Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 20 updates - #98

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c015413c71
Open

chore(deps): bump the minor-and-patch group across 1 directory with 20 updates#98
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c015413c71

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 20 updates in the / directory:

Package From To
@auth0/nextjs-auth0 4.29.0 4.33.0
@base-ui/react 1.8.0 1.9.0
@modelcontextprotocol/sdk 1.30.0 1.32.2
drizzle-orm 0.45.2 0.45.4
geist 1.7.2 1.8.2
jose 6.2.12 6.2.13
lucide-react 1.43.0 1.61.0
next 16.3.4 16.4.3
posthog-js 1.428.8 1.438.21
posthog-node 5.51.8 5.57.1
react 19.2.8 19.3.1
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.1
@types/react-dom 19.2.7 19.3.0
tailwind-merge 3.6.0 3.7.0
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.7 19.3.0
drizzle-kit 0.31.10 0.31.11
eslint-config-next 16.3.4 16.4.3
postcss 8.5.28 8.5.31
prettier 3.9.6 3.9.10
tsx 4.23.13 4.23.15

Updates @auth0/nextjs-auth0 from 4.29.0 to 4.33.0

Release notes

Sourced from @​auth0/nextjs-auth0's releases.

v4.33.0

Added

  • feat(passkey): add identifier verification for passkey signup #2905 (Piyush-85)

Summary by CodeRabbit

  • New Features
    • Passkey signup now supports verification of email and phone identifiers using one-time codes, with retry support for incorrect codes.
    • Phone verification can be delivered by text or voice.
  • Documentation
    • Updated the API documentation and changelog for version 4.33.0 and the passkey verification flow.

v4.32.1

Fixed

  • fix(mfa): map channel factor names to oob in mfaChallenge #2911 (Piyush-85)

v4.32.0

Fixed

  • fix: preserve cookie attributes when refreshing from a Server Action #2893 (Piyush-85)
  • fix: return 401 instead of 500 when /me and /my-org token refresh fails #2907 (Piyush-85)

Security

  • fix: prevent open redirect in createRouteUrl via cross-origin origin check GHSA-5vvp-h2v6-59j6

v4.31.1

Added

Fixed

  • fix(anonymous-sessions): surface session expiry error instead of silently rotating #2879 (yogeshchoudhary147)
  • fix: pass request cookies in startEnterpriseLogin to evict stale txn cookies #2868 (kwy404)

Summary by CodeRabbit

  • New Features
    • Added anonymous-session support, including session creation and retrieval, a client hook, and login linking.
    • The package now ships agent skills.

... (truncated)

Changelog

Sourced from @​auth0/nextjs-auth0's changelog.

v4.33.0 (2026-10-22)

Full Changelog

Added

  • feat(passkey): add identifier verification for passkey signup #2905 (Piyush-85)

v4.32.1 (2026-10-16)

Full Changelog

Fixed

  • fix(mfa): map channel factor names to oob in mfaChallenge #2911 (Piyush-85)

v4.32.0 (2026-10-13)

Full Changelog

Fixed

  • fix: preserve cookie attributes when refreshing from a Server Action #2893 (Piyush-85)
  • fix: return 401 instead of 500 when /me and /my-org token refresh fails #2907 (Piyush-85)

Security

  • fix: prevent open redirect in createRouteUrl via cross-origin origin check

v4.31.1 (2026-10-07)

Full Changelog

Added

Fixed

  • fix(anonymous-sessions): surface session expiry error instead of silently rotating #2879 (yogeshchoudhary147)
  • fix: pass request cookies in startEnterpriseLogin to evict stale txn cookies #2868 (kwy404)

v4.31.0 (2026-10-01)

Full Changelog

Added

  • feat(anonymous-sessions): anonymous sessions with Session Transfer Ticket linking (EA) #2865 (tusharpandey13)

v4.30.0 (2026-09-16)

Full Changelog

Added

Fixed

  • fix: bind middleware to the Auth0Client instance #2840 (sleitor)
Commits
  • 9d14a92 Release v4.33.0 (#2920)
  • 01d183d feat(passkey): add identifier verification for passkey signup (#2905)
  • d246e33 chore(deps): bump markdown-it from 14.3.2 to 14.3.3 (#2919)
  • 2fdc4bc chore(deps): bump the codeql-action group with 3 updates (#2917)
  • d6823b2 chore(deps-dev): bump @​playwright/test from 1.64.0 to 1.64.1 (#2916)
  • ec6a8a9 chore(deps-dev): bump eslint-plugin-prettier from 5.5.6 to 5.5.7 (#2915)
  • caf97a8 chore(deps-dev): bump next from 15.5.27 to 15.5.28 (#2914)
  • 33981e6 chore(deps-dev): bump typescript-eslint from 8.71.1 to 8.71.2 (#2913)
  • 8555996 chore(deps): bump vite from 7.1.9 to 7.3.7 in /examples/with-dpop (#2918)
  • 2290679 chore(deps-dev): bump prettier from 3.9.9 to 3.9.10 (#2910)
  • Additional commits viewable in compare view

Updates @base-ui/react from 1.8.0 to 1.9.0

Release notes

Sourced from @​base-ui/react's releases.

v1.9.0

General changes

Accordion

  • Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
  • Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
  • Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

  • Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

Collapsible

Combobox

Dialog

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.9.0

Oct 9, 2026

General changes

Accordion

  • Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
  • Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
  • Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

  • Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

Collapsible

Combobox

  • Fix stale chip focus after returning to the input (#5879) by @​mdm317
  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak
  • Fix label focus in Shadow DOM (#5871) by @​lyzno1
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Reset typeahead state when closing without moving focus (#5816) by @​mdm317
  • Accept readonly arrays for multiple values (#5710) by @​MonstraG

... (truncated)

Commits
  • ad7ecda [release] v1.9.0 (#5906)
  • 3296de3 [drawer] Avoid retaining unmounted drawers in DrawerProvider (#5921)
  • 69c33b4 [drawer] Fix deferred touch swipes leaving the popup (#5922)
  • 51b70db [menu] Strip internal filter components from public types (#5923)
  • 8d8b98c [menu] Ignore filter input edits while the menu animates out (#5911)
  • aeba3eb [combobox][menu][select] Revert highlightItem imperative action (#5910)
  • ec6bf32 [field][select][combobox][slider] Fall back to the owner document when lookin...
  • 1f112a5 [popups] Avoid re-rendering inactive triggers on open and close (#5865)
  • bc53db6 [fieldset] Await render in Legend disabled-state test (#5909)
  • 147092e [test] Strengthen tests, add test lint rules and share copied suites (#5892)
  • Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.32.2

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.2

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.1...1.32.2

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

1.31.0

Upgrade notes

  • Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
  • Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

... (truncated)

Commits
  • 3b73021 chore: bump version to 1.32.2 (#3089)
  • fa56d81 [v1.x] fix: allow registering after connect() when the capability was declare...
  • 6919e95 fix: add explicit | undefined to Transport optional properties (v1.x backport...
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • 32549b0 chore: bump version to 1.32.0 (#2935)
  • 588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
  • 5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
  • 0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
  • Additional commits viewable in compare view

Updates drizzle-orm from 0.45.2 to 0.45.4

Release notes

Sourced from drizzle-orm's releases.

0.45.4

  • Fixed postgres-js not using prepared queries on explicit .prepare(name)

0.45.3

New Netlify DB Driver

Note: The Netlify DB driver is developed and maintained by the Netlify team.

Installation:

npm i @netlify/db

Usage example:

import { drizzle } from 'drizzle-orm/netlify-db';
// reads NETLIFY_DB_URL and NETLIFY_DB_DRIVER env vars
const db = drizzle();
const result = await db.execute('select 1');

import { drizzle } from 'drizzle-orm/netlify-db';
const db = drizzle(process.env.DATABASE_URL);
const result = await db.execute('select 1');

import { drizzle } from 'drizzle-orm/netlify-db';

// Explicit client — consumer controls the driver
const db = drizzle({ client: netlifyDbClient });

const result = await db.execute('select 1');
Commits
  • eab8bed Fixed postgres-js not using prepared queries on explicit .prepare(name) (...
  • 15454db +
  • 54e436f exclude gel from pull
  • 0fd1cc6 remove gel
  • d028db7 skip gel
  • 93dc01e [All-kit]: Warn when journal timestamps can cause migrations to be skipped (#...
  • b786252 Merge pull request #6049 from drizzle-team/drizzle-kit-announcements
  • f9fc5bf Add drizzle-kit announcement manifest and schema doc
  • 9d64532 Merge pull request #6004 from drizzle-team/pin-npm-11-main
  • 0af2f2e Pin the release npm self-update to major 11: the npm 12.0.0 tarball is missin...
  • Additional commits viewable in compare view

Updates geist from 1.7.2 to 1.8.2

Changelog

Sourced from geist's changelog.

1.8.2

Patch Changes

  • 742b082: Center the horizontal bars in the Geist Sans yen sign across all weights.

1.8.1

Patch Changes

  • 3b58290: Align font binary versions with the package version. Geist and Geist Italic: 1.800 → 1.801. Geist Mono and Geist Mono Italic: 1.700 → 1.801.

    Geist Mono had stayed at 1.700 across v1.7.1 and v1.7.2, even though liga was reverted at source in #217, so pre- and post-revert binaries reported the same version (head.fontRevision / name ID 5). Geist Sans already reported 1.800, ahead of the 1.7.x package.

    The package skips from 1.7.2 to 1.8.1 so the package version and the font version follow the same rule, M.X.Y ↔ M.(X×100+Y) (see "Version Numbers" in CONTRIBUTING.md). 1.8.0 is skipped because a GitHub release named 1.8.0 already exists with different font files.

    Closes the second half of #231.

  • 339fffd: Geist Sans: stop mapping U+03C9 (small omega ω) to the capital Omega glyph; encode U+2126 OHM SIGN instead.

Commits

Updates jose from 6.2.12 to 6.2.13

Release notes

Sourced from jose's releases.

v6.2.13

Refactor

  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #908
Changelog

Sourced from jose's changelog.

6.2.13 (2026-10-20)

Refactor

  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #908
Commits
  • 316b7f2 chore(release): 6.2.13
  • 8106395 chore: bump packages
  • 724ba24 refactor: preserve underlying error causes
  • b112a5e chore: bump packages
  • 2a3a525 chore(deps-dev): bump workerd in /tap/workerd
  • 8f540d8 chore(deps): bump the actions group with 3 updates
  • 8d6c02b chore(deps-dev): bump electron from 44.0.0 to 44.4.5 in /tap/electron
  • 55c959f ci: use gh run rerun for retries
  • 5b00c64 ci: address zizmor findings and bump shared workflows
  • 1761d7f chore: bump packages
  • Additional commits viewable in compare view

Updates lucide-react from 1.43.0 to 1.61.0

Release notes

Sourced from lucide-react's releases.

Version 1.61.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

Version 1.60.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

Version 1.59.0

What's Changed

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

... (truncated)

Commits
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • 3f1255e chore(deps-dev): bump @​vitejs/plugin-react (#4995)
  • 949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
  • 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
  • 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
  • e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
  • f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
  • See full diff in compare view

Updates next from 16.3.4 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 2…
8486e9c 
…0 updates

Bumps the minor-and-patch group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@auth0/nextjs-auth0](https://github.com/auth0/nextjs-auth0) | `4.29.0` | `4.33.0` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.8.0` | `1.9.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.2` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.4` |
| [geist](https://github.com/vercel/geist-font/tree/HEAD/packages/next) | `1.7.2` | `1.8.2` |
| [jose](https://github.com/panva/jose) | `6.2.12` | `6.2.13` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.43.0` | `1.61.0` |
| [next](https://github.com/vercel/next.js) | `16.3.4` | `16.4.3` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.428.8` | `1.438.21` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.51.8` | `5.57.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` |
| [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.31.10` | `0.31.11` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.4` | `16.4.3` |
| [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.31` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` |



Updates `@auth0/nextjs-auth0` from 4.29.0 to 4.33.0
- [Release notes](https://github.com/auth0/nextjs-auth0/releases)
- [Changelog](https://github.com/auth0/nextjs-auth0/blob/main/CHANGELOG.md)
- [Commits](auth0/nextjs-auth0@v4.29.0...v4.33.0)

Updates `@base-ui/react` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.9.0/packages/react)

Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.32.2)

Updates `drizzle-orm` from 0.45.2 to 0.45.4
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.45.2...0.45.4)

Updates `geist` from 1.7.2 to 1.8.2
- [Release notes](https://github.com/vercel/geist-font/releases)
- [Changelog](https://github.com/vercel/geist-font/blob/main/packages/next/CHANGELOG.md)
- [Commits](https://github.com/vercel/geist-font/commits/v1.8.2/packages/next)

Updates `jose` from 6.2.12 to 6.2.13
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.12...v6.2.13)

Updates `lucide-react` from 1.43.0 to 1.61.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/lucide-react)

Updates `next` from 16.3.4 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.4...v16.4.3)

Updates `posthog-js` from 1.428.8 to 1.438.21
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.428.8...posthog-js@1.438.21)

Updates `posthog-node` from 5.51.8 to 5.57.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.57.1/packages/node)

Updates `react` from 19.2.8 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@types/react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `drizzle-kit` from 0.31.10 to 0.31.11
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.10...drizzle-kit@0.31.11)

Updates `eslint-config-next` from 16.3.4 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/eslint-config-next)

Updates `postcss` from 8.5.28 to 8.5.31
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.28...8.5.31)

Updates `prettier` from 3.9.6 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.10)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.13...v4.23.15)

---
updated-dependencies:
- dependency-name: "@auth0/nextjs-auth0"
  dependency-version: 4.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@base-ui/react"
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: drizzle-orm
  dependency-version: 0.45.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: geist
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: posthog-js
  dependency-version: 1.438.21
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: posthog-node
  dependency-version: 5.57.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: drizzle-kit
  dependency-version: 0.31.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.4.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 31, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
console Ready Ready Preview Oct 31, 2026 12:30am UTC

Request Review

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 31, 2026
@dependabot
dependabot Bot requested a review from adamsoffer as a code owner October 31, 2026 00:29
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 31, 2026

This branch was successfully deployed

1 active deployment
Preview — 8486e9c9 Deployed Oct 31, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@adamsoffer adamsoffer Awaiting requested review from adamsoffer adamsoffer is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants