Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
@contentful/rich-text-react-renderer 16.1.5 16.1.6
@next/third-parties 15.5.4 16.0.10
contentful-resolve-response 1.9.3 1.9.4
dayjs 1.11.18 1.11.19
next 15.5.9 16.0.10
react 19.2.0 19.2.3
react-dom 19.2.0 19.2.3
swiper 12.0.2 12.0.3
swr 2.3.6 2.3.7

Updates @contentful/rich-text-react-renderer from 16.1.5 to 16.1.6

Release notes

Sourced from @​contentful/rich-text-react-renderer's releases.

@​contentful/rich-text-react-renderer@​16.1.6

16.1.6 (2025-11-04)

Note: Version bump only for package @​contentful/rich-text-react-renderer

Commits
  • 72d8f4e chore(release): updated release notes and package versions [ci skip]
  • 747a853 chore: bump jest and @​types/jest (#888)
  • b2f2ffe chore: bump @​swc/core from 1.13.5 to 1.14.0 (#970)
  • 8d6a651 chore: bump @​rollup/plugin-commonjs from 28.0.9 to 29.0.0 (#967)
  • a765fe5 chore: bump rimraf from 6.0.1 to 6.1.0 (#969)
  • 0de75db chore: bump @​types/node from 24.8.1 to 24.9.2 (#971)
  • 961606c chore: bump @​lingui/core from 5.5.1 to 5.5.2 (#968)
  • 5f2384e chore: bump contentful-management from 11.60.4 to 11.61.0 (#964)
  • de6bc6c chore: bump @​rollup/plugin-commonjs from 28.0.8 to 28.0.9 (#966)
  • c540fd3 chore: bump @​faker-js/faker from 10.0.0 to 10.1.0 (#965)
  • Additional commits viewable in compare view

Updates @next/third-parties from 15.5.4 to 16.0.10

Release notes

Sourced from @​next/third-parties's releases.

v16.0.10

Please see the Next.js Security Update for information about this security patch.

v16.0.8

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Update react version in cna templates (#86950)

Credits

Huge thanks to @​huozhi for helping!

v16.0.7

Please see CVE-2025-66478 for additional details about this release.

v16.0.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • bump the browserslist version to silence a warning in CI (#86625)

Credits

Huge thanks to @​lukesandberg for helping!

v16.0.5

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix(nodejs-middleware): await for body cloning to be properly finalized (#85418)

Credits

Huge thanks to @​lucasadrianof for helping!

v16.0.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix: Rename proxy.js to middleware.js in NFT file (#86214)
  • fix: prevent fetch abort errors propagating to user error boundaries (#86277)

... (truncated)

Commits

Updates contentful-resolve-response from 1.9.3 to 1.9.4

Release notes

Sourced from contentful-resolve-response's releases.

v1.9.4

1.9.4 (2025-10-02)

Changelog

Sourced from contentful-resolve-response's changelog.

1.9.4 (2025-10-02)

Commits
  • 0792573 chore(release): 1.9.4 [skip ci]
  • 656ed4d Merge pull request #461 from contentful/release-update-fast-copy-to-v3
  • be474fb build(deps): non-functional whitespace change to release "update fast-copy to...
  • 9b39c2e Merge pull request #459 from contentful/update-fast-copy-to-v3
  • 3f62aad build(deps-dev): bump mocha from 11.7.3 to 11.7.4 (#460)
  • 1913830 chore(deps): update fast-copy to v3
  • 5ee64f2 build(deps-dev): bump @​commitlint/cli from 20.0.0 to 20.1.0 (#457)
  • 4698eb9 build(deps-dev): bump mocha from 11.7.2 to 11.7.3 (#456)
  • 04c2301 build(deps-dev): bump @​commitlint/cli from 19.8.1 to 20.0.0 (#454)
  • 81b4d44 build(deps-dev): bump eslint from 9.35.0 to 9.36.0 (#452)
  • Additional commits viewable in compare view

Updates dayjs from 1.11.18 to 1.11.19

Release notes

Sourced from dayjs's releases.

v1.11.19

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)
Changelog

Sourced from dayjs's changelog.

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)
Commits

Updates next from 15.5.9 to 16.0.10

Release notes

Sourced from next's releases.

v16.0.10

Please see the Next.js Security Update for information about this security patch.

v16.0.8

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Update react version in cna templates (#86950)

Credits

Huge thanks to @​huozhi for helping!

v16.0.7

Please see CVE-2025-66478 for additional details about this release.

v16.0.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • bump the browserslist version to silence a warning in CI (#86625)

Credits

Huge thanks to @​lukesandberg for helping!

v16.0.5

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix(nodejs-middleware): await for body cloning to be properly finalized (#85418)

Credits

Huge thanks to @​lucasadrianof for helping!

v16.0.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix: Rename proxy.js to middleware.js in NFT file (#86214)
  • fix: prevent fetch abort errors propagating to user error boundaries (#86277)

... (truncated)

Commits

Updates react from 19.2.0 to 19.2.3

Release notes

Sourced from react's releases.

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Commits

Updates react-dom from 19.2.0 to 19.2.3

Release notes

Sourced from react-dom's releases.

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Commits

Updates swiper from 12.0.2 to 12.0.3

Release notes

Sourced from swiper's releases.

v12.0.3

Bug Fixes

  • element: fixed reference to nav arrows SVG (0b17ecf), closes #8115

Features

  • core: add 'getRotateFix' export to effect utils (c97ae5d), closes #8114
Changelog

Sourced from swiper's changelog.

12.0.3 (2025-10-21)

Bug Fixes

  • element: fixed reference to nav arrows SVG (0b17ecf), closes #8115

Features

  • core: add 'getRotateFix' export to effect utils (c97ae5d), closes #8114
Commits

Updates swr from 2.3.6 to 2.3.7

Release notes

Sourced from swr's releases.

v2.3.7

What's Changed

Full Changelog: vercel/swr@v2.3.6...v2.3.7

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 15, 2025
@dzmitry-varabei dzmitry-varabei self-requested a review December 15, 2025 09:44
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-ef9899148c branch from 59ff8e3 to 1c07c0c Compare December 16, 2025 13:02
… 9 updates

Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@contentful/rich-text-react-renderer](https://github.com/contentful/rich-text) | `16.1.5` | `16.1.6` |
| [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties) | `15.5.4` | `16.0.10` |
| [contentful-resolve-response](https://github.com/contentful/contentful-resolve-response) | `1.9.3` | `1.9.4` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.18` | `1.11.19` |
| [next](https://github.com/vercel/next.js) | `15.5.9` | `16.0.10` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.3` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.3` |
| [swiper](https://github.com/nolimits4web/Swiper) | `12.0.2` | `12.0.3` |
| [swr](https://github.com/vercel/swr) | `2.3.6` | `2.3.7` |



Updates `@contentful/rich-text-react-renderer` from 16.1.5 to 16.1.6
- [Release notes](https://github.com/contentful/rich-text/releases)
- [Changelog](https://github.com/contentful/rich-text/blob/master/CHANGELOG.md)
- [Commits](https://github.com/contentful/rich-text/compare/@contentful/rich-text-react-renderer@16.1.5...@contentful/rich-text-react-renderer@16.1.6)

Updates `@next/third-parties` from 15.5.4 to 16.0.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.0.10/packages/third-parties)

Updates `contentful-resolve-response` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/contentful/contentful-resolve-response/releases)
- [Changelog](https://github.com/contentful/contentful-resolve-response/blob/master/CHANGELOG.md)
- [Commits](contentful/contentful-resolve-response@v1.9.3...v1.9.4)

Updates `dayjs` from 1.11.18 to 1.11.19
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.18...v1.11.19)

Updates `next` from 15.5.9 to 16.0.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.9...v16.0.10)

Updates `react` from 19.2.0 to 19.2.3
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react)

Updates `react-dom` from 19.2.0 to 19.2.3
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react-dom)

Updates `swiper` from 12.0.2 to 12.0.3
- [Release notes](https://github.com/nolimits4web/Swiper/releases)
- [Changelog](https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md)
- [Commits](nolimits4web/swiper@v12.0.2...v12.0.3)

Updates `swr` from 2.3.6 to 2.3.7
- [Release notes](https://github.com/vercel/swr/releases)
- [Commits](vercel/swr@v2.3.6...v2.3.7)

---
updated-dependencies:
- dependency-name: "@contentful/rich-text-react-renderer"
  dependency-version: 16.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@next/third-parties"
  dependency-version: 16.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: contentful-resolve-response
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dayjs
  dependency-version: 1.11.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: swiper
  dependency-version: 12.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: swr
  dependency-version: 2.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-ef9899148c branch from 1c07c0c to 9b14be0 Compare January 1, 2026 23:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants