chore(deps): bump the production-minor-patch group across 1 directory with 9 updates - #231
Merged
Musiker15 merged 1 commit intoAug 6, 2026
Conversation
… with 9 updates Bumps the production-minor-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1090.0` | `3.1100.0` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.0` | `1.3.3` | | [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) | `3.45.0` | `3.46.0` | | [next](https://github.com/vercel/next.js) | `16.2.11` | `16.2.12` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [stripe](https://github.com/stripe/stripe-node) | `22.3.2` | `22.4.0` | | [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.9.0` | `7.9.1` | | [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.9.0` | `7.9.1` | Updates `@aws-sdk/client-s3` from 3.1090.0 to 3.1100.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1100.0/clients/client-s3) Updates `@radix-ui/react-slot` from 1.3.0 to 1.3.3 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `@tabler/icons-react` from 3.45.0 to 3.46.0 - [Release notes](https://github.com/tabler/tabler-icons/releases) - [Commits](https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-react) Updates `next` from 16.2.11 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.11...v16.2.12) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `stripe` from 22.3.2 to 22.4.0 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.3.2...v22.4.0) Updates `@prisma/adapter-pg` from 7.9.0 to 7.9.1 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/adapter-pg) Updates `@prisma/client` from 7.9.0 to 7.9.1 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/client) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1100.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@radix-ui/react-slot" dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@tabler/icons-react" dependency-version: 3.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: next dependency-version: 16.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: stripe dependency-version: 22.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@prisma/adapter-pg" dependency-version: 7.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@prisma/client" dependency-version: 7.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Musiker15
deleted the
dependabot/npm_and_yarn/production-minor-patch-7ecb6d8fdd
branch
August 6, 2026 07:56
Musiker15
added a commit
that referenced
this pull request
Aug 6, 2026
…es (#233) Supersedes #230, whose lockfile no longer applied after #231 landed. Carries the same dev-group bumps (@types/node 26.1.2, prisma 7.9.1, turbo 2.10.7, postcss 8.5.25) and adds two override bumps on top, so the tree is resolved once instead of twice. Bumping the Prisma CLI is not optional here: #231 moved @prisma/client and @prisma/adapter-pg to 7.9.1, and Prisma requires the CLI to match. undici: GHSA-8xcm-r25x-g524, GHSA-m8rv-5g2x-5cg5 and GHSA-v3r7-h72x-cjcm are all first patched in 6.28.0. It reaches us through discord.js, which pins the version exactly, so the existing <6.27.0 override is the only lever. fast-uri: GHSA-7p8r-x3mc-p8w7 lands on top of GHSA-4c8g-83qw-93j6 and flags everything below 3.1.5. Dev-only, via ajv, and still capped below 4 because that is the line ajv asks for. Both old copies are gone from the lockfile rather than merely duplicated.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-minor-patch group with 9 updates in the / directory:
3.1090.03.1100.01.3.01.3.33.45.03.46.016.2.1116.2.1219.2.719.2.819.2.719.2.822.3.222.4.07.9.07.9.17.9.07.9.1Updates
@aws-sdk/client-s3from 3.1090.0 to 3.1100.0Release notes
Sourced from @aws-sdk/client-s3's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/client-s3's changelog.
... (truncated)
Commits
6969cf9Publish v3.1100.05b15ca7Publish v3.1099.0ee76673Publish v3.1098.0e40ebacchore(codegen): sync for CBOR v2 codec (#8233)b24cb22Publish v3.1097.01b94f0bPublish v3.1096.0753d651Publish v3.1095.0bb564e5chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...c379112Publish v3.1094.00f79b6aPublish v3.1093.0Updates
@radix-ui/react-slotfrom 1.3.0 to 1.3.3Changelog
Sourced from @radix-ui/react-slot's changelog.
Commits
Updates
@tabler/icons-reactfrom 3.45.0 to 3.46.0Release notes
Sourced from @tabler/icons-react's releases.
Commits
8ac7d81Release 3.46.0fe319f0Add publishConfig for public access in all icon packages (#1562)Updates
nextfrom 16.2.11 to 16.2.12Release notes
Sourced from next's releases.
Commits
2234717v16.2.12957f5ed[Backport] Fixes to support TypeScript 7 (#95831)b56eb16Backport/docs fixes 16.2 - July round (#96031)Updates
reactfrom 19.2.7 to 19.2.8Release notes
Sourced from react's releases.
Commits
1dd4ecb[FlightReply] Performance improvements when decoding (#37087)b0d2fdb[19.2.x] Update required references to GitHub repo (#36753)Updates
react-domfrom 19.2.7 to 19.2.8Release notes
Sourced from react-dom's releases.
Commits
1dd4ecb[FlightReply] Performance improvements when decoding (#37087)b0d2fdb[19.2.x] Update required references to GitHub repo (#36753)Updates
stripefrom 22.3.2 to 22.4.0Release notes
Sourced from stripe's releases.
... (truncated)
Changelog
Sourced from stripe's changelog.
Commits
57626dcBump version to 22.4.0f9f4223Update generated code (#2795)dea3ce7Bump brace-expansion from 1.1.11 to 1.1.16 (#2790)1bb09adAdds shared OtherString type alias to better annotate non-exhaustive enums (#...Updates
@prisma/adapter-pgfrom 7.9.0 to 7.9.1Release notes
Sourced from @prisma/adapter-pg's releases.
Commits
Updates
@prisma/clientfrom 7.9.0 to 7.9.1Release notes
Sourced from @prisma/client's releases.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions