chore(deps): bump the production-minor group across 1 directory with 19 updates by dependabot[bot] · Pull Request #889 · webhook-co/webhook

dependabot · 2026-09-30T03:03:33Z

Bumps the production-minor group with 19 updates in the / directory:

Package	From	To
lucide-react	`1.28.0`	`1.48.0`
next	`16.2.12`	`16.3.6`
pg	`8.22.0`	`8.23.0`
react	`19.2.7`	`19.3.0`
react-dom	`19.2.7`	`19.3.0`
fast-xml-parser	`5.10.1`	`5.11.1`
zod	`4.4.3`	`4.6.5`
@modelcontextprotocol/sdk	`1.30.0`	`1.30.1`
agents	`0.20.1`	`0.24.0`
@sigstore/protobuf-specs	`0.5.1`	`0.5.2`
@sigstore/verify	`4.1.0`	`4.1.2`
ws	`8.21.1`	`8.22.0`
tailwind-merge	`3.6.0`	`3.7.0`
@remotion/bundler	`4.0.503`	`4.0.529`
@remotion/cli	`4.0.503`	`4.0.529`
@remotion/google-fonts	`4.0.503`	`4.0.529`
@remotion/renderer	`4.0.503`	`4.0.529`
@remotion/tailwind-v4	`4.0.503`	`4.0.529`
remotion	`4.0.503`	`4.0.529`

Updates lucide-react from 1.28.0 to 1.48.0

Release notes

Sourced from lucide-react's releases.

Version 1.48.0

What's Changed

feat(icons): added briefcase-plus icon by @tylerkade in lucide-icons/lucide#4757

feat(icons): added square-sparkles icon by @nananecy in lucide-icons/lucide#3610

feat(icons): added line-dot-left-horizontal icon by @nathan-de-pachtere in lucide-icons/lucide#3855

fix(packages/svelte,solid): fix shared type imports in Solid and Svelte by @karsa-mistmere in lucide-icons/lucide#4846

chore(deps-dev): bump react-native from 0.76.9 to 0.87.1 in the react-native-deps group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4673

feat(packages): export __iconNode data across framework packages by @lx3133584 in lucide-icons/lucide#4761

fix(icons): Tweak card-sim chip by @danielbayley in lucide-icons/lucide#3649

feat(icons): added line-dot-top-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3856

feat(icons): added line-dot-bottom-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3857

fix(packages/react-native): pass testID to the rendered Svg element by @OlegBezr in lucide-icons/lucide#4881

chore(@lucide/vue): Fix types @lucide/vue package and added workflow for it. by @ericfennis in lucide-icons/lucide#4883

test(packages/shared): cover buildLucideIconForReact by @vugarbbakhishov-hub in lucide-icons/lucide#4872

feat(site): Better icon detail page and add unreleased flag by @ericfennis in lucide-icons/lucide#4877

fix(icons): changed map-pinned icon by @jguddas in lucide-icons/lucide#4880

fix(icons): changed mail-pen by @karsa-mistmere in lucide-icons/lucide#4899

chore(deps-dev): bump the angular-deps group across 1 directory with 14 updates by @dependabot[bot] in lucide-icons/lucide#4895

chore(deps): bump the vue-deps group with 3 updates by @dependabot[bot] in lucide-icons/lucide#4893

chore(typchecking): More typecheck jobs for all packages by @ericfennis in lucide-icons/lucide#4885

feat(icons): add house-cog icon by @ajaxjiang96 in lucide-icons/lucide#4904

New Contributors

@nananecy made their first contribution in lucide-icons/lucide#3610

@OlegBezr made their first contribution in lucide-icons/lucide#4881

@vugarbbakhishov-hub made their first contribution in lucide-icons/lucide#4872

@ajaxjiang96 made their first contribution in lucide-icons/lucide#4904

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Version 1.47.0

What's Changed

feat(icons): add lambda icon by @UbaidUllah9962 in lucide-icons/lucide#4017

feat(icons): delegated faucet icon from lab by @karsa-mistmere in lucide-icons/lucide#4764

feat(icons): added door-closed-package icon by @karsa-mistmere in lucide-icons/lucide#4814

feat(icons): added 'nepali-rupee' icon by @sarajdhakal in lucide-icons/lucide#4608

feat(icons): added tube-lotion icon by @AlecRust in lucide-icons/lucide#4029

feat(icons): Added cupcake icon by @briz123 in lucide-icons/lucide#3000

feat(icons): added square-dashed-x icon by @EthanHazel in lucide-icons/lucide#4535

feat(icons): add rotate-cw-clock icon by @gkkconan in lucide-icons/lucide#3979

fix(icons): remove path from save-off by @HPRILLER in lucide-icons/lucide#4848

fix(icons): changed calendar-chevrons-right by @karsa-mistmere in lucide-icons/lucide#4865

fix(icons): changed broccoli icon by @jguddas in lucide-icons/lucide#4871

feat(icons): added square-dashed-plus by @psjdev in lucide-icons/lucide#4849

New Contributors

@UbaidUllah9962 made their first contribution in lucide-icons/lucide#4017

@sarajdhakal made their first contribution in lucide-icons/lucide#4608

@AlecRust made their first contribution in lucide-icons/lucide#4029

@gkkconan made their first contribution in lucide-icons/lucide#3979

... (truncated)

Commits

f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
See full diff in compare view

Updates next from 16.2.12 to 16.3.6

Release notes

Sourced from next's releases.

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)

next/image: Reject empty images when reading/writing to the disk cache (#98186)

Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)

Add CSP nonce to script tags of loading and template files (#98403)

Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

... (truncated)

Commits

a758ffc v16.3.6
868fad3 [active-lts] Harden next/og SVG serialization
8c81cbb [lts-active] test: remove unsupported deployment ID builder cases (#98821)
ca2c75e v16.3.5
14fb290 [backport] Fix use cache prerender signal retention (#98448)
2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
4b56cee [16.3.x] Backport docs fixes (#98317)
5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
Additional commits viewable in compare view

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Add support for query pipelineing.

Commits

df274d1 Publish
eb19d0f Add opt-in query pipelining (#3652)
See full diff in compare view

Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
Additional commits viewable in compare view

Updates react-dom from 19.2.7 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502,

…19 updates Bumps the production-minor group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.48.0` | | [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.6` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.10.1` | `5.11.1` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.30.1` | | [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents) | `0.20.1` | `0.24.0` | | [@sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) | `0.5.1` | `0.5.2` | | [@sigstore/verify](https://github.com/sigstore/sigstore-js) | `4.1.0` | `4.1.2` | | [ws](https://github.com/websockets/ws) | `8.21.1` | `8.22.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@remotion/bundler](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.529` | | [@remotion/cli](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.529` | | [@remotion/google-fonts](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.529` | | [@remotion/renderer](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.529` | | [@remotion/tailwind-v4](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.529` | | [remotion](https://github.com/remotion-dev/remotion) | `4.0.503` | `4.0.529` | Updates `lucide-react` from 1.28.0 to 1.48.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.48.0/packages/lucide-react) Updates `next` from 16.2.12 to 16.3.6 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.6) Updates `pg` from 8.22.0 to 8.23.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg) Updates `react` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `fast-xml-parser` from 5.10.1 to 5.11.1 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.10.1...v5.11.1) Updates `zod` from 4.4.3 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.5) Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.30.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.30.1) Updates `agents` from 0.20.1 to 0.24.0 - [Release notes](https://github.com/cloudflare/agents/releases) - [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md) - [Commits](https://github.com/cloudflare/agents/commits/agents@0.24.0/packages/agents) Updates `@sigstore/protobuf-specs` from 0.5.1 to 0.5.2 - [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md) - [Commits](sigstore/protobuf-specs@v0.5.1...v0.5.2) Updates `@sigstore/verify` from 4.1.0 to 4.1.2 - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/verify@4.1.0...@sigstore/verify@4.1.2) Updates `ws` from 8.21.1 to 8.22.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.1...8.22.0) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `@remotion/bundler` from 4.0.503 to 4.0.529 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.529) Updates `@remotion/cli` from 4.0.503 to 4.0.529 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.529) Updates `@remotion/google-fonts` from 4.0.503 to 4.0.529 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.529) Updates `@remotion/renderer` from 4.0.503 to 4.0.529 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.529) Updates `@remotion/tailwind-v4` from 4.0.503 to 4.0.529 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.529) Updates `remotion` from 4.0.503 to 4.0.529 - [Release notes](https://github.com/remotion-dev/remotion/releases) - [Commits](remotion-dev/remotion@v4.0.503...v4.0.529) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: next dependency-version: 16.3.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: pg dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: fast-xml-parser dependency-version: 5.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: agents dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: "@sigstore/protobuf-specs" dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@sigstore/verify" dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: ws dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor - dependency-name: "@remotion/bundler" dependency-version: 4.0.529 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@remotion/cli" dependency-version: 4.0.529 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@remotion/google-fonts" dependency-version: 4.0.529 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@remotion/renderer" dependency-version: 4.0.529 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: "@remotion/tailwind-v4" dependency-version: 4.0.529 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor - dependency-name: remotion dependency-version: 4.0.529 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-07T03:02:14Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 30, 2026

dependabot Bot requested a review from choraria as a code owner September 30, 2026 03:03

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 30, 2026

github-actions Bot assigned choraria Sep 30, 2026

dependabot Bot closed this Oct 7, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-minor-0e7def47a1 branch October 7, 2026 03:02

Navigation Menu

Repository navigation

chore(deps): bump the production-minor group across 1 directory with 19 updates - #889

chore(deps): bump the production-minor group across 1 directory with 19 updates#889
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-0e7def47a1

dependabot Bot commented on behalf of github Sep 30, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 1.48.0

What's Changed

New Contributors

Version 1.47.0

What's Changed

New Contributors

v16.3.6

v16.3.5

v16.3.4

Credits

v16.3.3

v16.3.2

Core Changes

Credits

pg@8.23.0

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

dependabot Bot commented on behalf of github Oct 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 30, 2026 •

edited

Loading