Skip to content

Comments

chore(deps): bump the production-dependencies group with 13 updates#34

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-2366a49885
Closed

chore(deps): bump the production-dependencies group with 13 updates#34
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-2366a49885

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2026 •
edited
Loading

Bumps the production-dependencies group with 13 updates:

Package From To
@supabase/supabase-js 2.89.0 2.90.1
@vitejs/plugin-react-swc 3.11.0 4.2.2
dotenv 16.6.1 17.2.3
express 4.22.1 5.2.1
framer-motion 12.23.26 12.26.1
lucide-react 0.344.0 0.562.0
openai 4.104.0 6.16.0
react 18.3.1 19.2.3
react-dom 18.3.1 19.2.3
react-markdown 9.1.0 10.1.0
react-router-dom 7.11.0 7.12.0
react-syntax-highlighter 15.6.6 16.1.0
resend 4.8.0 6.7.0

Updates @supabase/supabase-js from 2.89.0 to 2.90.1

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.90.1

2.90.1 (2026-01-08)

🩹 Fixes

  • postgrest: prevent shared state between query builder operations (#1978)
  • realtime: validate table filter in postgres_changes event dispatch (#1999)

❤️ Thank You

v2.90.1-canary.1

2.90.1-canary.1 (2026-01-08)

🩹 Fixes

  • postgrest: prevent shared state between query builder operations (#1978)

❤️ Thank You

v2.90.1-canary.0

2.90.1-canary.0 (2026-01-07)

🩹 Fixes

  • realtime: validate table filter in postgres_changes event dispatch (#1999)

❤️ Thank You

v2.90.0

2.90.0 (2026-01-07)

🚀 Features

  • realtime: expose heartbeat latency on heartbeat callback (#1982)

🩹 Fixes

  • auth: add banned_until property to user type (#1989)
  • auth: add last_challenged_at property to factor type (#1990)
  • auth: clear initial setTimeout in stopAutoRefresh (#1993)
  • auth: preserve session when magic link is clicked twice (#1996)
  • auth: add configurable lock acquisition timeout to prevent deadlocks (#1962)
  • functions: auto-stringify object body when custom Content-Type header is provided (#1988)
  • postgrest: use post with return minimal for rpc head requests with object args (#1994)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.90.1 (2026-01-08)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.90.0 (2026-01-07)

🩹 Fixes

  • supabase: avoid edge runtime warnings in next.js (#1998)
  • supabase: inline string literal in databasewithoutinternals type (#1986)
  • supabase: split type-only exports to avoid unused import warnings (#1979)

❤️ Thank You

Commits
  • 1b8410a chore(release): version 2.90.0 changelogs (#2003)
  • d3d05f8 fix(supabase): avoid edge runtime warnings in next.js (#1998)
  • 9bfac7f fix(supabase): inline string literal in databasewithoutinternals type (#1986)
  • 30f9600 fix(supabase): split type-only exports to avoid unused import warnings (#1979)
  • 636f1e9 test(supabase): run build in integration tests (#1969)
  • 9e747ce chore(release): version 2.89.0 changelogs (#1971)
  • See full diff in compare view

Updates @vitejs/plugin-react-swc from 3.11.0 to 4.2.2

Release notes

Sourced from @​vitejs/plugin-react-swc's releases.

plugin-react-swc@4.2.2

Update code to support newer rolldown-vite (#978)

rolldown-vite will remove optimizeDeps.rollupOptions in favor of optimizeDeps.rolldownOptions soon. This plugin now uses optimizeDeps.rolldownOptions to support newer rolldown-vite. Please update rolldown-vite to the latest version if you are using an older version.

plugin-react@4.2.1

Remove generic parameter on Plugin to avoid type error with Rollup 4/Vite 5 and skipLibCheck: false.

I expect very few people to currently use this feature, but if you are extending the React plugin via api object, you can get back the typing of the hook by importing ViteReactPluginApi:

import type { Plugin } from 'vite'
import type { ViteReactPluginApi } from '@vitejs/plugin-react'
export const somePlugin: Plugin = {
name: 'some-plugin',
api: {
reactBabel: (babelConfig) => {
babelConfig.plugins.push('some-babel-plugin')
},
} satisfies ViteReactPluginApi,
}

plugin-react-swc@4.2.1

Fix @vitejs/plugin-react-swc/preamble on build (#962)

plugin-react@4.2.0

Update peer dependency range to target Vite 5

There were no breaking change that impacted this plugin, so any combination of React plugins and Vite core version will work.

Align jsx runtime for optimized dependencies

This will only affect people using internal libraries that contains untranspiled JSX. This change aligns the optimizer with the source code and avoid issues when the published source don't have React in the scope.

