chore(deps): bump the npm-dependencies group across 1 directory with 34 updates by dependabot[bot] · Pull Request #195 · startberlin/cockpit

dependabot · 2026-07-12T09:38:59Z

Bumps the npm-dependencies group with 34 updates in the / directory:

Package	From	To
@aws-sdk/client-sesv2	`3.1047.0`	`3.1085.0`
@base-ui/react	`1.4.1`	`1.6.0`
@hookform/resolvers	`5.2.2`	`5.4.0`
@radix-ui/react-avatar	`1.1.11`	`1.2.2`
@radix-ui/react-select	`2.2.6`	`2.3.3`
@radix-ui/react-slot	`1.2.4`	`1.3.0`
@slack/web-api	`7.15.2`	`7.19.0`
@tanstack/react-query	`5.100.9`	`5.101.2`
@vercel/speed-insights	`1.0.4`	`2.0.0`
@xyflow/react	`12.10.2`	`12.11.2`
date-fns	`4.1.0`	`4.4.0`
gocardless-nodejs	`8.1.0`	`8.4.0`
google-auth-library	`10.6.2`	`10.9.0`
googleapis	`171.4.0`	`173.0.0`
inngest	`4.4.0`	`4.12.1`
lucide-react	`1.14.0`	`1.24.0`
motion	`12.38.0`	`12.42.2`
nodemailer	`8.0.7`	`9.0.3`
nuqs	`2.8.9`	`2.9.0`
pg	`8.20.0`	`8.22.0`
posthog-js	`1.396.4`	`1.399.2`
posthog-node	`5.39.2`	`5.41.0`
radix-ui	`1.4.3`	`1.6.2`
react-email	`6.1.4`	`6.7.0`
react-hook-form	`7.75.0`	`7.81.0`
react-resizable-panels	`4.11.0`	`4.12.1`
recharts	`3.8.1`	`3.9.2`
tailwind-merge	`3.5.0`	`3.6.0`
@biomejs/biome	`2.4.15`	`2.5.3`
@react-email/ui	`6.1.4`	`6.7.0`
@types/node	`25.2.3`	`26.1.1`
concurrently	`9.2.1`	`10.0.3`
tsx	`4.21.0`	`4.23.0`
typescript	`6.0.3`	`7.0.2`

Updates @aws-sdk/client-sesv2 from 3.1047.0 to 3.1085.0

Release notes

Sourced from @aws-sdk/client-sesv2's releases.

v3.1085.0

3.1085.0(2026-07-10)

New Features

clients: update client endpoints as of 2026-07-10 (dffbeab0)

client-quicksight: Provides CreateKnowledgeBase and UpdateKnowledgeBase APIs (42de5523)

client-inspector2: Support for 3 day and 7 day ECR re-scan durations (4b0b5c86)

client-lambda: Added TelemetryConfig support for Managed Instances Capacity Provider, enabling customers to configure system log level and custom log group for managed instance logging. (63388139)

client-sagemaker: Release support for g4d, c6g, c7g, c8g instance types for SageMaker HyperPod (800976de)

client-ec2: New Amazon EC2 instances. M9g, M9gd, C9g, and C9gd on AWS Graviton5. C8in, M8in, and R8in add 600 Gbps network. C8ib, M8ib, and R8ib add 300 Gbps EBS. C8ine, M8ine, M8idn, R8idn, M8idb, and R8idb round out Intel Xeon 6. Mac-m3ultra with Apple M3 Ultra. G7 with NVIDIA RTX PRO 4500 Blackwell GPUs. (35aaf387)

client-license-manager: Added the ResetUsage field to the CreateLicenseVersion API. When set to true, the entitlement usage counts for the license are reset to 0. If it is false or not specified, entitlement usage is left unchanged. (52f1c9c0)

client-cloudwatch: CloudWatch now assigns a unique identifier to each anomaly detector. PutAnomalyDetector and DescribeAnomalyDetectors return this AnomalyDetectorId, which you can use to describe or delete a specific anomaly detector directly. (36fc0ee5)

For list of updated packages, view updated-packages.md in assets-3.1085.0.zip

v3.1084.0

3.1084.0(2026-07-09)

New Features

client-connect: Amazon Connect - Added DeleteContactData API to support PII deletion of customer endpoint, additional email recipients and email subject. (87f4ae0e)

client-guardduty: Adding "AI Analyst" enum value for detector (20518a4f)

client-synthetics: CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection. (c7379151)

client-ec2: Added support for additional override parameters in CreateFleet, including LaunchTemplateSpecificationUserData, KeyName, IamInstanceProfile, and MetadataOptions. The CreateFleet response now also includes SubnetId, AvailabilityZone, and AvailabilityZoneId for launched instances. (6fcc95d1)

client-ivs: adds support for AWS IVS ad configuration APIs to allow for a postRollConfiguration object on the ad configuration resource (7dd93c48)

Tests

client-kinesis: aggregate HTTP/2 sessions across all endpoint pools (#8181) (84b2b62c)

For list of updated packages, view updated-packages.md in assets-3.1084.0.zip

v3.1083.0

3.1083.0(2026-07-08)

Chores

core/client: remove TypeScript version user-agent metric (#8177) (9d72bc29)

New Features

client-signin: Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation). (bc64f6b2)

... (truncated)

Changelog

Sourced from @aws-sdk/client-sesv2's changelog.

3.1085.0 (2026-07-10)

Note: Version bump only for package @aws-sdk/client-sesv2

3.1084.0 (2026-07-09)

Note: Version bump only for package @aws-sdk/client-sesv2

3.1083.0 (2026-07-08)

Note: Version bump only for package @aws-sdk/client-sesv2

3.1082.0 (2026-07-08)

Note: Version bump only for package @aws-sdk/client-sesv2

3.1081.0 (2026-07-07)

Note: Version bump only for package @aws-sdk/client-sesv2

3.1080.0 (2026-07-06)

Note: Version bump only for package @aws-sdk/client-sesv2

3.1079.0 (2026-07-02)

... (truncated)

Commits

8d0b498 Publish v3.1085.0
c34ce8a Publish v3.1084.0
ceb9aee Publish v3.1083.0
afc3740 Publish v3.1082.0
f8b4987 chore(codegen): sync for isolatedModules tsconfig and server metrics recorder...
8f43c79 chore(deps): bump '@smithy/core' to ^3.29.1 (#8167)
02d5abf Publish v3.1081.0
be034d9 Publish v3.1080.0
74dc940 Publish v3.1079.0
661087f Publish v3.1078.0
Additional commits viewable in compare view

Updates @base-ui/react from 1.4.1 to 1.6.0

Release notes

Sourced from @base-ui/react's releases.

v1.6.0

General changes

Correct inaccurate prop JSDoc (#5036) by @atomiks

Update the hook value when store/arguments change (#4866) by @chuganzy

Restore viewport morphing after reopen for kept-mounted popups (#5010) by @atomiks

Fix pseudo-element bounds in dev mode (#5000) by @atomiks

Accordion

Fix trigger behavior bugs (#4833) by @atomiks

Remove region role from Accordion.Root (#4961) by @chuganzy

Align keyboard navigation with APG (#4965) by @chuganzy

Alert Dialog

Fix programmatic focus return (#4849) by @atomiks

Autocomplete

Keep ArrowLeft/ArrowRight on the input caret in grid mode (#4948) by @spokodev

Document open requirement for the inline prop (#5069) by @atomiks

Avatar

Fix image status edge cases (#4835) by @atomiks

Checkbox

Fix parent group cancellation and indeterminate state (#4941) by @atomiks

Ignore data-focused Field attribute when disabled (#4998) by @atomiks

Fix extra validate fn calls (#4911) by @mj12albert

Checkbox Group

Fix parent group cancellation and indeterminate state (#4941) by @atomiks

Fix parent checkbox with custom validate fn (#4912) by @mj12albert

Fix validation with multiple required checkboxes (#4958) by @atomiks

Forward group ids (#4997) by @atomiks

Collapsible

Fix trigger and panel state bugs (#4848) by @atomiks

Combobox

Fix chip context error (#4877) by @lyzno1

Keep ArrowLeft/ArrowRight on the input caret in grid mode (#4948) by @spokodev

Avoid re-rendering every item on each keystroke (#4964) by @flaviendelangle

Fix autofill and selected state edge cases (#4972) by @atomiks

... (truncated)

Changelog

Sourced from @base-ui/react's changelog.

v1.6.0

Jun 18, 2026

General changes

Correct inaccurate prop JSDoc (#5036) by @atomiks

Update the hook value when store/arguments change (#4866) by @chuganzy

Restore viewport morphing after reopen for kept-mounted popups (#5010) by @atomiks

Fix pseudo-element bounds in dev mode (#5000) by @atomiks

Accordion

Fix trigger behavior bugs (#4833) by @atomiks

Remove region role from Accordion.Root (#4961) by @chuganzy

Align keyboard navigation with APG (#4965) by @chuganzy

Alert Dialog

Fix programmatic focus return (#4849) by @atomiks

Autocomplete

Keep ArrowLeft/ArrowRight on the input caret in grid mode (#4948) by @spokodev

Document open requirement for the inline prop (#5069) by @atomiks

Avatar

Fix image status edge cases (#4835) by @atomiks

Checkbox

Fix parent group cancellation and indeterminate state (#4941) by @atomiks

Ignore data-focused Field attribute when disabled (#4998) by @atomiks

Fix extra validate fn calls (#4911) by @mj12albert

Checkbox Group

Fix parent group cancellation and indeterminate state (#4941) by @atomiks

Fix parent checkbox with custom validate fn (#4912) by @mj12albert

Fix validation with multiple required checkboxes (#4958) by @atomiks

Forward group ids (#4997) by @atomiks

Collapsible

Fix trigger and panel state bugs (#4848) by @atomiks

Combobox

Fix chip context error (#4877) by @lyzno1

... (truncated)

Commits

b34551d [code-infra] Fix package publishing (#5074)
615b0e8 [release] v1.6.0 (#5064)
8b7ca5d [test] Restore slider listener spies (#5072)
2502524 [combobox][autocomplete] Document open requirement for the inline prop (#...
4c33d74 [slider] Fix touchend listener accumulation leak (#5070)
d169cd5 [combobox] Fix autofill and selected state edge cases (#4972)
2d8b8f6 [avatar] Fix image status edge cases (#4835)
ee3c13a [select] Skip disabled items in typeahead and fix multiple-mode serialization...
b167c85 [drawer] Commit swipe on primary-button release (#5057)
e972d74 [combobox] Avoid re-rendering every item on each keystroke (#4964)
Additional commits viewable in compare view

Updates @hookform/resolvers from 5.2.2 to 5.4.0

Release notes

Sourced from @hookform/resolvers's releases.

v5.4.0

5.4.0 (2026-05-21)

Features

feat: add ata-validator resolver (#845)

Fixes

fix issue with toNestErrors.ts (#848)

add guidance on passing context to yupResolver (useForm context) (#835) (3d29924)

Commits

3d29924 feat: add guidance on passing context to yupResolver (useForm context) (#835)
56b68f3 feat: 5.3.0
cf8562d update readme on ata-validator
5e5b610 fix issue with toNestErrors.ts (#848)
72aacf8 Revise supported versions in SECURITY.md
ad89a20 feat: add ata-validator resolver (#845)
02286db ci: updated publish workflow to use node 24 (#838)
2e9bc7c Fix(zodResolver): error paths in complex unions #787 (#819)
See full diff in compare view

Updates @radix-ui/react-avatar from 1.1.11 to 1.2.2

Changelog

Sourced from @radix-ui/react-avatar's changelog.

1.2.2

Updated dependencies: @radix-ui/react-context@1.2.0

1.2.1

Updated dependencies: @radix-ui/react-primitive@2.1.7

1.2.0

Fixed several edge cases with Avatar's loading state

An avatar's fallback would not be displayed again if its image component unmounted. This is now fixed.

Rendering multiple Avatar.Image components per Avatar.Root was never supported and results in buggy, unpredictable behavior. We now warn about this in development.

Zero-sized images were treated as loading, meaning that onLoadingStatusChange is never called once loaded. A zero-sized image now triggers an error status on load.

Other updates

Fixed console warnings to show in test environments.

Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.12

Added repository.directory to all package.json files

Updated dependencies: @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @radix-ui/react-avatar since your current version.

Updates @radix-ui/react-select from 2.2.6 to 2.3.3

Changelog

Sourced from @radix-ui/react-select's changelog.

2.3.3

Fixed a bug in form control components to ensure their values are updated when their associated form's is reset. This affects RadioGroup, Slider, Select, and Switch.

Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7, @radix-ui/react-collection@1.1.12, @radix-ui/react-popper@1.3.3

2.3.2

Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.

Other updates

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-collection@1.1.11, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

2.3.1

Allowed a Select.Item with an empty string value to act as a "clear" option. Selecting it resets the selection back to the placeholder, restoring the native <select> behavior for optional selects.

Fixed a bug where typeahead search resulted in focusing an element that no longer exists.

Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

2.3.0

Added unstable Provider and BubbleInput parts to Select. Select.unstable_Provider sets up Select's context and state without implicitly rendering the hidden native select, and Select.unstable_BubbleInput exposes that previously internal native select so consumers can recompose it explicitly. Select continues to render both by default.

Added support for presence-based exit animations in Select

Fixed Select hidden input so it submits empty string when no value is selected

Fixed placeholder rendering when a controlled Select is reset to an empty value

Added missing __selectScope prop to PopperContent component

Fixed Select closing unexpectedly after touch-scrolling its content when rendered inside an open shadow DOM

Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken

Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @dodomorandi for the original PR)

Fixed SelectValue logging invalid prop errors when used with both asChild and a placeholder

Added repository.directory to all package.json files

Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/number@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-visually-hidden@1.2.5

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @radix-ui/react-select since your current version.

Updates @radix-ui/react-slot from 1.2.4 to 1.3.0

Changelog

Sourced from @radix-ui/react-slot's changelog.

1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.
const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>('Slot');
1.2.5

Fixed infinite re-render loop in React 19 caused by Slot creating a new ref callback on every render

Added support for nested Slottable via a render prop, so a slotted element can be wrapped while still merging Slot props and refs onto it

Added repository.directory to all package.json files

Improved error messages for invalid slot children

Updated dependencies: @radix-ui/react-compose-refs@1.1.3

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @radix-ui/react-slot since your current version.

Updates @slack/web-api from 7.15.2 to 7.19.0

Release notes

Sourced from @slack/web-api's releases.

@slack/web-api@7.19.0

Minor Changes

a795b86: feat: expand app manifest types — add agent_view and assistant_view features, recent agent events (app_context_changed, assistant_thread_started, assistant_thread_context_changed), optional OAuth scopes (bot_optional/user_optional), and event metadata_subscriptions

@slack/web-api@7.18.0

Minor Changes

07744de: feat: make thread_ts optional for assistant.threads.setSuggestedPrompts

@slack/web-api@7.17.0

Minor Changes
2085900: feat: expose public read-only ts getter on ChatStreamer for fallback to chat.update when a stream expires server-side
import { WebClient } from "@slack/web-api";
const client = new WebClient(process.env.SLACK_BOT_TOKEN);
const streamer = client.chatStream({
channel: "C0123456789",
thread_ts: "1700000001.123456",
recipient_team_id: "T0123456789",
recipient_user_id: "U0123456789",
});
await streamer.append({ markdown_text: "hello!" });
// streamer.ts is now set after the first flush
console.log(streamer.ts);
await streamer.stop();
@slack/web-api@7.16.0

Minor Changes
2814969: feat: add highlight_type to files.completeUploadExternal and filesUploadV2 for optimistic rendering
import { WebClient } from "@slack/web-api";
const client = new WebClient(process.env.SLACK_BOT_TOKEN);
await client.filesUploadV2({
channel_id: "C0123456789",
file: "./image.png",
filename: "image.png",
title: "Image Upload",
highlight_type: "png",

... (truncated)

Commits

b0e335b chore: release (#2649)
a795b86 feat: expand app manifest types for agent apps (#2648)
12b94a2 chore: release (#2642)
50828f5 feat: add app_context_changed event type (#2633)
f006ad4 chore: release (#2628)
9db85aa revert(web-api): keep string[] for slack lists message field request input (#...
07744de feat: make thread_ts optional for assistant.threads.setSuggestedPrompts (#2639)
a270a6e chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#2636)
baa1ed7 ci: add node 26 to the test matrix (#2635)
70cec0c chore: block @dependabot updates to @types/node@26 (#2634)
Additional commits viewable in compare view

Updates @tanstack/react-query from 5.100.9 to 5.101.2

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.101.2

Patch Changes

Updated dependencies [f5bf180, 25cdd97, ecd89c8, 01c7634, 49012db]:

@tanstack/query-devtools@5.101.2

@tanstack/react-query@5.101.2

@tanstack/react-query-next-experimental@5.101.2

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.101.2

@tanstack/react-query-persist-client@5.101.2

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.101.2

@tanstack/react-query@5.101.2

@tanstack/react-query@5.101.2

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.2

@tanstack/react-query-devtools@5.101.1

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.101.1

@tanstack/react-query@5.101.1

@tanstack/react-query-next-experimental@5.101.1

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.101.1

@tanstack/react-query-persist-client@5.101.1

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.101.1

@tanstack/react-query@5.101.1

@tanstack/react-query@5.101.1

Patch Changes

Updated dependencies [9eff92e]:

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.101.2

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.2

5.101.1

Patch Changes

Updated dependencies [9eff92e]:

@tanstack/query-core@5.101.1

5.101.0

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.0

5.100.14

Patch Changes

fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)

Updated dependencies []:

@tanstack/query-core@5.100.14

5.100.13

Patch Changes

Updated dependencies [d423168]:

@tanstack/query-core@5.100.13

5.100.12

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.100.12

5.100.11

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.100.11

... (truncated)

Commits

610e8d1 ci: Version Packages (#10996)
1f84256 docs: document the select typing caveat for parallel-queries hooks (#10984)
b809297 ci: Version Packages (#10977)
ccc843e test({react,preact}-query/useQueries): move type-only tests to 'useQueries.te...
4154613 test({react,preact}-query/useMutation): split 'should handle conditional logi...
8bb5fde test({react,preact}-query/useMutation): split 'should pass meta to mutation' ...
87426a3 test(react-query): replace deprecated 'toBeCalledTimes' with 'toHaveBeenCalle...
feb1efd test(*): move 'vi.useRealTimers' to the end of 'afterEach' so cleanup runs un...
f3d8d2a ci: Version Packages (#10774)
532bb29 fix(tests): disable local coverage instrumentation (#10776)
Additional commits viewable in compare view

Updates @vercel/speed-insights from 1.0.4 to 2.0.0

Release notes

Sourced from @vercel/speed-insights's releases.

v2.0.0

What's Changed

Breaking Changes

License changed from Apache-2.0 to MIT (#111)

Nuxt: introduce module support (#110). In case you need to configure it, load injectSpeedInsights() from @vercel/speed-insights/nuxt/runtime

Features

feat: load dynamic configuration (#112) — speed insights config can now be loaded dynamically

Full Changelog: vercel/speed-insights@1.3.1...2.0.0

v2.0.0-canary.1

Canary release for testing 2.0.0 changes

1.5.0-canary.4

What's Changed

fix: next/jest does not support import.meta by @feugy in vercel/speed-insights#91

Full Changelog: vercel/speed-insights@1.2.0-canary.3...1.5.0-canary.4

1.3.1

What's Changed

fix(nuxt): remove the module as breaking change by @HugoRCD in vercel/speed-insights#107

Full Changelog: vercel/speed-insights@1.3.0...1.3.1

1.3.0

What's Changed

feat(nuxt): Add support for injectSpeedInsights() and Nuxt module by @HugoRCD in vercel/speed-insights#104

feat: postinstall script removal by @feugy in vercel/speed-insights#106

fix: add route param to beforeSend event type by @fgascon in vercel/speed-insights#102

New Contributors

@HugoRCD made their first contribution in vercel/speed-insights#104

@fgascon made their first contribution in vercel/speed-insights#102

Full Changelog: vercel/speed-insights@1.2.0...1.3.0

1.2.0

What's Changed

Add an option to prefix an endpoint path with an environment variable. by @emspishak in vercel/speed-insights#85

feat: support configurable deployment basepath by @feugy #88

fix: a.useParams is not a function in next app by @feugy #90

fix: next/jest does not support import.meta by @feugy #91

... (truncated)

Commits

828d10c chore: bump version to v2.0.0
15cb241 chore: bump version to v2.0.0-canary.1
b10a09c feat: load dynamic configuration (#112)
c6f4e37 feat(nuxt)!: Add support for injectSpeedInsights() and Nuxt module (#110)
2452c35 fix(nuxt): remove the module as breaking change (#107)
7ed15ed fix: add route param to beforeSend event type (#102)
a1dfa74 feat: next release and postinstall script removal (#106)
f48623c feat(nuxt): Add support for injectSpeedInsights() and Nuxt module (#104)
23ab42e chore: release 1.2.0 (#94)
5acf92b Add an option to prefix an endpoint path with an environment variable. (#85)
Additional commits viewable in compare view

Updates @xyflow/react from 12.10.2 to 12.11.2

Release notes

Sourced from @xyflow/react's releases.

@xyflow/react@12.11.2

Patch Changes

#5825 5072914 - Only create an XYDrag instance for draggable nodes.

#5847 742860c - Stop the MiniMap from re-rendering on every store update.

#5846 17c64a1 - Apply the viewport pan/zoom transform imperatively so the Viewport component only renders once.

Updated dependencies [c707267, 0c0cebc, 56cf3b0, a01bb6b, 9b3f390, cdfcbeb]:

@xyflow/system@0.0.79

@xyflow/react@12.11.1

Patch Changes

#5815 87da45c - Fix FinalConnectionState type so it preserves the discriminated union.

#5823 a6afc91 - Update attribution link

#5824 6b1dac5 - Do not fire on pane click when connection ends on pane

#5818 4ddc2d8 - Provide the shared handle config (connectOnClick, noPanClassName, rfId) through context instead of subscribing to the store in every Handle, so a store update no longer runs a selector once per handle

#5817 8df250b - Reduce per-handle work on store updates by returning a shared connection state while no connection is in progress.

#5822 a6249de - Return stable reference for edge position when connected node gets deleted

Updated dependencies [ceb8604, 87da45c]:

@xyflow/system@0.0.78

@xyflow/react@12.11.0

12.11.0

Minor Changes

#5677 e6661de - Add autoPanOnSelection to auto-pan when user drags a selection close to the edge of the viewport.

Patch Changes

... (truncated)

Changelog

Sourced from @xyflow/react's changelog.

12.11.2

Patch Changes

#5825 5072914 - Only create an XYDrag instance for draggable nodes.

#5847 742860c - Stop the MiniMap from re-rendering on every store update.

#5846 17c64a1 - Apply the viewport pan/zoom transform imperatively so the Viewport componen...
Description has been truncated

…34 updates Bumps the npm-dependencies group with 34 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-sesv2](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sesv2) | `3.1047.0` | `3.1085.0` | | [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.4.1` | `1.6.0` | | [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.2.2` | `5.4.0` | | [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar) | `1.1.11` | `1.2.2` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.2.6` | `2.3.3` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.4` | `1.3.0` | | [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `7.15.2` | `7.19.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.100.9` | `5.101.2` | | [@vercel/speed-insights](https://github.com/vercel/speed-insights/tree/HEAD/packages/web) | `1.0.4` | `2.0.0` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.10.2` | `12.11.2` | | [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` | | [gocardless-nodejs](https://github.com/gocardless/gocardless-nodejs) | `8.1.0` | `8.4.0` | | [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.6.2` | `10.9.0` | | [googleapis](https://github.com/googleapis/google-api-nodejs-client) | `171.4.0` | `173.0.0` | | [inngest](https://github.com/inngest/inngest-js/tree/HEAD/packages/inngest) | `4.4.0` | `4.12.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.14.0` | `1.24.0` | | [motion](https://github.com/motiondivision/motion) | `12.38.0` | `12.42.2` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.7` | `9.0.3` | | [nuqs](https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs) | `2.8.9` | `2.9.0` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.20.0` | `8.22.0` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.396.4` | `1.399.2` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.39.2` | `5.41.0` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.4.3` | `1.6.2` | | [react-email](https://github.com/resend/react-email/tree/HEAD/packages/react-email) | `6.1.4` | `6.7.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.75.0` | `7.81.0` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.11.0` | `4.12.1` | | [recharts](https://github.com/recharts/recharts) | `3.8.1` | `3.9.2` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.5.0` | `3.6.0` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.15` | `2.5.3` | | [@react-email/ui](https://github.com/resend/react-email/tree/HEAD/packages/ui) | `6.1.4` | `6.7.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.2.3` | `26.1.1` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.1` | `10.0.3` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | Updates `@aws-sdk/client-sesv2` from 3.1047.0 to 3.1085.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sesv2/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1085.0/clients/client-sesv2) Updates `@base-ui/react` from 1.4.1 to 1.6.0 - [Release notes](https://github.com/mui/base-ui/releases) - [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/base-ui/commits/v1.6.0/packages/react) Updates `@hookform/resolvers` from 5.2.2 to 5.4.0 - [Release notes](https://github.com/react-hook-form/resolvers/releases) - [Commits](react-hook-form/resolvers@v5.2.2...v5.4.0) Updates `@radix-ui/react-avatar` from 1.1.11 to 1.2.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar) Updates `@radix-ui/react-select` from 2.2.6 to 2.3.3 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-slot` from 1.2.4 to 1.3.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `@slack/web-api` from 7.15.2 to 7.19.0 - [Release notes](https://github.com/slackapi/node-slack-sdk/releases) - [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.15.2...@slack/web-api@7.19.0) Updates `@tanstack/react-query` from 5.100.9 to 5.101.2 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.2/packages/react-query) Updates `@vercel/speed-insights` from 1.0.4 to 2.0.0 - [Release notes](https://github.com/vercel/speed-insights/releases) - [Commits](https://github.com/vercel/speed-insights/commits/v2.0.0/packages/web) Updates `@xyflow/react` from 12.10.2 to 12.11.2 - [Release notes](https://github.com/xyflow/xyflow/releases) - [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.2/packages/react) Updates `date-fns` from 4.1.0 to 4.4.0 - [Release notes](https://github.com/date-fns/date-fns/releases) - [Commits](date-fns/date-fns@v4.1.0...v4.4.0) Updates `gocardless-nodejs` from 8.1.0 to 8.4.0 - [Release notes](https://github.com/gocardless/gocardless-nodejs/releases) - [Commits](gocardless/gocardless-nodejs@v8.1.0...v8.4.0) Updates `google-auth-library` from 10.6.2 to 10.9.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v10.9.0/core/packages/google-auth-library-nodejs) Updates `googleapis` from 171.4.0 to 173.0.0 - [Release notes](https://github.com/googleapis/google-api-nodejs-client/releases) - [Commits](googleapis/google-api-nodejs-client@googleapis-v171.4.0...googleapis-v173.0.0) Updates `inngest` from 4.4.0 to 4.12.1 - [Release notes](https://github.com/inngest/inngest-js/releases) - [Changelog](https://github.com/inngest/inngest-js/blob/main/packages/inngest/CHANGELOG.md) - [Commits](https://github.com/inngest/inngest-js/commits/inngest@4.12.1/packages/inngest) Updates `lucide-react` from 1.14.0 to 1.24.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.24.0/packages/lucide-react) Updates `motion` from 12.38.0 to 12.42.2 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.38.0...v12.42.2) Updates `nodemailer` from 8.0.7 to 9.0.3 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v8.0.7...v9.0.3) Updates `nuqs` from 2.8.9 to 2.9.0 - [Release notes](https://github.com/47ng/nuqs/releases) - [Commits](https://github.com/47ng/nuqs/commits/v2.9.0/packages/nuqs) Updates `pg` from 8.20.0 to 8.22.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg) Updates `posthog-js` from 1.396.4 to 1.399.2 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.396.4...posthog-js@1.399.2) Updates `posthog-node` from 5.39.2 to 5.41.0 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.41.0/packages/node) Updates `radix-ui` from 1.4.3 to 1.6.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui) Updates `react-email` from 6.1.4 to 6.7.0 - [Release notes](https://github.com/resend/react-email/releases) - [Changelog](https://github.com/resend/react-email/blob/canary/packages/react-email/CHANGELOG.md) - [Commits](https://github.com/resend/react-email/commits/react-email@6.7.0/packages/react-email) Updates `react-hook-form` from 7.75.0 to 7.81.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.75.0...v7.81.0) Updates `react-resizable-panels` from 4.11.0 to 4.12.1 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.11.0...4.12.1) Updates `recharts` from 3.8.1 to 3.9.2 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.8.1...v3.9.2) Updates `tailwind-merge` from 3.5.0 to 3.6.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v3.5.0...v3.6.0) Updates `@biomejs/biome` from 2.4.15 to 2.5.3 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.3/packages/@biomejs/biome) Updates `@react-email/ui` from 6.1.4 to 6.7.0 - [Release notes](https://github.com/resend/react-email/releases) - [Changelog](https://github.com/resend/react-email/blob/canary/packages/ui/CHANGELOG.md) - [Commits](https://github.com/resend/react-email/commits/@react-email/ui@6.7.0/packages/ui) Updates `@types/node` from 25.2.3 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `concurrently` from 9.2.1 to 10.0.3 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v9.2.1...v10.0.3) Updates `tsx` from 4.21.0 to 4.23.0 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.23.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) --- updated-dependencies: - dependency-name: "@aws-sdk/client-sesv2" dependency-version: 3.1085.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@base-ui/react" dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@hookform/resolvers" dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@radix-ui/react-avatar" dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@radix-ui/react-select" dependency-version: 2.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@radix-ui/react-slot" dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@slack/web-api" dependency-version: 7.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@tanstack/react-query" dependency-version: 5.101.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@vercel/speed-insights" dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@xyflow/react" dependency-version: 12.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: date-fns dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: gocardless-nodejs dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: google-auth-library dependency-version: 10.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: googleapis dependency-version: 173.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: inngest dependency-version: 4.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: lucide-react dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: motion dependency-version: 12.42.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: nodemailer dependency-version: 9.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: nuqs dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: pg dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: posthog-js dependency-version: 1.399.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: posthog-node dependency-version: 5.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: radix-ui dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react-email dependency-version: 6.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react-hook-form dependency-version: 7.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react-resizable-panels dependency-version: 4.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: recharts dependency-version: 3.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@biomejs/biome" dependency-version: 2.5.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@react-email/ui" dependency-version: 6.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: concurrently dependency-version: 10.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: tsx dependency-version: 4.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-12T09:39:33Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Quality	Maintenance	License
	inngest@4.4.0 ⏵ 4.12.1
	posthog-js@1.396.4 ⏵ 1.399.2	^-17	⁺¹
	@radix-ui/react-label@2.1.8 ⏵ 2.1.11	⁺¹		^-1
	@radix-ui/react-separator@1.1.7 ⏵ 1.1.11	⁺¹		⁺¹
	@radix-ui/react-slot@1.2.4 ⏵ 1.3.0	⁺¹	⁺¹
	@radix-ui/react-avatar@1.1.10 ⏵ 1.2.2	⁺¹	⁺¹	⁺¹
	@radix-ui/react-checkbox@1.3.3 ⏵ 1.3.7	⁺¹		⁺¹
	gocardless-nodejs@8.1.0 ⏵ 8.4.0	⁺¹
	@radix-ui/react-dialog@1.1.15 ⏵ 1.1.19	⁺¹
	@radix-ui/react-dropdown-menu@2.1.16 ⏵ 2.1.20	⁺¹	⁺¹	⁺¹
	@radix-ui/react-accordion@1.2.12 ⏵ 1.2.16	⁺¹		⁺¹
	@base-ui/react@1.4.1 ⏵ 1.6.0	^-2
	@radix-ui/react-tooltip@1.2.8 ⏵ 1.2.12	⁺¹	⁺¹	⁺¹
	@radix-ui/react-select@2.2.6 ⏵ 2.3.3		⁺¹	⁺¹
	@react-email/ui@6.1.4 ⏵ 6.7.0		⁺¹	⁺¹
	posthog-node@5.39.2 ⏵ 5.41.0	⁺¹¹	⁺¹
	recharts@3.8.1 ⏵ 3.9.2	⁺¹	⁺²	⁺²
	lucide-react@1.14.0 ⏵ 1.24.0		⁺¹
	googleapis@171.4.0 ⏵ 173.0.0	^-5	⁺¹	⁺¹
	radix-ui@1.4.3 ⏵ 1.6.2	⁺¹		⁺¹
	@types/node@25.2.3 ⏵ 26.1.1	⁺¹	⁺¹	⁺¹
	tsx@4.21.0 ⏵ 4.23.0	⁺¹	⁺¹	⁺²
	tailwind-merge@3.5.0 ⏵ 3.6.0	⁺¹	⁺¹
	@vercel/speed-insights@1.0.4 ⏵ 2.0.0	⁺⁷	⁺²	⁺⁵
	@hookform/resolvers@5.2.2 ⏵ 5.4.0		⁺¹
	date-fns@4.1.0 ⏵ 4.4.0	⁺¹	⁺¹
	@tanstack/react-query@5.100.9 ⏵ 5.101.2
	typescript@6.0.3 ⏵ 7.0.2	^-6	^-1		⁺¹⁰
	pg@8.20.0 ⏵ 8.22.0	⁺¹	⁺¹
	google-auth-library@10.6.2 ⏵ 10.9.0
	concurrently@9.2.1 ⏵ 10.0.3	⁺¹
	react-email@6.1.4 ⏵ 6.7.0		⁺¹	⁺²
See 9 more rows in the dashboard

View full report

socket-security · 2026-07-12T09:39:35Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@react-email/ui` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → `npm/@react-email/ui@6.7.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@react-email/ui@6.7.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `googleapis` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → `npm/googleapis@173.0.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/googleapis@173.0.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `googleapis` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → `npm/googleapis@173.0.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/googleapis@173.0.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2026-07-19T09:36:58Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 12, 2026

dependabot Bot closed this Jul 19, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-c0dade341e branch July 19, 2026 09:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm-dependencies group across 1 directory with 34 updates#195

chore(deps): bump the npm-dependencies group across 1 directory with 34 updates#195
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-c0dade341e

dependabot Bot commented on behalf of github Jul 12, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 12, 2026

Uh oh!

socket-security Bot commented Jul 12, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.1085.0

3.1085.0(2026-07-10)

New Features

v3.1084.0

3.1084.0(2026-07-09)

New Features

Tests

v3.1083.0

3.1083.0(2026-07-08)

Chores

New Features

3.1085.0 (2026-07-10)

3.1084.0 (2026-07-09)

3.1083.0 (2026-07-08)

3.1082.0 (2026-07-08)

3.1081.0 (2026-07-07)

3.1080.0 (2026-07-06)

3.1079.0 (2026-07-02)

v1.6.0

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Collapsible

Combobox

v1.6.0

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Collapsible

Combobox

v5.4.0

5.4.0 (2026-05-21)

Features

Fixes

1.2.2

1.2.1

1.2.0

Other updates

1.1.12

2.3.3

2.3.2

Other updates

2.3.1

2.3.0

1.3.0

Added generic type arguments for SlotProps and createSlot

1.2.5

@​slack/web-api@​7.19.0

Minor Changes

@​slack/web-api@​7.18.0

Minor Changes

@​slack/web-api@​7.17.0

Minor Changes

@​slack/web-api@​7.16.0

Minor Changes

@​tanstack/react-query-devtools@​5.101.2

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.2

Patch Changes

@​tanstack/react-query-persist-client@​5.101.2

Patch Changes

@​tanstack/react-query@​5.101.2

Patch Changes

@​tanstack/react-query-devtools@​5.101.1

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.1

Patch Changes

@​tanstack/react-query-persist-client@​5.101.1

dependabot Bot commented on behalf of github Jul 12, 2026 •

edited

Loading

Added generic type arguments for `SlotProps` and `createSlot`

`@slack/web-api@7`.19.0

`@slack/web-api@7`.18.0

`@slack/web-api@7`.17.0

`@slack/web-api@7`.16.0

`@tanstack/react-query-devtools@5`.101.2

`@tanstack/react-query-next-experimental@5`.101.2

`@tanstack/react-query-persist-client@5`.101.2

`@tanstack/react-query@5`.101.2

`@tanstack/react-query-devtools@5`.101.1

`@tanstack/react-query-next-experimental@5`.101.1

`@tanstack/react-query-persist-client@5`.101.1

`@tanstack/react-query@5`.101.1

`@xyflow/react@12`.11.2

`@xyflow/react@12`.11.1

`@xyflow/react@12`.11.0