chore(deps): bump the production-dependencies group with 22 updates

[dependabot]

Bumps the production-dependencies group with 22 updates:

Package	From	To
@google/genai	2.12.0	2.13.0
@hookform/resolvers	5.4.0	5.5.7
@lottiefiles/dotlottie-react	0.19.10	0.19.12
@radix-ui/react-accordion	1.2.17	1.2.20
@radix-ui/react-checkbox	1.3.8	1.3.11
@radix-ui/react-collapsible	1.1.17	1.1.20
@radix-ui/react-dialog	1.1.20	1.1.23
@radix-ui/react-dropdown-menu	2.1.21	2.1.24
@radix-ui/react-label	2.1.12	2.1.15
@radix-ui/react-navigation-menu	1.2.19	1.2.22
@radix-ui/react-select	2.3.4	2.3.7
@radix-ui/react-separator	1.1.12	1.1.15
@radix-ui/react-slot	1.3.0	1.3.3
@radix-ui/react-switch	1.3.4	1.3.7
@radix-ui/react-tooltip	1.2.13	1.2.16
dodopayments	2.42.2	2.43.0
next	16.2.10	16.2.12
next-auth	4.24.14	4.24.15
react	19.2.7	19.2.8
react-dom	19.2.7	19.2.8
react-hook-form	7.82.0	7.83.0
lint-staged	17.1.0	17.2.0

Updates @google/genai from 2.12.0 to 2.13.0

Release notes

Sourced from @​google/genai's releases.

v2.13.0

2.13.0 (2026-07-21)

Features

• A new field custom_vocabulary is added to Live API(f32ec0a)
• add model selector (b5d70da)
• interaction-api: add queued status to interaction proto (1b7dd39)
• make ASR fields public in v1main and Interactions (08ef3eb)

Changelog

Sourced from @​google/genai's changelog.

2.13.0 (2026-07-21)

Features

• A new field custom_vocabulary is added to message .google.cloud.aiplatform.v1beta1.BidiGenerateContentSetup (f32ec0a)
• add model selector (b5d70da)
• interaction-api: add queued status to interaction proto (1b7dd39)
• make ASR fields public in v1main and Interactions (08ef3eb)

Commits

• ebf3eb4 chore(main): release 2.13.0 (#1783)
• 1b7dd39 feat(interaction-api): add queued status to interaction proto
• bcad1c4 feat: Add environments service to GenAI SDK.
• 08ef3eb feat: make ASR fields public in v1main and Interactions
• ca3eca5 feat: Add environments service to GenAI SDK.
• 0b8f01f chore: internal change
• 04e0cb9 chore: internal change
• b5d70da feat: add model selector
• 0ce2aab No public description
• f32ec0a feat: A new field custom_vocabulary is added to message `.google.cloud.aipl...
• See full diff in compare view

Updates @hookform/resolvers from 5.4.0 to 5.5.7

Release notes

Sourced from @​hookform/resolvers's releases.

v5.5.7

5.5.7 (2026-07-26)

Bug Fixes

• npm install fails with ERESOLVE conflict between @​hookform/resolvers@​5.4.3 and valibot versions (#865) (722ef6e)

v5.5.6

5.5.6 (2026-07-26)

Bug Fixes

• module not found when importing zodResolver under Zod v3 (#864) (8df10b0)

v5.5.5

5.5.5 (2026-07-26)

Bug Fixes

• yup resolver overrides ref property in errors object with validation metadata when using checkbox input (#863) (0f70063)

v5.5.4

5.5.4 (2026-07-26)

Bug Fixes

• AJV Resolver - When ajv schema contains default for certain properties, getValues() returns the form data with properties overwritten (#862) (c4b6aab)

v5.5.3

5.5.3 (2026-07-26)

Bug Fixes

• Conditional/dynamic schema resolution no longer working (#861) (f8d6533)

v5.5.2

5.5.2 (2026-07-26)

Bug Fixes

• Zod v4 locale and global error customization not picked up (#860) (2126efc)

v5.5.1

5.5.1 (2026-07-25)

... (truncated)

Commits

• 722ef6e fix: npm install fails with ERESOLVE conflict between @​hookform/resolvers@​5.4...
• 8df10b0 fix: module not found when importing zodResolver under Zod v3 (#864)
• 75f2dcd close #773
• 0d2bdbf close #664
• 0f70063 fix: yup resolver overrides ref property in errors object with validation met...
• c4b6aab fix: AJV Resolver - When ajv schema contains default for certain properties, ...
• e2a8d16 close #760
• f8d6533 fix: Conditional/dynamic schema resolution no longer working (#861)
• 2126efc fix: Zod v4 locale and global error customization not picked up (#860)
• 0721f88 add unit test (#859)
• Additional commits viewable in compare view

Updates @lottiefiles/dotlottie-react from 0.19.10 to 0.19.12

Release notes

Sourced from @​lottiefiles/dotlottie-react's releases.

@​lottiefiles/dotlottie-react@​0.19.12

Patch Changes

• Updated dependencies [baecf78]
  • @​lottiefiles/dotlottie-web@​0.78.2

@​lottiefiles/dotlottie-react@​0.19.11

Patch Changes

• Updated dependencies [9eaf3f6]
  • @​lottiefiles/dotlottie-web@​0.78.1

Changelog

Sourced from @​lottiefiles/dotlottie-react's changelog.

0.19.12

Patch Changes

• Updated dependencies [baecf78]
  • @​lottiefiles/dotlottie-web@​0.78.2

0.19.11

Patch Changes

• Updated dependencies [9eaf3f6]
  • @​lottiefiles/dotlottie-web@​0.78.1

Commits

• c6ea282 chore: update versions (#937)
• e439a76 chore: update versions (#935)
• 4c40883 docs: point dotlottie.io links to lottiefiles.com/dotlottie and homepages to ...
• b4bd8a5 chore: point package homepages at docs and add animation-library CTA to READM...
• See full diff in compare view

Updates @radix-ui/react-accordion from 1.2.17 to 1.2.20

Changelog

Sourced from @​radix-ui/react-accordion's changelog.

1.2.20

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-collapsible@1.1.20, @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-id@1.1.4, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6

1.2.19

• Updated dependencies: @radix-ui/react-collection@1.1.14, @radix-ui/react-primitive@2.1.9, @radix-ui/react-collapsible@1.1.19

1.2.18

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collapsible@1.1.18, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-id@1.1.3, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5

Commits

• See full diff in compare view

Updates @radix-ui/react-checkbox from 1.3.8 to 1.3.11

Changelog

Sourced from @​radix-ui/react-checkbox's changelog.

1.3.11

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-size@1.1.4

1.3.10

• Updated dependencies: @radix-ui/react-primitive@2.1.9

1.3.9

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-size@1.1.3

Commits

• See full diff in compare view

Updates @radix-ui/react-collapsible from 1.1.17 to 1.1.20

Changelog

Sourced from @​radix-ui/react-collapsible's changelog.

1.1.20

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-id@1.1.4, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4

1.1.19

• Updated dependencies: @radix-ui/react-primitive@2.1.9

1.1.18

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-id@1.1.3, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

Commits

• See full diff in compare view

Updates @radix-ui/react-dialog from 1.1.20 to 1.1.23

Changelog

Sourced from @​radix-ui/react-dialog's changelog.

1.1.23

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-focus-guards@1.1.6, @radix-ui/react-focus-scope@1.1.16, @radix-ui/react-id@1.1.4, @radix-ui/react-portal@1.1.17, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-slot@1.3.3, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4

1.1.22

• Updated dependencies: @radix-ui/react-slot@1.3.2, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-focus-scope@1.1.15, @radix-ui/react-portal@1.1.16

1.1.21

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-focus-guards@1.1.5, @radix-ui/react-focus-scope@1.1.14, @radix-ui/react-id@1.1.3, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

Commits

• See full diff in compare view

Updates @radix-ui/react-dropdown-menu from 2.1.21 to 2.1.24

Changelog

Sourced from @​radix-ui/react-dropdown-menu's changelog.

2.1.24

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-id@1.1.4, @radix-ui/react-menu@2.1.24, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6

2.1.23

• Updated dependencies: @radix-ui/react-menu@2.1.23, @radix-ui/react-primitive@2.1.9

2.1.22

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-id@1.1.3, @radix-ui/react-menu@2.1.22, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5

Commits

• See full diff in compare view

Updates @radix-ui/react-label from 2.1.12 to 2.1.15

Changelog

Sourced from @​radix-ui/react-label's changelog.

2.1.15

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-primitive@2.1.10

2.1.14

• Updated dependencies: @radix-ui/react-primitive@2.1.9

2.1.13

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/react-primitive@2.1.8

Commits

• See full diff in compare view

Updates @radix-ui/react-navigation-menu from 1.2.19 to 1.2.22

Changelog

Sourced from @​radix-ui/react-navigation-menu's changelog.

1.2.22

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-id@1.1.4, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-callback-ref@1.1.4, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4, @radix-ui/react-use-previous@1.1.4, @radix-ui/react-visually-hidden@1.2.11

1.2.21

• Updated dependencies: @radix-ui/react-collection@1.1.14, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-visually-hidden@1.2.10

1.2.20

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-id@1.1.3, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-callback-ref@1.1.3, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3, @radix-ui/react-use-previous@1.1.3, @radix-ui/react-visually-hidden@1.2.9

Commits

• See full diff in compare view

Updates @radix-ui/react-select from 2.3.4 to 2.3.7

Changelog

Sourced from @​radix-ui/react-select's changelog.

2.3.7

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-focus-guards@1.1.6, @radix-ui/react-focus-scope@1.1.16, @radix-ui/react-id@1.1.4, @radix-ui/react-popper@1.3.7, @radix-ui/react-portal@1.1.17, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-slot@1.3.3, @radix-ui/react-use-callback-ref@1.1.4, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4, @radix-ui/react-use-previous@1.1.4, @radix-ui/react-visually-hidden@1.2.11

2.3.6

• Updated dependencies: @radix-ui/react-slot@1.3.2, @radix-ui/react-collection@1.1.14, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-focus-scope@1.1.15, @radix-ui/react-popper@1.3.6, @radix-ui/react-portal@1.1.16, @radix-ui/react-visually-hidden@1.2.10

2.3.5

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/number@1.1.3, @radix-ui/primitive@1.1.7, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-focus-guards@1.1.5, @radix-ui/react-focus-scope@1.1.14, @radix-ui/react-id@1.1.3, @radix-ui/react-popper@1.3.5, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-callback-ref@1.1.3, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3, @radix-ui/react-use-previous@1.1.3, @radix-ui/react-visually-hidden@1.2.9

Commits

• See full diff in compare view

Updates @radix-ui/react-separator from 1.1.12 to 1.1.15

Changelog

Sourced from @​radix-ui/react-separator's changelog.

1.1.15

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-primitive@2.1.10

1.1.14

• Updated dependencies: @radix-ui/react-primitive@2.1.9

1.1.13

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/react-primitive@2.1.8

Commits

• See full diff in compare view

Updates @radix-ui/react-slot from 1.3.0 to 1.3.3

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.3.2, 1.3.3

• Reverted breaking changes that caused compatibility issues with React Server Components.

1.3.1

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4

Commits

• See full diff in compare view

Updates @radix-ui/react-switch from 1.3.4 to 1.3.7

Changelog

Sourced from @​radix-ui/react-switch's changelog.

1.3.7

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-size@1.1.4

1.3.6

• Updated dependencies: @radix-ui/react-primitive@2.1.9

1.3.5

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-size@1.1.3

Commits

• See full diff in compare view

Updates @radix-ui/react-tooltip from 1.2.13 to 1.2.16

Changelog

Sourced from @​radix-ui/react-tooltip's changelog.

1.2.16

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-id@1.1.4, @radix-ui/react-popper@1.3.7, @radix-ui/react-portal@1.1.17, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-slot@1.3.3, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4, @radix-ui/react-visually-hidden@1.2.11

1.2.15

• Updated dependencies: @radix-ui/react-slot@1.3.2, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-popper@1.3.6, @radix-ui/react-portal@1.1.16, @radix-ui/react-visually-hidden@1.2.10

1.2.14

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-id@1.1.3, @radix-ui/react-popper@1.3.5, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3, @radix-ui/react-visually-hidden@1.2.9

Commits

• See full diff in compare view

Updates dodopayments from 2.42.2 to 2.43.0

Release notes

Sourced from dodopayments's releases.

v2.43.0

2.43.0 (2026-07-24)

Features

• api: add discount customers endpoints, trial support, currency options, and failure details (05a9527)
• api: add discount customers endpoints, trial support, currency options, and failure details (5844371)

Changelog

Sourced from dodopayments's changelog.

2.43.0 (2026-07-24)

Features

• api: add discount customers endpoints, trial support, currency options, and failure details (05a9527)
• api: add discount customers endpoints, trial support, currency options, and failure details (5844371)

Commits

• b1de261 Merge pull request #319 from dodopayments/release-please--branches--main--com...
• 40e070c release: 2.43.0
• 05a9527 Merge pull request #318 from dodopayments/stlc-generated-30083046760
• 5844371 feat(api): add discount customers endpoints, trial support, currency options,...
• See full diff in compare view

Updates next from 16.2.10 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

• Backport/docs fixes 16.2 - July round by @​icyJoseph in vercel/next.js#96031
• [Backport] Fixes to support TypeScript 7 by @​lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

• Denial of Service in App Router using Server Actions
• Middleware / Proxy bypass in App Router applications using Turbopack and single locale
• Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
• Server-Side Request Forgery in Server Actions on custom servers

Moderate:

• Cache confusion of response bodies for requests with bodies
• Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
• Denial of Service in the Image Optimization API using SVGs
• Unauthenticated disclosure of internal Server Function endpoints
• Unbounded Server Action payload in Edge runtime

Commits

• 2234717 v16.2.12
• 957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
• b56eb16 Backport/docs fixes 16.2 - July round (#96031)
• 9beca08 v16.2.11
• 3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
• ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
• 9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
• b512063 [16.x] Set correct origin for internal redirects in custom server
• d303326 [16.x] Ensure exotic rewrite param values are properly encoded
• 73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
• Additional commits viewable in compare view

Updates next-auth from 4.24.14 to 4.24.15

Release notes

Sourced from next-auth's releases.

next-auth@4.24.15

Security patch release for the 4.x line.

• getToken() now returns null instead of throwing when the Authorization header contains a malformed Bearer value.
• OAuth state, nonce, and PKCE check cookies are now bound to the provider that created them and are rejected when a different provider handles the callback. Sign-ins in flight across the upgrade fail once and succeed on retry.
• Email addresses are Unicode-normalized (NFKC) before validation in the email sign-in flow, closing a homoglyph @ bypass.
• An explicitly configured NEXTAUTH_URL now takes precedence over the auto-detected forwarded host in trusted-host mode.
• Restores CommonJS compatibility by pinning uuid to ^11.1.1; the 14.x line is ESM-only and broke require() on Node versions below 20.19.

Commits

• d857eec chore(release): next-auth@4.24.15 [skip ci]
• 5bca239 fix(next-auth): harden getToken parsing and bind OAuth check cookies to provi...
• db7e27d chore(deps): use uuid ^11.1.1 to keep CommonJS support (#13466)
• 32d874c fix(next-auth): repair red v4 CI (lint + pre-existing test drift) (#13447)
• fa85858 chore: update uuid to v14, remove deprecated types (#13422)
• 2a39465 Merge commit from fork
• 19d2feb Merge commit from fork
• See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-hook-form from 7.82.0 to 7.83.0

Release notes

Sourced from react-hook-form's releases.

Version 7.83.0

⚡ Improvements

• enhance getEventValue to handle file inputs (#13289)
• type perf: improve TypeScript performance with a hard cap at 10 levels of recursive type depth (#13529)
• type perf: improve type performance (#13528)

🐞 Fixes

• fix: clear internal errors state on argument-less clearErrors() (#13613)
• fix: preserve dirtyFields reference stability (#13612)
• fix: old checkbox/radio elements polluting internal field state (#13080)
• fix(useController): re-subscribe onChange/onBlur when control changes (#13603)
• fix(types): allow validation messages to be defined even if their related value is undefined (#13287)

Changelog

Sourced from react-hook-form's changelog.

[7.83.0] - 2026-07-25

Improvements

• Enhance getEventValue to handle file inputs
• Improve TypeScript performance with a hard cap at 10 levels of recursive type depth

Fixed

• Clear internal errors state on argument-less clearErrors()
• Preserve dirtyFields reference stability
• Old checkbox/radio elements polluting internal field state
• useController not re-subscribing onChange/onBlur when control changes
• Allow validation messages to be defined even if their related value is undefined

Commits

• ca8106d 7.83.0
• 69da954 🐞 fix: clear internal errors state on argument-less clearErrors() (#13613)
• d96c5ce 🐞 fix: preserve dirtyFields reference stability (#13612)
• ee7593e 🧪 update old checkbox/radio elements polluting internal field state e2e spec ...
• 2726d81 🐞 fix: old checkbox/radio elements polluting internal field state (#13080)
• 4ca98df ✋ fix repo grammar to prevent those silly one line prs
• d920e93 🧪 add test for enhance getEventValue to handle file inputs (#13289)
• 2ebc8d0 🍖 enhance getEventValue to handle file inputs (#13289)
• 6a38628 ☎️ type perf: improve ts perf with hardcap at 10 depth (#13529)
• ac8a3d0 🐞 fix(useController): resubscribe onChange/onBlur when control changes (#13603)
• Additional commits viewable in compare view

Updates lint-staged from 17.1.0 to 17.2.0

Release notes

Sourced from lint-staged's releases.

v17.2.0

Minor Changes

• #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
  };

  Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

  Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.js": {
      title: "Log staged JS files to console",
      task: async (files) => {
        console.log("Staged JS files:", files);
      },
    },
  };

v17.1.1

Patch Changes

• #1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.

Changelog

Sourced from lint-staged's changelog.

17.2.0

Minor Changes

• #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
  };

  Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

  Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.js": {
      title: "Log staged JS files to console",
      task: async (files) => {
        console.log("Staged JS files:", files);
      },
    },
  };

17.1.1

Patch Changes

• #1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.

Commits

• fb540fb Merge pull request #1824 from lint-staged/changeset-release/main
• dc0a738 chore(changeset): release
• 60cbb88 Merge pull request #1823 from lint-staged/reimplement-chunk-files
• 2354dc4 build(deps): update dependencies
• 0516e7f docs: adjust debug logs
• e22f6ed style: run oxfmt on README.md
• 37e8e1a fix: restore chunking of git add command after running tasks
• 2c75f1d chore: remove unused file
• ee156cc feat: add improved lazy-chunking of command strings
• baa7c98 feat: remove current chunkFiles implementation
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[netlify]

✅ Deploy Preview for arcmind-ai ready!

Name	Link
🔨 Latest commit	8d159fe
🔍 Latest deploy log	https://app.netlify.com/projects/arcmind-ai/deploys/6a66d39600d321000819e000
😎 Deploy Preview	https://deploy-preview-410--arcmind-ai.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.