Skip to content

build(deps): bump the web group across 1 directory with 18 updates - #93

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/web-e9b19ba0cf
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/web-e9b19ba0cf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the web group with 18 updates in the /apps/web directory:

Package From To
@sentry/nextjs 11.6.0 11.10.0
@upstash/redis 1.39.0 1.40.0
@vercel/blob 2.8.1 2.8.2
framer-motion 14.1.0 14.8.0
lucide-react 1.55.0 1.64.0
mapbox-gl 3.32.0 3.34.1
next 16.4.1 16.4.3
posthog-js 1.438.7 1.442.1
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
resend 6.32.1 6.35.0
svix 2.8.0 2.9.1
@types/node 22.20.5 26.6.6
@vitest/coverage-v8 5.0.3 5.0.5
eslint 10.12.0 10.13.0
eslint-config-next 16.4.1 16.4.3
typescript 6.0.3 7.0.2
vitest 5.0.3 5.0.5

Updates @sentry/nextjs from 11.6.0 to 11.10.0

Release notes

Sourced from @​sentry/nextjs's releases.

11.10.0

Important Changes

  • feat: Add a managed tunnel that the SDK derives from the DSN (#25199, #25200, #25783)

    Set tunnel: true in your browser Sentry.init call to send events through your own server. This helps when ad blockers block requests to Sentry. The browser derives the tunnel path from the DSN, so older and newer builds of your client and server always agree on the path.

    To serve the tunnel, add serveTunnelIntegration() to your server SDK. Astro, Nuxt, Nitro, React Router, Remix 3, SolidStart, SvelteKit and TanStack Start then answer tunnel requests automatically:

    // browser
    Sentry.init({ dsn, tunnel: true });
    // server
    Sentry.init({ dsn, integrations: [Sentry.serveTunnelIntegration()] });

    If the browser uses a different DSN than the server, set serveTunnelIntegration({ allowedDsns: [browserDsn] }). For other setups, the server SDKs export handleTunnelRequestIfMatched, handleTunnelRequest, isTunnelRequest and getTunnelPath:

    app.use((req, res, next) => Sentry.handleTunnelRequestIfMatched(req, res) ?? next());

    The request option of handleTunnelRequest is deprecated and will be removed in v12.

  • feat: Make span origins spec compliant (#25602)

    Some span origins changed their names to follow the trace origin spec:

    • auto.amqplib.* is now auto.queue.amqplib.*, and auto.kafkajs.* is now auto.queue.kafkajs.*.
    • auto.vercelai.channel is now auto.ai.vercelai.
    • auto.firebase.firestore is now auto.db.firebase.firestore, and auto.firebase.functions is now auto.function.firebase.
    • auto.aws.aws_sdk is now auto.{rpc,db,queue,ai}.aws_sdk, with the category from the span op.
    • auto.aws_lambda is now auto.function.aws_serverless.
    • auto.mcp.notification is now auto.function.mcp_server.notification.
    • auto.db.cloudflare.durable_object.sql is now auto.db.cloudflare.durable_object_sql.
    • auto.http.browser.{lcp,cls,inp} is now auto.ui.browser.{lcp,cls,inp}.

    If you have ignoreSpans rules, queries or alerts on the old origins, change them to use the new origins.

  • feat(bun): Add incoming request options and request sessions to bunServerIntegration (#25580)

    bunServerIntegration now accepts the same options as denoServeIntegration: ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated, onSpanEnd, sessions and sessionFlushingDelayMS. The callbacks receive the web Request.

    Bun.serve now records a request session for each incoming request. Sessions are sent only when a release is set. To turn them off, set bunServerIntegration({ sessions: false }).

    ignoreStaticAssets defaults to true, so Bun.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set bunServerIntegration({ ignoreStaticAssets: false }). Bun.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled. Errors thrown for OPTIONS and HEAD requests are now captured.

  • feat(bun): Inject debug IDs and upload source maps in sentryBunPlugin (#25670)

    sentryBunPlugin from @sentry/bun/plugin now accepts the same options as sentryEsbuildPlugin (org, project, authToken, release, sourcemaps, ...). When Bun.build writes source maps to outdir, the plugin injects the debug ID that Bun writes into each bundle, injects the release, and uploads the source maps at the end of the build. You no longer need to run sentry sourcemap inject and sentry sourcemap upload after the build.

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

11.10.0

Important Changes

  • feat: Add a managed tunnel that the SDK derives from the DSN (#25199, #25200, #25783)

    Set tunnel: true in your browser Sentry.init call to send events through your own server. This helps when ad blockers block requests to Sentry. The browser derives the tunnel path from the DSN, so older and newer builds of your client and server always agree on the path.

    To serve the tunnel, add serveTunnelIntegration() to your server SDK. Astro, Nuxt, Nitro, React Router, Remix 3, SolidStart, SvelteKit and TanStack Start then answer tunnel requests automatically:

    // browser
    Sentry.init({ dsn, tunnel: true });
    // server
    Sentry.init({ dsn, integrations: [Sentry.serveTunnelIntegration()] });

    If the browser uses a different DSN than the server, set serveTunnelIntegration({ allowedDsns: [browserDsn] }). For other setups, the server SDKs export handleTunnelRequestIfMatched, handleTunnelRequest, isTunnelRequest and getTunnelPath:

    app.use((req, res, next) => Sentry.handleTunnelRequestIfMatched(req, res) ?? next());

    The request option of handleTunnelRequest is deprecated and will be removed in v12.

  • feat: Make span origins spec compliant (#25602)

    Some span origins changed their names to follow the trace origin spec:

    • auto.amqplib.* is now auto.queue.amqplib.*, and auto.kafkajs.* is now auto.queue.kafkajs.*.
    • auto.vercelai.channel is now auto.ai.vercelai.
    • auto.firebase.firestore is now auto.db.firebase.firestore, and auto.firebase.functions is now auto.function.firebase.
    • auto.aws.aws_sdk is now auto.{rpc,db,queue,ai}.aws_sdk, with the category from the span op.
    • auto.aws_lambda is now auto.function.aws_serverless.
    • auto.mcp.notification is now auto.function.mcp_server.notification.
    • auto.db.cloudflare.durable_object.sql is now auto.db.cloudflare.durable_object_sql.
    • auto.http.browser.{lcp,cls,inp} is now auto.ui.browser.{lcp,cls,inp}.

    If you have ignoreSpans rules, queries or alerts on the old origins, change them to use the new origins.

  • feat(bun): Add incoming request options and request sessions to bunServerIntegration (#25580)

    bunServerIntegration now accepts the same options as denoServeIntegration: ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated, onSpanEnd, sessions and sessionFlushingDelayMS. The callbacks receive the web Request.

    Bun.serve now records a request session for each incoming request. Sessions are sent only when a release is set. To turn them off, set bunServerIntegration({ sessions: false }).

    ignoreStaticAssets defaults to true, so Bun.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set bunServerIntegration({ ignoreStaticAssets: false }). Bun.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled. Errors thrown for OPTIONS and HEAD requests are now captured.

  • feat(bun): Inject debug IDs and upload source maps in sentryBunPlugin (#25670)

... (truncated)

Commits
  • 9e33660 release: 11.10.0
  • a51d938 Merge pull request #25832 from getsentry/prepare-release/11.10.0
  • 612654c meta(changelog): Update changelog for 11.10.0
  • 0455361 Merge pull request #25833 from getsentry/ab/merge-master-into-develop
  • 0e2b465 chore: Merge master into develop
  • 90a71e7 feat(server-utils): Instrument together-ai 1.x (#25823)
  • c6ac34c test(cloudflare): Bump agents and MCP SDK in cloudflare-mcp-agent e2e app (#2...
  • 6efffd8 test(remix): Cover prefetched navigations in the Remix 3 E2E app (#25829)
  • e17a480 fix(remix): Drop Remix 3 release candidates from the peer range (#25808)
  • cad66c7 test: Wire the managed tunnel by hand in Node, Cloudflare and Next.js (#25785)
  • Additional commits viewable in compare view

Updates @upstash/redis from 1.39.0 to 1.40.0

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.40.0

Minor Changes

  • 2254796: Default responseEncoding to false. The server now returns string values as plain JSON instead of base64, which cuts response sizes by up to 25%. Set responseEncoding: "base64" to keep the previous behavior.

    Behavior changes with the new default:

    • String values that start with a UTF-8 BOM keep it. Automatic deserialization still ignores the BOM, so a BOM-prefixed JSON value is parsed as before; other BOM-prefixed strings, and all strings with automaticDeserialization: false, are returned exactly, BOM included.
    • Invalid UTF-8 (binary data) is still replaced with U+FFFD, but the server now replaces each invalid byte, so the number of replacement characters can differ. Binary values were not preserved before either.
    • A nested OK status reply (e.g. a Lua script returning {redis.call("SET", ...)}) no longer sometimes decodes to 8.
    • Error replies nested in arrays (e.g. Lua pcall results) are no longer garbled.

    Static aborted signal (all encodings):

    • abort() with no reason or with an Error returns null. With responseEncoding: false it used to return a serialized error object.
    • abort(null) returns null instead of "Aborted".
    • With the new default, other reasons are returned as is: strings that look like base64 (e.g. "abcd") are no longer garbled, and booleans and objects are no longer dropped.
    • Non-Latin-1 string reasons no longer throw a TypeError on Node.
Commits

Updates @vercel/blob from 2.8.1 to 2.8.2

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.8.2

Patch Changes

  • f11f653: Send blob API version 13, where the server reads keys containing . or .. path segments exactly as they were written instead of resolving them away. Fixes head, copy, rename, del and list on blobs whose pathname has a dot segment.
Changelog

Sourced from @​vercel/blob's changelog.

2.8.2

Patch Changes

  • f11f653: Send blob API version 13, where the server reads keys containing . or .. path segments exactly as they were written instead of resolving them away. Fixes head, copy, rename, del and list on blobs whose pathname has a dot segment.
Commits

Updates framer-motion from 14.1.0 to 14.8.0

Changelog

Sourced from framer-motion's changelog.

[14.8.0] 2026-10-29

Added

  • transition: Added mixer option for passing custom mixer functions.

Fixed

  • Only counts projection stats while recordStats() is running.
  • Fix accelerated animations stuck at initial after remount.
  • drag: 20% smaller.
  • m component: 6% smaller.
  • Keep timeline adjustments within timeline scope.
  • Reorder

[14.7.1] 2026-10-27

Fixed

  • Demote transforms to CPU when interrupted by layout animations.

[14.7.0] 2026-10-27

Added

  • animate: Mutable timeline sequences.
  • animate: Relative label offsets for timeline sequences.
  • useScroll: Returns scrollXLength and scrollYLength.
  • Reorder: Add LazyMotion-compatible import.
  • motion: transition.out prop for transitions when exiting a state.

Fixed

  • Fix one flash when changing playback speed of accelerated independent transform.
  • AnimatePresence: Improved positioning of popped elements.
  • spring: Fix overdamped springs snapping to target.
  • drag: Ref-constraints kept up-to-date after scroll.
  • motion: Animate layoutId elements relative to layoutRoot container.
  • motion: Bundle size reductions.
  • Moving background-color animations back to main thread for improved interpolation.
  • drag: Fix drag inertia stopping dead after a fast flick from a standstill.
  • layout: layoutId elements now animate relative to their closest layoutRoot ancestor, if any.
  • layout: layoutId may be changed after mount.
  • useScroll: Fix tracking in horizontal containers.
  • useSpring: Reduced bundle size by 30%.

[14.6.0] 2026-10-22

Added

... (truncated)

Commits
  • 1b27a83 v14.8.0
  • 4d29f83 Poll in timing-dependent Playwright assertions
  • 161f75c Updating changelog
  • 2bc460c Merge pull request #4017 from motiondivision/claude/project-thread-45aghj-tra...
  • 02f87ff Merge pull request #4025 from motiondivision/claude/project-thread-vr1k3n
  • 233f96b Merge pull request #4024 from motiondivision/claude/project-thread-k8ixr1
  • f3b4700 Merge branch 'main' into claude/project-thread-k8ixr1
  • 18c18bd Merge pull request #4014 from motiondivision/claude/project-thread-45aghj-van...
  • 9bf12d5 Merge the remote branch, which merged main without #4013
  • cd3e233 Merge main into claude/project-thread-45aghj-vanilla-drag-node
  • Additional commits viewable in compare view

Updates lucide-react from 1.55.0 to 1.64.0

Release notes

Sourced from lucide-react's releases.

Version 1.64.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Version 1.63.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.62.0...1.63.0

Version 1.62.0

What's Changed

... (truncated)

Commits
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • 3f1255e chore(deps-dev): bump @​vitejs/plugin-react (#4995)
  • See full diff in compare view

Updates mapbox-gl from 3.32.0 to 3.34.1

Release notes

Sourced from mapbox-gl's releases.

v3.34.1

Features and improvements ✨

  • Improve performance on map views with CJK glyphs by moving CJK rasterization offscreen.
  • Improve tile load performance via optimization of style property values recalculation.
  • Improve rendering performance via per-frame main thread work optimizations.
  • Add support of *-ignore-placement and *-allow-overlap in global placement.
  • Add raster-mask and raster-mask-mode paint properties so a raster layer can be clipped to, or excluded from, the geometry of a fill layer

Bug fixes 🐞

  • Fix coverage stencil marks including polygons for other road classes, which hid roads that should stay visible.
  • Fix imported styles silently rendering nothing when the import fires a non-fatal error while loading.
  • Fix raster tiles occasionally showing the image of a different tile after zooming or panning on a slow network.
  • Fix building layer filters that use distance, within or worldview dropping buildings.
  • Fix a sudden camera jump at the end of long flyTo camera animations.
  • Fix 0 fadeDuration symbol placement offset.
  • Fix projection documentation incorrectly stating that custom layers are not supported on globe.
  • Fix per-feature symbol/line paint value update based on light changes.

v3.34.0-rc.1

Features and improvements ✨

  • Improve performance on map views with CJK glyphs by moving CJK rasterization offscreen.
  • Improve tile load performance via optimization of style property values recalculation.
  • Improve rendering performance via per-frame main thread work optimizations.
  • Add support of *-ignore-placement and *-allow-overlap in global placement.

Bug fixes 🐞

  • Fix coverage stencil marks including polygons for other road classes, which hid roads that should stay visible.
  • Fix imported styles silently rendering nothing when the import fires a non-fatal error while loading.
  • Fix raster tiles occasionally showing the image of a different tile after zooming or panning on a slow network.
  • Fix building layer filters that use distance, within or worldview dropping buildings.
  • Fix a sudden camera jump at the end of long flyTo camera animations.
  • Fix 0 fadeDuration symbol placement offset.
  • Fix projection documentation incorrectly stating that custom layers are not supported on globe.
  • Fix per-feature symbol/line paint value update based on light changes.

v3.33.0

Breaking changes ⚠️

  • Right-to-left text (such as Arabic and Hebrew) is now supported out of the box, loading a small WebAssembly module the first time it appears on the map. setRTLTextPlugin, getRTLTextPluginStatus and the PluginStatus type are removed.
  • The base size of icons in the text-field property is now calculated at the tile zoom level with the largest text size. As a result, the icons can be smaller when the text size depends on the zoom level.

Features and improvements ✨

  • Improve memory use & map load time, especially for 3D layers.
  • Improve line rendering performance by using a uniform instead of a shader permutation for line-dasharray.
  • Add support for offsetting a control from its corner via map.addControl(control, {position, offset: {x, y}}).
  • Improve 3D Lanes map load performance.
  • Avoid placing parent-tile symbols when using the global placement.

... (truncated)

Changelog

Sourced from mapbox-gl's changelog.

3.34.1

Features and improvements ✨

  • Improve performance on map views with CJK glyphs by moving CJK rasterization offscreen.
  • Improve tile load performance via optimization of style property values recalculation.
  • Improve rendering performance via per-frame main thread work optimizations.
  • Add support of *-ignore-placement and *-allow-overlap in global placement.
  • Add raster-mask and raster-mask-mode paint properties so a raster layer can be clipped to, or excluded from, the geometry of a fill layer

Bug fixes 🐞

  • Fix coverage stencil marks including polygons for other road classes, which hid roads that should stay visible.
  • Fix imported styles silently rendering nothing when the import fires a non-fatal error while loading.
  • Fix raster tiles occasionally showing the image of a different tile after zooming or panning on a slow network.
  • Fix building layer filters that use distance, within or worldview dropping buildings.
  • Fix a sudden camera jump at the end of long flyTo camera animations.
  • Fix 0 fadeDuration symbol placement offset.
  • Fix projection documentation incorrectly stating that custom layers are not supported on globe.
  • Fix per-feature symbol/line paint value update based on light changes.

3.33.0

Breaking changes ⚠️

  • Right-to-left text (such as Arabic and Hebrew) is now supported out of the box, loading a small WebAssembly module the first time it appears on the map. setRTLTextPlugin, getRTLTextPluginStatus and the PluginStatus type are removed.
  • The base size of icons in the text-field property is now calculated at the tile zoom level with the largest text size. As a result, the icons can be smaller when the text size depends on the zoom level.

Features and improvements ✨

  • Improve memory use & map load time, especially for 3D layers.
  • Improve line rendering performance by using a uniform instead of a shader permutation for line-dasharray.
  • Add support for offsetting a control from its corner via map.addControl(control, {position, offset: {x, y}}).
  • Improve 3D Lanes map load performance.
  • Avoid placing parent-tile symbols when using the global placement.
  • Extend global placement debug info.

Bug fixes 🐞

  • Fix a severe performance regression when updating data-driven line layers with setPaintProperty.
  • Fix a rendering issue when drawing thousands of data-driven lines and symbols.
  • Fix transparent building and fill-extrusion layers blending the same pixel twice where they cover the same buildings, making the overlap look more opaque than either layer's opacity asks for.
  • Fix an issue with GeoJSON geometries past longitude -+360 or latitude +-85 rendering incorrectly.
  • Fix map-aligned icon-rotate and text-rotate not being measured from true north in projections other than Mercator or globe, which misrotated symbols such as crosswalks.
  • Fix collision boxes not matching rotated symbols that use appearances with a layout icon-rotate or text-rotate.
  • Fix symbol fading not finishing when using global placement.
Commits

Updates next from 16.4.1 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

Commits
  • 29bbeab v16.4.3
  • 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
  • 37d603b [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #1...
  • cf9d27d [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (...
  • 3f6a632 [lts-active] test: Pin react-virtualized (#100545)
  • f715bba [lts-active][cd] Gate release bot credentials behind GitHub environments (#10...
  • c864c78 [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • f3ff943 [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • f697cf5 [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • 2864b17 v16.4.2
  • Additional commits viewable in compare view

Updates posthog-js from 1.438.7 to 1.442.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.442.1

1.442.1

Patch Changes

  • #5341 de6b06f Thanks @​sebxt! - Keep the rest of the URL when masking personal data query params and a query value contains ? or the hash contains #. (2026-10-29)
  • Updated dependencies [de6b06f]:
    • @​posthog/browser-common@​0.10.2

posthog-js@1.442.0

1.442.0

Minor Changes

  • #5467 afde45e Thanks @​veryayskiy! - Add posthog.conversations.open() and posthog.conversations.close() to open and close the support chat panel (2026-10-29)

posthog-js@1.441.2

1.441.2

Patch Changes

  • #5421 34833f2 Thanks @​frostfire575! - Session replay releases a removed shadow DOM host as soon as it leaves the page, instead of keeping it and its detached subtree in memory until the next full snapshot. (2026-10-28)

posthog-js@1.441.1

1.441.1

Patch Changes

  • #5222 6d12d24 Thanks @​posthog! - Fall back to Math.random when crypto.getRandomValues throws, so UUID generation no longer breaks capture. (2026-10-28)
  • Updated dependencies [6d12d24]:
    • @​posthog/browser-common@​0.10.1

posthog-js@1.441.0

1.441.0

Minor Changes

  • #5269 950d034 Thanks @​dustinbyrne! - Add $input_value to autocapture change events for fields marked data-ph-capture-value, or matched by the new autocapture.capture_value_css_selector_allowlist option (CSS selectors or an (element) => boolean predicate). (2026-10-28)

Patch Changes

  • Updated dependencies [950d034]:
    • @​posthog/browser-common@​0.10.0
    • @​posthog/types@​1.418.0

... (truncated)

Commits
  • dfb2e00 chore: update versions and lockfile [version bump]
  • a96d286 feat(Surveys): Implement survey popup delay (surveyPopupDelaySeconds)… (#5243)
  • de6b06f fix(browser): keep the full URL when masking query params that contain ? or #...
  • a3187e2 chore: update versions and lockfile [version bump]
  • aa4ed5d fix(ai): capture an error event when a streaming OpenAI call fails before the...
  • 73d787a chore: update versions and lockfile [version bump]
  • 4b25f7f feat(node): opt-in posthog-js cookie fallback for request context (#5270)
  • 2fc5f97 chore: update versions and lockfile [version bump]
  • afde45e feat: add conversations open() and close() (#5467)
  • cd8f467 ci(node): run unified SDK acceptance once per profile (#5452)
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates resend from 6.32.1 to 6.35.0

Release notes

Sourced from resend's releases.

v6.35.0

What's Changed

Full Changelog: resend/resend-node@v6.34.1...v6.35.0

v6.34.1

What's Changed

Full Changelog: resend/resend-node@v6.34.0...v6.34.1

v6.34.0

What's Changed

Bumps the web group with 18 updates in the /apps/web directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `11.6.0` | `11.10.0` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.39.0` | `1.40.0` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.8.1` | `2.8.2` |
| [framer-motion](https://github.com/motiondivision/motion) | `14.1.0` | `14.8.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.64.0` |
| [mapbox-gl](https://github.com/mapbox/mapbox-gl-js) | `3.32.0` | `3.34.1` |
| [next](https://github.com/vercel/next.js) | `16.4.1` | `16.4.3` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.438.7` | `1.442.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [resend](https://github.com/resend/resend-node) | `6.32.1` | `6.35.0` |
| [svix](https://github.com/svix/svix-webhooks) | `2.8.0` | `2.9.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.5` | `26.6.6` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.5` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.4.1` | `16.4.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |



Updates `@sentry/nextjs` from 11.6.0 to 11.10.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@11.6.0...11.10.0)

Updates `@upstash/redis` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.39.0...@upstash/redis@1.40.0)

Updates `@vercel/blob` from 2.8.1 to 2.8.2
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.8.2/packages/blob)

Updates `framer-motion` from 14.1.0 to 14.8.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.1.0...v14.8.0)

Updates `lucide-react` from 1.55.0 to 1.64.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.64.0/packages/lucide-react)

Updates `mapbox-gl` from 3.32.0 to 3.34.1
- [Release notes](https://github.com/mapbox/mapbox-gl-js/releases)
- [Changelog](https://github.com/mapbox/mapbox-gl-js/blob/main/CHANGELOG.md)
- [Commits](mapbox/mapbox-gl-js@v3.32.0...v3.34.1)

Updates `next` from 16.4.1 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.1...v16.4.3)

Updates `posthog-js` from 1.438.7 to 1.442.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.438.7...posthog-js@1.442.1)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `resend` from 6.32.1 to 6.35.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.32.1...v6.35.0)

Updates `svix` from 2.8.0 to 2.9.1
- [Release notes](https://github.com/svix/svix-webhooks/releases)
- [Changelog](https://github.com/svix/svix-webhooks/blob/main/ChangeLog.md)
- [Commits](svix/svix-webhooks@v2.8.0...v2.9.1)

Updates `@types/node` from 22.20.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-config-next` from 16.4.1 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/eslint-config-next)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@sentry/nextjs"
  dependency-version: 11.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: "@upstash/redis"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: "@vercel/blob"
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: framer-motion
  dependency-version: 14.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: lucide-react
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: mapbox-gl
  dependency-version: 3.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: posthog-js
  dependency-version: 1.442.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: resend
  dependency-version: 6.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: svix
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web
- dependency-name: eslint-config-next
  dependency-version: 16.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: web
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Nov 1, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
dgz-engineering Building Building Preview Nov 1, 2026 6:40pm UTC

@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants