build(deps): bump the production-dependencies group with 18 updates by dependabot[bot] · Pull Request #21 · jcserv/bling-my-deck

dependabot · 2026-05-18T19:26:20Z

Bumps the production-dependencies group with 18 updates:

Package	From	To
@tanstack/react-router	`1.65.0`	`1.170.4`
@tanstack/store	`0.5.5`	`0.11.0`
@vercel/analytics	`1.3.2`	`2.0.1`
@vercel/speed-insights	`1.1.0`	`2.0.0`
class-variance-authority	`0.5.3`	`0.7.1`
clsx	`1.2.1`	`2.1.1`
cmdk	`1.0.0`	`1.1.1`
embla-carousel-react	`8.3.1`	`8.6.0`
graphql	`16.9.0`	`16.14.0`
lodash	`4.17.21`	`4.18.1`
lucide-react	`0.162.0`	`1.16.0`
react	`18.3.1`	`19.2.6`
@types/react	`18.3.11`	`19.2.14`
react-dom	`18.3.1`	`19.2.6`
@types/react-dom	`18.3.1`	`19.2.3`
react-hook-form	`7.53.2`	`7.76.0`
tailwind-merge	`1.14.0`	`3.6.0`
zod	`3.25.76`	`4.4.3`

Updates @tanstack/react-router from 1.65.0 to 1.170.4

Release notes

Sourced from @tanstack/react-router's releases.

@tanstack/react-router@1.170.4

Patch Changes

Updated dependencies [b60eb36]:

@tanstack/router-core@1.171.2

@tanstack/react-router@1.170.3

Patch Changes

Updated dependencies [d9cf933]:

@tanstack/router-core@1.171.1

@tanstack/react-router@1.170.2

Patch Changes

Updated dependencies [d533f87]:

@tanstack/router-core@1.171.0

Changelog

Sourced from @tanstack/react-router's changelog.

1.170.4

Patch Changes

Updated dependencies [b60eb36]:

@tanstack/router-core@1.171.2

1.170.3

Patch Changes

Updated dependencies [d9cf933]:

@tanstack/router-core@1.171.1

1.170.2

Patch Changes

Updated dependencies [d533f87]:

@tanstack/router-core@1.171.0

1.170.1

Patch Changes

Updated dependencies [2387a2e]:

@tanstack/router-core@1.170.1

1.170.0

Minor Changes

Clean minor bump, fresh start (#7395)

Patch Changes

Updated dependencies [b1c061a, 201e150]:

@tanstack/router-core@1.170.0

@tanstack/history@1.162.0

1.169.2

Patch Changes

Updated dependencies [35e88f0]:

@tanstack/router-core@1.169.2

1.169.1

Patch Changes

... (truncated)

Commits

ee8a675 ci: Version Packages (#7423)
d1dc4ae ci: Version Packages (#7417)
4e42422 ci: Version Packages (#7413)
13432ad ci: Version Packages (#7407)
ae64839 ci: Version Packages (#7405)
ee96e25 ci: changeset release
ed3152a test: reproducer for #2547 (#7337)
19f496b test: add reproducer for #2514 (#7336)
9902eb4 remove old intent artifacts (#7333)
f08ef9d chore: fix duplicate "the" typo across router packages (#7323)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @tanstack/react-router since your current version.

Updates @tanstack/store from 0.5.5 to 0.11.0

Release notes

Sourced from @tanstack/store's releases.

@tanstack/store@0.11.0

Minor Changes

Hooks included in this release: (#306)

useAtom

useSelector

useStore (deprecated, replaced by useSelector)

createStoreContext (provides StoreProvider and useStoreContext for context-based consumption)

@tanstack/store@0.10.0

Minor Changes

chore: update deps and change build process to tsdown (#304)

@tanstack/store@0.9.3

Patch Changes

Improve tree-shaking of alien-signals (#297)

@tanstack/store@0.9.2

Patch Changes

Fix a regression where mutable atoms could be updated internally with no updater and have their snapshot replaced with undefined. (#289)

Mutable atoms now ignore internal no-argument _update() calls, while computed atoms keep existing recomputation behavior. This prevents external-store state from disappearing during reactive graph cleanup.

@tanstack/store@0.9.1

Patch Changes

derived createStore now returns readonly store (#278)

@tanstack/store@0.9.0

Minor Changes
Breaking changes (#265)
new Store() is now createStore()
new Derived() is now a derived createStore():
const derived = createStore(() => store.state * 2)
new Effect() removed in favor of store.subscribe():
const { unsubscribe } = store.subscribe(() => {
  console.log(store.state)
})
Uses alien-signals under the hood for efficient reactivity
@tanstack/store@0.8.1

Patch Changes

... (truncated)

Changelog

Sourced from @tanstack/store's changelog.

0.11.0

Minor Changes

Hooks included in this release: (#306)

useAtom

useSelector

useStore (deprecated, replaced by useSelector)

createStoreContext (provides StoreProvider and useStoreContext for context-based consumption)

0.10.0

Minor Changes

chore: update deps and change build process to tsdown (#304)

0.9.3

Patch Changes

Improve tree-shaking of alien-signals (#297)

0.9.2

Patch Changes

Fix a regression where mutable atoms could be updated internally with no updater and have their snapshot replaced with undefined. (#289)

Mutable atoms now ignore internal no-argument _update() calls, while computed atoms keep existing recomputation behavior. This prevents external-store state from disappearing during reactive graph cleanup.

0.9.1

Patch Changes

derived createStore now returns readonly store (#278)

0.9.0

Minor Changes
Breaking changes (#265)
new Store() is now createStore()
new Derived() is now a derived createStore():
const derived = createStore(() => store.state * 2)
new Effect() removed in favor of store.subscribe():
const { unsubscribe } = store.subscribe(() => {
  console.log(store.state)

... (truncated)

Commits

83e2978 ci: Version Packages (#311)
4d87a83 feat: new hooks and actions APIs (#306)
840b9d0 ci: Version Packages (#305)
66e3010 chore: migrate builds to tsdown and upgrade all deps (#304)
0019297 ci: Version Packages (#300)
d8b51a7 refactor(store): improve tree-shaking of alien-signals implementation (#297)
70d72c7 ci: Version Packages (#290)
84dc3eb fix: ensure mutable atoms ignore internal no-arg updates (#289)
0a9f542 ci: Version Packages (#279)
77c872f fix: derived createStore now returns readonly store (#278)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @tanstack/store since your current version.

Updates @vercel/analytics from 1.3.2 to 2.0.1

Release notes

Sourced from @vercel/analytics's releases.

v2.0.1

What's Changed

fix(nuxt): set nuxt as optional dependency by @CHC383 in vercel/analytics#193

New Contributors

@CHC383 made their first contribution in vercel/analytics#193

Full Changelog: vercel/analytics@v2.0.0...v2.0.1

v2.0.0

What's Changed

Breaking Changes

License changed from MPL-2.0 to MIT (#170)

Nuxt: introduce module support. If you need to configure it, load injectAnalytics() from @vercel/analytics/nuxt/runtime (#183)

Features

feat: load dynamic configuration (#184) — analytics config can now be loaded dynamically

Bug Fixes

fix: src and endpoint paths do not work when relative (#186)

Full Changelog: vercel/speed-insights@1.6.1...2.0.0

v2.0.0-canary.1

Canary release for testing 2.0.0 changes

1.6.1

What's Changed

fix(nuxt): remove the module as breaking change by @atinux in vercel/analytics#181

Full Changelog: vercel/analytics@1.6.0...1.6.1

1.6.0

What's Changed

feat(nuxt): Add support for injectAnalytics() and Nuxt module by @atinux in vercel/analytics#178

Add undefined to AllowedPropertyValues type by @timolins in vercel/analytics#174

New Contributors

@atinux made their first contribution in vercel/analytics#178

Full Changelog: vercel/analytics@1.5.0...1.6.0

1.5.0

What's Changed

fix: next/jest does not support import.meta by @feugy in #162

... (truncated)

Commits

0d69416 chore: bump version to v2.0.1 (#195)
c7f3c37 fix(nuxt): set nuxt as optional dependency (#193)
c3e3805 chore: bump version to v2.0.0
425a797 chore: bump version to v2.0.0-canary.1
22888e3 fix: src and endpoint paths do not work when relative (#186)
3879f57 feat: load dynamic configuration (#184)
95f8914 feat(nuxt)!: Add support for injectAnalytics() and Nuxt module (#183)
e407489 feat!: change license to MIT (#170)
0028584 fix(nuxt): remove the module as breaking change (#181)
182d185 chore: prepare release (#180)
Additional commits viewable in compare view

Updates @vercel/speed-insights from 1.1.0 to 2.0.0

Release notes

Sourced from @vercel/speed-insights's releases.

v2.0.0

What's Changed

Breaking Changes

License changed from Apache-2.0 to MIT (#111)

Nuxt: introduce module support (#110). In case you need to configure it, load injectSpeedInsights() from @vercel/speed-insights/nuxt/runtime

Features

feat: load dynamic configuration (#112) — speed insights config can now be loaded dynamically

Full Changelog: vercel/speed-insights@1.3.1...2.0.0

v2.0.0-canary.1

Canary release for testing 2.0.0 changes

1.5.0-canary.4

What's Changed

fix: next/jest does not support import.meta by @feugy in vercel/speed-insights#91

Full Changelog: vercel/speed-insights@1.2.0-canary.3...1.5.0-canary.4

1.3.1

What's Changed

fix(nuxt): remove the module as breaking change by @HugoRCD in vercel/speed-insights#107

Full Changelog: vercel/speed-insights@1.3.0...1.3.1

1.3.0

What's Changed

feat(nuxt): Add support for injectSpeedInsights() and Nuxt module by @HugoRCD in vercel/speed-insights#104

feat: postinstall script removal by @feugy in vercel/speed-insights#106

fix: add route param to beforeSend event type by @fgascon in vercel/speed-insights#102

New Contributors

@HugoRCD made their first contribution in vercel/speed-insights#104

@fgascon made their first contribution in vercel/speed-insights#102

Full Changelog: vercel/speed-insights@1.2.0...1.3.0

1.2.0

What's Changed

Add an option to prefix an endpoint path with an environment variable. by @emspishak in vercel/speed-insights#85

feat: support configurable deployment basepath by @feugy #88

fix: a.useParams is not a function in next app by @feugy #90

fix: next/jest does not support import.meta by @feugy #91

... (truncated)

Commits

828d10c chore: bump version to v2.0.0
15cb241 chore: bump version to v2.0.0-canary.1
b10a09c feat: load dynamic configuration (#112)
c6f4e37 feat(nuxt)!: Add support for injectSpeedInsights() and Nuxt module (#110)
2452c35 fix(nuxt): remove the module as breaking change (#107)
7ed15ed fix: add route param to beforeSend event type (#102)
a1dfa74 feat: next release and postinstall script removal (#106)
f48623c feat(nuxt): Add support for injectSpeedInsights() and Nuxt module (#104)
23ab42e chore: release 1.2.0 (#94)
5acf92b Add an option to prefix an endpoint path with an environment variable. (#85)
See full diff in compare view

Updates class-variance-authority from 0.5.3 to 0.7.1

Release notes

Sourced from class-variance-authority's releases.

v0.7.1

What's Changed

Add LICENSE Comments by @joe-bell in joe-bell/cva#283

chore: move clsx dependency to caret/semver range by @philwolstenholme in joe-bell/cva#316

New Contributors

@philwolstenholme made their first contribution in joe-bell/cva#316

Full Changelog: joe-bell/cva@v0.7.0...v0.7.1

v0.7.0

What's Changed

Upgrade to clsx@2.0.0 by @joe-bell in joe-bell/cva#185

Full Changelog: joe-bell/cva@v0.6.1...v0.7.0

v0.6.1

What's Changed

Add missing license key in package.json

Upgrade to typescript@5.1.3 by @joe-bell in joe-bell/cva#175

Full Changelog: joe-bell/cva@v0.6.0...v0.6.1

v0.6.0

What's Changed
cx → clsx by @joe-bell in joe-bell/cva#152

cva now uses clsx under-the-hood to concatenate classes with no breaking changes to the current experience and no increase to bundle-size.

The existing cx export still exists, but as an alias of clsx

Bringing additional benefits of:
Provides additional support for booleans and variadic strings within class or className props
const button = cva([true && "button-base", false && "not-rendered"]);
// => 'button-base'
const buttonConsumer = button({ class: [true && "extra-class"] });
// => 'button-base extra-class'
Provides support for object syntax within class or className props

... (truncated)

Commits

45462dd class-variance-authority@0.7.1
c236552 docs: change x.com references to bluesky
985dba9 chore: move clsx dependency to caret/semver range (#316)
d4ded2d chore: update sponsors.svg [ci skip]
ff1717c ci(schedule): adjust cron date to offset midnight traffic
2f96730 ci: prevent scheduled workflow running in forks
aaae670 docs(beta): bun installation
69feb43 update docs for bun installation (#261)
f9e2ea6 chore(docs): update banner links
5228f0e chore: link sponsors to raw svg
Additional commits viewable in compare view

Updates clsx from 1.2.1 to 2.1.1

Release notes

Sourced from clsx's releases.

v2.1.1

Patches

(types) Include bigint in ClassValue type: (#96): 3d960ab Accommodates recent @types/react changes to ReactNode. Thank you @ViliamKopecky~!

Chores

Add licenses.dev badge: 684509c This service recursively analyzes entire dependency graphs to ensure that a package (or your project) is using permissive licenses. For example, here's a results table for polka@next and a larger astro example.

Full Changelog: lukeed/clsx@v2.1.0...v2.1.1

v2.1.0

Features
Add new clsx/lite submodule for string-only usage: 1a49142

This is a 140b version of clsx that is ideal for Tailwind and/or React contexts, which typically follow this clsx usage pattern:
clsx('foo bar', props.maybe && 'conditional classes', props.className);
Important: This clsx/lite module ignores all non-string arguments and is therefore not a 1:1 replacement for clsx itself!
import { clsx } from 'clsx';
import { clsx as lite } from 'clsx/lite';
// strings-only usage is identical
clsx('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
lite('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
// clsx/lite ignores all non-strings
clsx('foo', { a: true, b: false, c: true }); //=> "foo a c"
lite('foo', { a: true, b: false, c: true }); //=> "foo"
Full Changelog: lukeed/clsx@v2.0.1...v2.1.0

v2.0.1

Patches

(perf) Cache arguments.length & array.length for 6% performance gain (#26): deff09b

... (truncated)

Commits

925494c 2.1.1
3d960ab fix(types): include bigint in ClassValue type (#96)
684509c chore: add licenses badge
a60db12 2.1.0
1a49142 feat: add clsx/lite module
5cac14c 2.0.1
855eec2 chore(bench): include ≠ symbol
bf64e71 chore: update module size
6e3b2b9 chore: update benchmarks;
554ad31 chore: dedicated string vs number var usage;
Additional commits viewable in compare view

Updates cmdk from 1.0.0 to 1.1.1

Release notes

Sourced from cmdk's releases.

v1.1.1

What's Changed

Fix unintended double triggering of key bindings during IME composition by @JaeSeoKim in pacocoursey/cmdk#339

New Contributors

@JaeSeoKim made their first contribution in pacocoursey/cmdk#339

Full Changelog: dip/cmdk@v1.1.0...v1.1.1

v1.1.0

What's Changed

fix useCmdk return type by @lsmurray in pacocoursey/cmdk#329

fix: update the type of the defaultFilter by @muZk in pacocoursey/cmdk#338

[Accessibility] Use id instead of children by @UltimateGG in pacocoursey/cmdk#254

Use @radix-ui/react-compose-refs to merge refs, save on bundle size

Use React built-in useSyncExternalStore and remove shim. Note that React 18 has always been a required peerDependency of cmdk

New Contributors

@lsmurray made their first contribution in pacocoursey/cmdk#329

@muZk made their first contribution in pacocoursey/cmdk#338

@UltimateGG made their first contribution in pacocoursey/cmdk#254

Full Changelog: dip/cmdk@v1.0.4...v1.1.0

v1.0.4

What's Changed

Fix use-sync-external-store import for greater compatibility by @kachkaev in pacocoursey/cmdk#328

New Contributors

@kachkaev made their first contribution in pacocoursey/cmdk#328

Full Changelog: dip/cmdk@v1.0.3...v1.0.4

v1.0.3

Fix use-sync-external-store shim for compatibility with Next.js 15 and React 19 RC

v1.0.1

What's Changed

fix: docs mistake we are no longer lowercasing by @itsjoeoui in pacocoursey/cmdk#227

feat: export defaultFilter by @evanob in pacocoursey/cmdk#229

chore: add more details to package.json by @andipaetzold in pacocoursey/cmdk#228

chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by @dependabot in pacocoursey/cmdk#226

fix: controlled search change with hidden Command.List by @vltansky in pacocoursey/cmdk#217

fix: Framer example capitalization of values by @arihanv in pacocoursey/cmdk#231

fix: fix compiling code Array.from(void 0) by @nenya1840 in pacocoursey/cmdk#237

fix: useId backward compatibility by @phsantiago in pacocoursey/cmdk#165

Relax dependencies on Radix-UI to SemVer MAJOR releases by @eps1lon in pacocoursey/cmdk#278

feat: allow react v19 as peer dep by @Yonom in pacocoursey/cmdk#318

Upgrade @radix-ui/react-id by @tmcw in pacocoursey/cmdk#297

fix: useSyncExternalStore backward compatibility by @MateoKruk in pacocoursey/cmdk#296

... (truncated)

Commits

fb4ea04 v1.1.1
f34d463 Fix unintended double triggering of key bindings during IME composition (#339)
2814a00 v1.1.0
d46ed21 use built-in React uSES
ec02b5e use composeRefs from radix
e5444d2 remove unused code
34f3074 [Accessibility] Use id instead of children (#254)
b2d94bd fix: update the type of the defaultFilter (#338)
9827edf fix useCmdk return type (#329)
c1f200a v1.0.4
Additional commits viewable in compare view

Updates embla-carousel-react from 8.3.1 to 8.6.0

Release notes

Sourced from embla-carousel-react's releases.

v8.6.0

Support

Embla Carousel is an open source MIT licensed project. If you are interested in supporting this project you can sponsor it here:

💖 Sponsor

What's Changed

[Bug]: scrollProgress not tightly synced to container translate by @Matoseb in davidjerleke/embla-carousel#1134

New Contributors

@Matoseb made their first contribution in davidjerleke/embla-carousel#1134

Full Changelog: davidjerleke/embla-carousel@v8.5.2...v8.6.0

v8.5.2

Support

Embla Carousel is an open source MIT licensed project. If you are interested in supporting this project you can sponsor it here:

💖 Sponsor

What's Changed

[Bug]: Offset by 1 issue for canScrollNext when tab size has fractional width by @yasuhiro-yamamoto in davidjerleke/embla-carousel#1096

[Bug]: Autoplay never starts if page with carousel is loaded in inactive browser tab by @davidjerleke in davidjerleke/embla-carousel#1101

New Contributors

@yasuhiro-yamamoto made their first contribution in davidjerleke/embla-carousel#1096

Full Changelog: davidjerleke/embla-carousel@v8.5.1...v8.5.2

v8.5.1

Support

Embla Carousel is an open source MIT licensed project. If you are interested in supporting this project you can sponsor it here:

💖 Sponsor

What's Changed

[Bug]: RangeError Maximum call stack size exceeded by @davidjerleke in davidjerleke/embla-carousel#1065

Full Changelog: davidjerleke/embla-carousel@v8.5.0...v8.5.1

v8.5.0

Support

Embla Carousel is an open source MIT licensed project. If you are interested in supporting this project you can sponsor it here:

💖 Sponsor

... (truncated)

Commits

0fe6583 8.6.0
a34a015 Merge pull request #1134 from Matoseb/master
b0ef3dc Bug fix for #1132.
2617456 Build docs with v8.5.2.
5ee3c4e 8.5.2
acad2f5 Merge pull request #1101 from davidjerleke/bug/#1082
6727eed Bug fix for #1082.
1b01939 Merge pull request #1096 from yasuhiro-yamamoto/fix/issue-899
266ef1b Bug fix for #899.
ba2c14c Instantly start animation progress.
Additional commits viewable in compare view

Updates graphql from 16.9.0 to 16.14.0

Release notes

Sourced from graphql's releases.

v16.14.0 (2026-05-03)

New Feature 🚀

#4317 Allow configuration of the ofType introspection depth (@Nols1000)

#4521 Add experimental support for directives on directive definitions (@BoD)

Bug Fix 🐞

#4652 Fix valueFromAST variable own-property checks (@abishekgiri)

Docs 📝

#4706 Fix mistake in GraphQLError guidance (@benjie)

Committers: 4

Abishek Kumar Giri(@abishekgiri)

Benjie(@benjie)

Benoit 'BoD' Lubek(@BoD)

Nils-Börge Margotti(@Nols1000)

v16.13.2 (2026-03-24)

Docs 📝

#4611 add dev mode docs (@yaacovCR)

Polish 💅

#4631 Use Object.create(null) over {} to avoid prototype issues - v16 (@benjie)

Internal 🏠

#4626 backport: internal: streamline release process (#4615) (@yaacovCR)

Committers: 2

Benjie(@benjie)

Yaacov Rydzinski (@yaacovCR)

v16.13.1 (2026-03-04)

First 16.x.x release with trusted publishing and provenance, see: https://docs.npmjs.com/trusted-publishers for additional information.

Docs 📝

#4433 docs: move migrate from express graphql guide to graphqlJS docs (@sarahxsanders)

Internal 🏠

#4608 internal: backport new release flow from 17.x.x (@yaacovCR)

#4610 internal: pin node version for release action (@yaacovCR)

Committers: 2

Sarah Sanders(@sarahxsanders)

Yaacov Rydzinski (@yaacovCR)

16.13.0

... (truncated)

Commits

57b385b chore(release): v16.14.0 (#4720)
85700ed Fix mistake in GraphQLError guidance (#4706)
8eb6383 Allow configuration of the ofType introspection depth (#4317)
ad9c519 Add support for directives on directive definitions (#4521)
db2987c fix(valueFromAST): restore variable own-property checks (#4652)
123e958 chore(release): v16.13.2 (#4632)
13f130d Use Object.create(null) over {} to avoid prototype issues - v16 (#4631)
6ca59e1 backport: internal: streamline release process (#4615) (#4626)
df8c53f docs: dev mode for v17 (#4611)
3b5c3f9 internal: pin node version for release action (#4610)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql since your current version.

Updates lodash from 4.17.21 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

lodash: lodash/lodash@4.18.0-npm...4.18.1-npm

lodash-es: lodash/lodash@4.18.0-es...4.18.1-es

lodash-amd: lodash/lodash@4.18.0-amd...4.18.1-amd

lodash.templatelodash/lodash@4.18.0-npm-packages...4.18.1-npm-packages

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (

Bumps the production-dependencies group with 18 updates: | Package | From | To | | --- | --- | --- | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.65.0` | `1.170.4` | | [@tanstack/store](https://github.com/TanStack/store/tree/HEAD/packages/store) | `0.5.5` | `0.11.0` | | [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web) | `1.3.2` | `2.0.1` | | [@vercel/speed-insights](https://github.com/vercel/speed-insights/tree/HEAD/packages/web) | `1.1.0` | `2.0.0` | | [class-variance-authority](https://github.com/joe-bell/cva) | `0.5.3` | `0.7.1` | | [clsx](https://github.com/lukeed/clsx) | `1.2.1` | `2.1.1` | | [cmdk](https://github.com/pacocoursey/cmdk/tree/HEAD/cmdk) | `1.0.0` | `1.1.1` | | [embla-carousel-react](https://github.com/davidjerleke/embla-carousel) | `8.3.1` | `8.6.0` | | [graphql](https://github.com/graphql/graphql-js) | `16.9.0` | `16.14.0` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.162.0` | `1.16.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.6` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.11` | `19.2.14` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.6` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.1` | `19.2.3` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.53.2` | `7.76.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `1.14.0` | `3.6.0` | | [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` | Updates `@tanstack/react-router` from 1.65.0 to 1.170.4 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.4/packages/react-router) Updates `@tanstack/store` from 0.5.5 to 0.11.0 - [Release notes](https://github.com/TanStack/store/releases) - [Changelog](https://github.com/TanStack/store/blob/main/packages/store/CHANGELOG.md) - [Commits](https://github.com/TanStack/store/commits/@tanstack/store@0.11.0/packages/store) Updates `@vercel/analytics` from 1.3.2 to 2.0.1 - [Release notes](https://github.com/vercel/analytics/releases) - [Commits](https://github.com/vercel/analytics/commits/v2.0.1/packages/web) Updates `@vercel/speed-insights` from 1.1.0 to 2.0.0 - [Release notes](https://github.com/vercel/speed-insights/releases) - [Commits](https://github.com/vercel/speed-insights/commits/v2.0.0/packages/web) Updates `class-variance-authority` from 0.5.3 to 0.7.1 - [Release notes](https://github.com/joe-bell/cva/releases) - [Commits](joe-bell/cva@v0.5.3...v0.7.1) Updates `clsx` from 1.2.1 to 2.1.1 - [Release notes](https://github.com/lukeed/clsx/releases) - [Commits](lukeed/clsx@v1.2.1...v2.1.1) Updates `cmdk` from 1.0.0 to 1.1.1 - [Release notes](https://github.com/pacocoursey/cmdk/releases) - [Commits](https://github.com/pacocoursey/cmdk/commits/v1.1.1/cmdk) Updates `embla-carousel-react` from 8.3.1 to 8.6.0 - [Release notes](https://github.com/davidjerleke/embla-carousel/releases) - [Commits](davidjerleke/embla-carousel@v8.3.1...v8.6.0) Updates `graphql` from 16.9.0 to 16.14.0 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v16.9.0...v16.14.0) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `lucide-react` from 0.162.0 to 1.16.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.16.0/packages/lucide-react) Updates `react` from 18.3.1 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react) Updates `@types/react` from 18.3.11 to 19.2.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 18.3.1 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom) Updates `@types/react-dom` from 18.3.1 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-hook-form` from 7.53.2 to 7.76.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.53.2...v7.76.0) Updates `tailwind-merge` from 1.14.0 to 3.6.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v1.14.0...v3.6.0) Updates `zod` from 3.25.76 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.4.3) --- updated-dependencies: - dependency-name: "@tanstack/react-router" dependency-version: 1.170.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/store" dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@vercel/analytics" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@vercel/speed-insights" dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: class-variance-authority dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: clsx dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: cmdk dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: embla-carousel-react dependency-version: 8.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: graphql dependency-version: 16.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@types/react" dependency-version: 19.2.14 dependency-type: direct:development update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: react-hook-form dependency-version: 7.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the production-dependencies group with 18 updates#21

build(deps): bump the production-dependencies group with 18 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-80ea336367

dependabot Bot commented on behalf of github May 18, 2026

Breaking changes (#265)

Breaking changes (#265)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 18, 2026

@​tanstack/react-router@​1.170.4

Patch Changes

@​tanstack/react-router@​1.170.3

Patch Changes

@​tanstack/react-router@​1.170.2

Patch Changes

1.170.4

Patch Changes

1.170.3

Patch Changes

1.170.2

Patch Changes

1.170.1

Patch Changes

1.170.0

Minor Changes

Patch Changes

1.169.2

Patch Changes

1.169.1

Patch Changes

@​tanstack/store@​0.11.0

Minor Changes

@​tanstack/store@​0.10.0

Minor Changes

@​tanstack/store@​0.9.3

Patch Changes

@​tanstack/store@​0.9.2

Patch Changes

@​tanstack/store@​0.9.1

Patch Changes

@​tanstack/store@​0.9.0

Minor Changes

Breaking changes (#265)

@​tanstack/store@​0.8.1

Patch Changes

0.11.0

Minor Changes

0.10.0

Minor Changes

0.9.3

Patch Changes

0.9.2

Patch Changes

0.9.1

Patch Changes

0.9.0

Minor Changes

Breaking changes (#265)

v2.0.1

What's Changed

New Contributors

v2.0.0

What's Changed

Breaking Changes

Features

Bug Fixes

v2.0.0-canary.1

1.6.1

What's Changed

1.6.0

What's Changed

New Contributors

1.5.0

What's Changed

v2.0.0

What's Changed

Breaking Changes

Features

v2.0.0-canary.1

1.5.0-canary.4

What's Changed

1.3.1

What's Changed

1.3.0

What's Changed

New Contributors

1.2.0

`@tanstack/react-router@1`.170.4

`@tanstack/react-router@1`.170.3

`@tanstack/react-router@1`.170.2

`@tanstack/store@0`.11.0

`@tanstack/store@0`.10.0

`@tanstack/store@0`.9.3

`@tanstack/store@0`.9.2

`@tanstack/store@0`.9.1

`@tanstack/store@0`.9.0

`@tanstack/store@0`.8.1