chore(deps): bump the production-dependencies group with 7 updates by dependabot[bot] · Pull Request #15 · jcserv/react-vite-shadcn-template

dependabot · 2026-05-13T00:40:45Z

Bumps the production-dependencies group with 7 updates:

Package	From	To
@tanstack/react-router	`1.163.3`	`1.169.2`
class-variance-authority	`0.5.3`	`0.7.1`
clsx	`1.2.1`	`2.1.1`
lucide-react	`0.562.0`	`1.14.0`
react	`19.2.4`	`19.2.6`
react-dom	`19.2.4`	`19.2.6`
tailwind-merge	`1.14.0`	`3.6.0`

Updates @tanstack/react-router from 1.163.3 to 1.169.2

Changelog

Sourced from @tanstack/react-router's changelog.

1.169.2

Patch Changes

Updated dependencies [35e88f0]:

@tanstack/router-core@1.169.2

1.169.1

Patch Changes

Updated dependencies [4a1e63f]:

@tanstack/router-core@1.169.1

1.169.0

Minor Changes

Allow params.parse to experimentally return false to skip an incoming route candidate during path matching. Thrown parse errors still surface on the selected match instead of falling through, and outgoing typed route-template links continue to use exact route lookup followed by params.stringify for URL generation. (#7263)

Patch Changes

Updated dependencies [c992495]:

@tanstack/router-core@1.169.0

1.168.26

Patch Changes

Updated dependencies [b5c4183]:

@tanstack/router-core@1.168.18

1.168.25

Patch Changes

Updated dependencies [493148b]:

@tanstack/router-core@1.168.17

1.168.24

Patch Changes

Add TanStack Start inline CSS manifest support for SSR so route styles can be embedded in the HTML response and hydrated without duplicate stylesheet links. (#7253)

Updated dependencies [4d864ee]:

@tanstack/router-core@1.168.16

1.168.23

... (truncated)

Commits

ee96e25 ci: changeset release
ed3152a test: reproducer for #2547 (#7337)
19f496b test: add reproducer for #2514 (#7336)
9902eb4 remove old intent artifacts (#7333)
f08ef9d chore: fix duplicate "the" typo across router packages (#7323)
2c9f5c0 ci: changeset release
4a1e63f fix: parse params union inference (#7306)
dad0ec8 ci: changeset release
c992495 feat: match params (#7263)
a730094 ci: changeset release
Additional commits viewable in compare view

Updates class-variance-authority from 0.5.3 to 0.7.1

Release notes

Sourced from class-variance-authority's releases.

v0.7.1

What's Changed

Add LICENSE Comments by @joe-bell in joe-bell/cva#283

chore: move clsx dependency to caret/semver range by @philwolstenholme in joe-bell/cva#316

New Contributors

@philwolstenholme made their first contribution in joe-bell/cva#316

Full Changelog: joe-bell/cva@v0.7.0...v0.7.1

v0.7.0

What's Changed

Upgrade to clsx@2.0.0 by @joe-bell in joe-bell/cva#185

Full Changelog: joe-bell/cva@v0.6.1...v0.7.0

v0.6.1

What's Changed

Add missing license key in package.json

Upgrade to typescript@5.1.3 by @joe-bell in joe-bell/cva#175

Full Changelog: joe-bell/cva@v0.6.0...v0.6.1

v0.6.0

What's Changed
cx → clsx by @joe-bell in joe-bell/cva#152

cva now uses clsx under-the-hood to concatenate classes with no breaking changes to the current experience and no increase to bundle-size.

The existing cx export still exists, but as an alias of clsx

Bringing additional benefits of:
Provides additional support for booleans and variadic strings within class or className props
const button = cva([true && "button-base", false && "not-rendered"]);
// => 'button-base'
const buttonConsumer = button({ class: [true && "extra-class"] });
// => 'button-base extra-class'
Provides support for object syntax within class or className props

... (truncated)

Commits

45462dd class-variance-authority@0.7.1
c236552 docs: change x.com references to bluesky
985dba9 chore: move clsx dependency to caret/semver range (#316)
d4ded2d chore: update sponsors.svg [ci skip]
ff1717c ci(schedule): adjust cron date to offset midnight traffic
2f96730 ci: prevent scheduled workflow running in forks
aaae670 docs(beta): bun installation
69feb43 update docs for bun installation (#261)
f9e2ea6 chore(docs): update banner links
5228f0e chore: link sponsors to raw svg
Additional commits viewable in compare view

Updates clsx from 1.2.1 to 2.1.1

Release notes

Sourced from clsx's releases.

v2.1.1

Patches

(types) Include bigint in ClassValue type: (#96): 3d960ab Accommodates recent @types/react changes to ReactNode. Thank you @ViliamKopecky~!

Chores

Add licenses.dev badge: 684509c This service recursively analyzes entire dependency graphs to ensure that a package (or your project) is using permissive licenses. For example, here's a results table for polka@next and a larger astro example.

Full Changelog: lukeed/clsx@v2.1.0...v2.1.1

v2.1.0

Features
Add new clsx/lite submodule for string-only usage: 1a49142

This is a 140b version of clsx that is ideal for Tailwind and/or React contexts, which typically follow this clsx usage pattern:
clsx('foo bar', props.maybe && 'conditional classes', props.className);
Important: This clsx/lite module ignores all non-string arguments and is therefore not a 1:1 replacement for clsx itself!
import { clsx } from 'clsx';
import { clsx as lite } from 'clsx/lite';
// strings-only usage is identical
clsx('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
lite('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
// clsx/lite ignores all non-strings
clsx('foo', { a: true, b: false, c: true }); //=> "foo a c"
lite('foo', { a: true, b: false, c: true }); //=> "foo"
Full Changelog: lukeed/clsx@v2.0.1...v2.1.0

v2.0.1

Patches

(perf) Cache arguments.length & array.length for 6% performance gain (#26): deff09b

... (truncated)

Commits

925494c 2.1.1
3d960ab fix(types): include bigint in ClassValue type (#96)
684509c chore: add licenses badge
a60db12 2.1.0
1a49142 feat: add clsx/lite module
5cac14c 2.0.1
855eec2 chore(bench): include ≠ symbol
bf64e71 chore: update module size
6e3b2b9 chore: update benchmarks;
554ad31 chore: dedicated string vs number var usage;
Additional commits viewable in compare view

Updates lucide-react from 0.562.0 to 1.14.0

Release notes

Sourced from lucide-react's releases.

Version 1.14.0

What's Changed

feat(icons): added repeat-off icon by @jguddas in lucide-icons/lucide#3102

Full Changelog: lucide-icons/lucide@1.13.0...1.14.0

Version 1.13.0

What's Changed

fix(docs): sync URL params with UI state on categories page by @taimar in lucide-icons/lucide#4111

feat(icons): add waves-vertical icon by @jamiemlaw in lucide-icons/lucide#3867

Full Changelog: lucide-icons/lucide@1.12.0...1.13.0

Version 1.12.0

What's Changed

feat(icon): add folder-bookmark icon by @swastik7805 in lucide-icons/lucide#4262

docs(readme): Update readme files by @ericfennis in lucide-icons/lucide#4320

feat(icons): added astroid icon by @whoisBugsbunny in lucide-icons/lucide#4217

Full Changelog: lucide-icons/lucide@1.10.0...1.12.0

Version 1.11.0

What's Changed

docs: add missing period to TypeScript Support description by @jglu in lucide-icons/lucide#4309

fix(@lucide/svelte): proper doc comments for svelte components by @blt-r in lucide-icons/lucide#4267

chore(deps): bump svgo from 3.3.2 to 3.3.3 by @dependabot[bot] in lucide-icons/lucide#4119

chore(deps-dev): bump astro from 6.0.8 to 6.1.6 by @dependabot[bot] in lucide-icons/lucide#4310

feat(icons): add power and quick tags to zap and zap-off by @swastik7805 in lucide-icons/lucide#4268

test(build-font): added comprehensive unit tests on build-font tool by @karsa-mistmere in lucide-icons/lucide#4315

feat(docs): blur background of framework-select by @Spleefies in lucide-icons/lucide#4238

feat(icon): add heart-x icon by @swastik7805 in lucide-icons/lucide#4264

fix(icons): optimised rotate-3d icon by @jamiemlaw in lucide-icons/lucide#4299

feat(icons): added layers-minus icon by @Spleefies in lucide-icons/lucide#4005

feat(icons): added bell-check icon by @pettelau in lucide-icons/lucide#4152

New Contributors

@jglu made their first contribution in lucide-icons/lucide#4309

@pettelau made their first contribution in lucide-icons/lucide#4152

Full Changelog: lucide-icons/lucide@1.9.0...1.11.0

Version 1.10.0

What's Changed

docs: add missing period to TypeScript Support description by @jglu in lucide-icons/lucide#4309

fix(@lucide/svelte): proper doc comments for svelte components by @blt-r in lucide-icons/lucide#4267

chore(deps): bump svgo from 3.3.2 to 3.3.3 by @dependabot[bot] in lucide-icons/lucide#4119

chore(deps-dev): bump astro from 6.0.8 to 6.1.6 by @dependabot[bot] in lucide-icons/lucide#4310

... (truncated)

Commits

50d8af5 docs(readme): Update readme files (#4320)
653e44b feat(packages): use .mjs for ESM bundles (#4285)
7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
dada0a8 fix(lucide-react): Fix dynamic imports (#4210)
a6e648a fix(lucide-react): correct client directives in RSC files (#4189)
1f010a3 fix(lucide-react): Fixes provider export and RSC render issues (#4175)
484f2c9 docs(version-1): Version 1 website (#4142)
a0e202d feat(packages/angular): add new @lucide/angular package (#3897)
c5b155e Merge branch 'main' of https://github.com/lucide-icons/lucide into next
f6c0d06 chore(deps): bump rollup from 4.53.3 to 4.59.0 (#4106)
Additional commits viewable in compare view

Updates react from 19.2.4 to 19.2.6

Release notes

Sourced from react's releases.

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

eaf3e95 Version 19.2.6
23f4f9f 19.2.5
See full diff in compare view

Updates react-dom from 19.2.4 to 19.2.6

Release notes

Sourced from react-dom's releases.

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

eaf3e95 Version 19.2.6
23f4f9f 19.2.5
See full diff in compare view

Updates tailwind-merge from 1.14.0 to 3.6.0

Release notes

Sourced from tailwind-merge's releases.

v3.6.0

New Features

Add support for Tailwind CSS v4.3 by @dcastil in dcastil/tailwind-merge#677

Add postfixLookupClassGroups option to config to support Tailwind utilities where a slash is part of the full class name, like named container queries

Add support for readonly array values by @unional in dcastil/tailwind-merge#652

Documentation

Fix broken links in README by @maurer2 in dcastil/tailwind-merge#662

Other

Harden internal CI pipeline security by omitting git checkout by @dcastil, suggested by @kyletaylored in dcastil/tailwind-merge@6b2499c

Full Changelog: dcastil/tailwind-merge@v3.5.0...v3.6.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @block, @openclaw, @sourcegraph, @mike-healy and more via @thnxdev for sponsoring tailwind-merge! ❤️

v3.5.0

New Features

Add support for Tailwind CSS v4.2 by @dcastil in dcastil/tailwind-merge#651

Full Changelog: dcastil/tailwind-merge@v3.4.1...v3.5.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @block, @openclaw, @sourcegraph and more via @thnxdev for sponsoring tailwind-merge! ❤️

v3.4.1

Bug Fixes

Prevent arbitrary font-family and font-weight from merging by @roneymoon in dcastil/tailwind-merge#635

Full Changelog: dcastil/tailwind-merge@v3.4.0...v3.4.1

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @block, @openclaw, @sourcegraph and more via @thnxdev for sponsoring tailwind-merge! ❤️

v3.4.0

New Features

Performance optimizations which make tailwind-merge >10% faster

Vibe optimization by @quantizor in dcastil/tailwind-merge#547

Additional optimizations by @quantizor in dcastil/tailwind-merge#619

Documentation

Improve docs by clarifying things, adding more examples by @dcastil in dcastil/tailwind-merge#618

Make examples more realistic by @dcastil in dcastil/tailwind-merge#617

Add custom variant as an alternative to docs by @kidonng in dcastil/tailwind-merge#592

... (truncated)

Commits

d54f7e5 v3.6.0
638871a Update README to add info about Tailwind CSS v4.3 support
39fc7b5 Revert "v3.6.0"
bd8390f v3.6.0
802877c add v3.6.0 changelog
a35feda Merge pull request #665 from dcastil/renovate/rollup-plugin-babel-7.x
940389c Merge pull request #667 from dcastil/renovate/release-drafter-release-drafter...
005af6d pin to specific version
5816ced implement breaking changes
17041e1 Merge pull request #676 from dcastil/dependabot/npm_and_yarn/babel/plugin-tra...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tailwind-merge since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.163.3` | `1.169.2` | | [class-variance-authority](https://github.com/joe-bell/cva) | `0.5.3` | `0.7.1` | | [clsx](https://github.com/lukeed/clsx) | `1.2.1` | `2.1.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.562.0` | `1.14.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.6` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.6` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `1.14.0` | `3.6.0` | Updates `@tanstack/react-router` from 1.163.3 to 1.169.2 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.169.2/packages/react-router) Updates `class-variance-authority` from 0.5.3 to 0.7.1 - [Release notes](https://github.com/joe-bell/cva/releases) - [Commits](joe-bell/cva@v0.5.3...v0.7.1) Updates `clsx` from 1.2.1 to 2.1.1 - [Release notes](https://github.com/lukeed/clsx/releases) - [Commits](lukeed/clsx@v1.2.1...v2.1.1) Updates `lucide-react` from 0.562.0 to 1.14.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.14.0/packages/lucide-react) Updates `react` from 19.2.4 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react) Updates `react-dom` from 19.2.4 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom) Updates `tailwind-merge` from 1.14.0 to 3.6.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v1.14.0...v3.6.0) --- updated-dependencies: - dependency-name: "@tanstack/react-router" dependency-version: 1.169.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: class-variance-authority dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: clsx dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-13T00:44:26Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 13, 2026

dependabot Bot closed this May 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-dbaf9f3630 branch May 13, 2026 00:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the production-dependencies group with 7 updates#15

chore(deps): bump the production-dependencies group with 7 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-dbaf9f3630

dependabot Bot commented on behalf of github May 13, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.169.2

Patch Changes

1.169.1

Patch Changes

1.169.0

Minor Changes

Patch Changes

1.168.26

Patch Changes

1.168.25

Patch Changes

1.168.24

Patch Changes

1.168.23

v0.7.1

What's Changed

New Contributors

v0.7.0

What's Changed

v0.6.1

What's Changed

v0.6.0

What's Changed

v2.1.1

Patches

Chores

v2.1.0

Features

v2.0.1

Patches

Version 1.14.0

What's Changed

Version 1.13.0

What's Changed

Version 1.12.0

What's Changed

Version 1.11.0

What's Changed

New Contributors

Version 1.10.0

What's Changed

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

v3.6.0

New Features

Documentation

Other

v3.5.0

New Features

v3.4.1

Bug Fixes

v3.4.0

New Features

Documentation

Uh oh!

dependabot Bot commented on behalf of github May 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 13, 2026 •

edited

Loading