chore: update deps based on dependabot suggestions (tldraw#8303)

mimecuvalo · web-flow · commit 7b2687ac830d · 2026-03-20T15:02:39.000Z
i couldn't, ahem, depend on what dependabot was doing in tldraw#8299 it was doing things like updating Next to the next major version for no apparent reason. this recreates it cleanly. (drive-by fix for a posthog link in perf tests) ### Change type - [ ] `bugfix` - [ ] `improvement` - [ ] `feature` - [ ] `api` - [x] `other`
diff --git a/apps/docs/package.json b/apps/docs/package.json
@@ -69,7 +69,7 @@
 		"gray-matter": "^4.0.3",
 		"instantsearch.js": "^4.77.1",
 		"js-cookie": "^3.0.5",
-		"next": "^15.4.10",
+		"next": "^15.5.14",
 		"next-mdx-remote-client": "^1.1.2",
 		"next-themes": "^0.3.0",
 		"query-string": "^9.1.1",
diff --git a/apps/dotcom/client/package.json b/apps/dotcom/client/package.json
@@ -76,7 +76,7 @@
 		"fast-glob": "^3.3.3",
 		"identity-obj-proxy": "^3.0.0",
 		"json5": "^2.2.3",
-		"kysely": "^0.27.5",
+		"kysely": "^0.28.12",
 		"lazyrepo": "0.0.0-alpha.27",
 		"pg": "^8.13.1",
 		"vite": "^8.0.0",
diff --git a/apps/dotcom/sync-worker/package.json b/apps/dotcom/sync-worker/package.json
@@ -37,7 +37,7 @@
 		"@tldraw/worker-shared": "workspace:*",
 		"itty-router": "^5.0.18",
 		"jose": "^5.9.6",
-		"kysely": "^0.27.5",
+		"kysely": "^0.28.12",
 		"lodash.throttle": "^4.1.1",
 		"pg": "^8.13.1",
 		"pg-logical-replication": "^2.0.7",
diff --git a/apps/dotcom/zero-cache/package.json b/apps/dotcom/zero-cache/package.json
@@ -27,7 +27,7 @@
 	"type": "module",
 	"dependencies": {
 		"@rocicorp/zero": "0.26.1",
-		"kysely": "^0.27.5",
+		"kysely": "^0.28.12",
 		"pg": "^8.13.1"
 	},
 	"devDependencies": {
diff --git a/apps/examples/e2e/fixtures/analytics-reporter.ts b/apps/examples/e2e/fixtures/analytics-reporter.ts
@@ -35,6 +35,7 @@ export class PerformanceAnalyticsReporter {
 
 		try {
 			const payload = this.formatPayload(results, testContext)
+			// See https://eu.posthog.com/project/45972/insights/ZdpGyj1r
 			await this.sendToPostHog(payload)
 			// eslint-disable-next-line no-console
 			console.log(`Sent ${results.length} performance metrics to PostHog`)
diff --git a/apps/examples/e2e/tests/README-PERFORMANCE.md b/apps/examples/e2e/tests/README-PERFORMANCE.md
@@ -1,6 +1,7 @@
 # Performance Testing
 
 FPS performance tests for tldraw to detect regressions and track improvements.
+These are tracked in https://eu.posthog.com/project/45972/insights/ZdpGyj1r
 
 ```bash
 # Run all performance tests
diff --git a/internal/apps-script/package.json b/internal/apps-script/package.json
@@ -39,7 +39,7 @@
 		"build:staging": "yarn run -T tsx build-workspace-app.ts"
 	},
 	"dependencies": {
-		"@google/clasp": "^2.5.0"
+		"@google/clasp": "^3.2.0"
 	},
 	"devDependencies": {
 		"@types/google-apps-script": "^1.0.91"
diff --git a/internal/scripts/package.json b/internal/scripts/package.json
@@ -44,7 +44,7 @@
 		"recast": "^0.22.0",
 		"rimraf": "^4.4.1",
 		"semver": "^7.6.3",
-		"svgo": "^3.3.2",
+		"svgo": "^3.3.3",
 		"typescript": "^5.8.3"
 	},
 	"scripts": {
@@ -61,7 +61,7 @@
 		"jszip": "^3.10.1",
 		"minimist": "^1.2.8",
 		"proper-lockfile": "^4.1.2",
-		"tar": "^7.4.3",
+		"tar": "^7.5.11",
 		"tmp": "^0.2.3",
 		"toml": "^3.0.0"
 	}
diff --git a/package.json b/package.json
@@ -141,6 +141,6 @@
 		"esbuild": "^0.27.4",
 		"mime": "^4.0.6",
 		"purgecss": "^5.0.0",
-		"svgo": "^3.3.2"
+		"svgo": "^3.3.3"
 	}
 }
diff --git a/packages/create-tldraw/package.json b/packages/create-tldraw/package.json
@@ -52,7 +52,7 @@
 		"picocolors": "^1.1.1",
 		"string-width": "^7.2.0",
 		"strip-ansi": "^7.1.0",
-		"tar": "^7.4.3"
+		"tar": "^7.5.11"
 	},
 	"// because this is bundled, all dependencies should be dev dependencies.": null
 }
diff --git a/templates/chat/package.json b/templates/chat/package.json
@@ -34,7 +34,7 @@
 		"@types/react": "^19.2.7",
 		"@types/react-dom": "^19.2.3",
 		"ai": "^5.0.63",
-		"next": "^15.4.10",
+		"next": "^15.5.14",
 		"react": "^19.2.1",
 		"react-dom": "^19.2.1",
 		"react-markdown": "^10.1.0",
diff --git a/templates/nextjs/package.json b/templates/nextjs/package.json
@@ -24,7 +24,7 @@
 		"@types/node": "^22.15.31",
 		"@types/react": "^19.2.7",
 		"@types/react-dom": "^19.2.3",
-		"next": "^15.4.10",
+		"next": "^15.5.14",
 		"react": "^19.2.1",
 		"react-dom": "^19.2.1",
 		"tldraw": "workspace:*",
diff --git a/templates/simple-server-example/package.json b/templates/simple-server-example/package.json
@@ -36,7 +36,7 @@
 		"@tldraw/sync-core": "workspace:*",
 		"@vitejs/plugin-react": "^6.0.1",
 		"better-sqlite3": "^11.8.1",
-		"fastify": "^5.7.4",
+		"fastify": "^5.8.1",
 		"itty-router": "^5.0.18",
 		"react": "^19.2.1",
 		"react-dom": "^19.2.1",
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -141,6 +141,6 @@`
`141`	`141`	`"esbuild": "^0.27.4",`
`142`	`142`	`"mime": "^4.0.6",`
`143`	`143`	`"purgecss": "^5.0.0",`
`144`		`- "svgo": "^3.3.2"`
	`144`	`+ "svgo": "^3.3.3"`
`145`	`145`	`}`
`146`	`146`	`}`
Original file line number	Diff line number	Diff line change
`@@ -52,7 +52,7 @@`
`52`	`52`	`"picocolors": "^1.1.1",`
`53`	`53`	`"string-width": "^7.2.0",`
`54`	`54`	`"strip-ansi": "^7.1.0",`
`55`		`- "tar": "^7.4.3"`
	`55`	`+ "tar": "^7.5.11"`
`56`	`56`	`},`
`57`	`57`	`"// because this is bundled, all dependencies should be dev dependencies.": null`
`58`	`58`	`}`