Skip to content

deps: bump the production-dependencies group across 1 directory with 3 updates - #317

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-ce105c23ad
Closed

deps: bump the production-dependencies group across 1 directory with 3 updates#317
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-ce105c23ad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 3 updates in the / directory: @supabase/supabase-js, lucide-react and posthog-js.

Updates @supabase/supabase-js from 2.111.0 to 2.112.2

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)
  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)

❤️ Thank You

v2.112.1

2.112.1 (2026-08-05)

🩹 Fixes

  • auth: preserve 5xx error message (#2587)
  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

v2.112.1-canary.1

2.112.1-canary.1 (2026-08-05)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • supabase: forward db retry option (#2571)

❤️ Thank You

Commits
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
  • a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
  • e6c975c fix(supabase): forward db retry option (#2571)
  • a262492 chore(release): version 2.111.0 changelogs (#2572)
  • See full diff in compare view

Updates lucide-react from 1.28.0 to 1.30.0

Release notes

Sourced from lucide-react's releases.

Version 1.30.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

Version 1.29.0

What's Changed

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

Commits

Updates posthog-js from 1.409.2 to 1.414.0

Release notes

Sourced from posthog-js's releases.

posthog-js@1.414.0

1.414.0

Minor Changes

  • #4330 5bd8b83 Thanks @​darkopia! - Add posthog.conversations.getUnavailableReason() to expose why the conversations API is unavailable (bundle blocked/failed to load, disabled in project, remote config pending/failed, still initializing, …) instead of collapsing every case into isAvailable() === false. Lets callers that fall back to another channel record the specific cause. ConversationsUnavailableReason is exported from the package entry points, so consumers can name the type. (2026-08-07)

posthog-js@1.413.3

1.413.3

Patch Changes

  • #4414 1b88c2f Thanks @​marandaneto! - Clear properties registered for a session when the PostHog session rotates. (2026-08-06)

  • #4374 b39b577 Thanks @​dustinbyrne! - Persist in-place object and array mutations when properties are re-registered. (2026-08-06)

  • #4434 75fb719 Thanks @​arnohillen! - Make the session replay attribute masking options mutually exclusive: when both maskAllElementAttributes and maskAttributeFn are set, the coarse option wins and the callback is ignored (with a console warning), so a callback can no longer accidentally unmask what maskAllElementAttributes hides. (2026-08-06)

  • Updated dependencies [64ba193, 75fb719]:

    • @​posthog/core@​1.46.9
    • @​posthog/types@​1.402.2

posthog-js@1.413.2

1.413.2

Patch Changes

  • #4425 ee7fab0 Thanks @​posthog! - Fix a benign network failure (e.g. TypeError: Failed to fetch) in the async native-gzip request path surfacing as an unhandled promise rejection, which exception autocapture would otherwise pick up (2026-08-05)

posthog-js@1.413.1

1.413.1

Patch Changes

  • #4390 1160403 Thanks @​posthog! - Contain and log recorder-owned callback failures while preserving exceptions from patched native host APIs. Keep recording mutations from adopted cross-realm nodes. (2026-08-05)

  • #4286 d108d66 Thanks @​posthog! - fix(replay): preserve privacy masking for initial network metadata

    Initial navigation and performance-timing entries are now passed through maskCapturedNetworkRequestFn, including when they have no method. URL rewrites are respected. When the callback returns nullish for an initial entry, replay-required timing metadata is retained without its URL, headers, or body so method-gated callbacks do not drop the metadata or expose deliberately filtered customer data. Derived server-timing entries are also suppressed when this strict fallback is used. Enforced PostHog filtering and payload cleaning still run first. (2026-08-05)

  • Updated dependencies [d108d66]:

    • @​posthog/types@​1.402.1

posthog-js@1.413.0

1.413.0

... (truncated)

Commits
  • 41768b8 chore: update versions and lockfile [version bump]
  • f457521 fix(mcp): wrap request handlers registered by method string (#4461)
  • 69e47bd fix(mcp): register the tools/call fallback without setRequestHandler (#4450)
  • 5bd8b83 feat: expose getUnavailableReason on conversations addon (#4330)
  • bfdab20 fix(react-native-plugin): compile with React Native 0.86 (#4457)
  • e1efa57 chore(llma): bump nuxt from 4.1.3 to 4.5.1 (#4447)
  • 886ef7b chore: update versions and lockfile [version bump]
  • 2831de1 fix(ai): report cache-write tokens for OpenAI-compatible providers (#4189)
  • 7322893 feat(mcp): anchor $session_id to the agent's conversation_id (#4428)
  • c514a34 fix(mcp): deliver the session handle on errors and capability gaps (#4433)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…3 updates

Bumps the production-dependencies group with 3 updates in the / directory: [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js), [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) and [posthog-js](https://github.com/PostHog/posthog-js).


Updates `@supabase/supabase-js` from 2.111.0 to 2.112.2
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.2/packages/core/supabase-js)

Updates `lucide-react` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react)

Updates `posthog-js` from 1.409.2 to 1.414.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.409.2...posthog-js@1.414.0)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: posthog-js
  dependency-version: 1.414.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@dependabot
dependabot Bot requested a review from montrellcruse as a code owner August 10, 2026 23:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 17, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-ce105c23ad branch August 17, 2026 23:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants