Skip to content

chore(deps): bump the minor-and-patch group with 10 updates - #456

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-737d5b8ef8
Aug 31, 2026
Merged

chore(deps): bump the minor-and-patch group with 10 updates#456
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-737d5b8ef8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 10 updates:

Package From To
@noble/hashes 2.3.0 2.4.0
@sentry/nextjs 10.71.0 10.72.0
lucide-react 1.34.0 1.35.0
mermaid 11.17.1 11.17.2
next 16.3.2 16.3.3
resend 6.22.1 6.25.0
stripe 22.5.0 22.6.0
zod 4.4.3 4.5.1
@types/node 26.3.0 26.4.0
eslint-config-next 16.3.2 16.3.3

Updates @noble/hashes from 2.3.0 to 2.4.0

Release notes

Sourced from @​noble/hashes's releases.

2.4.0

Security and correctness

  • Protect passed options against mutation / pollution
  • keccakprg: fail until entropy is added
  • webcrypto: reject output sizes which crashed engine
  • blake3: fix tree merging for multi-terabyte streams
  • Improve zeroization

Misc

  • Speed-up Argon2 by 20%
  • Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
  • Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
  • nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Full Changelog: paulmillr/noble-hashes@2.3.0...2.4.0

Changelog

Sourced from @​noble/hashes's changelog.

2.4.0 (2026-08-27)

Security and correctness

  • Protect passed options against mutation / pollution
  • keccakprg: fail until entropy is added
  • webcrypto: reject output sizes which crashed engine
  • blake3: fix tree merging for multi-terabyte streams
  • Improve zeroization

Misc

  • Speed-up Argon2 by 20%
  • Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
  • Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
  • nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.
Commits

Updates @sentry/nextjs from 10.71.0 to 10.72.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.72.0

Important Changes

  • AI integrations no longer report errors that propagate to the caller (#23638, #23639, #23640)

    Across all AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, and LangGraph), the SDK no longer sends an event to Sentry for errors that the AI framework propagates to your code. Previously the instrumentation reported these as unhandled (handled: false) before your own error handling ran, so an error your code caught still showed up in Sentry as an unhandled crash. The span is still marked as errored and the error still propagates, so reporting is left to your application: if your code does not handle the error, it reaches Sentry's global error handlers and is captured as unhandled, just like any other uncaught error. Errors that a provider surfaces as data on an otherwise successful response (such as Anthropic error-shaped responses or Google GenAI blocked content) are still captured, since your code never sees them propagate.

  • feat(v10/cloudflare): Add rpcTracePropagationBindings (#23737, #23738)

    The new rpcTracePropagationBindings option names the env bindings that outgoing RPC calls propagate trace context to. Strings match a binding name exactly, regular expressions match by pattern, and the default empty array propagates to nothing. RPC has no headers to carry trace context, so the SDK appends it as a trailing argument that only a Sentry-instrumented receiver removes again. List only the bindings whose receiver you know runs Sentry. Setting the option takes precedence over enableRpcTracePropagation, which is now deprecated. When you build with the Sentry Cloudflare Vite plugin, the bindings that resolve to this worker (its own Durable Objects and self service bindings) are derived from your wrangler config and added for you.

Other Changes

  • fix(v10/astro): support astro v7 route patterns properly (#23657)
  • fix(v10/bundler-plugins): Preserve full file path in component annotation source maps (#23595)
  • fix(v10/core): Store child span timeout handle in _childSpanTimeoutID (#23673)
  • fix(v10/node): Only end the process session when it is still ok (#23731)
  • fix(v10/react-router): Use react-router's own instrumentation types instead of a mirrored copy (#23589)
  • fix(v10/replay): Suppress Worker destroyed error on session expiry (#23654)
  • fix(v10/server-utils): Keep orchestrion registration out of tree-shaking (#23591)
  • fix(v10/server-utils): Stop shipping orchestrion bundler plugins as production dependencies (#23667)
  • fix(v10/server-utils): Support openai v7 in auto-instrumentation (#23713)
  • fix(v10/sveltekit): Detect native tracing in flattened SvelteKit 3 config (#23656)
  • chore(v10): Add external contributor to CHANGELOG.md (#23626)
  • docs(v10): Changelog + contributor credit for AI caller-handled error fixes (#23641)
  • test(v10/e2e): Fix scripts for nuxt dev server (#23658)
  • test(v10/e2e): Look up events via the organization trace endpoint (#23680)
  • test(v10/e2e): Look up the symbolicated event via the eventids endpoint (#23681)

Work in this release was contributed by @​ryanrho-mercor, @​lux-in-tenebris-lucet, and @​suhailopensource. Thank you for your contributions!

Bundle size 📦

Path Size
@​sentry/browser 27.1 KB
@​sentry/browser - with treeshaking flags 25.58 KB
@​sentry/browser (incl. Tracing) 45.54 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.28 KB
@​sentry/browser (incl. Tracing, Profiling) 50.17 KB
@​sentry/browser (incl. Tracing, Replay) 83.87 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.74 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.49 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.83 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.72.0

Important Changes

  • AI integrations no longer report errors that propagate to the caller (#23638, #23639, #23640)

    Across all AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, and LangGraph), the SDK no longer sends an event to Sentry for errors that the AI framework propagates to your code. Previously the instrumentation reported these as unhandled (handled: false) before your own error handling ran, so an error your code caught still showed up in Sentry as an unhandled crash. The span is still marked as errored and the error still propagates, so reporting is left to your application: if your code does not handle the error, it reaches Sentry's global error handlers and is captured as unhandled, just like any other uncaught error. Errors that a provider surfaces as data on an otherwise successful response (such as Anthropic error-shaped responses or Google GenAI blocked content) are still captured, since your code never sees them propagate.

  • feat(v10/cloudflare): Add rpcTracePropagationBindings (#23737, #23738)

    The new rpcTracePropagationBindings option names the env bindings that outgoing RPC calls propagate trace context to. Strings match a binding name exactly, regular expressions match by pattern, and the default empty array propagates to nothing. RPC has no headers to carry trace context, so the SDK appends it as a trailing argument that only a Sentry-instrumented receiver removes again. List only the bindings whose receiver you know runs Sentry. Setting the option takes precedence over enableRpcTracePropagation, which is now deprecated. When you build with the Sentry Cloudflare Vite plugin, the bindings that resolve to this worker (its own Durable Objects and self service bindings) are derived from your wrangler config and added for you.

Other Changes

  • fix(v10/astro): support astro v7 route patterns properly (#23657)
  • fix(v10/bundler-plugins): Preserve full file path in component annotation source maps (#23595)
  • fix(v10/core): Store child span timeout handle in _childSpanTimeoutID (#23673)
  • fix(v10/node): Only end the process session when it is still ok (#23731)
  • fix(v10/react-router): Use react-router's own instrumentation types instead of a mirrored copy (#23589)
  • fix(v10/replay): Suppress Worker destroyed error on session expiry (#23654)
  • fix(v10/server-utils): Keep orchestrion registration out of tree-shaking (#23591)
  • fix(v10/server-utils): Stop shipping orchestrion bundler plugins as production dependencies (#23667)
  • fix(v10/server-utils): Support openai v7 in auto-instrumentation (#23713)
  • fix(v10/sveltekit): Detect native tracing in flattened SvelteKit 3 config (#23656)
  • chore(v10): Add external contributor to CHANGELOG.md (#23626)
  • docs(v10): Changelog + contributor credit for AI caller-handled error fixes (#23641)
  • test(v10/e2e): Fix scripts for nuxt dev server (#23658)
  • test(v10/e2e): Look up events via the organization trace endpoint (#23680)
  • test(v10/e2e): Look up the symbolicated event via the eventids endpoint (#23681)

Work in this release was contributed by @​ryanrho-mercor, @​lux-in-tenebris-lucet, and @​suhailopensource. Thank you for your contributions!

Commits
  • 0d23628 release: 10.72.0
  • ac2094d meta(changelog): Update changelog for 10.72.0 (#23743)
  • f325434 feat(v10/cloudflare): Derive rpcTracePropagationBindings from the wrangler co...
  • 7917b0d feat(v10/cloudflare): Add rpcTracePropagationBindings (#23737)
  • b61e912 fix(v10/node): Only end the process session when it is still ok (#23731)
  • 4316785 test(v10/e2e): Look up the symbolicated event via the eventids endpoint (#23681)
  • e09fdf8 fix(v10/server-utils): Support openai v7 in auto-instrumentation (#23713)
  • 817056d test(v10/e2e): Look up events via the organization trace endpoint (#23680)
  • 83c644d fix(v10/server-utils): Stop shipping orchestrion bundler plugins as productio...
  • 04a52dd fix(v10/core): Store child span timeout handle in _childSpanTimeoutID (#23673)
  • Additional commits viewable in compare view

Updates lucide-react from 1.34.0 to 1.35.0

Release notes

Sourced from lucide-react's releases.

Version 1.35.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.34.0...1.35.0

Commits

Updates mermaid from 11.17.1 to 11.17.2

Release notes

Sourced from mermaid's releases.

mermaid@11.17.2

Patch Changes

  • #8125 178d7c7 Thanks @​knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it
Commits

Updates next from 16.3.2 to 16.3.3

Release notes

Sourced from next's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Commits

Updates resend from 6.22.1 to 6.25.0

Release notes

Sourced from resend's releases.

v6.25.0

What's Changed

Full Changelog: resend/resend-node@v6.24.0...v6.25.0

v6.24.0

What's Changed

Full Changelog: resend/resend-node@v6.23.0...v6.24.0

v6.23.0

What's Changed

Full Changelog: resend/resend-node@v6.22.1...v6.23.0

Commits

Updates stripe from 22.5.0 to 22.6.0

Release notes

Sourced from stripe's releases.

v22.6.0

This release changes the pinned API version to 2026-08-26.dahlia.

  • #2801 Add discriminatedUnion kind to V2RuntimeSchema coercion

    • Adds runtime support for coercing int64/decimal fields within discriminated union variants in V2 API requests and responses.
    • ⚠️ Throws when serializing a discriminated union parameter whose discriminator is missing or is not a string. This avoids skipping coercion entirely which could silently truncate int64 fields above Number.MAX_SAFE_INTEGER.

  • #2818 Add new EventNotificationHandler class for better thin event management

  • #2815 correctly throw connection errors if the server drops while sending the HTTP response body

    • This change results in new exceptions being thrown instead of hanging indefinitely
    • in an effort to make this change backwards compatible, it doesn't affect a case that was already throwing an error: if the stripe API sends invalid JSON, we were treating it as an API error instead of a connection error.
      • In the next major version, we'll change the exception thrown from StripeAPIError to StripeConnectionError and document it accordingly.

  • #2812 Update generated code

    • Add support for new resource Billing.FeedbackOption
    • Add support for create, deactivate, list, retrieve, and update methods on resource Billing.FeedbackOption
    • Add support for payment_method_settings on AccountSession.components and AccountSessionCreateParams.components
    • Add support for feedback_options on BillingPortal.Configuration.features.subscription_cancel.cancellation_reason, BillingPortal.ConfigurationCreateParams.features.subscription_cancel.cancellation_reason, and BillingPortal.ConfigurationUpdateParams.features.subscription_cancel.cancellation_reason
    • Add support for new value customer_update on enums BillingPortal.Session.flow.type and BillingPortal.SessionCreateParams.flow_data.type
    • Add support for customer_update on BillingPortal.Session.flow
    • Add support for funding_source_group on Charge.payment_method_details.card.wallet.link and Charge.payment_method_details.link
    • Add support for funding_types_blocked on Checkout.Session.payment_method_options.card.restrictions and Checkout.SessionCreateParams.payment_method_options.card.restrictions
    • Add support for metadata on ConfirmationToken
    • Add support for active_entitlements and customer_portal on CustomerSession.components and CustomerSessionCreateParams.components
    • Add support for country on FinancialConnections.Session.filters
    • Add support for frozen_fields on InvoiceItem
    • Add support for billie on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options
    • Add support for new value billie on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
    • ⚠️ Remove support for cryptogram on PaymentAttemptRecord.payment_method_details.card.three_d_secure and PaymentRecord.payment_method_details.card.three_d_secure
    • Add support for new value touch_n_go on enums PaymentIntent.allowed_payment_method_types, PaymentIntentConfirmParams.allowed_payment_method_types, PaymentIntentCreateParams.allowed_payment_method_types, PaymentIntentUpdateParams.allowed_payment_method_types, SetupIntent.allowed_payment_method_types, SetupIntentConfirmParams.allowed_payment_method_types, SetupIntentCreateParams.allowed_payment_method_types, and SetupIntentUpdateParams.allowed_payment_method_types
    • Change PaymentIntent.allowed_payment_method_types and SetupIntent.allowed_payment_method_types to be required
    • Add support for application_fee_amount, application_fee_percent, on_behalf_of, and transfer_data on PaymentLinkUpdateParams
    • Add support for feedback_option on Subscription.cancellation_details, SubscriptionCancelParams.cancellation_details, and SubscriptionUpdateParams.cancellation_details
    • Add support for igic on Tax.Registration.country_options.at, Tax.Registration.country_options.be, Tax.Registration.country_options.bg, Tax.Registration.country_options.cy, Tax.Registration.country_options.cz, Tax.Registration.country_options.de, Tax.Registration.country_options.dk, Tax.Registration.country_options.ee, Tax.Registration.country_options.es, Tax.Registration.country_options.fi, Tax.Registration.country_options.fr, Tax.Registration.country_options.gr, Tax.Registration.country_options.hr, Tax.Registration.country_options.hu, Tax.Registration.country_options.ie, Tax.Registration.country_options.it, Tax.Registration.country_options.lt, Tax.Registration.country_options.lu, Tax.Registration.country_options.lv, Tax.Registration.country_options.mt, Tax.Registration.country_options.nl, Tax.Registration.country_options.pl, Tax.Registration.country_options.pt, Tax.Registration.country_options.ro, Tax.Registration.country_options.se, Tax.Registration.country_options.si, Tax.Registration.country_options.sk, Tax.RegistrationCreateParams.country_options.at, Tax.RegistrationCreateParams.country_options.be, Tax.RegistrationCreateParams.country_options.bg, Tax.RegistrationCreateParams.country_options.cy, Tax.RegistrationCreateParams.country_options.cz, Tax.RegistrationCreateParams.country_options.de, Tax.RegistrationCreateParams.country_options.dk, Tax.RegistrationCreateParams.country_options.ee, Tax.RegistrationCreateParams.country_options.es, Tax.RegistrationCreateParams.country_options.fi, Tax.RegistrationCreateParams.country_options.fr, Tax.RegistrationCreateParams.country_options.gr, Tax.RegistrationCreateParams.country_options.hr, Tax.RegistrationCreateParams.country_options.hu, Tax.RegistrationCreateParams.country_options.ie, Tax.RegistrationCreateParams.country_options.it, Tax.RegistrationCreateParams.country_options.lt, Tax.RegistrationCreateParams.country_options.lu, Tax.RegistrationCreateParams.country_options.lv, Tax.RegistrationCreateParams.country_options.mt, Tax.RegistrationCreateParams.country_options.nl, Tax.RegistrationCreateParams.country_options.pl, Tax.RegistrationCreateParams.country_options.pt, Tax.RegistrationCreateParams.country_options.ro, Tax.RegistrationCreateParams.country_options.se, Tax.RegistrationCreateParams.country_options.si, and Tax.RegistrationCreateParams.country_options.sk
    • Add support for new value 2026-08-26.dahlia on enum WebhookEndpointCreateParams.api_version
    • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, StripeError, and Terminal.Reader.action.api_error

See the changelog for more details.

v22.6.0-alpha.2

  • #2810 Update generated code for private-preview
    • Add support for new resources Billing.FeedbackOption and PaymentPlan
    • ⚠️ Remove support for resource Billing.FeedbackOptions
    • Add support for create, list, retrieve, and update methods on resource PaymentPlan
    • Add support for update method on resource V2.MoneyManagement.Transaction

... (truncated)

Changelog

Sourced from stripe's changelog.

22.6.0 - 2026-08-26

This release changes the pinned API version to 2026-08-26.dahlia.

  • #2801 Add discriminatedUnion kind to V2RuntimeSchema coercion

    • Adds runtime support for coercing int64/decimal fields within discriminated union variants in V2 API requests and responses.
    • ⚠️ Throws when serializing a discriminated union parameter whose discriminator is missing or is not a string. This avoids skipping coercion entirely which could silently truncate int64 fields above Number.MAX_SAFE_INTEGER.

  • #2818 Add new EventNotificationHandler class for better thin event management

  • #2815 correctly throw connection errors if the server drops while sending the HTTP response body

    • This change results in new exceptions being thrown instead of hanging indefinitely
    • in an effort to make this change backwards compatible, it doesn't affect a case that was already throwing an error: if the stripe API sends invalid JSON, we were treating it as an API error instead of a connection error.
      • In the next major version, we'll change the exception thrown from StripeAPIError to StripeConnectionError and document it accordingly.

  • #2812 Update generated code

    • Add support for new resource Billing.FeedbackOption
    • Add support for create, deactivate, list, retrieve, and update methods on resource Billing.FeedbackOption
    • Add support for payment_method_settings on AccountSession.components and AccountSessionCreateParams.components
    • Add support for feedback_options on BillingPortal.Configuration.features.subscription_cancel.cancellation_reason, BillingPortal.ConfigurationCreateParams.features.subscription_cancel.cancellation_reason, and BillingPortal.ConfigurationUpdateParams.features.subscription_cancel.cancellation_reason
    • Add support for new value customer_update on enums BillingPortal.Session.flow.type and BillingPortal.SessionCreateParams.flow_data.type
    • Add support for customer_update on BillingPortal.Session.flow
    • Add support for funding_source_group on Charge.payment_method_details.card.wallet.link and Charge.payment_method_details.link
    • Add support for funding_types_blocked on Checkout.Session.payment_method_options.card.restrictions and Checkout.SessionCreateParams.payment_method_options.card.restrictions
    • Add support for metadata on ConfirmationToken
    • Add support for active_entitlements and customer_portal on CustomerSession.components and CustomerSessionCreateParams.components
    • Add support for country on FinancialConnections.Session.filters
    • Add support for frozen_fields on InvoiceItem
    • Add support for billie on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options
    • Add support for new value billie on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
    • ⚠️ Remove support for cryptogram on PaymentAttemptRecord.payment_method_details.card.three_d_secure and PaymentRecord.payment_method_details.card.three_d_secure
    • Add support for new value touch_n_go on enums PaymentIntent.allowed_payment_method_types, PaymentIntentConfirmParams.allowed_payment_method_types, PaymentIntentCreateParams.allowed_payment_method_types, PaymentIntentUpdateParams.allowed_payment_method_types, SetupIntent.allowed_payment_method_types, SetupIntentConfirmParams.allowed_payment_method_types, SetupIntentCreateParams.allowed_payment_method_types, and SetupIntentUpdateParams.allowed_payment_method_types
    • Change PaymentIntent.allowed_payment_method_types and SetupIntent.allowed_payment_method_types to be required
    • Add support for application_fee_amount, application_fee_percent, on_behalf_of, and transfer_data on PaymentLinkUpdateParams
    • Add support for feedback_option on Subscription.cancellation_details, SubscriptionCancelParams.cancellation_details, and SubscriptionUpdateParams.cancellation_details
    • Add support for igic on Tax.Registration.country_options.at, Tax.Registration.country_options.be, Tax.Registration.country_options.bg, Tax.Registration.country_options.cy, Tax.Registration.country_options.cz, Tax.Registration.country_options.de, Tax.Registration.country_options.dk, Tax.Registration.country_options.ee, Tax.Registration.country_options.es, Tax.Registration.country_options.fi, Tax.Registration.country_options.fr, Tax.Registration.country_options.gr, Tax.Registration.country_options.hr, Tax.Registration.country_options.hu, Tax.Registration.country_options.ie, Tax.Registration.country_options.it, Tax.Registration.country_options.lt, Tax.Registration.country_options.lu, Tax.Registration.country_options.lv, Tax.Registration.country_options.mt, Tax.Registration.country_options.nl, Tax.Registration.country_options.pl, Tax.Registration.country_options.pt, Tax.Registration.country_options.ro, Tax.Registration.country_options.se, Tax.Registration.country_options.si, Tax.Registration.country_options.sk, Tax.RegistrationCreateParams.country_options.at, Tax.RegistrationCreateParams.country_options.be, Tax.RegistrationCreateParams.country_options.bg, Tax.RegistrationCreateParams.country_options.cy, Tax.RegistrationCreateParams.country_options.cz, Tax.RegistrationCreateParams.country_options.de, Tax.RegistrationCreateParams.country_options.dk, Tax.RegistrationCreateParams.country_options.ee, Tax.RegistrationCreateParams.country_options.es, Tax.RegistrationCreateParams.country_options.fi, Tax.RegistrationCreateParams.country_options.fr, Tax.RegistrationCreateParams.country_options.gr, Tax.RegistrationCreateParams.country_options.hr, Tax.RegistrationCreateParams.country_options.hu, Tax.RegistrationCreateParams.country_options.ie, Tax.RegistrationCreateParams.country_options.it, Tax.RegistrationCreateParams.country_options.lt, Tax.RegistrationCreateParams.country_options.lu, Tax.RegistrationCreateParams.country_options.lv, Tax.RegistrationCreateParams.country_options.mt, Tax.RegistrationCreateParams.country_options.nl, Tax.RegistrationCreateParams.country_options.pl, Tax.RegistrationCreateParams.country_options.pt, Tax.RegistrationCreateParams.country_options.ro, Tax.RegistrationCreateParams.country_options.se, Tax.RegistrationCreateParams.country_options.si, and Tax.RegistrationCreateParams.country_options.sk
    • Add support for new value 2026-08-26.dahlia on enum WebhookEndpointCreateParams.api_version
    • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, StripeError, and Terminal.Reader.action.api_error
Commits
  • 2f64e7a Bump version to 22.6.0
  • e127ca5 Update generated code (#2812)
  • d076317 Add discriminatedUnion kind to V2RuntimeSchema coercion (#2801)
  • cd421c5 Add .preHandle method to EventNotificationHandler (#2823)
  • 6639421 Add new EventNotificationHandler class for better thin event management (#2...
  • 6ffa3a8 correctly throw connection errors if the server drops while sending the HTTP ...
  • dec0b47 Add better documentation for setting maxNetworkRetires to 0 (#2816)
  • 8adba1d Bump picomatch from 2.3.1 to 2.3.2 (#2637)
  • See full diff in compare view

Updates zod from 4.4.3 to 4.5.1

Release notes

Sourced from zod's releases.

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

@dependabot
chore(deps): bump the minor-and-patch group with 10 updates
c1065a1 
Bumps the minor-and-patch group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.3.0` | `2.4.0` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.71.0` | `10.72.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.34.0` | `1.35.0` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.1` | `11.17.2` |
| [next](https://github.com/vercel/next.js) | `16.3.2` | `16.3.3` |
| [resend](https://github.com/resend/resend-node) | `6.22.1` | `6.25.0` |
| [stripe](https://github.com/stripe/stripe-node) | `22.5.0` | `22.6.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.3.0` | `26.4.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.2` | `16.3.3` |


Updates `@noble/hashes` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Changelog](https://github.com/paulmillr/noble-hashes/blob/main/CHANGELOG.md)
- [Commits](paulmillr/noble-hashes@2.3.0...2.4.0)

Updates `@sentry/nextjs` from 10.71.0 to 10.72.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.72.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.71.0...10.72.0)

Updates `lucide-react` from 1.34.0 to 1.35.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.35.0/packages/lucide-react)

Updates `mermaid` from 11.17.1 to 11.17.2
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.1...mermaid@11.17.2)

Updates `next` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.2...v16.3.3)

Updates `resend` from 6.22.1 to 6.25.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.22.1...v6.25.0)

Updates `stripe` from 22.5.0 to 22.6.0
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.5.0...v22.6.0)

Updates `zod` from 4.4.3 to 4.5.1
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.1)

Updates `@types/node` from 26.3.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-config-next` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.3/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: "@noble/hashes"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mermaid
  dependency-version: 11.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: resend
  dependency-version: 6.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: stripe
  dependency-version: 22.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from catomean as a code owner August 31, 2026 22:57
@github-actions
github-actions Bot merged commit 881ac8e into main Aug 31, 2026
3 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/minor-and-patch-737d5b8ef8 branch August 31, 2026 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@catomean catomean Awaiting requested review from catomean catomean is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants