Skip to content

chore(deps): bump the npm-minor-patch group across 1 directory with 23 updates - #276

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/npm-minor-patch-5fed043214
Open

chore(deps): bump the npm-minor-patch group across 1 directory with 23 updates#276
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/npm-minor-patch-5fed043214

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 23 updates in the / directory:

Package From To
@hono/node-server 2.0.12 2.1.1
@tanstack/react-virtual 3.14.9 3.14.10
@upstash/redis 1.38.1 1.38.3
defuddle 0.19.2 0.19.3
dexie 4.4.4 4.4.5
dompurify 3.4.12 3.4.14
hono 4.12.33 4.13.5
lucide-react 1.28.0 1.34.0
marked 18.0.7 18.0.11
react-resizable-panels 4.12.2 4.12.3
sonner 2.0.7 2.0.8
stripe 22.4.0 22.5.0
tsx 4.23.1 4.23.12
zustand 5.0.14 5.0.15
@testing-library/user-event 14.6.1 14.6.6
@types/chrome 0.2.5 0.2.7
@types/react-dom 19.2.4 19.2.5
@vitejs/plugin-react 6.0.5 6.1.0
happy-dom 20.11.1 20.11.6
rollup-plugin-visualizer 7.0.1 7.1.1
shadcn 4.16.1 4.19.0
vite 8.2.0 8.2.2
@vercel/blob 2.6.1 2.8.0

Updates @hono/node-server from 2.0.12 to 2.1.1

Release notes

Sourced from @​hono/node-server's releases.

v2.1.1

What's Changed

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

v2.1.0

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

Commits

Updates @tanstack/react-virtual from 3.14.9 to 3.14.10

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.10

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.10

Patch Changes

Commits

Updates @upstash/redis from 1.38.1 to 1.38.3

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.3

Patch Changes

  • f020866: Send an Upstash-Telemetry-Retry header with the retry count on retried requests so retry rates are visible in server-side telemetry
  • 777dc30: Trim telemetry header values before deduplicating so whitespace around existing values does not defeat the dedup check

@​upstash/redis@​1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.2...@​upstash/redis@1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

@​upstash/redis@​1.38.2

Patch Changes

  • c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times
Commits
  • 74da1df chore: version packages (#1443)
  • f020866 DX-2960: send Upstash-Telemetry-Retry header with the attempt number (DX-2960...
  • 777dc30 fix: trim telemetry values before dedup and cover distinct-version case (#1442)
  • fc3089b chore: version packages (#1441)
  • c0f5ad7 fix: deduplicate telemetry header values in mergeTelemetry (#1440)
  • See full diff in compare view

Updates defuddle from 0.19.2 to 0.19.3

Release notes

Sourced from defuddle's releases.

0.19.3

  • Fixed unsafe HTML handling in schema.org content fallbacks.
  • Blocked SVG SMIL-based script injection.
  • Updated dependencies.
Commits

Updates dexie from 4.4.4 to 4.4.5

Release notes

Sourced from dexie's releases.

Dexie v4.4.5

This is a maintenance release that fixes an issue with indexes named after inherited Object properties and improves authentication recovery in dexie-cloud-addon.

Related Package Releases

Package Version
dexie 4.4.5
dexie-cloud-addon 4.4.14
dexie-react-hooks 4.4.0 (no change)
y-dexie 4.4.0 (no change)
dexie-export-import 4.4.0 (no change)

Bug Fixes

dexie@4.4.5

  • fix: don't crash when an index is named constructor — Tables with a primary key or index named constructor could cause db.open() to fail with TypeError: indexList.push is not a function. The internal index lookup now uses an object without a prototype, avoiding collisions with inherited Object.prototype properties such as constructor, toString, and valueOf. (#2325, fixes #1920). Contributed by @​tarann26.

dexie-cloud-addon@4.4.14

  • fix: recover from failed refresh-token renewal — When a locally unexpired refresh token is rejected by the server, login() now falls back to the regular fetchTokens authentication path instead of propagating the refresh error. This allows custom authentication integrations to silently obtain new tokens when possible, or trigger their normal login flow when required. OAuth redirect errors continue to propagate normally. (#2326). Fixed by @​liz709 and @​dfahlander.
Commits
  • 22bdff1 dexie@4.4.5
  • 6a7b452 fix(dbcore): don't crash when an index is named 'constructor' (#2325)
  • dbaf960 dexie-cloud-addon@4.4.14
  • 3fd4745 fix(dexie-cloud-addon): fall back to fetchTokens when refresh fails
  • 962052f updated pnpm lockfile
  • 12038d1 Updated deps of dexie-cloud-todo-app
  • See full diff in compare view

Updates dompurify from 3.4.12 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions

DOMPurify 3.4.13

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible
Commits

Updates hono from 4.12.33 to 4.13.5

Release notes

Sourced from hono's releases.

v4.13.5

Security fixes

This release includes fixes for the following security issues:

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Affects: Cache Middleware and applications behind a proxy, WAF, or logging layer that inspects query strings. Fixes query parsing that did not stop at the URL fragment, so a ? after a # was treated as the start of a query string and the application could read parameters that the other component never saw. GHSA-crvj-82cr-hjcx

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Affects: toSSG() for Static Site Generation. Fixes a path normalization gap where consecutive parent-directory segments in ssgParams values were not fully collapsed, bypassing the containment check added in 4.12.12. GHSA-gqvv-2mrq-wpjv

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

Affects: parseBody() when dot-notation parsing is enabled. Fixes unbounded expansion of dot-separated field names, where a small request body could allocate a disproportionately large object graph and concurrent requests could exhaust the heap. GHSA-g6gw-c38x-mqfc

Users who use Cache Middleware, deploy behind a proxy or WAF that inspects query strings, use Static Site Generation, or use parseBody({ dot: true }) are strongly encouraged to upgrade to this version.

v4.13.4

What's Changed

  • fix(request): handle params on unmatched requests in honojs/hono#5268
  • fix(jsx/dom): execute previous ref cleanup when ref prop changes on re-render in honojs/hono#5264
  • fix(reg-exp-router): associate wildcard middleware with matching routes in honojs/hono#5266
  • perf(router): share null object creation in honojs/hono#5267
  • fix(etag): match If-None-Match tags with optional whitespace before the comma in honojs/hono#5222
  • fix(client): skip undefined header and cookie values in honojs/hono#5244
  • fix(client): skip an undefined entry inside a query array in honojs/hono#5272
  • fix(client): skip an undefined entry inside a form array in honojs/hono#5280
  • fix(client): support custom buildSearchParams and filter undefined query in $ws() bin honojs/hono#5256
  • fix(accepts): support wildcard media types and specificity ordering in defaultMatch in honojs/hono#5255
  • fix(client): omit empty query delimiter in honojs/hono#5283
  • fix(request): drop stale content length for cloned FormData in honojs/hono#5282
  • fix(request): serialize cached JSON body in cloneRawRequest in honojs/hono#5288
  • fix(cookie): allow parsing signed cookies with empty string values in honojs/hono#5246
  • fix(utils/stream): do not let abort listeners crash abort() in honojs/hono#5274

Full Changelog: honojs/hono@v4.13.3...v4.13.4

v4.13.3

What's Changed

  • fix(client): prevent URL corruption when replaceUrlParam contains $ replacement tokens in honojs/hono#5227
  • fix(etag): copy pending stream bytes in honojs/hono#5239
  • fix(etag): avoid skipping headers when filtering 304 response headers in honojs/hono#5234
  • fix(cors): append Origin to Vary header on OPTIONS preflight in honojs/hono#5235
  • docs(context): add custom headers append option example to Context JSDoc in honojs/hono#5248
  • fix(trie-router): match suffix wildcard routes in honojs/hono#5236

... (truncated)

Commits
  • 06880c4 4.13.5
  • 531e9c5 Merge commit from fork
  • 3a67f7f Merge commit from fork
  • 9c28d72 Merge commit from fork
  • 017000d 4.13.4
  • 5e5b83d fix(utils/stream): do not let abort listeners crash abort() (#5274)
  • 241ae4c fix(cookie): allow parsing signed cookies with empty string values (#5246)
  • c409d85 fix(request): serialize cached JSON body in cloneRawRequest (#5288)
  • 612b59c fix(request): drop stale content length for cloned FormData (#5282)
  • 73794bd fix(client): omit empty query delimiter (#5283)
  • Additional commits viewable in compare view

Updates lucide-react from 1.28.0 to 1.34.0

Release notes

Sourced from lucide-react's releases.

Version 1.34.0

What's Changed

Full Changelog: lucide-icons/lucide@1.33.0...1.34.0

Version 1.33.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.32.0...1.33.0

Version 1.32.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Version 1.31.0

What's Changed

New Contributors

... (truncated)

Commits
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates marked from 18.0.7 to 18.0.11

Release notes

Sourced from marked's releases.

v18.0.11

18.0.11 (2026-08-24)

Bug Fixes

  • do not nest a link inside a link (#4051) (e250e31)
  • inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
  • keep emphasis in the text of a rejected reference link (#4059) (b699db3)

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

  • keep the em/strong mask the same length as the source (#4044) (681373c)
  • parse EOF backtick fences after paragraphs (#4039) (81bd750)
  • place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

v18.0.9

18.0.9 (2026-08-04)

Bug Fixes

  • an unmatched strong run before emphasis stays literal (#4008) (e8544e6)
  • Fix spurious deeper nesting in a blockquote continuation (#4030) (452f1ed)
  • pedantic foo: and "word" emphasis parsing (#3999) (823093f)

v18.0.8

18.0.8 (2026-08-04)

Bug Fixes

  • fall back to default checkbox renderer when extension returns false (#4023) (e1b6139)
Commits
  • 53cb13f chore(release): 18.0.11 [skip ci]
  • 0c6b2a6 docs: add adaptable bullet point (#4058)
  • c430a64 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#4069)
  • b699db3 fix: keep emphasis in the text of a rejected reference link (#4059)
  • 0653c24 fix: inlineTokens rebuilds the reflink-mask preamble per call (#4040)
  • e250e31 fix: do not nest a link inside a link (#4051)
  • 8698d35 chore(release): 18.0.10 [skip ci]
  • 58367a5 chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 (#4055)
  • a426c4d chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#4056)
  • a5cf277 chore(deps-dev): bump highlight.js from 11.11.1 to 11.12.0 (#4057)
  • Additional commits viewable in compare view

Updates react-resizable-panels from 4.12.2 to 4.12.3

Release notes

Sourced from react-resizable-panels's releases.

4.12.3

  • 730: Guard CSSStyleSheet construction to avoid throwing in unsupported environments (@​leo-yang-qiong)
  • 736: Bugfix: Derived Panel constraints equality check
  • 732: Bugfix: Prevent orphaned groups in "pointerup" edge case (@​waterWang)
Changelog

Sourced from react-resizable-panels's changelog.

4.12.3

  • 730: Guard CSSStyleSheet construction to avoid throwing in unsupported environments (@​leo-yang-qiong)
  • 736: Bugfix: Derived Panel constraints equality check
  • 732: Bugfix: Prevent orphaned groups in "pointerup" edge case (@​waterWang)
Commits
  • f9c4227 4.12.2 -> 4.12.3
  • 30503d1 Fix derived Panel constraints equality check (#736)
  • 30aef6a Pending CHANGELOG
  • b1d574e fix: guard CSSStyleSheet construction with adoptedStyleSheets check (#730)
  • 6649f42 fix: don't resurrect stale group entries on pointer-up commit (Fixes #729) (#...
  • See full diff in compare view

Updates sonner from 2.0.7 to 2.0.8

Release notes

Sourced from sonner's releases.

v2.0.8

What's Changed

New Contributors

Full Changelog: emilkowalski/sonner@v2.0.7...v2.0.8

Commits

Updates stripe from 22.4.0 to 22.5.0

Release notes

Sourced from stripe's releases.

v22.5.0

  • #2805 Emit Claude Code plugin hint at module load time

    • Emits new Claude Code plugin hint when CLAUDECODE or CLAUDE_CODE_CHILD_SESSION environment variables are detected.

  • #2794 add/adjust event parsing helpers

    • Added methods that return their respective Event/EventNotification objects without verifying authenticity. Use them when you've previously verified an event (e.g. you verified, put the event in a queue, and are now processing). Supports events from AWS EventBridge and Azure Event Grid natively.
      • stripe.webhooks.constructEventWithoutVerification(payload)
      • stripe.constructEventWithoutVerification(payload)
      • stripe.parseEventNotificationWithoutVerification(payload)

  • #2799 Add stripe.major_api_version constant

See the changelog for more details.

v22.5.0-beta.1

This release changes the pinned API version to 2026-07-29.preview.

  • #2772 Update generated code for beta
    • Add support for list and retrieve methods on resource ProductCatalog.TrialOffer
    • Add support for tax_items on ChargeCaptureParams.payment_details.car_rental_data[].total.tax, ChargeCaptureParams.payment_details.flight_data[].total.tax, ChargeCaptureParams.payment_details.lodging_data[].total.tax, ChargeUpdateParams.payment_details.car_rental_data[].total.tax, ChargeUpdateParams.payment_details.flight_data[].total.tax, ChargeUpdateParams.payment_details.lodging_data[].total.tax, PaymentIntent.payment_details.car_rental_data[].total.tax, PaymentIntent.payment_details.flight_data[].total.tax, PaymentIntent.payment_details.lodging_data[].total.tax, PaymentIntentCaptureParams.payment_details.car_rental_data[].total.tax, PaymentIntentCaptureParams.payment_details.flight_data[].total.tax, PaymentIntentCaptureParams.payment_details.lodging_data[].total.tax, PaymentIntentConfirmParams.payment_details.car_rental_data[].total.tax, PaymentIntentConfirmParams.payment_details.flight_data[].total.tax, PaymentIntentConfirmParams.payment_details.lodging_data[].total.tax, PaymentIntentCreateParams.payment_details.car_rental_data[].total.tax, PaymentIntentCreateParams.payment_details.flight_data[].total.tax, PaymentIntentCreateParams.payment_details.lodging_data[].total.tax, PaymentIntentUpdateParams.payment_details.car_rental_data[].total.tax, PaymentIntentUpdateParams.payment_details.flight_data[].total.tax, and PaymentIntentUpdateParams.payment_details.lodging_data[].total.tax
    • ⚠️ Remove support for taxes on ChargeCaptureParams.payment_details.car_rental_data[].total.tax, ChargeCaptureParams.payment_details.flight_data[].total.tax, ChargeCaptureParams.payment_details.lodging_data[].total.tax, ChargeUpdateParams.payment_details.car_rental_data[].total.tax, ChargeUpdateParams.payment_details.flight_data[].total.tax, ChargeUpdateParams.payment_details.lodging_data[].total.tax, PaymentIntent.payment_details.car_rental_data[].total.tax, PaymentIntent.payment_details.flight_data[].total.tax, PaymentIntent.payment_details.lodging_data[].total.tax, PaymentIntentCaptureParams.payment_details.car_rental_data[].total.tax, PaymentIntentCaptureParams.payment_details.flight_data[].total.tax, PaymentIntentCaptureParams.payment_details.lodging_data[].total.tax, PaymentIntentConfirmParams.payment_details.car_rental_data[].total.tax, PaymentIntentConfirmParams.payment_details.flight_data[].total.tax, PaymentIntentConfirmParams.payment_details.lodging_data[].total.tax, PaymentIntentCreateParams.payment_details.car_rental_data[].total.tax, PaymentIntentCreateParams.payment_details.flight_data[].total.tax, PaymentIntentCreateParams.payment_details.lodging_data[].total.tax, PaymentIntentUpdateParams.payment_details.car_rental_data[].total.tax, PaymentIntentUpdateParams.payment_details.flight_data[].total.tax, and PaymentIntentUpdateParams.payment_details.lodging_data[].total.tax
    • Add support for tax_id on Checkout.Session.collected_information
    • ⚠️ Remove support for tax_ids on Checkout.Session.collected_information
    • Add support for new value disabled on enum FinancialConnections.SessionCreateParams.manual_entry.mode
    • Add support for mode on FinancialConnections.Session.manual_entry
    • Add support for name on Issuing.CardholderUpdateParams
    • Add support for new value ic_nif on enums OrderCreateParams.tax_details.tax_ids[].type and OrderUpdateParams.tax_details.tax_ids[].type
    • ⚠️ Add support for new value ic_nif on enums Order.tax_details.tax_ids[].type and QuotePreviewInvoice.customer_tax_ids[].type
    • Add support for new values alipay and mb_way on enum QuotePreviewInvoice.payment_settings.payment_method_types
    • Add support for custom_fields, description, and footer on QuotePreviewSubscriptionSchedule.default_settings.invoice_settings and QuotePreviewSubscriptionSchedule.phases[].invoice_settings
    • Add support for trial on QuotePreviewSubscriptionSchedule.phases[]
    • ⚠️ Remove support for acss_debit, afterpay_clearpay, alipay, alma, amazon_pay, au_becs_debit, bacs_debit, bancontact, billie, bizum, blik, boleto, card_present, cashapp, crypto, customer_balance, eps, fpx, giropay, gopay, grabpay, id_bank_transfer, ideal, interac_present, kakao_pay, konbini, kr_card, mb_way, mobilepay, multibanco, naver_pay, nz_bank_account, oxxo, p24, pay_by_bank, payco, paynow, paypal, paypay, payto, pix, promptpay, qris, rechnung, revolut_pay, samsung_pay, satispay, scalapay, sepa_debit, shopeepay, sofort, stripe_balance, sunbit, swish, twint, upi, us_bank_account, wechat_pay, and zip on SharedPayment.GrantedToken.payment_method_details
    • ⚠️ Remove support for values acss_debit, afterpay_clearpay, alipay, alma, amazon_pay, au_becs_debit, bacs_debit, bancontact, billie, bizum, blik, boleto, card_present, cashapp, crypto, custom, customer_balance, eps, fpx, giropay, gopay, grabpay, id_bank_transfer, ideal, interac_present, kakao_pay, konbini, kr_card, mb_way, mobilepay, multibanco, naver_pay, nz_bank_account, oxxo, p24, pay_by_bank, payco, paynow, paypal, paypay, payto, pix, promptpay, qris, rechnung, revolut_pay, samsung_pay, satispay, scalapay, sepa_debit, shopeepay, sofort, stripe_balance, sunbit, swish, twint, upi, us_bank_account, wechat_pay, and zip from enum SharedPayment.GrantedToken.payment_method_details.type
    • Add support for use_stripe_sdk on SharedPayment.IssuedTokenCreateParams and SharedPayment.IssuedToken
    • Add support for redirect_to_url on SharedPayment.IssuedToken.next_action
    • ⚠️ Change type of SharedPayment.IssuedToken.next_action.type from literal('use_stripe_sdk') to enum('redirect_to_url'|'use_stripe_sdk')
    • Add support for livemode on Tax.Location
    • Add support for source on V2.Iam.ActivityLog.details.user_roles
    • Add support for payout on V2.MoneyManagement.ReceivedCredit.balance_transfer
    • ⚠️ Remove support for payout_v1 on V2.MoneyManagement.ReceivedCredit.balance_transfer
    • Add support for new value payout on enum V2.MoneyManagement.ReceivedCredit.balance_transfer.type
    • ⚠️ Change V2.MoneyManagement.ReceivedDebit.bank_transfer.us_bank_account to be optional
    • Add support for error codes us_bank_account_microdeposits_cannot_be_confirmed and us_bank_account_microdeposits_cannot_be_sent on ControlledByAlternateResourceError

See the changelog for more details.

v22.5.0-alpha.2

  • #2797 Update generated code for private-preview
    • Add support for new resource Billing.FeedbackOptions
    • Add support for sequra_payments on Account.capabilities
    • Add support for feedback_options on BillingPortal.Configuration.features.subscription_cancel.cancellation_reason

... (truncated)

Changelog

Sourced from stripe's changelog.

22.5.0 - 2026-08-10

  • #2805 Emit Claude Code plugin hint at module load time

    • Emits new Claude Code plugin hint when CLAUDECODE or CLAUDE_CODE_CHILD_SESSION environment variables are detected.

  • #2794 add/adjust event parsing helpers

    • Added methods that return their respective Event/EventNotification objects without verifying authenticity. Use them when you've previously verified an event (e.g. you verified, put the event in a queue, and are now processing). Supports events from AWS EventBridge and Azure Event Grid natively.
      • stripe.webhooks.constructEventWithoutVerification(payload)
      • stripe.constructEventWithoutVerification(payload)
      • stripe.parseEventNotificationWithoutVerification(payload)

  • #2799 Add stripe.major_api_version constant

Commits

Updates tsx from 4.23.1 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

@dependabot
chore(deps): bump the npm-minor-patch group across 1 directory with 2…
ea61adf 
…3 updates

Bumps the npm-minor-patch group with 23 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.12` | `2.1.1` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.9` | `3.14.10` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.1` | `1.38.3` |
| [defuddle](https://github.com/kepano/defuddle) | `0.19.2` | `0.19.3` |
| [dexie](https://github.com/dexie/Dexie.js) | `4.4.4` | `4.4.5` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.14` |
| [hono](https://github.com/honojs/hono) | `4.12.33` | `4.13.5` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.34.0` |
| [marked](https://github.com/markedjs/marked) | `18.0.7` | `18.0.11` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.12.2` | `4.12.3` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` |
| [stripe](https://github.com/stripe/stripe-node) | `22.4.0` | `22.5.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.12` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.6` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.2.5` | `0.2.7` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.11.1` | `20.11.6` |
| [rollup-plugin-visualizer](https://github.com/btd/rollup-plugin-visualizer) | `7.0.1` | `7.1.1` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.16.1` | `4.19.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.2.2` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.6.1` | `2.8.0` |



Updates `@hono/node-server` from 2.0.12 to 2.1.1
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.12...v2.1.1)

Updates `@tanstack/react-virtual` from 3.14.9 to 3.14.10
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.10/packages/react-virtual)

Updates `@upstash/redis` from 1.38.1 to 1.38.3
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.1...@upstash/redis@1.38.3)

Updates `defuddle` from 0.19.2 to 0.19.3
- [Release notes](https://github.com/kepano/defuddle/releases)
- [Commits](kepano/defuddle@0.19.2...0.19.3)

Updates `dexie` from 4.4.4 to 4.4.5
- [Release notes](https://github.com/dexie/Dexie.js/releases)
- [Commits](dexie/Dexie.js@v4.4.4...v4.4.5)

Updates `dompurify` from 3.4.12 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.12...3.4.14)

Updates `hono` from 4.12.33 to 4.13.5
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.33...v4.13.5)

Updates `lucide-react` from 1.28.0 to 1.34.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.34.0/packages/lucide-react)

Updates `marked` from 18.0.7 to 18.0.11
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.7...v18.0.11)

Updates `react-resizable-panels` from 4.12.2 to 4.12.3
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.12.2...4.12.3)

Updates `sonner` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](emilkowalski/sonner@v2.0.7...v2.0.8)

Updates `stripe` from 22.4.0 to 22.5.0
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.4.0...v22.5.0)

Updates `tsx` from 4.23.1 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.12)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.6
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.6)

Updates `@types/chrome` from 0.2.5 to 0.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react)

Updates `happy-dom` from 20.11.1 to 20.11.6
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.11.1...v20.11.6)

Updates `rollup-plugin-visualizer` from 7.0.1 to 7.1.1
- [Changelog](https://github.com/btd/rollup-plugin-visualizer/blob/master/CHANGELOG.md)
- [Commits](btd/rollup-plugin-visualizer@v7.0.1...v7.1.1)

Updates `shadcn` from 4.16.1 to 4.19.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.19.0/packages/shadcn)

Updates `vite` from 8.2.0 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `@vercel/blob` from 2.6.1 to 2.8.0
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.8.0/packages/blob)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: defuddle
  dependency-version: 0.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: dexie
  dependency-version: 4.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: hono
  dependency-version: 4.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: marked
  dependency-version: 18.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: react-resizable-panels
  dependency-version: 4.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: stripe
  dependency-version: 22.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/chrome"
  dependency-version: 0.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: happy-dom
  dependency-version: 20.11.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: rollup-plugin-visualizer
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: shadcn
  dependency-version: 4.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@vercel/blob"
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 29, 2026
@dependabot
dependabot Bot requested a review from forcingfx as a code owner August 29, 2026 14:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 29, 2026
@vercel

vercel Bot commented Aug 29, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
feedzero Ready Ready Preview Aug 29, 2026 2:55pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@forcingfx forcingfx Awaiting requested review from forcingfx forcingfx is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants