Skip to content

chore: bump the npm-deps group across 1 directory with 36 updates#126

Closed
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/npm_and_yarn/dev/npm-deps-f61320e002
Closed

chore: bump the npm-deps group across 1 directory with 36 updates#126
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/npm_and_yarn/dev/npm-deps-f61320e002

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps the npm-deps group with 36 updates in the / directory:

Package From To
@ai-sdk/google 2.0.56 2.0.70
@ai-sdk/groq 2.0.35 2.0.38
@ai-sdk/react 2.0.144 2.0.181
@auth/mongodb-adapter 3.11.1 3.11.2
@t3-oss/env-nextjs 0.13.10 0.13.11
@tanstack/react-query 5.90.21 5.99.2
@tanstack/react-query-devtools 5.91.3 5.99.2
@tanstack/react-virtual 3.13.19 3.13.24
@upstash/redis 1.36.3 1.37.0
ai 5.0.142 5.0.179
axios 1.13.6 1.15.1
lucide-react 0.576.0 0.577.0
motion 12.34.4 12.38.0
next 16.1.6 16.2.4
posthog-js 1.357.1 1.369.3
pusher 5.3.2 5.3.3
pusher-js 8.4.0 8.5.0
react 19.2.4 19.2.5
react-dom 19.2.4 19.2.5
react-easy-crop 5.5.6 5.5.7
react-hook-form 7.71.2 7.72.1
react-number-format 5.4.4 5.4.5
resend 6.9.3 6.12.2
zustand 5.0.11 5.0.12
@next/eslint-plugin-next 15.5.12 15.5.15
@tailwindcss/postcss 4.2.1 4.2.3
@types/node 20.19.35 20.19.39
@vitejs/plugin-react 5.1.4 5.2.0
eslint 9.39.3 9.39.4
knip 5.85.0 5.88.1
msw 2.12.10 2.13.4
playwright 1.58.2 1.59.1
postcss 8.5.6 8.5.10
prettier 3.8.1 3.8.3
tailwindcss 4.2.1 4.2.3
vite 7.3.1 7.3.2

Updates @ai-sdk/google from 2.0.56 to 2.0.70

Release notes

Sourced from @​ai-sdk/google's releases.

@​ai-sdk/google@​2.0.70

Patch Changes

  • 5543cd1: Add AI Gateway hint to provider READMEs
  • 6eeeb6f: fix(google): use VALIDATED function calling mode when any tool has strict:true
Commits
  • e947626 Version Packages (#14584)
  • fac4ac4 fix: remove non-existent @​ai-sdk/klingai from changeset (#14583)
  • d783228 fix release in v5 (#14581)
  • c1c582a chore: update GitHub Actions to latest major versions (#14579)
  • 6eeeb6f Backport: Backport: fix(google): use VALIDATED function calling mode when any...
  • e1ed246 Backport: fix(anthropic): use default thinking budget when unspecified (#10996)
  • 4145d2e Backport: docs: add tanstack start quickstart guide (#11365)
  • 1c251eb Backport: feat(registry): add Airweave tool to registry with search capabilit...
  • 67b6fca Backport: Backport: fix(security): prevent verify-changesets from leaking run...
  • 5543cd1 Backport: Backport: Add AI Gateway hint to provider READMEs (#14211)
  • Additional commits viewable in compare view

Updates @ai-sdk/groq from 2.0.35 to 2.0.38

Release notes

Sourced from @​ai-sdk/groq's releases.

@​ai-sdk/groq@​2.0.38

Patch Changes

  • 5543cd1: Add AI Gateway hint to provider READMEs
Commits
  • e947626 Version Packages (#14584)
  • fac4ac4 fix: remove non-existent @​ai-sdk/klingai from changeset (#14583)
  • d783228 fix release in v5 (#14581)
  • c1c582a chore: update GitHub Actions to latest major versions (#14579)
  • 6eeeb6f Backport: Backport: fix(google): use VALIDATED function calling mode when any...
  • e1ed246 Backport: fix(anthropic): use default thinking budget when unspecified (#10996)
  • 4145d2e Backport: docs: add tanstack start quickstart guide (#11365)
  • 1c251eb Backport: feat(registry): add Airweave tool to registry with search capabilit...
  • 67b6fca Backport: Backport: fix(security): prevent verify-changesets from leaking run...
  • 5543cd1 Backport: Backport: Add AI Gateway hint to provider READMEs (#14211)
  • Additional commits viewable in compare view

Updates @ai-sdk/react from 2.0.144 to 2.0.181

Release notes

Sourced from @​ai-sdk/react's releases.

@​ai-sdk/react@​2.0.181

Patch Changes

  • Updated dependencies [5543cd1]
    • ai@5.0.179
Commits
  • e947626 Version Packages (#14584)
  • fac4ac4 fix: remove non-existent @​ai-sdk/klingai from changeset (#14583)
  • d783228 fix release in v5 (#14581)
  • c1c582a chore: update GitHub Actions to latest major versions (#14579)
  • 6eeeb6f Backport: Backport: fix(google): use VALIDATED function calling mode when any...
  • e1ed246 Backport: fix(anthropic): use default thinking budget when unspecified (#10996)
  • 4145d2e Backport: docs: add tanstack start quickstart guide (#11365)
  • 1c251eb Backport: feat(registry): add Airweave tool to registry with search capabilit...
  • 67b6fca Backport: Backport: fix(security): prevent verify-changesets from leaking run...
  • 5543cd1 Backport: Backport: Add AI Gateway hint to provider READMEs (#14211)
  • Additional commits viewable in compare view

Updates @auth/mongodb-adapter from 3.11.1 to 3.11.2

Release notes

Sourced from @​auth/mongodb-adapter's releases.

@​auth/mongodb-adapter@​3.11.2

Other

  • @​auth/core: dependency update (67f2b168)
Commits
Maintainer changes

This version was pushed to npm by better-gustavo, a new releaser for @​auth/mongodb-adapter since your current version.


Updates @t3-oss/env-nextjs from 0.13.10 to 0.13.11

Changelog

Sourced from @​t3-oss/env-nextjs's changelog.

0.13.11

Patch Changes

  • Updated dependencies [6937086]:
    • @​t3-oss/env-core@​0.13.11
Commits
  • 23ddb79 chore(release): 📦 version packages (#404)
  • 6937086 Update zod imports to support tree-shaking for Webpack (Next.js) and esbuild ...
  • See full diff in compare view

Updates @tanstack/react-query from 5.90.21 to 5.99.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.2
    • @​tanstack/react-query@​5.99.2

@​tanstack/react-query-next-experimental@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.99.2

@​tanstack/react-query-persist-client@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.99.2
    • @​tanstack/react-query@​5.99.2

@​tanstack/react-query@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.99.2

@​tanstack/react-query-devtools@​5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.1
    • @​tanstack/react-query@​5.99.1

@​tanstack/react-query-next-experimental@​5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.99.1

@​tanstack/react-query-persist-client@​5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.99.1
    • @​tanstack/react-query@​5.99.1

@​tanstack/react-query@​5.99.1

Patch Changes

  • Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.99.2

5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.99.1

5.99.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.99.0

5.98.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.98.0

5.97.0

Patch Changes

  • Updated dependencies [2bfb12c]:
    • @​tanstack/query-core@​5.97.0

5.96.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.96.2

5.96.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.96.1

5.96.0

... (truncated)

Commits
  • a3ec7b3 ci: Version Packages (#10520)
  • 69d2757 ci: Version Packages (#10514)
  • 7ffa1ed test({react,preact,solid}-query/useQueries): fix test description from 'useQu...
  • bc83d37 test({react,preact}-query/useMutation): unify destructuring pattern in comple...
  • aad1bd5 test({react,preact}-query/useMutation): add parallel 'mutateAsync' tests with...
  • d7643b5 test({react,preact}-query/useMutation): add optimistic update tests with succ...
  • cd89d6f test({react,preact}-query/useMutation): add conditional handling and retry te...
  • 6e15fe6 test({react,preact}-query/useMutation): add chained 'mutateAsync' tests for s...
  • 792d3a5 test({react,preact}-query/useMutation): add callback tests when 'useMutation'...
  • 1b661b3 test({react,preact}-query/useMutation): add single callback tests for 'mutate...
  • Additional commits viewable in compare view

Updates @tanstack/react-query-devtools from 5.91.3 to 5.99.2

Release notes

Sourced from @​tanstack/react-query-devtools's releases.

@​tanstack/react-query-devtools@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.2
    • @​tanstack/react-query@​5.99.2

@​tanstack/react-query-devtools@​5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.1
    • @​tanstack/react-query@​5.99.1

@​tanstack/react-query-devtools@​5.99.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.0
    • @​tanstack/react-query@​5.99.0

@​tanstack/react-query-devtools@​5.98.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.98.0
    • @​tanstack/react-query@​5.98.0
Changelog

Sourced from @​tanstack/react-query-devtools's changelog.

5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.2
    • @​tanstack/react-query@​5.99.2

5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.1
    • @​tanstack/react-query@​5.99.1

5.99.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.0
    • @​tanstack/react-query@​5.99.0

5.98.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.98.0
    • @​tanstack/react-query@​5.98.0

5.97.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.97.0
    • @​tanstack/react-query@​5.97.0

5.96.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.96.2
    • @​tanstack/react-query@​5.96.2

5.96.1

... (truncated)

Commits

Updates @tanstack/react-virtual from 3.13.19 to 3.13.24

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.13.24

Patch Changes

  • Updated dependencies [97a204d]:
    • @​tanstack/virtual-core@​3.14.0

@​tanstack/react-virtual@​3.13.23

Patch Changes

  • Updated dependencies [7ece2d5]:
    • @​tanstack/virtual-core@​3.13.23

@​tanstack/react-virtual@​3.13.22

Patch Changes

@​tanstack/react-virtual@​3.13.21

Patch Changes

  • Updated dependencies [be89e29]:
    • @​tanstack/virtual-core@​3.13.21

@​tanstack/react-virtual@​3.13.20

Patch Changes

  • Updated dependencies [ff83e94]:
    • @​tanstack/virtual-core@​3.13.20
Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.13.24

Patch Changes

  • Updated dependencies [97a204d]:
    • @​tanstack/virtual-core@​3.14.0

3.13.23

Patch Changes

  • Updated dependencies [7ece2d5]:
    • @​tanstack/virtual-core@​3.13.23

3.13.22

Patch Changes

3.13.21

Patch Changes

  • Updated dependencies [be89e29]:
    • @​tanstack/virtual-core@​3.13.21

3.13.20

Patch Changes

  • Updated dependencies [ff83e94]:
    • @​tanstack/virtual-core@​3.13.20
Commits

Updates @upstash/redis from 1.36.3 to 1.37.0

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.37.0

Minor Changes

  • 6f2a831: Release redis search

Patch Changes

  • 3980b45: Add monorepo structure

@upstash/redis@1.37.0-canary-20260312092231-7405c30f6a505815bbeb69b713a22978f104ec1f

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@​1.30.3-canary-20260312082754-96a99a4e83fc560b77c36808627213e528c2f110...@​upstash/redis@​1.37.0-canary-20260312092231-7405c30f6a505815bbeb69b713a22978f104ec1f

@​upstash/redis@​1.37.0-canary-20260312084440-fba95e89e54d8ba63f020400247a1ef0dbdd2c84

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@​1.30.3-canary-20260312082754-96a99a4e83fc560b77c36808627213e528c2f110...@​upstash/redis@​1.37.0-canary-20260312084440-fba95e89e54d8ba63f020400247a1ef0dbdd2c84

Commits
  • 7e8fbed chore: version packages (#1420)
  • 703f6d4 fix: handle FROM field option in SEARCH.DESCRIBE deserialization (#1426)
  • 15b4fc9 fix: use pnpm publish for search packages to resolve workspace:* deps (#1425)
  • fba95e8 DX-2445: fix redis version, add repository.url to search packages (#1424)
  • 6f2a831 fix: redis package version and changeset for search release (#1423)
  • 96a99a4 DX-2445: Add new search client packages (#1422)
  • efd3bc6 DX-2445: use workflow_run instead of release event for npm publish (#1421)
  • 2dc4212 fix: add commit message (#1419)
  • 3980b45 DX-2445: Add monorepo structure (#1418)
  • 89cc220 DX-2381: Redis Search (#1409)
  • Additional commits viewable in compare view

Updates ai from 5.0.142 to 5.0.179

Release notes

Sourced from ai's releases.

ai@5.0.179

Patch Changes

  • 5543cd1: Add AI Gateway hint to provider READMEs
Commits
  • e947626 Version Packages (#14584)
  • fac4ac4 fix: remove non-existent @​ai-sdk/klingai from changeset (#14583)
  • d783228 fix release in v5 (#14581)
  • c1c582a chore: update GitHub Actions to latest major versions (#14579)
  • 6eeeb6f Backport: Backport: fix(google): use VALIDATED function calling mode when any...
  • e1ed246 Backport: fix(anthropic): use default thinking budget when unspecified (#10996)
  • 4145d2e Backport: docs: add tanstack start quickstart guide (#11365)
  • 1c251eb Backport: feat(registry): add Airweave tool to registry with search capabilit...
  • 67b6fca Backport: Backport: fix(security): prevent verify-changesets from leaking run...
  • 5543cd1 Backport: Backport: Add AI Gateway hint to provider READMEs (#14211)
  • Additional commits viewable in compare view

Updates axios from 1.13.6 to 1.15.1

Release notes

Sourced from axios's releases.

v1.15.1

This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.

🔒 Security Fixes

  • Header Injection Hardening: Tightened validation and sanitisation across request header construction to close the header-injection attack surface. (#10749)
  • CRLF Stripping in Multipart Headers: Correctly strips CR/LF from multipart header values to prevent injection via field names and filenames. (#10758)
  • Prototype Pollution / Auth Bypass: Replaced unsafe in checks with hasOwnProperty to prevent authentication bypass via prototype pollution on config objects, with additional regression tests. (#10761, #10760)
  • withXSRFToken Truthy Bypass: Short-circuits on any truthy non-boolean value, so an ambiguous config no longer silently leaks the XSRF token cross-origin. (#10762)
  • maxBodyLength With Zero Redirects: Enforces maxBodyLength even when maxRedirects is set to 0, closing a bypass path for oversized request bodies. (#10753)
  • Streamed Response maxContentLength Bypass: Applies maxContentLength to streamed responses that previously bypassed the cap. (#10754)
  • Follow-up CVE Completion: Completes an earlier incomplete CVE fix to fully close the regression window. (#10755)

🚀 New Features

  • AI-Based Docs Translations: Initial scaffold for AI-assisted translations of the documentation site. (#10705)
  • Location Request Header Type: Adds Location to CommonRequestHeadersList for accurate typing of redirect-aware requests. (#7528)

🐛 Bug Fixes

  • FormData Handling: Removes Content-Type when no boundary is present on FormData fetch requests, supports multi-select fields, cancels request.body instead of the source stream on fetch abort, and fixes a recursion bug in form-data serialisation. (#7314, #10676, #10702, #10726)
  • HTTP Adapter: Handles socket-only request errors without leaking keep-alive listeners. (#10576)
  • Progress Events: Clamps loaded to total for computable upload/download progress events. (#7458)
  • Types: Aligns runWhen type with the runtime behaviour in InterceptorManager and makes response header keys case-insensitive. (#7529, #10677)
  • buildFullPath: Uses strict equality in the base/relative URL check. (#7252)
  • AxiosURLSearchParams Regex: Improves the regex used for param serialisation to avoid edge-case mismatches. (#10736)
  • Resilient Value Parsing: Parses out header/config values instead of throwing on malformed input. (#10687)
  • Docs Artefact Cleanup: Removes the docs content that was incorrectly committed. (#10727)

🔧 Maintenance & Chores

  • Threat Model & Security Docs: Ongoing refinement of THREATMODEL.md, including Hopper security update, TLS and tag-replay wording, mitigation descriptions, decompression-bomb guidance, and further cleanup. (#10672, #10715, #10718, #10722, #10763, #10765)
  • Test Coverage & Migration: Expanded shouldBypassProxy coverage for wildcard/IPv6/edge cases, documented and tested AxiosError.status, and migrated progressEventReducer tests to Vitest. (#10723, #10725, #10741)
  • Type Refactor: Uses TypeScript utility types to deduplicate literal unions. (#7520)
  • Repo & CI: Adds CODEOWNERS, switches v1.x releases to an ephemeral release branch, and removes orphaned Bower support. (#10739, #10738, #10746)
  • Changelog Backfill: Added missing version entries to the changelog. (#10704)
  • Dependencies: Bumped follow-redirects (1.15.111.16.0) in root and docs, axios (1.14.01.15.0) in docs, and a group of 5 development dependencies. (#10717, #10716, #10684, #10709)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

... (truncated)

Changelog

Sourced from axios's changelog.

v1.15.1 — April 19, 2026

This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.

🔒 Security Fixes

  • Header Injection Hardening: Tightened validation and sanitisation across request header construction to close the header-injection attack surface. (#10749)

  • CRLF Stripping in Multipart Headers: Correctly strips CR/LF from multipart header values to prevent injection via field names and filenames. (#10758)

  • Prototype Pollution / Auth Bypass: Replaced unsafe in checks with hasOwnProperty to prevent authentication bypass via prototype pollution on config objects, with additional regression tests. (#10761, #10760)

  • withXSRFToken Truthy Bypass: Short-circuits on any truthy non-boolean value, so an ambiguous config no longer silently leaks the XSRF token cross-origin. (#10762)

  • maxBodyLength With Zero Redirects: Enforces maxBodyLength even when maxRedirects is set to 0, closing a bypass path for oversized request bodies. (#10753)

  • Streamed Response maxContentLength Bypass: Applies maxContentLength to streamed responses that previously bypassed the cap. (#10754)

  • Follow-up CVE Completion: Completes an earlier incomplete CVE fix to fully close the regression window. (#10755)

🚀 New Features

  • AI-Based Docs Translations: Initial scaffold for AI-assisted translations of the documentation site. (#10705)

  • Location Request Header Type: Adds Location to CommonRequestHeadersList for accurate typing of redirect-aware requests. (#7528)

🐛 Bug Fixes

  • FormData Handling: Removes Content-Type when no boundary is present on FormData fetch requests, supports multi-select fields, cancels request.body instead of the source stream on fetch abort, and fixes a recursion bug in form-data serialisation. (#7314, #10676, #10702, #10726)

  • HTTP Adapter: Handles socket-only request errors without leaking keep-alive listeners. (#10576)

  • Progress Events: Clamps loaded to total for computable upload/download progress events. (#7458)

  • Types: Aligns runWhen type with the runtime behaviour in InterceptorManager and makes response header keys case-insensitive. (#7529, #10677)

  • buildFullPath: Uses strict equality in the base/relative URL check. (#7252)

  • AxiosURLSearchParams Regex: Improves the regex used for param serialisation to avoid edge-case mismatches. (#10736)

  • Resilient Value Parsing: Parses out header/config values instead of throwing on malformed input. (#10687)

  • Docs Artefact Cleanup: Removes the docs content that was incorrectly committed. (#10727)

🔧 Maintenance & Chores

  • Threat Model & Security Docs: Ongoing refinement of THREATMODEL.md, including Hopper security update, TLS and tag-replay wording, mitigation descriptions, decompression-bomb guidance, and further cleanup. (#10672, #10715, #10718, #10722, #10763, #10765)

  • Test Coverage & Migration: Expanded shouldBypassProxy coverage for wildcard/IPv6/edge cases, documented and tested AxiosError.status, and migrated progressEventReducer tests to Vitest. (#10723, #10725, #10741)

... (truncated)

Commits

Bumps the npm-deps group with 36 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/google](https://github.com/vercel/ai) | `2.0.56` | `2.0.70` |
| [@ai-sdk/groq](https://github.com/vercel/ai) | `2.0.35` | `2.0.38` |
| [@ai-sdk/react](https://github.com/vercel/ai) | `2.0.144` | `2.0.181` |
| [@auth/mongodb-adapter](https://github.com/nextauthjs/next-auth) | `3.11.1` | `3.11.2` |
| [@t3-oss/env-nextjs](https://github.com/t3-oss/t3-env/tree/HEAD/packages/nextjs) | `0.13.10` | `0.13.11` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.99.2` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.91.3` | `5.99.2` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.13.19` | `3.13.24` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.36.3` | `1.37.0` |
| [ai](https://github.com/vercel/ai) | `5.0.142` | `5.0.179` |
| [axios](https://github.com/axios/axios) | `1.13.6` | `1.15.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.576.0` | `0.577.0` |
| [motion](https://github.com/motiondivision/motion) | `12.34.4` | `12.38.0` |
| [next](https://github.com/vercel/next.js) | `16.1.6` | `16.2.4` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.357.1` | `1.369.3` |
| [pusher](https://github.com/pusher/pusher-http-node) | `5.3.2` | `5.3.3` |
| [pusher-js](https://github.com/pusher/pusher-js) | `8.4.0` | `8.5.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` |
| [react-easy-crop](https://github.com/ValentinH/react-easy-crop) | `5.5.6` | `5.5.7` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.71.2` | `7.72.1` |
| [react-number-format](https://github.com/s-yadav/react-number-format) | `5.4.4` | `5.4.5` |
| [resend](https://github.com/resend/resend-node) | `6.9.3` | `6.12.2` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.11` | `5.0.12` |
| [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) | `15.5.12` | `15.5.15` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.2.1` | `4.2.3` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.35` | `20.19.39` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.1.4` | `5.2.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.3` | `9.39.4` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `5.85.0` | `5.88.1` |
| [msw](https://github.com/mswjs/msw) | `2.12.10` | `2.13.4` |
| [playwright](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.10` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.2.1` | `4.2.3` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.1` | `7.3.2` |



Updates `@ai-sdk/google` from 2.0.56 to 2.0.70
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/google@2.0.56...@ai-sdk/google@2.0.70)

Updates `@ai-sdk/groq` from 2.0.35 to 2.0.38
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/groq@2.0.35...@ai-sdk/groq@2.0.38)

Updates `@ai-sdk/react` from 2.0.144 to 2.0.181
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/react@2.0.144...@ai-sdk/react@2.0.181)

Updates `@auth/mongodb-adapter` from 3.11.1 to 3.11.2
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/@auth/mongodb-adapter@3.11.1...@auth/mongodb-adapter@3.11.2)

Updates `@t3-oss/env-nextjs` from 0.13.10 to 0.13.11
- [Release notes](https://github.com/t3-oss/t3-env/releases)
- [Changelog](https://github.com/t3-oss/t3-env/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/t3-oss/t3-env/commits/@t3-oss/env-nextjs@0.13.11/packages/nextjs)

Updates `@tanstack/react-query` from 5.90.21 to 5.99.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.99.2/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.91.3 to 5.99.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.99.2/packages/react-query-devtools)

Updates `@tanstack/react-virtual` from 3.13.19 to 3.13.24
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.13.24/packages/react-virtual)

Updates `@upstash/redis` from 1.36.3 to 1.37.0
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/v1.36.3...@upstash/redis@1.37.0)

Updates `ai` from 5.0.142 to 5.0.179
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@5.0.142...ai@5.0.179)

Updates `axios` from 1.13.6 to 1.15.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.6...v1.15.1)

Updates `lucide-react` from 0.576.0 to 0.577.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react)

Updates `motion` from 12.34.4 to 12.38.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.34.4...v12.38.0)

Updates `next` from 16.1.6 to 16.2.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.1.6...v16.2.4)

Updates `posthog-js` from 1.357.1 to 1.369.3
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.357.1...posthog-js@1.369.3)

Updates `pusher` from 5.3.2 to 5.3.3
- [Release notes](https://github.com/pusher/pusher-http-node/releases)
- [Changelog](https://github.com/pusher/pusher-http-node/blob/master/CHANGELOG.md)
- [Commits](pusher/pusher-http-node@v5.3.2...v5.3.3)

Updates `pusher-js` from 8.4.0 to 8.5.0
- [Release notes](https://github.com/pusher/pusher-js/releases)
- [Changelog](https://github.com/pusher/pusher-js/blob/master/CHANGELOG.md)
- [Commits](pusher/pusher-js@v8.4.0...v8.5.0)

Updates `react` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `react-easy-crop` from 5.5.6 to 5.5.7
- [Release notes](https://github.com/ValentinH/react-easy-crop/releases)
- [Commits](ValentinH/react-easy-crop@v5.5.6...v5.5.7)

Updates `react-hook-form` from 7.71.2 to 7.72.1
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.71.2...v7.72.1)

Updates `react-number-format` from 5.4.4 to 5.4.5
- [Release notes](https://github.com/s-yadav/react-number-format/releases)
- [Commits](s-yadav/react-number-format@v5.4.4...v5.4.5)

Updates `resend` from 6.9.3 to 6.12.2
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v6.9.3...v6.12.2)

Updates `zustand` from 5.0.11 to 5.0.12
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.11...v5.0.12)

Updates `@next/eslint-plugin-next` from 15.5.12 to 15.5.15
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v15.5.15/packages/eslint-plugin-next)

Updates `@tailwindcss/postcss` from 4.2.1 to 4.2.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.3/packages/@tailwindcss-postcss)

Updates `@types/node` from 20.19.35 to 20.19.39
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitejs/plugin-react` from 5.1.4 to 5.2.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/plugin-react@5.2.0/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.2.0/packages/plugin-react)

Updates `eslint` from 9.39.3 to 9.39.4
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.3...v9.39.4)

Updates `knip` from 5.85.0 to 5.88.1
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@5.88.1/packages/knip)

Updates `msw` from 2.12.10 to 2.13.4
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.12.10...v2.13.4)

Updates `playwright` from 1.58.2 to 1.59.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.59.1)

Updates `postcss` from 8.5.6 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.10)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.3)

Updates `tailwindcss` from 4.2.1 to 4.2.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.3/packages/tailwindcss)

Updates `vite` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: "@ai-sdk/google"
  dependency-version: 2.0.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@ai-sdk/groq"
  dependency-version: 2.0.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@ai-sdk/react"
  dependency-version: 2.0.181
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@auth/mongodb-adapter"
  dependency-version: 3.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@t3-oss/env-nextjs"
  dependency-version: 0.13.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.99.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.99.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.13.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@upstash/redis"
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: ai
  dependency-version: 5.0.179
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: axios
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: lucide-react
  dependency-version: 0.577.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: motion
  dependency-version: 12.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: next
  dependency-version: 16.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: posthog-js
  dependency-version: 1.369.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: pusher
  dependency-version: 5.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: pusher-js
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: react
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: react-easy-crop
  dependency-version: 5.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: react-hook-form
  dependency-version: 7.72.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: react-number-format
  dependency-version: 5.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: resend
  dependency-version: 6.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: zustand
  dependency-version: 5.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@next/eslint-plugin-next"
  dependency-version: 15.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@types/node"
  dependency-version: 20.19.39
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 5.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: eslint
  dependency-version: 9.39.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: knip
  dependency-version: 5.88.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: msw
  dependency-version: 2.13.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: playwright
  dependency-version: 1.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: tailwindcss
  dependency-version: 4.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 20, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 20, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
blueledger Ready Ready Preview, Comment Apr 20, 2026 9:26pm

Request Review

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 20, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 27, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/dev/npm-deps-f61320e002 branch April 27, 2026 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants