chore(deps): bump the web-minor-and-patch group in /web with 8 updates by dependabot[bot] · Pull Request #1136 · matrixorigin/Astra

dependabot · 2026-10-26T01:48:36Z

Bumps the web-minor-and-patch group in /web with 8 updates:

Package	From	To
@radix-ui/react-dialog	`1.3.0`	`1.3.1`
@radix-ui/react-dropdown-menu	`2.2.0`	`2.2.1`
@radix-ui/react-popover	`1.3.0`	`1.3.1`
@radix-ui/react-tooltip	`1.4.0`	`1.4.1`
lucide-react	`1.55.0`	`1.59.0`
next	`16.4.1`	`16.4.2`
@playwright/test	`1.64.0`	`1.64.1`
eslint-config-next	`16.4.0`	`16.4.2`

Updates @radix-ui/react-dialog from 1.3.0 to 1.3.1

Changelog

Sourced from @radix-ui/react-dialog's changelog.

1.3.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

Commits

See full diff in compare view

Updates @radix-ui/react-dropdown-menu from 2.2.0 to 2.2.1

Changelog

Sourced from @radix-ui/react-dropdown-menu's changelog.

2.2.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-menu@2.2.1

Commits

See full diff in compare view

Updates @radix-ui/react-popover from 1.3.0 to 1.3.1

Changelog

Sourced from @radix-ui/react-popover's changelog.

1.3.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

Commits

See full diff in compare view

Updates @radix-ui/react-tooltip from 1.4.0 to 1.4.1

Changelog

Sourced from @radix-ui/react-tooltip's changelog.

1.4.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

Commits

See full diff in compare view

Updates lucide-react from 1.55.0 to 1.59.0

Release notes

Sourced from lucide-react's releases.

Version 1.59.0

What's Changed

feat(docs): Adds search field to docs pages by @ericfennis in lucide-icons/lucide#5012

fix(icons): changed chess-queen icon by @karsa-mistmere in lucide-icons/lucide#4613

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

feat(docs): add third-party package lucide-jte by @sgruendel in lucide-icons/lucide#5000

chore(integration-tests): Add Svelte integration tests for @ucide/svelte by @ericfennis in lucide-icons/lucide#5005

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#5004

fix(site): Fix homepage animation by @ericfennis in lucide-icons/lucide#5015

feat(ci): auto-generate PR titles from added file paths by @ericfennis with @Copilot in lucide-icons/lucide#4790

fix(icons): changed barrel icon by @karsa-mistmere in lucide-icons/lucide#4639

ci(dev): fix "Generate PR Title" job by using REST API for changed files by @ericfennis with @Copilot in lucide-icons/lucide#5017

feat(icons): added certificate icon by @rrod497 in lucide-icons/lucide#4327

fix(icons): update music icons by @jamiemlaw in lucide-icons/lucide#4072

New Contributors

@sgruendel made their first contribution in lucide-icons/lucide#5000

Full Changelog: lucide-icons/lucide@1.57.0...1.58.0

Version 1.57.0

What's Changed

feat(icons): added folder-user and folder-user icons by @rrod497 in lucide-icons/lucide#4603

feat(icons): added calendar-chevrons-left icon by @karsa-mistmere in lucide-icons/lucide#5001

feat(icons): added users-collaboration icon by @rrod497 in lucide-icons/lucide#4922

feat(icons): added Belarusian ruble icon by @js-best in lucide-icons/lucide#4984

feat(icons): added circle-fading-play icon by @tatianatsiguleva in lucide-icons/lucide#4990

feat(icons): add cpu-ai icon by @signalgridco in lucide-icons/lucide#4992

feat(icons): added guitar-electric icon by @rrod497 in lucide-icons/lucide#4917

feat(icons): added graph-star icon by @Nitero in lucide-icons/lucide#4983

chore(deps-dev): bump the svelte-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4996

chore(deps-dev): bump preact from 11.0.0 to 11.0.1 in the preact-deps group by @dependabot[bot] in lucide-icons/lucide#4999

chore(deps-dev): bump @vitejs/plugin-react from 6.1.1 to 6.1.2 in the react-deps group by @dependabot[bot] in lucide-icons/lucide#4995

feat(icons): added perfume icon by @rrod497 in lucide-icons/lucide#4426

New Contributors

@js-best made their first contribution in lucide-icons/lucide#4984

@tatianatsiguleva made their first contribution in lucide-icons/lucide#4990

@signalgridco made their first contribution in lucide-icons/lucide#4992

@Nitero made their first contribution in lucide-icons/lucide#4983

Full Changelog: lucide-icons/lucide@1.56.0...1.57.0

Version 1.56.0

What's Changed

... (truncated)

Commits

3f1255e chore(deps-dev): bump @vitejs/plugin-react (#4995)
See full diff in compare view

Updates next from 16.4.1 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

Commits

2864b17 v16.4.2
a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
Additional commits viewable in compare view

Updates @playwright/test from 1.64.0 to 1.64.1

Release notes

Sourced from @playwright/test's releases.

v1.64.1

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0

#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

Commits

cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
866cbb8 chore: mark v1.64.1 (#43354)
1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
See full diff in compare view

Updates eslint-config-next from 16.4.0 to 16.4.2

Release notes

Sourced from eslint-config-next's releases.

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution in use cache functions returning typed arrays

Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

Denial of Service in App Router using Server Actions

Commits

2864b17 v16.4.2
7217011 v16.4.1
See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the web-minor-and-patch group in /web with 8 updates: | Package | From | To | | --- | --- | --- | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.3.0` | `1.3.1` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.2.0` | `2.2.1` | | [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.3.0` | `1.3.1` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.4.0` | `1.4.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.59.0` | | [next](https://github.com/vercel/next.js) | `16.4.1` | `16.4.2` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.4.0` | `16.4.2` | Updates `@radix-ui/react-dialog` from 1.3.0 to 1.3.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.2.0 to 2.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-popover` from 1.3.0 to 1.3.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover) Updates `@radix-ui/react-tooltip` from 1.4.0 to 1.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `lucide-react` from 1.55.0 to 1.59.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.59.0/packages/lucide-react) Updates `next` from 16.4.1 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.4.1...v16.4.2) Updates `@playwright/test` from 1.64.0 to 1.64.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.64.0...v1.64.1) Updates `eslint-config-next` from 16.4.0 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.2/packages/eslint-config-next) --- updated-dependencies: - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-and-patch - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-and-patch - dependency-name: "@radix-ui/react-popover" dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-and-patch - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-and-patch - dependency-name: lucide-react dependency-version: 1.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-minor-and-patch - dependency-name: next dependency-version: 16.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-and-patch - dependency-name: "@playwright/test" dependency-version: 1.64.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-minor-and-patch - dependency-name: eslint-config-next dependency-version: 16.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

…tch-b5a28db3b8

dependabot Bot requested a review from XuPeng-SH as a code owner October 26, 2026 01:48

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 26, 2026

Merge branch 'main' into dependabot/npm_and_yarn/web/web-minor-and-pa…

480d686

…tch-b5a28db3b8

XuPeng-SH merged commit 888dd0f into main Oct 26, 2026
9 of 11 checks passed

XuPeng-SH deleted the dependabot/npm_and_yarn/web/web-minor-and-patch-b5a28db3b8 branch October 26, 2026 15:30

Navigation Menu

Repository navigation

chore(deps): bump the web-minor-and-patch group in /web with 8 updates - #1136

chore(deps): bump the web-minor-and-patch group in /web with 8 updates#1136
XuPeng-SH merged 2 commits into
mainfrom
dependabot/npm_and_yarn/web/web-minor-and-patch-b5a28db3b8

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026

1.3.1

2.2.1

1.3.1

1.4.1

Version 1.59.0

What's Changed

Version 1.58.0

What's Changed

New Contributors

Version 1.57.0

What's Changed

New Contributors

Version 1.56.0

What's Changed

v16.4.2

What's Changed

v1.64.1

Bug Fixes

v16.4.2

What's Changed

v16.4.1

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant