Skip to content

chore(deps): bump the non-major group across 1 directory with 25 updates#143

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/non-major-795fff6f6b
Closed

chore(deps): bump the non-major group across 1 directory with 25 updates#143
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/non-major-795fff6f6b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the non-major group with 24 updates in the / directory:

Package From To
hono 4.12.12 4.12.16
nodemailer 8.0.5 8.0.7
@axe-core/playwright 4.11.1 4.11.3
@ioredis/commands 1.6.0 1.7.0
prettier 3.8.2 3.8.3
turbo 2.9.6 2.9.8
bullmq 5.73.3 5.76.5
jose 6.2.2 6.2.3
lucide-react 1.8.0 1.14.0
postcss 8.4.31 8.5.13
react 19.2.4 19.2.5
react-dom 19.2.4 19.2.5
stripe 22.0.0 22.1.0
@csstools/css-color-parser 4.0.2 4.1.0
eslint 10.2.0 10.3.0
eslint-config-next 16.2.3 16.2.4
jsdom 29.0.2 29.1.1
sharp 0.33.5 0.34.5
vitest 4.1.4 4.1.5
@aws-sdk/client-s3 3.1025.0 3.1041.0
openai 6.33.0 6.35.0
@prisma/client 7.7.0 7.8.0
@prisma/debug 7.7.0 7.8.0
prisma 7.7.0 7.8.0

Updates hono from 4.12.12 to 4.12.16

Release notes

Sourced from hono's releases.

v4.12.16

Security fixes

This release includes fixes for the following security issues:

Unvalidated JSX Tag Names in hono/jsx May Allow HTML Injection

Affects: hono/jsx. Fixes missing validation of JSX tag names when using jsx() or createElement(), which could allow HTML injection if untrusted input is used as the tag name. GHSA-69xw-7hcm-h432

bodyLimit() can be bypassed for chunked / unknown-length requests

Affects: Body Limit Middleware. Fixes late enforcement for request bodies without a reliable Content-Length (e.g. chunked requests), where oversized requests could reach handlers and return successful responses before being rejected. GHSA-9vqf-7f2p-gf9v

v4.12.15

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.14...v4.12.15

v4.12.14

Security fixes

This release includes fixes for the following security issues:

Improper handling of JSX attribute names in hono/jsx SSR

Affects: hono/jsx. Fixes missing validation of JSX attribute names during server-side rendering, which could allow malformed attribute keys to corrupt the generated HTML output and inject unintended attributes or elements. GHSA-458j-xx4x-4375

Other changes

  • fix(aws-lambda): handle invalid header names in request processing (#4883) fa2c74fe

v4.12.13

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.12...v4.12.13

Commits

Updates nodemailer from 8.0.5 to 8.0.7

Release notes

Sourced from nodemailer's releases.

v8.0.7

8.0.7 (2026-04-27)

Bug Fixes

  • keep domain as UTF-8 when local part is non-ASCII (#1814) (66d4ecb)

v8.0.6

8.0.6 (2026-04-24)

Bug Fixes

  • restore base64 wrap() trim behavior to prevent trailing CRLF (#1810) (#1811) (b1ae6c1)
Changelog

Sourced from nodemailer's changelog.

8.0.7 (2026-04-27)

Bug Fixes

  • keep domain as UTF-8 when local part is non-ASCII (#1814) (66d4ecb)

8.0.6 (2026-04-24)

Bug Fixes

  • restore base64 wrap() trim behavior to prevent trailing CRLF (#1810) (#1811) (b1ae6c1)
Commits

Updates @axe-core/playwright from 4.11.1 to 4.11.3

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.11.2

Bug Fixes

Changelog

Sourced from @​axe-core/playwright's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

4.11.2 (2026-04-14)

Bug Fixes

Commits

Updates @ioredis/commands from 1.6.0 to 1.7.0

Release notes

Sourced from @​ioredis/commands's releases.

v1.7.0

1.7.0 (2026-04-17)

Features

Changelog

Sourced from @​ioredis/commands's changelog.

1.7.0 (2026-04-17)

Features

Commits

Updates prettier from 3.8.2 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

Commits

Updates turbo from 2.9.6 to 2.9.8

Release notes

Sourced from turbo's releases.

Turborepo v2.9.8

What's Changed

@​turbo/repository

Changelog

Full Changelog: vercel/turborepo@v2.9.7...v2.9.8

Turborepo v2.9.8-canary.6

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.9.8-canary.5...v2.9.8-canary.6

Turborepo v2.9.8-canary.5

What's Changed

@​turbo/repository

Changelog

... (truncated)

Commits

Updates bullmq from 5.73.3 to 5.76.5

Release notes

Sourced from bullmq's releases.

v5.76.5

5.76.5 (2026-05-02)

Bug Fixes

  • deps: update dependency msgpackr to v1.11.12 (#3939) (b47f00b)

v5.76.4

5.76.4 (2026-04-29)

Bug Fixes

  • flow-producer: surface ParentJobNotExist errors from add() (#3264) (#4058) (7ed0eec)

v5.76.3

5.76.3 (2026-04-28)

Bug Fixes

  • metrics: add total counters to Prometheus export for accurate counts with auto-removal (#3967) (0bf1b4d)

v5.76.2

5.76.2 (2026-04-25)

Bug Fixes

v5.76.1

5.76.1 (2026-04-22)

Bug Fixes

  • worker: use scheduler registry to discriminate repeatable keys (#4007) (ea7705d)

v5.76.0

5.76.0 (2026-04-22)

Features

  • python: add type hints to worker.py methods (#4035) (1423b58)

v5.75.2

5.75.2 (2026-04-20)

... (truncated)

Commits
  • b47f00b fix(deps): update dependency msgpackr to v1.11.12 (#3939)
  • 009c2e8 docs: update bullmq-pro changelog for version v7.45.0 (#4141)
  • 355f640 chore(release): vpy2.25.0 (#4128)
  • f7e7386 chore(release): 5.76.4 (#4127)
  • cfbbf72 ci(test): use randomUUID instead of v4 (#4129)
  • 54311e5 feat(queue): add skipVersionCheck and skipWaitingForReady to QueueBaseOptions...
  • ecb7b92 docs(queue-meta): add JSDoc to QueueMeta interface and fields (#4124)
  • e5dd52d docs(scripts): add JSDoc to key public methods (#4089)
  • 7ed0eec fix(flow-producer): surface ParentJobNotExist errors from add() (#3264) (#4058)
  • 9ce87eb chore(release): vpy2.24.0 (#4126)
  • Additional commits viewable in compare view

Updates jose from 6.2.2 to 6.2.3

Release notes

Sourced from jose's releases.

v6.2.3

Refactor

  • cleanly reject invalid PBES2 p2c (0cdb851)
Changelog

Sourced from jose's changelog.

6.2.3 (2026-04-27)

Refactor

  • cleanly reject invalid PBES2 p2c (0cdb851)
Commits
  • 41ad7e9 chore(release): 6.2.3
  • 988e90f chore: account for commit-and-tag-version instead of standard-version
  • 4b24656 chore: update CHANGELOG.md header
  • 0cdb851 refactor: cleanly reject invalid PBES2 p2c
  • a0b261e test: update Bun expectations
  • b39dc1a chore: use fs.globSync
  • 0675be1 build: replace rollup umd build with a custom esbuild iife wrap
  • 9b03323 chore: bump packages
  • 914b73d chore(deps-dev): bump lodash
  • 9dce817 chore: bump packages
  • Additional commits viewable in compare view

Updates lucide-react from 1.8.0 to 1.14.0

Release notes

Sourced from lucide-react's releases.

Version 1.14.0

What's Changed

Full Changelog: lucide-icons/lucide@1.13.0...1.14.0

Version 1.13.0

What's Changed

Full Changelog: lucide-icons/lucide@1.12.0...1.13.0

Version 1.12.0

What's Changed

Full Changelog: lucide-icons/lucide@1.10.0...1.12.0

Version 1.11.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.9.0...1.11.0

Version 1.10.0

What's Changed

... (truncated)

Commits

Updates postcss from 8.4.31 to 8.5.13

Release notes

Sourced from postcss's releases.

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

</tr></table>

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

... (truncated)

Commits

Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates react-dom from 19.2.4 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates stripe from 22.0.0 to 22.1.0

Release notes

Sourced from stripe's releases.

v22.1.0

This release changes the pinned API version to 2026-04-22.dahlia.

  • #2639 Update generated code
    • Add support for app_distribution and sunbit_payments on Account.capabilities, AccountCreateParams.capabilities, and AccountUpdateParams.capabilities
    • Add support for balance_report and payout_reconciliation_report on AccountSession.components and AccountSessionCreateParams.components
    • ⚠️ Add support for new values fee_credit_funding, inbound_transfer_reversal, and inbound_transfer on enum BalanceTransaction.type
    • Add support for sunbit on Charge.payment_method_details, ConfirmationToken.payment_method_preview, ConfirmationTokenCreateParams.testHelpers.payment_method_data, PaymentAttemptRecord.payment_method_details, PaymentIntentConfirmParams.payment_method_data, PaymentIntentCreateParams.payment_method_data, PaymentIntentUpdateParams.payment_method_data, PaymentMethodConfigurationCreateParams, PaymentMethodConfigurationUpdateParams, PaymentMethodConfiguration, PaymentMethodCreateParams, PaymentMethod, PaymentRecord.payment_method_details, SetupIntentConfirmParams.payment_method_data, SetupIntentCreateParams.payment_method_data, and SetupIntentUpdateParams.payment_method_data
    • ⚠️ Add support for new values phantom_cash and usdt on enums Charge.payment_method_details.crypto.token_currency, PaymentAttemptRecord.payment_method_details.crypto.token_currency, and PaymentRecord.payment_method_details.crypto.token_currency
    • Add support for location and reader on Charge.payment_method_details.klarna, PaymentAttemptRecord.payment_method_details.klarna, and PaymentRecord.payment_method_details.klarna
    • Add support for mandate on Charge.payment_method_details.pix, PaymentAttemptRecord.payment_method_details.pix, and PaymentRecord.payment_method_details.pix
    • Add support for managed_payments on Checkout.SessionCreateParams, Checkout.Session, PaymentIntent, PaymentLinkCreateParams, PaymentLink, SetupIntent, and Subscription
    • Add support for new value sunbit on enums Checkout.SessionCreateParams.excluded_payment_method_types, PaymentIntentConfirmParams.excluded_payment_method_types, PaymentIntentCreateParams.excluded_payment_method_types, PaymentIntentUpdateParams.excluded_payment_method_types, SetupIntentCreateParams.excluded_payment_method_types, and SetupIntentUpdateParams.excluded_payment_method_types
    • Add support for mandate_options on Checkout.Session.payment_method_options.pix, Checkout.SessionCreateParams.payment_method_options.pix, PaymentIntent.payment_method_options.pix, PaymentIntentConfirmParams.payment_method_options.pix, PaymentIntentCreateParams.payment_method_options.pix, and PaymentIntentUpdateParams.payment_method_options.pix
    • Change type of Checkout.SessionCreateParams.payment_method_options.pix.setup_future_usage, PaymentIntentConfirmParams.payment_method_options.pix.setup_future_usage, PaymentIntentCreateParams.payment_method_options.pix.setup_future_usage, and PaymentIntentUpdateParams.payment_method_options.pix.setup_future_usage from literal('none') to enum('none'|'off_session')
    • Add support for new value sunbit on enum Checkout.SessionCreateParams.payment_method_types
    • ⚠️ Add support for new values fo_vat, gi_tin, it_cf, and py_ruc on enums Checkout.Session.customer_details.tax_ids[].type, Invoice.customer_tax_ids[].type, Tax.Calculation.customer_details.tax_ids[].type, Tax.Transaction.customer_details.tax_ids[].type, and TaxId.type
    • ⚠️ Change type of Checkout.Session.payment_method_options.pix.setup_future_usage and PaymentIntent.payment_method_options.pix.setup_future_usage from literal('none') to enum('none'|'off_session')
    • Add support for new value sunbit on enums ConfirmationTokenCreateParams.testHelpers.payment_method_data.type, PaymentIntentConfirmParams.payment_method_data.type, PaymentIntentCreateParams.payment_method_data.type, PaymentIntentUpdateParams.payment_method_data.type, SetupIntentConfirmParams.payment_method_data.type, SetupIntentCreateParams.payment_method_data.type, and SetupIntentUpdateParams.payment_method_data.type
    • ⚠️ Add support for new value sunbit on enums ConfirmationToken.payment_method_preview.type and PaymentMethod.type
    • Add support for new values fo_vat, gi_tin, it_cf, and py_ruc on enums CustomerCreateParams.tax_id_data[].type, CustomerCreateTaxIdParams.type, InvoiceCreatePreviewParams.customer_details.tax_ids[].type, Tax.CalculationCreateParams.customer_details.tax_ids[].type, and TaxIdCreateParams.type
    • Add support for new value sunbit on enums CustomerListPaymentMethodsParams.type, PaymentMethodCreateParams.type, and PaymentMethodListParams.type
    • Add support for pix on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, Mandate.payment_method_details, SetupAttempt.payment_method_details, SetupIntent.payment_method_options, SetupIntentConfirmParams.payment_method_options, SetupIntentCreateParams.payment_method_options, SetupIntentUpdateParams.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options
    • Add support for upi on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options
    • Add support for new values pix and upi on enums InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
    • ⚠️ Add support for new values pix and upi on enums Invoice.payment_settings.payment_method_types and Subscription.payment_settings.payment_method_types
    • Add support for card_presence on Issuing.Authorization
    • Add support for allowed_card_presences and blocked_card_presences on Issuing.Card.spending_controls, Issuing.CardCreateParams.spending_controls, Issuing.CardUpdateParams.spending_controls, Issuing.Cardholder.spending_controls, Issuing.CardholderCreateParams.spending_controls, and Issuing.CardholderUpdateParams.spending_controls
    • ⚠️ Add support for new value fulfillment_error on enum Issuing.Card.cancellation_reason
    • ⚠️ Add support for new value fulfillment_error on enum Issuing.Card.replacement_reason
    • Add support for amount and currency on Mandate.multi_use
    • Add support for amount_to_confirm on PaymentIntentConfirmParams
    • ⚠️ Add support for new value sunbit on enums PaymentIntent.excluded_payment_method_types and SetupIntent.excluded_payment_method_types
    • Add support for klarna_display_qr_code on PaymentIntent.next_action
    • Add support for new value sunbit on enums PaymentLinkCreateParams.payment_method_types and PaymentLinkUpdateParams.payment_method_types
    • ⚠️ Add support for new value sunbit on enum PaymentLink.payment_method_types
    • ⚠️ Add support for new values low, not_assessed, and unknown on enum Radar.PaymentEvaluation.signals.fraudulent_payment.risk_level
    • Add support for new value account on enum Radar.ValueListCreateParams.item_type
    • ⚠️ Add support for new value account on enum Radar.ValueList.item_type
    • Add support for moto on SetupAttempt.payment_method_details.card
    • Add support for pix_display_qr_code on SetupIntent.next_action
    • Add support for new value 2026-04-22.dahlia on enum WebhookEndpointCreateParams.api_version
    • Add support for error codes action_blocked and approval_required on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, and StripeError
  • #2688 Preserve stack traces for async operations

See the changelog for more details.

v22.1.0-beta.3

Please review the changelog for 22.0.2 for more information about changes in this release.

... (truncated)

Changelog

Sourced from stripe's changelog.

22.1.0 - 2026-04-23

This release changes the pinned API version to 2026-04-22.dahlia.

  • #2639 Update generated code
    • Add support for app_distribution and sunbit_payments on Account.capabilities, AccountCreateParams.capabilities, and AccountUpdateParams.capabilities
    • Add support for balance_report and payout_reconciliation_report on AccountSession.components and AccountSessionCreateParams.components
    • ⚠️ Add support for new values fee_credit_funding, inbound_transfer_reversal, and inbound_transfer on enum BalanceTransaction.type
    • Add support for sunbit on Charge.payment_method_details, ConfirmationToken.payment_method_preview, ConfirmationTokenCreateParams.testHelpers.payment_method_data, PaymentAttemptRecord.payment_method_details, PaymentIntentConfirmParams.payment_method_data, PaymentIntentCreateParams.payment_method_data, PaymentIntentUpdateParams.payment_method_data, PaymentMethodConfigurationCreateParams, PaymentMethodConfigurationUpdateParams, PaymentMethodConfiguration, PaymentMethodCreateParams, PaymentMethod, PaymentRecord.payment_method_details, SetupIntentConfirmParams.payment_method_data, SetupIntentCreateParams.payment_method_data, and SetupIntentUpdateParams.payment_method_data
    • ⚠️ Add support for new values phantom_cash and usdt on enums Charge.payment_method_details.crypto.token_currency, PaymentAttemptRecord.payment_method_details.crypto.token_currency, and PaymentRecord.payment_method_details.crypto.token_currency
    • Add support for location and reader on Charge.payment_method_details.klarna, PaymentAtte...

      Description has been truncated

@dependabot
chore(deps): bump the non-major group across 1 directory with 25 updates
8cca34b 
Bumps the non-major group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hono](https://github.com/honojs/hono) | `4.12.12` | `4.12.16` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.5` | `8.0.7` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.11.1` | `4.11.3` |
| [@ioredis/commands](https://github.com/ioredis/commands) | `1.6.0` | `1.7.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.2` | `3.8.3` |
| [turbo](https://github.com/vercel/turborepo) | `2.9.6` | `2.9.8` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.73.3` | `5.76.5` |
| [jose](https://github.com/panva/jose) | `6.2.2` | `6.2.3` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.8.0` | `1.14.0` |
| [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.5.13` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` |
| [stripe](https://github.com/stripe/stripe-node) | `22.0.0` | `22.1.0` |
| [@csstools/css-color-parser](https://github.com/csstools/postcss-plugins/tree/HEAD/packages/css-color-parser) | `4.0.2` | `4.1.0` |
| [eslint](https://github.com/eslint/eslint) | `10.2.0` | `10.3.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.3` | `16.2.4` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.0.2` | `29.1.1` |
| [sharp](https://github.com/lovell/sharp) | `0.33.5` | `0.34.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.4` | `4.1.5` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1025.0` | `3.1041.0` |
| [openai](https://github.com/openai/openai-node) | `6.33.0` | `6.35.0` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.7.0` | `7.8.0` |
| [@prisma/debug](https://github.com/prisma/prisma/tree/HEAD/packages/debug) | `7.7.0` | `7.8.0` |
| [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `7.7.0` | `7.8.0` |



Updates `hono` from 4.12.12 to 4.12.16
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.12...v4.12.16)

Updates `nodemailer` from 8.0.5 to 8.0.7
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.5...v8.0.7)

Updates `@axe-core/playwright` from 4.11.1 to 4.11.3
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/dequelabs/axe-core-npm/commits)

Updates `@ioredis/commands` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/ioredis/commands/releases)
- [Changelog](https://github.com/ioredis/commands/blob/main/CHANGELOG.md)
- [Commits](ioredis/commands@v1.6.0...v1.7.0)

Updates `prettier` from 3.8.2 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.2...3.8.3)

Updates `turbo` from 2.9.6 to 2.9.8
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.9.6...v2.9.8)

Updates `bullmq` from 5.73.3 to 5.76.5
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.73.3...v5.76.5)

Updates `jose` from 6.2.2 to 6.2.3
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.2...v6.2.3)

Updates `lucide-react` from 1.8.0 to 1.14.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.14.0/packages/lucide-react)

Updates `postcss` from 8.4.31 to 8.5.13
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.31...8.5.13)

Updates `react` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `stripe` from 22.0.0 to 22.1.0
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.0.0...v22.1.0)

Updates `@csstools/css-color-parser` from 4.0.2 to 4.1.0
- [Changelog](https://github.com/csstools/postcss-plugins/blob/main/packages/css-color-parser/CHANGELOG.md)
- [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/packages/css-color-parser)

Updates `eslint` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.2.0...v10.3.0)

Updates `eslint-config-next` from 16.2.3 to 16.2.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.2.4/packages/eslint-config-next)

Updates `jsdom` from 29.0.2 to 29.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.0.2...v29.1.1)

Updates `sharp` from 0.33.5 to 0.34.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.33.5...v0.34.5)

Updates `vitest` from 4.1.4 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

Updates `@aws-sdk/client-s3` from 3.1025.0 to 3.1041.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1041.0/clients/client-s3)

Updates `axe-core` from 4.11.2 to 4.11.4
- [Release notes](https://github.com/dequelabs/axe-core/releases)
- [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core@v4.11.2...v4.11.4)

Updates `openai` from 6.33.0 to 6.35.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.33.0...v6.35.0)

Updates `@prisma/client` from 7.7.0 to 7.8.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.8.0/packages/client)

Updates `@prisma/debug` from 7.7.0 to 7.8.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.8.0/packages/debug)

Updates `prisma` from 7.7.0 to 7.8.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.8.0/packages/cli)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.12.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: nodemailer
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.11.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@ioredis/commands"
  dependency-version: 1.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: turbo
  dependency-version: 2.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: bullmq
  dependency-version: 5.76.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: jose
  dependency-version: 6.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: lucide-react
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: postcss
  dependency-version: 8.5.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: react
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: stripe
  dependency-version: 22.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: "@csstools/css-color-parser"
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: eslint
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: eslint-config-next
  dependency-version: 16.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: jsdom
  dependency-version: 29.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: sharp
  dependency-version: 0.34.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1041.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: axe-core
  dependency-version: 4.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: openai
  dependency-version: 6.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: "@prisma/client"
  dependency-version: 7.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: "@prisma/debug"
  dependency-version: 7.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: prisma
  dependency-version: 7.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 4, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented May 4, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
flexible-accessible Error Error May 4, 2026 6:56am

@dependabot dependabot Bot requested a review from Hardonian as a code owner May 4, 2026 06:56
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 11, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/non-major-795fff6f6b branch May 11, 2026 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Hardonian Hardonian Awaiting requested review from Hardonian Hardonian is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants