants