Skip to content

deps(deps): bump the patch-and-minor group across 1 directory with 25 updates - #45

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-and-minor-10bcad0747
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-and-minor-10bcad0747

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group with 25 updates in the / directory:

Package From To
@capacitor/android 8.5.0 8.5.2
@capacitor/core 8.5.0 8.5.2
@sentry/react 10.72.0 10.75.0
@supabase/supabase-js 2.112.4 2.116.0
dompurify 3.4.14 3.4.15
react-hook-form 7.87.0 7.88.0
react-hot-toast 2.6.0 2.6.1
react-router-dom 7.18.3 7.18.4
react-window 2.3.0 2.3.1
tailwind-merge 3.6.0 3.7.0
zod 4.5.4 4.6.5
@capacitor/cli 8.5.0 8.5.2
@playwright/test 1.62.1 1.63.0
@testing-library/dom 10.4.1 10.4.2
@testing-library/user-event 14.6.6 14.6.7
@types/node 26.4.0 26.6.1
@typescript-eslint/eslint-plugin 8.68.0 8.70.0
@typescript-eslint/parser 8.68.0 8.70.0
autoprefixer 10.5.4 10.6.1
eslint 10.9.1 10.10.0
eslint-plugin-react-refresh 0.5.5 0.5.7
globals 17.11.0 17.12.0
postcss 8.5.26 8.5.28
prettier 3.9.6 3.9.8
typescript-eslint 8.68.0 8.70.0

Updates @capacitor/android from 8.5.0 to 8.5.2

Release notes

Sourced from @​capacitor/android's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Changelog

Sourced from @​capacitor/android's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • 0c9e35d Release 8.5.1
  • ee586ae fix: block navigation to the internal HTTP proxy path
  • 5ac4dd6 fix(core): prevent removeListener from removing wrong listener (#8271)
  • 5e5bb3b fix(cli): use POSIX paths in CapApp-SPM Package.swift (#8549)
  • See full diff in compare view

Updates @capacitor/core from 8.5.0 to 8.5.2

Release notes

Sourced from @​capacitor/core's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Changelog

Sourced from @​capacitor/core's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • 0c9e35d Release 8.5.1
  • ee586ae fix: block navigation to the internal HTTP proxy path
  • 5ac4dd6 fix(core): prevent removeListener from removing wrong listener (#8271)
  • 5e5bb3b fix(cli): use POSIX paths in CapApp-SPM Package.swift (#8549)
  • See full diff in compare view

Updates @sentry/react from 10.72.0 to 10.75.0

Release notes

Sourced from @​sentry/react's releases.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path Size
@​sentry/browser 27.18 KB
@​sentry/browser - with treeshaking flags 25.66 KB
@​sentry/browser (incl. Tracing) 45.6 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.34 KB
@​sentry/browser (incl. Tracing, Profiling) 50.24 KB
@​sentry/browser (incl. Tracing, Replay) 83.99 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.84 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.6 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.94 KB
@​sentry/browser (incl. Feedback) 43.94 KB
@​sentry/browser (incl. sendFeedback) 31.87 KB
@​sentry/browser (incl. FeedbackAsync) 36.88 KB
@​sentry/browser (incl. Metrics) 28.25 KB
@​sentry/browser (incl. Logs) 28.47 KB
@​sentry/browser (incl. Metrics & Logs) 29.15 KB
@​sentry/react 28.93 KB
@​sentry/react (incl. Tracing) 47.81 KB
@​sentry/vue 32.47 KB
@​sentry/vue (incl. Tracing) 47.55 KB
@​sentry/svelte 27.21 KB
CDN Bundle 29.53 KB
CDN Bundle (incl. Tracing) 47.52 KB
CDN Bundle (incl. Logs, Metrics) 31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics) 69.49 KB
CDN Bundle (incl. Tracing, Replay) 84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

10.74.0

  • feat(v10): Streamline isolation scope handling & reset in isolation scopes (#24152)
  • fix(server-utils): Include Gemini reasoning tokens in Vercel AI token usage (#23433)
  • fix(v10/browser): Set user_agent.original on all spans for consistent filtering (#24226)
  • fix(v10/cloudflare): Auto-instrument classes re-exported from the worker entry (#24181)
  • fix(v10/core): Guard loadModule default parameter against ESM scope (#24154)
  • fix(v10/core): Match wrapped Facebook Mobile browser errors in DEFAULT_IGNORE_ERRORS (#23877)
  • fix(v10/core): Resolve MCP capture policy per operation (#23796)
  • fix(v10/nextjs): Fix SDK import crashing under jsdom/happy-dom (#23906)
  • fix(v10/nextjs): Keep the Pages Router runtime out of App Router client bundles (#24223)
  • fix(v10/nextjs): Register Vercel AI span processors on Next.js (#23773)
  • fix(v10/nuxt): Windows file:// for import-in-the-middle hook and isAbsolute for C:\ (#24026)
  • fix(v10/profiling-node): Bump @​sentry/node-cpu-profiler to 2.4.4 (#24238)
  • fix(v10/sveltekit): Handle SvelteKit 3 error kinds in handleErrorWithSentry (#23995)
  • fix(v10/sveltekit): Read Cloudflare execution context from platform.ctx (#23994)
  • fix(v10/sveltekit): Read SvelteKit config from the Vite plugin (#23998)
  • test(e2e): Assert Next.js Cloudflare worker bundle stays free of orchestrion bundler plugins (#23910)

Work in this release was contributed by @​halillusion and @​zkasuran. Thank you for your contributions!

10.73.0

... (truncated)

Commits
  • 9ffb58c release: 10.75.0
  • 664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
  • e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • 4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
  • 738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
  • 0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • 9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
  • e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.112.4 to 2.116.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.116.0

2.116.0 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)
  • storage: add bucket lifecycle configuration (#2659)
  • storage: topk 10k support (#2667)
  • storage: add versionId support to create URL methods (#2678)

🩹 Fixes

  • auth: silence commit-guard-discarded refresh in initial session (#2668)
  • storage: drop legacy prefix from lifecycles (#2674)
  • supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

  • fadymak
  • Ferhat Elmas
  • Katerina Skroumpelou @​mandarini
  • Tyler Hillery

v2.116.0-canary.3

2.116.0-canary.3 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)
  • storage: add versionId support to create URL methods (#2678)

❤️ Thank You

  • fadymak
  • Katerina Skroumpelou
  • Tyler Hillery

v2.116.0-canary.2

2.116.0-canary.2 (2026-09-07)

🚀 Features

  • storage: topk 10k support (#2667)

🩹 Fixes

  • storage: drop legacy prefix from lifecycles (#2674)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.116.0 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)

🩹 Fixes

  • supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

2.115.0 (2026-09-03)

🚀 Features

  • postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

2.114.0 (2026-09-02)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.113.0 (2026-09-02)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

Commits

Updates dompurify from 3.4.14 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible
Commits

Updates react-hook-form from 7.87.0 to 7.88.0

Release notes

Sourced from react-hook-form's releases.

Version 7.88.0

✨ Features

  • Add Error Message component (#13472)
  • Add the Error Message component for displaying validation errors from React Hook Form.

🐞 Fixes

  • Fix stale validating state after resetField() (#13735)
  • Fix errors and touched state remaining for rows removed by replace() (#13734)
  • Fix stale resolver results updating form state after reset() during handleSubmit() (#13733)
  • Fix nested registered errors being removed when trigger() targets their parent (#13732)
  • Fix resolver-reported root errors being dropped during handleSubmit() (#13731)
  • Fix parent errors being incorrectly set when trigger() targets a field with only nested resolver errors (#13730)
  • Fix useWatch compute cache not being initialized with the initial output (#13728)
  • Fix FileList being lost during flatten/expand and omit undefined values in jsonToFormData (#13725)
  • Fix schemaErrorLookup reporting nested containers as exact-name errors (#13727)
  • Fix isValidating not being recomputed after unregister() clears validating fields (#13723)
  • Fix stale resolver state updates after reset() (#13722)
  • Fix iterateFieldsByAction only breaking out of one loop level (#13718)
  • Fix stale validation types surviving setError() overwrites (#13716)
  • Fix reset() not clearing validating fields (#13714)
  • Fix remove() leaking deleted values onto surviving field-array items (#13713)
  • Fix the React Server build being unpublished (#13709)
  • Fix validateField calling setCustomValidity once per key in validate-object mode (#13707)
  • Fix useFieldArray focus behavior for checkboxes and radio buttons in appended rows (#13705)
  • Fix getFieldState reading isValidating from the supplied form state (#13704)
  • Fix unregister() stripping kept values from the submit payload (#13703)
  • Fix useFormState not re-subscribing when control changes (#13702)
  • Fix reset() keeping dirtyFields out of sync with isDirty when keepValues is enabled (#13701)
  • Fix useForm not reconciling correctly when an Activity subtree is initially hidden (#13698)
  • Fix cleared errors returning after the delayError timer fires (#13697)
  • Fix cloneObject throwing when checking Blob with instanceof (#13694)
  • Fix useFieldArray retaining stale fields after an Activity subtree reconnects (#13688)

🧹 Refactors

  • Extend _isTracked to the remaining multi-key proxy/subscribe form-state checks (#13699)
  • Extract _isTracked helper for proxy/subscribe form-state checks (#13690)
  • Remove the unused abortEarly parameter from iterateFieldsByAction (#13689)
  • Remove redundant optional chaining from clearErrors (#13696)

📝 Documentation

  • Fix useWatch compute example variable names in JSDoc (#13700)

📦 Dependencies

  • Bump joi from 18.2.1 to 18.2.5 (#13719)

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

Changelog

Commits
  • 28334fa 7.88.0
  • 8b7e0e4 🐞 fix(setValue): compare transformed value for dirty state with valueAs/setVa...
  • b5c210b 🐞 fix: cancel nested delayError timers when a parent is cleared or unregister...
  • 8918788 🐞 fix: refresh criteriaMode flag when form options are updated at runtime (#1...
  • 39cfba0 🐞 fix(resetField): clear stale validating state for the field (#13735)
  • a448816 🐞 fix: drop errors and touched state for rows removed by replace() (#13734)
  • 3756191 🐞 fix(handleSubmit): ignore stale resolver result after reset (#13733)
  • d2b757f 🐞 fix(trigger): keep registered nested errors when trigger targets their pare...
  • f32faed 🐞 fix(handleSubmit): keep resolver-reported root errors on submit (#13731)
  • cdcbfca 🐞 fix: don't set parent error when trigger target has only nested resolver er...
  • Additional commits viewable in compare view

Updates react-hot-toast from 2.6.0 to 2.6.1

Release notes

Sourced from react-hot-toast's releases.

v2.6.1

  • Made toast styles easier to override with Tailwind CSS by using :where() to lower CSS specificity. (f339d71)
  • Fixed an issue where toasts stopped updating after a component unmounted when multiple hooks shared the same toasterId. Thanks to @​matthernet for reporting the issue and suggesting the fix! (#436)
  • Fixed TypeScript resolution errors in pnpm strict mode by adding @types/react and @types/react-dom as optional peer dependencies. Thanks to @​q121212 for the fix and @​baraknaveh for the report! (#435)

[[Full changelog: v2.6.0 → v2.6.1](https://github.com/timolins/react-hot-toast/compare/v2.6.0...v2.6.1)](https://github.com/timolins/react-hot-toast/compare/v2.6.0...v2.6.1)

Commits
  • e725d38 2.6.1
  • 114cafd Merge pull request #436 from timolins/codex/fix-use-store-subscriber-cleanup
  • ce3f199 Fix useStore subscriber cleanup
  • 52613c1 Merge pull request #435 from q121212/fix/missing-peer-dep-types-react
  • 64e1fff fix(build): add missing @​types/react and @​types/react-dom peer deps for pnpm ...
  • f339d71 Use :where() for easier Tailwind overrides
  • See full diff in compare view

Updates react-router-dom from 7.18.3 to 7.18.4

Changelog

Sourced from react-router-dom's changelog.

v7.18.4

Patch Changes

Commits

Updates react-window from 2.3.0 to 2.3.1

Release notes

Sourced from react-window's releases.

2.3.1

  • Grid updates direction when dir prop changes after mount
Changelog

Sourced from react-window's changelog.

2.3.1

  • Grid updates direction when dir prop changes after mount
Commits

Updates tailwind-merge from 3.6.0 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

  • Prepare some upcoming changes by @​dcastil in dcastil/tailwind-merge#713
    • Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.
    • Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Documentation

Other

Full Changelog: v3.6.0...v3.7.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​openclaw, @​sourcegraph, @​cesarvcanal, @​CasperKristiansson, @​jbisasky, @​frontendmasters and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • 511d68a tailwind-merge@3.7.0
  • 2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
  • 9d41508 add changelog for tailwind-merge@3.7.0
  • c78a80f Configurator: Reuse runtime lookups during pruning
  • 49c317d Monorepo: Fix contributing link and include package coverage
  • 7b565ca Configurator: prune a generated config to a project's used classes (core step)
  • d83e013 Releases: auto-re-pin tag-pinned links on every version bump
  • b71fd41 Docs: pin every in-repo file link to a release tag instead of main
  • ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
  • 9521b10 Releases: per-package pipeline with namespaced tags
  • Additional commits viewable in compare view

Updates zod from 4.5.4 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (

… updates

Bumps the patch-and-minor group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@capacitor/android](https://github.com/ionic-team/capacitor) | `8.5.0` | `8.5.2` |
| [@capacitor/core](https://github.com/ionic-team/capacitor) | `8.5.0` | `8.5.2` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.72.0` | `10.75.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.4` | `2.116.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.15` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.88.0` |
| [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.6.0` | `2.6.1` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.3` | `7.18.4` |
| [react-window](https://github.com/bvaughn/react-window) | `2.3.0` | `2.3.1` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |
| [@capacitor/cli](https://github.com/ionic-team/capacitor) | `8.5.0` | `8.5.2` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.6` | `14.6.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.6.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.68.0` | `8.70.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.68.0` | `8.70.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.10.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.5` | `0.5.7` |
| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.12.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.68.0` | `8.70.0` |



Updates `@capacitor/android` from 8.5.0 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.0...8.5.2)

Updates `@capacitor/core` from 8.5.0 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.0...8.5.2)

Updates `@sentry/react` from 10.72.0 to 10.75.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.75.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.72.0...10.75.0)

Updates `@supabase/supabase-js` from 2.112.4 to 2.116.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.116.0/packages/core/supabase-js)

Updates `dompurify` from 3.4.14 to 3.4.15
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.14...3.4.15)

Updates `react-hook-form` from 7.87.0 to 7.88.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.87.0...v7.88.0)

Updates `react-hot-toast` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/timolins/react-hot-toast/releases)
- [Commits](timolins/react-hot-toast@v2.6.0...v2.6.1)

Updates `react-router-dom` from 7.18.3 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom)

Updates `react-window` from 2.3.0 to 2.3.1
- [Release notes](https://github.com/bvaughn/react-window/releases)
- [Changelog](https://github.com/bvaughn/react-window/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-window@2.3.0...2.3.1)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.5.4 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.5)

Updates `@capacitor/cli` from 8.5.0 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.0...8.5.2)

Updates `@playwright/test` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/user-event` from 14.6.6 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.6...v14.6.7)

Updates `@types/node` from 26.4.0 to 26.6.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.68.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.68.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/parser)

Updates `autoprefixer` from 10.5.4 to 10.6.1
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.4...10.6.1)

Updates `eslint` from 10.9.1 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.10.0)

Updates `eslint-plugin-react-refresh` from 0.5.5 to 0.5.7
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.5...v0.5.7)

Updates `globals` from 17.11.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.11.0...v17.12.0)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.8)

Updates `typescript-eslint` from 8.68.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@capacitor/android"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@capacitor/core"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@sentry/react"
  dependency-version: 10.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.116.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: dompurify
  dependency-version: 3.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-hook-form
  dependency-version: 7.88.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: react-hot-toast
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-router-dom
  dependency-version: 7.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-window
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@capacitor/cli"
  dependency-version: 8.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@types/node"
  dependency-version: 26.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: autoprefixer
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: typescript-eslint
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated-pr, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from Gravirei as a code owner September 21, 2026 09:27
@coderabbitai

coderabbitai Bot commented Sep 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 182b2f1d-a39d-4525-8b6b-a9afa11d99f7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/patch-and-minor-10bcad0747 branch September 28, 2026 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants