Bump the npm-dependencies group across 1 directory with 9 updates by dependabot[bot] · Pull Request #3 · JacbK/persona

dependabot · 2026-07-25T17:24:06Z

Bumps the npm-dependencies group with 9 updates in the / directory:

Package	From	To
js-yaml	`5.2.1`	`5.2.2`
lucide-react	`1.25.0`	`1.26.0`
next	`16.2.10`	`16.2.11`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
@types/node	`22.20.1`	`26.1.1`
eslint	`9.39.5`	`10.8.0`
eslint-config-next	`16.2.10`	`16.2.11`
typescript	`6.0.3`	`7.0.2`

Updates js-yaml from 5.2.1 to 5.2.2

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

Quote flow scalars where a colon precedes a flow indicator, #773.

Security

Avoid exponential parsing time for nested flow sequence pairs.

Commits

3c29559 5.2.2 released
3e5240f parser: avoid reparsing flow sequence pair keys
bd7ebb2 fix: quote flow scalars where a colon precedes a flow indicator (#773)
See full diff in compare view

Updates lucide-react from 1.25.0 to 1.26.0

Release notes

Sourced from lucide-react's releases.

Version 1.26.0

What's Changed

fix(docs): fix home page package links & accessible labels by @karsa-mistmere in lucide-icons/lucide#4540

fix(icons): changed columns-3-cog icon by @kamilasw in lucide-icons/lucide#4578

fix(icons): extended metadata of ad icon by @karsa-mistmere in lucide-icons/lucide#4579

fix(icons): changed book-open icons by @karsa-mistmere in lucide-icons/lucide#4565

feat(icons): added shield-keyhole icon by @karsa-mistmere in lucide-icons/lucide#4580

New Contributors

@kamilasw made their first contribution in lucide-icons/lucide#4578

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Commits

See full diff in compare view

Updates next from 16.2.10 to 16.2.11

Release notes

Sourced from next's releases.

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

Commits

9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
bf9d17f [16.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
fe28768 [16.x] fix(next/image): improve performance of detectContentType()
d8afb8d [16.x] Performance improvements when decoding React Server function payloads
Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates @types/node from 22.20.1 to 26.1.1

Commits

See full diff in compare view

Updates eslint from 9.39.5 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)

9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)

e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)

20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)

8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)

b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)

784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)

7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))

92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)

68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)

d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)

eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)

c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)

2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)

eccbe7b test: add error locations to no-class-assign (#21123) (devoil)

e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])

e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])

ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)

044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)

fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)

5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)

9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)

a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)

8dde645 test: add error locations to no-ex-assign (#21102) (devoil)

13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)

a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)

c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)

0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)

3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)

dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)

2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))

5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])

d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)

bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)

f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

749dfed 10.8.0
4bd0d75 Build: changelog update for 10.8.0
4fbf46d test: pin webpack version to 5.108.4 (#21137)
6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
784dfbe docs: Clarify no-eq-null description (#21120)
6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
eccbe7b test: add error locations to no-class-assign (#21123)
2fee9bb feat: export ConfigObject from eslint/config (#21082)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
Additional commits viewable in compare view

Updates eslint-config-next from 16.2.10 to 16.2.11

Release notes

Sourced from eslint-config-next's releases.

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

Commits

9beca08 v16.2.11
See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.1` | `5.2.2` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.26.0` | | [next](https://github.com/vercel/next.js) | `16.2.10` | `16.2.11` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `26.1.1` | | [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.8.0` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.10` | `16.2.11` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | Updates `js-yaml` from 5.2.1 to 5.2.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.2.1...5.2.2) Updates `lucide-react` from 1.25.0 to 1.26.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.26.0/packages/lucide-react) Updates `next` from 16.2.10 to 16.2.11 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.10...v16.2.11) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `@types/node` from 22.20.1 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.39.5 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.5...v10.8.0) Updates `eslint-config-next` from 16.2.10 to 16.2.11 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.2.11/packages/eslint-config-next) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: lucide-react dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: next dependency-version: 16.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint-config-next dependency-version: 16.2.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-08T17:24:09Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 25, 2026

dependabot Bot closed this Aug 8, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-7147f1c64c branch August 8, 2026 17:24

Navigation Menu

Bump the npm-dependencies group across 1 directory with 9 updates - #3

Bump the npm-dependencies group across 1 directory with 9 updates#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-7147f1c64c

dependabot Bot commented on behalf of github Jul 25, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

[5.2.2] - 2026-07-24

Fixed

Security

Version 1.26.0

What's Changed

New Contributors

v16.2.11

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

v10.8.0

Features

Bug Fixes

Documentation

Chores

v10.7.0

Features

v16.2.11

Uh oh!

dependabot Bot commented on behalf of github Aug 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 25, 2026 •

edited

Loading