build(deps): bump the web-dependencies group across 1 directory with 13 updates by dependabot[bot] · Pull Request #9 · BlueDot-IT/ExploitRank

dependabot · 2026-08-30T21:16:35Z

Bumps the web-dependencies group with 13 updates in the /web directory:

Package	From	To
react	`19.2.7`	`19.2.8`
@types/react	`19.2.16`	`19.2.18`
react-dom	`19.2.7`	`19.2.8`
@types/react-dom	`19.2.3`	`19.2.5`
next	`16.2.12`	`16.3.3`
lucide-react	`1.17.0`	`1.34.0`
typescript	`6.0.3`	`7.0.2`
@types/node	`25.9.1`	`26.4.0`
postcss	`8.5.24`	`8.5.26`
autoprefixer	`10.5.0`	`10.5.4`
eslint	`9.39.5`	`10.9.1`
eslint-config-next	`16.2.12`	`16.3.3`
@playwright/test	`1.62.0`	`1.62.1`

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates @types/react from 19.2.16 to 19.2.18

Commits

See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.5

Commits

See full diff in compare view

Updates next from 16.2.12 to 16.3.3

Release notes

Sourced from next's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

... (truncated)

Commits

a9a1cb7 v16.3.3
968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
3a15b4a [16.3.x] [next/image]: disable avif image optimization
7378b51 Backport/docs fixes 16.3 (#97649)
528c1cd [16.3.x] Stop generating error codes (#97780)
d0ac882 v16.3.2
81deb92 [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
cd714d9 [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
5ac2327 [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
0ccb3e7 [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
Additional commits viewable in compare view

Updates lucide-react from 1.17.0 to 1.34.0

Release notes

Sourced from lucide-react's releases.

Version 1.34.0

What's Changed

fix: update icon design discussion template by @jguddas in lucide-icons/lucide#4726

chore(deps-dev): bump the preact-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4738

feat(icons): added mail-clock icon by @ericfennis in lucide-icons/lucide#4722

Full Changelog: lucide-icons/lucide@1.33.0...1.34.0

Version 1.33.0

What's Changed

feat(icons): add list-clock icon by @lazerg in lucide-icons/lucide#4636

feat(icons): add square-dimensions by @samuelalake in lucide-icons/lucide#4547

feat(icons): added usb-c-port icon by @karsa-mistmere in lucide-icons/lucide#4556

docs(site): correct Vanilla icon import casing by @hugosmoreira in lucide-icons/lucide#4597

feat(icons): added audio-lines-off icon by @karsa-mistmere in lucide-icons/lucide#4589

chore(icon-discussions): add icon design template by @jguddas in lucide-icons/lucide#4691

feat(icons): added mop icon by @karsa-mistmere in lucide-icons/lucide#4682

chore(scripts): Potential fix for code scanning alert no. 31: Inefficient regular expression by @ericfennis in lucide-icons/lucide#4723

chore(deps-dev): bump the svelte-deps group with 3 updates by @dependabot[bot] in lucide-icons/lucide#4720

feat(icon-discussions): close discussions with banned phrases by @jguddas in lucide-icons/lucide#4692

feat(icons): added midi-port icon by @simoncoudeville in lucide-icons/lucide#3754

New Contributors

@hugosmoreira made their first contribution in lucide-icons/lucide#4597

@simoncoudeville made their first contribution in lucide-icons/lucide#3754

Full Changelog: lucide-icons/lucide@1.32.0...1.33.0

Version 1.32.0

What's Changed

feat(icons): added car-battery icon by @andreynaz4renko in lucide-icons/lucide#4088

fix(categories): fixes emoji.json by @karsa-mistmere in lucide-icons/lucide#4697

chore(deps): bump vue from 3.5.40 to 3.5.41 in the vue-deps group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4695

chore(dev): upgrade ESLint to latest compatible stack (v10) by @ericfennis with @Copilot in lucide-icons/lucide#4378

feat(icons): add square-text by @samuelalake in lucide-icons/lucide#4609

New Contributors

@andreynaz4renko made their first contribution in lucide-icons/lucide#4088

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Version 1.31.0

What's Changed

feat(icons): added mail-badge icon by @lazerg in lucide-icons/lucide#4638

feat(icons): add angle by @samuelalake in lucide-icons/lucide#4545

feat(icons): added eject icon by @ThibautMarechal in lucide-icons/lucide#4043

New Contributors

@lazerg made their first contribution in lucide-icons/lucide#4638

... (truncated)

Commits

75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
f229f83 chore(depedencies): Update dependencies (#4553)
5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

1e4744d Merge branch 'main' into ts7-release
a5a219cmicrosoft/typescript-go#4558
ecfe30d Update status localization
5de25b5 Hide executable name in TypeScript status
d7ce74a Show bundled TypeScript version for packaged servers
29be66a Correct TS 7 release version to 7.0.2
ed2bd1b Merge branch 'main' into ts7-release
8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
d4eaca5microsoft/typescript-go#4549
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates @types/node from 25.9.1 to 26.4.0

Commits

See full diff in compare view

Updates @types/react from 19.2.16 to 19.2.18

Commits

See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.5

Commits

See full diff in compare view

Updates postcss from 8.5.24 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

Changelog

Sourced from postcss's changelog.

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

Commits

07b2577 Release 8.5.26 version
47de6b9 Update CI
1493a83 Fix Rule#selectors losing the empty selector (#2129)
180db16 Typo
29e9e00 Resolve symlinks before the previous-source-map containment check (#2125)
3ba8f84 Update dependencies
87e72f6 Update lock file
caaeeb9 Upgrade nanoid to fix infinite loop on zero size (#2124)
3609b6f Explain how to type plugin options
fbad419 docs: show ESM and TypeScript plugin declaration (#2118)
Additional commits viewable in compare view

Updates autoprefixer from 10.5.0 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

Fixed prefixed rule duplication (by @xianjianlf2).

10.5.3

Fixed brackets and gradient parser (@alanturing881).

10.5.2

Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

Changelog

Sourced from autoprefixer's changelog.

10.5.4

Fixed prefixed rule duplication (by @xianjianlf2).

10.5.3

Fixed brackets and gradient parser (@alanturing881).

10.5.2

Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

Commits

4cad00f Release 10.5.4 version
e62a4b1 Update CI config
c8f0d0a Update dependencies
cae3577 Move back to latest pnpm 11
fd31eb3 Fix duplicated prefixed selectors on reformatted CSS (#1552)
958d390 Release 10.5.3 version
21d2adb Fix gradient parser
f7ddae9 Fix bracket parser
10ea5e7 Update dependencies and remove patch
b6e8a2a Update Dev Container
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.

Updates eslint from 9.39.5 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

3c3ae53 chore: update ecosystem plugins (#21249) (ESLint Bot)

v10.9.0

Features

08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)

55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)

8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)

684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))

87f66f4 docs: Update README (GitHub Actions Bot)

585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)

f3993b0 docs: Update README (GitHub Actions Bot)

ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)

1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)

4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)

510d1a2 docs: Update README (GitHub Actions Bot)

Chores

899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])

9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)

dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)

f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])

4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)

151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)

6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)

4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)

677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

7d0cbf8 docs: Update README (GitHub Actions Bot)

0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)

678c90b docs: Update README (GitHub Actions Bot)

8a10424 docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

5c8c241 10.9.1
a7f3b7d Build: changelog update for 10.9.1
1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251)
ad74a8d docs: add deprecation steps for EOL package versions (#21248)
3c3ae53 chore: update ecosystem plugins (#21249)
c27bc92 10.9.0
fa831d9 Build: changelog update for 10.9.0
899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243)
08de88e feat: handle underflow in no-loss-of-precision (#21218)
9ef407a docs: use eslint.config.* wherever config file names are listed (#21216)
Additional commits viewable in compare view

Updates eslint-config-next from 16.2.12 to 16.3.3

Release notes

Sourced from eslint-config-next's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

... (truncated)

Commits

a9a1cb7 v16.3.3
d0ac882 v16.3.2
3d32eb8 v16.3.1
d73f562 v16.3.0
4fd843f v16.3.0-canary.107
9480f7f v16.3.0-canary.106
a8dcd25 v16.3.0-canary.105
38f0cde v16.3.0-canary.104
f3edea1 v16.3.0-canary.103
0d5ff0d v16.3.0-canary.102
Additional commits viewable in compare view

Updates @playwright/test from 1.62.0 to 1.62.1

Release notes

Sourced from @playwright/test's releases.

v1.62.1

Bug Fixes

#41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)

#41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)

#41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG

#42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62

#42013 [BUG]Image-type actionable elements are not presented in the snapshot.

Commits

26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
66c5cc9 chore: mark v1.62.1 (#42020)
9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
See full diff in compare view

…13 updates Bumps the web-dependencies group with 13 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.16` | `19.2.18` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.5` | | [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.3` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.17.0` | `1.34.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `26.4.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.24` | `8.5.26` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.0` | `10.5.4` | | [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.9.1` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.12` | `16.3.3` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.62.0` | `1.62.1` | Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `@types/react` from 19.2.16 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `next` from 16.2.12 to 16.3.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.3) Updates `lucide-react` from 1.17.0 to 1.34.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.34.0/packages/lucide-react) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `@types/node` from 25.9.1 to 26.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.16 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `postcss` from 8.5.24 to 8.5.26 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.24...8.5.26) Updates `autoprefixer` from 10.5.0 to 10.5.4 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.0...10.5.4) Updates `eslint` from 9.39.5 to 10.9.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.5...v10.9.1) Updates `eslint-config-next` from 16.2.12 to 16.3.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.3/packages/eslint-config-next) Updates `@playwright/test` from 1.62.0 to 1.62.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.0...v1.62.1) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: "@types/node" dependency-version: 26.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: web-dependencies - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: autoprefixer dependency-version: 10.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: eslint dependency-version: 10.9.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: web-dependencies - dependency-name: eslint-config-next dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-dependencies - dependency-name: lucide-react dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-dependencies - dependency-name: next dependency-version: 16.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-dependencies - dependency-name: postcss dependency-version: 8.5.26 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: web-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

…-454065f8b5

morrow-bluedot

Independent dependency review: exact-head CI is green; lock/build/test/audit evidence was reconciled and the update is scoped.

…-454065f8b5

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 30, 2026

dependabot Bot requested a review from jason-allen-oneal as a code owner August 30, 2026 21:16

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 30, 2026

dependabot Bot changed the title ~~build(deps): bump the web-dependencies group in /web with 13 updates~~ build(deps): bump the web-dependencies group across 1 directory with 13 updates Aug 30, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/web/web-dependencies-454065f8b5 branch from ed5dc16 to 08fa42a Compare August 30, 2026 21:39

jason-allen-oneal added 3 commits August 30, 2026 17:56

Merge branch 'main' into dependabot/npm_and_yarn/web/web-dependencies…

c184a41

…-454065f8b5

chore(deps): keep TypeScript on supported major

4ab99fa

chore(deps): retain supported lint toolchain

a84b162

jason-allen-oneal requested a review from morrow-bluedot August 30, 2026 22:02

morrow-bluedot approved these changes Aug 30, 2026

View reviewed changes

Merge branch 'main' into dependabot/npm_and_yarn/web/web-dependencies…

926812f

…-454065f8b5

jason-allen-oneal merged commit 555d575 into main Aug 30, 2026
11 checks passed

jason-allen-oneal deleted the dependabot/npm_and_yarn/web/web-dependencies-454065f8b5 branch August 30, 2026 22:10

This was referenced Aug 30, 2026

fix: remediate dependency and workflow security alerts #13

Merged

security: track and reconcile remaining OpenSSF Scorecard findings #14

Open

Navigation Menu

Uh oh!

build(deps): bump the web-dependencies group across 1 directory with 13 updates - #9

build(deps): bump the web-dependencies group across 1 directory with 13 updates#9
jason-allen-oneal merged 5 commits into
mainfrom
dependabot/npm_and_yarn/web/web-dependencies-454065f8b5

dependabot Bot commented on behalf of github Aug 30, 2026 •

edited

Loading

Uh oh!

morrow-bluedot left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

v16.3.3

v16.3.2

Core Changes

Credits

v16.3.1

What's Changed

Version 1.34.0

What's Changed

Version 1.33.0

What's Changed

New Contributors

Version 1.32.0

What's Changed

New Contributors

Version 1.31.0

What's Changed

New Contributors

TypeScript 7.0.2

8.5.26

8.5.25

8.5.26

8.5.25

10.5.4

10.5.3

10.5.2

10.5.1

10.5.4

10.5.3

10.5.2

10.5.1

v10.9.1

Bug Fixes

Documentation

Chores

v10.9.0

Features

Bug Fixes

Documentation

Chores

v10.8.1

Bug Fixes

Documentation

v16.3.3

v16.3.2

Core Changes

Credits

v16.3.1

What's Changed

v1.62.1

Bug Fixes

Uh oh!

morrow-bluedot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Aug 30, 2026 •

edited

Loading