Reminder: While being partially supported in Vite, publishing TS & JSX outside of internal libraries is highly discouraged.

plugin-react-swc@4.2.0

Add @vitejs/plugin-react-swc/preamble virtual module for SSR HMR (#890)

SSR applications can now initialize HMR runtime by importing @vitejs/plugin-react-swc/preamble at the top of their client entry instead of manually calling transformIndexHtml. This simplifies SSR setup for applications that don't use the transformIndexHtml API.

Use SWC when useAtYourOwnRisk_mutateSwcOptions is provided (#951)

Previously, this plugin did not use SWC if plugins were not provided even if useAtYourOwnRisk_mutateSwcOptions was provided. This is now fixed.

plugin-react@4.1.1

  • Enable retainLines to get correct line numbers for jsxDev (fix #235)

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react-swc's changelog.

4.2.2 (2025-11-12)

Update code to support newer rolldown-vite (#978)

rolldown-vite will remove optimizeDeps.rollupOptions in favor of optimizeDeps.rolldownOptions soon. This plugin now uses optimizeDeps.rolldownOptions to support newer rolldown-vite. Please update rolldown-vite to the latest version if you are using an older version.

4.2.1 (2025-11-05)

Fix @vitejs/plugin-react-swc/preamble on build (#962)

4.2.0 (2025-10-24)

Add @vitejs/plugin-react-swc/preamble virtual module for SSR HMR (#890)

SSR applications can now initialize HMR runtime by importing @vitejs/plugin-react-swc/preamble at the top of their client entry instead of manually calling transformIndexHtml. This simplifies SSR setup for applications that don't use the transformIndexHtml API.

Use SWC when useAtYourOwnRisk_mutateSwcOptions is provided (#951)

Previously, this plugin did not use SWC if plugins were not provided even if useAtYourOwnRisk_mutateSwcOptions was provided. This is now fixed.

4.1.0 (2025-09-17)

Set SWC cacheRoot options

This is set to {viteCacheDir}/swc and override the default of .swc.

Perf: simplify refresh wrapper generation (#835)

4.0.1 (2025-08-19)

Set optimizeDeps.rollupOptions.transform.jsx instead of optimizeDeps.rollupOptions.jsx for rolldown-vite (#735)

optimizeDeps.rollupOptions.jsx is going to be deprecated in favor of optimizeDeps.rollupOptions.transform.jsx.

4.0.0 (2025-08-07)

4.0.0-beta.0 (2025-07-28)

Require Node 20.19+, 22.12+

This plugin now requires Node 20.19+ or 22.12+.

Commits
  • 5e600a3 release: plugin-react-swc@4.2.2
  • bcc7db0 chore: add changelog for #976 and #978
  • 17fdcc8 fix(react-swc,react-oxc): use rolldownOptions instead of deprecated rollupOpt...
  • fc76c72 chore(deps): update dependency @​types/node to v24 (#970)
  • 41cb823 fix(deps): update all non-major dependencies (#968)
  • 51160f3 release: plugin-react-swc@4.2.1
  • 0f5c8b4 chore(react-swc): add changelog (#963)
  • 897a3be fix(react-swc): fix @vitejs/plugin-react-swc/preamble on build (#962)
  • 9cabe27 fix(deps): update all non-major dependencies (#960)
  • b5f471f chore(deps): update swc monorepo (#954)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​vitejs/plugin-react-swc since your current version.


Updates dotenv from 16.6.1 to 17.2.3

Changelog

Sourced from dotenv's changelog.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

17.2.2 (2025-09-02)

Added

  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

  • Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

  • Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)
  • Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js

17.1.0 (2025-07-07)

Added

  • Add additional security and configuration tips to the runtime log (#884)
  • Dim the tips text from the main injection information text

... (truncated)

Commits

Updates express from 4.22.1 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

  • Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
    • The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

5.1.0 / 2025-03-31

  • Add support for Uint8Array in res.send()
  • Add support for ETag option in res.sendFile()
  • Add support for multiple links with the same rel in res.links()
  • Add funding field to package.json
  • perf: use loop for acceptParams
  • refactor: prefix built-in node module imports
  • deps: remove setprototypeof
  • deps: remove safe-buffer
  • deps: remove utils-merge
  • deps: remove methods
  • deps: remove depd
  • deps: debug@^4.4.0
  • deps: body-parser@^2.2.0
  • deps: router@^2.2.0
  • deps: content-type@^1.0.5
  • deps: finalhandler@^2.1.0
  • deps: qs@^6.14.0
  • deps: server-static@2.2.0
  • deps: type-is@2.0.1

5.0.1 / 2024-10-08

5.0.0 / 2024-09-10

  • remove:
    • path-is-absolute dependency - use path.isAbsolute instead
  • breaking:
    • res.status() accepts only integers, and input must be greater than 99 and less than 1000
      • will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range
      • will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs
    • deps: send@1.0.0

... (truncated)

Commits

Updates framer-motion from 12.23.26 to 12.26.1

Changelog

Sourced from framer-motion's changelog.

[12.26.1] 2026-01-12

Fixed

  • Improve overload selection for useTransform.

[12.26.0] 2026-01-12

Added

  • Support for multiple output value maps with useTransform.

[12.25.0] 2026-01-09

Added

  • Support for auto-scrolling when a Reorder.Item reaches the edges of its parent scrollable container.

[12.24.12] 2026-01-08

Fixed

  • Draggable elements now track pointer during page and element scroll.

[12.24.11] 2026-01-08

Fixed

  • Fixed time sampling of GPU animations under heavy CPU load.

[12.24.10] 2026-01-07

Fixed

  • Fixing missing import from motion-dom.

[12.24.9] 2026-01-07

Fixed

  • Fixing Radix Dialog with AnimatePresence.
  • Ensure drag constraints animation resumes after press interruption.
  • Prevent drag gesture from triggering when pressing focusable elements.

[12.24.8] 2026-01-07

Fixed

  • Perform unit conversion when animating to/from calc() values.

... (truncated)

Commits
  • e4141d2 v12.26.1
  • e7a5d9f Updating useTransform types
  • 564ab94 Updating changelog
  • 05334c6 v12.26.0
  • 7177727 Updating changelog
  • 0f8a3f9 Updating changelog
  • b23c87b Merge pull request #3466 from motiondivision/claude/add-usetransform-signatur...
  • a1404a8 Remove stable values test and fix scale(1) assertion
  • c64be26 Fix test assertions for output map useTransform
  • 69bb605 Fix TypeScript errors in useTransform tests
  • Additional commits viewable in compare view

Updates lucide-react from 0.344.0 to 0.562.0

Release notes

Sourced from lucide-react's releases.

Version 0.562.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.561.0...0.562.0

Version 0.561.0

What's Changed

Full Changelog: lucide-icons/lucide@0.560.0...0.561.0

Version 0.560.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.559.0...0.560.0

Version 0.559.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.558.0...0.559.0

Version 0.558.0

What's Changed

Full Changelog: lucide-icons/lucide@0.557.0...0.558.0

Version 0.557.0

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lucide-react since your current version.


Updates openai from 4.104.0 to 6.16.0

Release notes

Sourced from openai's releases.

v6.16.0

6.16.0 (2026-01-09)

Full Changelog: v6.15.0...v6.16.0

Features

  • api: add new Response completed_at prop (ca40534)
  • ci: add breaking change detection workflow (a6f3dea)

Chores

  • break long lines in snippets into multiline (80dee2f)
  • internal: codegen related update (b2fac3e)

v6.15.0

6.15.0 (2025-12-19)

Full Changelog: v6.14.0...v6.15.0

Bug Fixes

v6.14.0

6.14.0 (2025-12-16)

Full Changelog: v6.13.0...v6.14.0

Features

v6.13.0

6.13.0 (2025-12-15)

Full Changelog: v6.12.0...v6.13.0

Features

  • api: api update (bc759dc)
  • api: fix grader input list, add dated slugs for sora-2 (6b2a38f)

v6.12.0

6.12.0 (2025-12-11)

Full Changelog: v6.11.0...v6.12.0

Features

... (truncated)

Changelog

Sourced from openai's changelog.

6.16.0 (2026-01-09)

Full Changelog: v6.15.0...v6.16.0

Features

  • api: add new Response completed_at prop (ca40534)
  • ci: add breaking change detection workflow (a6f3dea)

Chores

  • break long lines in snippets into multiline (80dee2f)
  • internal: codegen related update (b2fac3e)

6.15.0 (2025-12-19)

Full Changelog: v6.14.0...v6.15.0

Bug Fixes

6.14.0 (2025-12-16)

Full Changelog: v6.13.0...v6.14.0

Features

6.13.0 (2025-12-15)

Full Changelog: v6.12.0...v6.13.0

Features

  • api: api update (bc759dc)
  • api: fix grader input list, add dated slugs for sora-2 (6b2a38f)

6.12.0 (2025-12-11)

Full Changelog: v6.11.0...v6.12.0

Features

6.11.0 (2025-12-10)

... (truncated)

Commits
  • 44b7ac2 Merge pull request #1731 from openai/release-please--branches--master--change...
  • e3059f7 release: 6.16.0
  • ca40534 feat(api): add new Response completed_at prop
  • 80dee2f chore: break long lines in snippets into multiline
  • a6f3dea feat(ci): add breaking change detection workflow
  • f8828b7 Merge pull request #728 from stainless-sdks/cameron/detect-agents-breaks
  • 8568b31 Merge branch 'next' into cameron/detect-agents-breaks
  • b2fac3e chore(internal): codegen related update
  • cb3987b release: 6.15.0
  • 1c94f92 codegen metadata
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by apcha-oai, a new releaser for openai since your current version.


Updates react from 18.3.1 to 19.2.3

Release notes

Sourced from react's releases.

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

  • <Activity /> was developed over many years, starting before ClassComponent.setState (@​acdlite @​sebmarkbage and many others)
  • Stringify context as "SomeContext" instead of "SomeContext.Provider" (@​kassens #33507)
  • Include stack of cause of React instrumentation errors with %o placeholder (@​eps1lon #34198)

... (truncated)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

@dependabot
chore(deps): bump the production-dependencies group with 13 updates
6e81074 
Bumps the production-dependencies group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.89.0` | `2.90.1` |
| [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react-swc) | `3.11.0` | `4.2.2` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.2.3` |
| [express](https://github.com/expressjs/express) | `4.22.1` | `5.2.1` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.23.26` | `12.26.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.344.0` | `0.562.0` |
| [openai](https://github.com/openai/openai-node) | `4.104.0` | `6.16.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.3` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.3` |
| [react-markdown](https://github.com/remarkjs/react-markdown) | `9.1.0` | `10.1.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.11.0` | `7.12.0` |
| [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `15.6.6` | `16.1.0` |
| [resend](https://github.com/resend/resend-node) | `4.8.0` | `6.7.0` |


Updates `@supabase/supabase-js` from 2.89.0 to 2.90.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.90.1/packages/core/supabase-js)

Updates `@vitejs/plugin-react-swc` from 3.11.0 to 4.2.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react-swc@4.2.2/packages/plugin-react-swc)

Updates `dotenv` from 16.6.1 to 17.2.3
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.6.1...v17.2.3)

Updates `express` from 4.22.1 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.1...v5.2.1)

Updates `framer-motion` from 12.23.26 to 12.26.1
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.23.26...v12.26.1)

Updates `lucide-react` from 0.344.0 to 0.562.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.562.0/packages/lucide-react)

Updates `openai` from 4.104.0 to 6.16.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v4.104.0...v6.16.0)

Updates `react` from 18.3.1 to 19.2.3
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react)

Updates `react-dom` from 18.3.1 to 19.2.3
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react-dom)

Updates `react-markdown` from 9.1.0 to 10.1.0
- [Release notes](https://github.com/remarkjs/react-markdown/releases)
- [Changelog](https://github.com/remarkjs/react-markdown/blob/main/changelog.md)
- [Commits](remarkjs/react-markdown@9.1.0...10.1.0)

Updates `react-router-dom` from 7.11.0 to 7.12.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.12.0/packages/react-router-dom)

Updates `react-syntax-highlighter` from 15.6.6 to 16.1.0
- [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases)
- [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD)
- [Commits](react-syntax-highlighter/react-syntax-highlighter@v15.6.6...v16.1.0)

Updates `resend` from 4.8.0 to 6.7.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v4.8.0...v6.7.0)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.90.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vitejs/plugin-react-swc"
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 17.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: framer-motion
  dependency-version: 12.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 0.562.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-markdown
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-syntax-highlighter
  dependency-version: 16.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: resend
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 13, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the major Breaking change - bumps major version label Jan 13, 2026
@socket-security
Copy link

socket-security bot commented Jan 13, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedreact-router-dom@​7.11.0 ⏵ 7.12.01001006598100
Updated@​types/​react-dom@​18.3.7 ⏵ 19.2.31001007587100
Updated@​types/​react@​18.3.27 ⏵ 19.2.81001007995100
Updatedreact@​18.3.1 ⏵ 19.2.31001008497100
Updatedreact-markdown@​9.1.0 ⏵ 10.1.099100100 +186100
Updatedreact-syntax-highlighter@​15.6.6 ⏵ 16.1.092 +3100100 +187100
Updateddotenv@​16.6.1 ⏵ 17.2.399 -110010088100
Updatedexpress@​4.22.1 ⏵ 5.2.198 +110010091100
Updated@​vitejs/​plugin-react-swc@​3.11.0 ⏵ 4.2.2100 +110010091 +2100
Updatedreact-dom@​18.3.1 ⏵ 19.2.3100 +110092 +198100
Updatedlucide-react@​0.344.0 ⏵ 0.562.010010095 -594100
Updatedframer-motion@​12.23.26 ⏵ 12.26.195100100 +1100 +1100
Updatedopenai@​4.104.0 ⏵ 6.16.098100100 +1100100
Updatedresend@​4.8.0 ⏵ 6.7.099100100100100
Updated@​supabase/​supabase-js@​2.89.0 ⏵ 2.90.1100 +1100100100100

View full report

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 27, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 27, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-2366a49885 branch January 27, 2026 00:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

major Breaking change - bumps major version

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants