Skip to content

build: Bump the frontend-minor group across 1 directory with 14 updates - #201

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-minor-db20d8a031
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-minor-db20d8a031

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the frontend-minor group with 14 updates in the /frontend directory:

Package From To
@next/mdx 16.3.3 16.3.8
@walletconnect/ethereum-provider 2.23.10 2.25.0
framer-motion 13.1.1 13.4.6
lucide-react 1.34.0 1.49.0
next 16.3.3 16.3.8
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.5 19.3.0
react-hot-toast 2.6.0 2.6.1
@types/node 26.4.0 26.6.3
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.5 19.3.0
autoprefixer 10.5.4 10.6.1
eslint 10.9.1 10.11.0
eslint-config-next 16.3.3 16.3.8

Updates @next/mdx from 16.3.3 to 16.3.8

Release notes

Sourced from @​next/mdx's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Medium:

Low:

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @​lukesandberg for helping!

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
  • next/image: Reject empty images when reading/writing to the disk cache (#98186)
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
  • Add CSP nonce to script tags of loading and template files (#98403)
  • Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

... (truncated)

Commits

Updates @walletconnect/ethereum-provider from 2.23.10 to 2.25.0

Release notes

Sourced from @​walletconnect/ethereum-provider's releases.

@​walletconnect/ethereum-provider@​2.25.0

Patch Changes

  • Updated dependencies [44395d0, 896c6b0]:
    • @​walletconnect/utils@​2.25.0
    • @​walletconnect/types@​2.25.0
    • @​walletconnect/universal-provider@​2.25.0

@​walletconnect/ethereum-provider@​2.24.0

Patch Changes

  • #7304 83ba7d4 Thanks @​ganchoradkov! - Remove unused declared dependencies (@walletconnect/safe-json from utils, @walletconnect/types from pay, @walletconnect/core and @walletconnect/jsonrpc-provider from pos-client, events from react-native-compat, uint8arrays from signer-connection, @walletconnect/jsonrpc-provider, @walletconnect/jsonrpc-utils and @walletconnect/sign-client from ethereum-provider). No runtime changes.

  • Updated dependencies [83ba7d4, a610bfe, fa9227f, f8bfc24]:

    • @​walletconnect/utils@​2.24.0
    • @​walletconnect/universal-provider@​2.24.0
    • @​walletconnect/types@​2.24.0
Changelog

Sourced from @​walletconnect/ethereum-provider's changelog.

2.25.0

Patch Changes

  • Updated dependencies [44395d0, 896c6b0]:
    • @​walletconnect/utils@​2.25.0
    • @​walletconnect/types@​2.25.0
    • @​walletconnect/universal-provider@​2.25.0

2.24.0

Patch Changes

  • #7304 83ba7d4 Thanks @​ganchoradkov! - Remove unused declared dependencies (@walletconnect/safe-json from utils, @walletconnect/types from pay, @walletconnect/core and @walletconnect/jsonrpc-provider from pos-client, events from react-native-compat, uint8arrays from signer-connection, @walletconnect/jsonrpc-provider, @walletconnect/jsonrpc-utils and @walletconnect/sign-client from ethereum-provider). No runtime changes.

  • Updated dependencies [83ba7d4, a610bfe, fa9227f, f8bfc24]:

    • @​walletconnect/utils@​2.24.0
    • @​walletconnect/universal-provider@​2.24.0
    • @​walletconnect/types@​2.24.0
Commits
  • c8a72d4 chore: update versions and lerna.json
  • 50399e3 chore: update versions and lerna.json
  • 83ba7d4 chore: remove unused dependencies and bump dev tooling security versions
  • See full diff in compare view

Updates framer-motion from 13.1.1 to 13.4.6

Changelog

Sourced from framer-motion's changelog.

[13.4.6] 2026-09-29

Fixed

  • AnimatePresence: mode="wait" no longer drops new children if exit completes during a React transition.

[13.4.5] 2026-09-28

Fixed

  • layout: Fix relative child jumping when parent interrupts layout animation.
  • AnimatePresence: Can no longer drop a child added while another exit animation completes.
  • Reorder: Only clear Reorder.Group's reorder guard when values change.
  • spring/useSpring: 5% smaller.

[13.4.4] 2026-09-25

Changed

  • scroll: 44% smaller.
  • useScroll: 33% smaller.
  • Scroll callbacks: 50% faster.
  • Removed ScrollTimeline support for JS callbacks as benchmarked no improvement over scrollInfo.

Fixed

  • useDragControls: Fixed snapToCursor origin drift on repeated calls.
  • drag: Improved pointerend timing.
  • spring: Check invalid spring values before applying.
  • AnimatePresence: Ensure children don't stick during reentry.

[13.4.3] 2026-09-24

Fixed

  • <motion>: Ensure animations replay when Suspense reveals memoized content.

[13.4.2] 2026-09-23

Fixed

  • Reorder: Don't scale position of elements at origin 0 when dragConstraints changes.
  • Unrecognised easing names no longer throw.

[13.4.1] 2026-09-22

Fixed

  • animate: CSS variable writes on SVGs apply to style attribute.

... (truncated)

Commits
  • fba53e4 v13.4.6
  • d078b2a Updating changelog
  • b86dd14 Merge pull request #3860 from motiondivision/cursor/animate-presence-wait-tra...
  • 3e143ec Add AnimatePresence mode="wait" spec for a key change as the exit completes
  • 93d6f00 Merge remote-tracking branch 'origin/main' into cursor/animate-presence-wait-...
  • ab5d93e Merge pull request #3855 from motiondivision/cursor/concurrent-react-specs-8dc0
  • e95f8a7 Merge pull request #3862 from motiondivision/revert-3758-fix-3001-scroll-rang...
  • d34b5a9 Revert "Add rangeStart/rangeEnd to scroll()"
  • d8ebd0c Merge pull request #3758 from motiondivision/fix-3001-scroll-range-deactivation
  • 1c5888f Accept scroll() ranges as progress values only
  • Additional commits viewable in compare view

Updates lucide-react from 1.34.0 to 1.49.0

Release notes

Sourced from lucide-react's releases.

Version 1.49.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.48.0...1.49.0

Version 1.48.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Version 1.47.0

What's Changed

... (truncated)

Commits
  • e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
  • f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • See full diff in compare view

Updates next from 16.3.3 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Medium:

Low:

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @​lukesandberg for helping!

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
  • next/image: Reject empty images when reading/writing to the disk cache (#98186)
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
  • Add CSP nonce to script tags of loading and template files (#98403)
  • Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

... (truncated)

Commits
  • b0fad0d v16.3.8
  • 719e4c6 [lts-active] Scope response cache keys to their source route (#218)
  • e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
  • 40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
  • 2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
  • bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
  • 8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
  • e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
  • 4c20699 v16.3.7
  • 2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
  • Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

@dependabot @github

dependabot Bot commented on behalf of github Sep 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: area: frontend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from Mikefluff as a code owner September 20, 2026 08:05
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/frontend-minor-db20d8a031 branch from d06093d to fa23548 Compare September 27, 2026 08:05
Bumps the frontend-minor group with 14 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@next/mdx](https://github.com/vercel/next.js/tree/HEAD/packages/next-mdx) | `16.3.3` | `16.3.8` |
| [@walletconnect/ethereum-provider](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/providers/ethereum-provider) | `2.23.10` | `2.25.0` |
| [framer-motion](https://github.com/motiondivision/motion) | `13.1.1` | `13.4.6` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.34.0` | `1.49.0` |
| [next](https://github.com/vercel/next.js) | `16.3.3` | `16.3.8` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.3.0` |
| [react-hot-toast](https://github.com/timolins/react-hot-toast) | `2.6.0` | `2.6.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.6.3` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.3.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.11.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.3` | `16.3.8` |



Updates `@next/mdx` from 16.3.3 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.8/packages/next-mdx)

Updates `@walletconnect/ethereum-provider` from 2.23.10 to 2.25.0
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/providers/ethereum-provider/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/ethereum-provider@2.25.0/providers/ethereum-provider)

Updates `framer-motion` from 13.1.1 to 13.4.6
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v13.1.1...v13.4.6)

Updates `lucide-react` from 1.34.0 to 1.49.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react)

Updates `next` from 16.3.3 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.3...v16.3.8)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.5 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-hot-toast` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/timolins/react-hot-toast/releases)
- [Commits](timolins/react-hot-toast@v2.6.0...v2.6.1)

Updates `@types/node` from 26.4.0 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.5 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `autoprefixer` from 10.5.4 to 10.6.1
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.4...10.6.1)

Updates `eslint` from 10.9.1 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.11.0)

Updates `eslint-config-next` from 16.3.3 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.8/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: "@next/mdx"
  dependency-version: 16.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor
- dependency-name: "@types/node"
  dependency-version: 26.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: "@walletconnect/ethereum-provider"
  dependency-version: 2.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: autoprefixer
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: eslint-config-next
  dependency-version: 16.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor
- dependency-name: framer-motion
  dependency-version: 13.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: lucide-react
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: next
  dependency-version: 16.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor
- dependency-name: react-hot-toast
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/frontend-minor-db20d8a031 branch from fa23548 to c776683 Compare October 4, 2026 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants