chore(deps): bump tailwind-merge from 3.4.0 to 3.6.0#799
chore(deps): bump tailwind-merge from 3.4.0 to 3.6.0#799dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [tailwind-merge](https://github.com/dcastil/tailwind-merge) from 3.4.0 to 3.6.0. - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v3.4.0...v3.6.0) --- updated-dependencies: - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 5fb4986. Configure here.
| nitro: | ||
| specifier: npm:nitro-nightly@latest | ||
| version: nitro-nightly@3.0.1-20260508-123613-d2e64906(@netlify/blobs@8.2.0)(chokidar@4.0.3)(dotenv@16.6.1)(jiti@2.7.0)(lru-cache@11.3.6)(vite@8.0.12(@types/node@22.19.2)(esbuild@0.27.1)(jiti@2.7.0)(terser@5.47.1)(tsx@4.21.0)(yaml@2.8.4)) | ||
| version: nitro-nightly@4.0.0-20251010-091516-7cafddba(@netlify/blobs@8.2.0)(chokidar@4.0.3)(lru-cache@11.3.6)(rolldown@1.0.0)(vite@8.0.12(@types/node@22.19.2)(esbuild@0.27.1)(jiti@2.7.0)(terser@5.47.1)(tsx@4.21.0)(yaml@2.8.4)) |
There was a problem hiding this comment.
Lockfile resolves nitro-nightly to older, incompatible version
Medium Severity
The lockfile regeneration inadvertently changed the resolved nitro-nightly from 3.0.1-20260508 (May 2026 build) to 4.0.0-20251010 (October 2025 build), which is a much older nightly despite the higher major version. The new version declares vite: ^7 as a peer dependency, while the project uses vite@8.0.12. Although vite is optional for nitro, this version mismatch and significant rollback of the resolved nightly could cause unexpected runtime issues in the agent-testbench. This change is unrelated to the tailwind-merge bump and appears to be an unintended side effect of lockfile regeneration.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 5fb4986. Configure here.
Bumps tailwind-merge from 3.4.0 to 3.6.0.
Release notes
Sourced from tailwind-merge's releases.
Commits
d54f7e5v3.6.0638871aUpdate README to add info about Tailwind CSS v4.3 support39fc7b5Revert "v3.6.0"bd8390fv3.6.0802877cadd v3.6.0 changeloga35fedaMerge pull request #665 from dcastil/renovate/rollup-plugin-babel-7.x940389cMerge pull request #667 from dcastil/renovate/release-drafter-release-drafter...005af6dpin to specific version5816cedimplement breaking changes17041e1Merge pull request #676 from dcastil/dependabot/npm_and_yarn/babel/plugin-tra...You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Medium Risk
Mostly a dependency bump, but the lockfile refresh also pulls a new
nitro-nightlymajor (3.x -> 4.x) and related tooling/runtime deps, which could affect dev/build behavior.Overview
Updates
tailwind-mergeto^3.6.0forexamples/agent-testbenchandpackages/convai-widget-core.Regenerates
pnpm-lock.yaml, which also advancesnitro-nightlyfrom 3.x to 4.x and updates/reshuffles a number of transitive build/runtime dependencies (notably addingrollup@4.60.3platform packages and other Nitro-related deps).Reviewed by Cursor Bugbot for commit 5fb4986. Bugbot is set up for automated code reviews on this repo. Configure here.