An open index of dependabot pull requests across open source projects.

chore: bump the npm-deps group with 43 updates

Closed
Number: #2
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 2
Created: December 28, 2025 at 08:57 AM UTC
(2 months ago)
Updated: December 28, 2025 at 09:36 AM UTC
(2 months ago)
Closed: December 28, 2025 at 09:36 AM UTC
(2 months ago)
Time to Close: 38 minutes
Labels:
dependencies javascript
Description:

Bumps the npm-deps group with 43 updates:

Package From To
@clerk/localizations 3.29.0 3.32.1
@clerk/nextjs 6.35.6 6.36.5
@logtape/logtape 1.2.2 1.3.5
@sentry/nextjs 10.28.0 10.32.1
@t3-oss/env-nextjs 0.13.8 0.13.10
drizzle-orm 0.44.7 0.45.1
next 16.0.10 16.1.1
next-intl 4.5.8 4.6.1
posthog-js 1.300.0 1.310.1
react-hook-form 7.68.0 7.69.0
zod 4.1.13 4.2.1
@antfu/eslint-config 6.3.0 6.7.3
@chromatic-com/playwright 0.12.7 0.12.8
@commitlint/cli 20.1.0 20.2.0
@commitlint/config-conventional 20.0.0 20.2.0
@commitlint/prompt-cli 20.1.0 20.2.0
@eslint-react/eslint-plugin 2.3.12 2.4.0
@lingual/i18n-check 0.8.14 0.8.16
@next/bundle-analyzer 16.0.10 16.1.1
@next/eslint-plugin-next 16.0.10 16.1.1
@spotlightjs/spotlight 4.5.1 4.9.0
@storybook/addon-a11y 10.1.4 10.1.10
@storybook/addon-docs 10.1.4 10.1.10
@storybook/addon-vitest 10.1.4 10.1.10
@storybook/nextjs-vite 10.1.4 10.1.10
@tailwindcss/postcss 4.1.17 4.1.18
@types/node 24.10.1 24.10.4
@types/pg 8.15.6 8.16.0
@vitejs/plugin-react 5.1.1 5.1.2
@vitest/browser 4.0.15 4.0.16
@vitest/browser-playwright 4.0.15 4.0.16
@vitest/coverage-v8 4.0.15 4.0.16
checkly 6.9.5 6.9.7
drizzle-kit 0.31.7 0.31.8
eslint 9.39.1 9.39.2
eslint-plugin-format 1.0.2 1.1.0
eslint-plugin-react-refresh 0.4.24 0.4.26
eslint-plugin-storybook 10.1.4 10.1.10
knip 5.71.0 5.78.0
lefthook 2.0.7 2.0.13
storybook 10.1.4 10.1.10
tailwindcss 4.1.17 4.1.18
vitest 4.0.15 4.0.16

Updates @clerk/localizations from 3.29.0 to 3.32.1

Release notes

Sourced from @​clerk/localizations's releases.

@​clerk/localizations@​3.32.1

Patch Changes

  • Updated dependencies []:
    • @​clerk/types@​4.101.9

@​clerk/localizations@​3.32.0

Minor Changes

  • Display message in TaskChooseOrganization when user is not allowed to create organizations (#7502) by @​LauraBeatris

Patch Changes

@​clerk/localizations@​3.31.0

Minor Changes

Patch Changes

@​clerk/localizations@​3.30.1

Patch Changes

@​clerk/localizations@​3.30.0

Minor Changes

  • Add a subtitle on the Reset password session task screen (#7392) by @​octoper

Patch Changes

  • Updated dependencies []:
    • @​clerk/types@​4.101.6
Changelog

Sourced from @​clerk/localizations's changelog.

3.32.1

Patch Changes

  • Updated dependencies []:
    • @​clerk/types@​4.101.9

3.32.0

Minor Changes

  • Display message in TaskChooseOrganization when user is not allowed to create organizations (#7502) by @​LauraBeatris

Patch Changes

3.31.0

Minor Changes

Patch Changes

3.30.1

Patch Changes

3.30.0

Minor Changes

  • Add a subtitle on the Reset password session task screen (#7392) by @​octoper

... (truncated)

Commits
  • 4914442 ci(repo): Version packages (Core 2) (#7515)
  • 83e96f9 ci(repo): Version packages (Core 2) (#7485)
  • b3b02b4 feat(clerk-js,shared): Show message in TaskChooseOrganization on org creati...
  • 54cd476 feat(localizations): Add waitlist translations (#7483)
  • cbe5cdc ci(repo): Version packages (Core 2) (#7428)
  • a2cc94e chore(repo): Backport Danish translations (#7457) (#7462)
  • 375a32d feat(clerk-js,localizations,types): Add ability for users to connect a Solana...
  • 175883b feat(localizations,shared): Add temporary email error localization key (#7436)
  • 14342d2 feat(localizations,shared): Add missing password or identifier localization k...
  • f626046 feat(clerk-js,clerk-react,shared,types): Add sign in with Solana feature supp...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by dominic-clerk, a new releaser for @​clerk/localizations since your current version.


Updates @clerk/nextjs from 6.35.6 to 6.36.5

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​6.36.5

Patch Changes

  • Fix React peer dependency version ranges to use ~ instead of ^ for React 19 versions, ensuring non-overlapping version constraints. (#7513) by @​jacekradko

  • Updated dependencies [ede3e2a, 03dd374]:

    • @​clerk/backend@​2.29.0
    • @​clerk/clerk-react@​5.59.2
    • @​clerk/shared@​3.41.1
    • @​clerk/types@​4.101.9

@​clerk/nextjs@​6.36.4

Patch Changes

@​clerk/nextjs@​6.36.3

Patch Changes

@​clerk/nextjs@​6.36.2

Patch Changes

  • Updated dependencies [e448757]:
    • @​clerk/backend@​2.27.0
    • @​clerk/clerk-react@​5.58.1

@​clerk/nextjs@​6.36.1

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

6.36.5

Patch Changes

  • Fix React peer dependency version ranges to use ~ instead of ^ for React 19 versions, ensuring non-overlapping version constraints. (#7513) by @​jacekradko

  • Updated dependencies [ede3e2a, 03dd374]:

    • @​clerk/backend@​2.29.0
    • @​clerk/clerk-react@​5.59.2
    • @​clerk/shared@​3.41.1
    • @​clerk/types@​4.101.9

6.36.4

Patch Changes

6.36.3

Patch Changes

6.36.2

Patch Changes

  • Updated dependencies [e448757]:
    • @​clerk/backend@​2.27.0
    • @​clerk/clerk-react@​5.58.1

6.36.1

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by dominic-clerk, a new releaser for @​clerk/nextjs since your current version.


Updates @logtape/logtape from 1.2.2 to 1.3.5

Changelog

Sourced from @​logtape/logtape's changelog.

Version 1.3.5

Released on December 19, 2025.

@​logtape/redaction

  • Fixed a regression where Error, Date, RegExp, and other built-in objects were incorrectly converted to empty objects {} when processed by redactByField() and redactByPattern(). These objects are now preserved without modification. [#114]

#114: dahlia/logtape#114

Version 1.3.4

Released on December 18, 2025.

@​logtape/redaction

  • Fixed redactByField() to use redacted property values for all message placeholders, not just those directly matching field patterns. Previously, named placeholders like {args} would use original values even when containing nested sensitive fields (e.g., args[0].email), exposing sensitive data in the log message. [#99]

Version 1.3.3

Released on December 18, 2025.

@​logtape/redaction

  • Fixed redactByField() to recursively process arrays, ensuring that sensitive fields inside objects within arrays are properly redacted. Previously, arrays were not traversed, so sensitive data in nested structures like { args: [{ email: "..." }] } would not be redacted. [#99]

Version 1.3.2

Released on December 18, 2025.

  • Reduced npm package sizes by excluding unnecessary source files from published packages. Previously, the src/ directory was included in npm

... (truncated)

Commits
  • c7e0dbf Version bump
  • 64aa347 Version bump
  • d315f4f Version bump
  • a2fdf46 Merge tag '1.2.3' into 1.3-maintenance
  • f079aec Merge tag '1.1.5' into 1.2-maintenance
  • a4557c8 Reduce npm package sizes by adding files field
  • 1c0d309 Version bump
  • b62f9c2 Version bump
  • 24acd12 Highlight framework integrations in README and docs
  • fd5ba0d Add @​logtape/koa package for Koa HTTP request logging
  • Additional commits viewable in compare view

Updates @sentry/nextjs from 10.28.0 to 10.32.1

Release notes

Sourced from @​sentry/nextjs's releases.

10.32.1

  • fix(cloudflare): Add hono transaction name when error is thrown (#18529)
  • fix(ember): Make implementation field optional (hash routes) (#18564)
  • fix(vercelai): Fix input token count (#18574)
  • chore(lint): prefer 'unknown' to 'any', fix lint warnings
  • chore(test): Remove cloudflare-astro e2e test (#18567)

Bundle size 📦

Path Size
@​sentry/browser 24.24 KB
@​sentry/browser - with treeshaking flags 22.77 KB
@​sentry/browser (incl. Tracing) 40.62 KB
@​sentry/browser (incl. Tracing, Profiling) 45.12 KB
@​sentry/browser (incl. Tracing, Replay) 78.3 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 68.28 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 82.88 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 94.83 KB
@​sentry/browser (incl. Feedback) 40.57 KB
@​sentry/browser (incl. sendFeedback) 28.82 KB
@​sentry/browser (incl. FeedbackAsync) 33.7 KB
@​sentry/react 25.92 KB
@​sentry/react (incl. Tracing) 42.77 KB
@​sentry/vue 28.6 KB
@​sentry/vue (incl. Tracing) 42.39 KB
@​sentry/svelte 24.25 KB
CDN Bundle 26.62 KB
CDN Bundle (incl. Tracing) 41.25 KB
CDN Bundle (incl. Tracing, Replay) 77.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 82.44 KB
CDN Bundle - uncompressed 78.18 KB
CDN Bundle (incl. Tracing) - uncompressed 122.47 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 236.27 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 248.74 KB
@​sentry/nextjs (client) 44.94 KB
@​sentry/sveltekit (client) 40.98 KB
@​sentry/node-core 50.4 KB
@​sentry/node 157.73 KB
@​sentry/node - without tracing 90.87 KB
@​sentry/aws-serverless 106.02 KB

10.32.0

Important Changes

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.32.1

  • fix(cloudflare): Add hono transaction name when error is thrown (#18529)
  • fix(ember): Make implementation field optional (hash routes) (#18564)
  • fix(vercelai): Fix input token count (#18574)
  • chore(lint): prefer 'unknown' to 'any', fix lint warnings
  • chore(test): Remove cloudflare-astro e2e test (#18567)

10.32.0

Important Changes

  • feat(core): Apply scope attributes to logs (#18184)

    You can now set attributes on the SDK's scopes which will be applied to all logs as long as the respective scopes are active. For the time being, only string, number and boolean attribute values are supported.

    Sentry.geGlobalScope().setAttributes({ is_admin: true, auth_provider: 'google' });
    

    Sentry.withScope(scope => {
    scope.setAttribute('step', 'authentication');

    // scope attributes is_admin, auth_provider and step are added
    Sentry.logger.info(user ${user.id} logged in, { activeSince: 100 });
    Sentry.logger.info(updated ${user.id} last activity);
    });

    // scope attributes is_admin and auth_provider are added
    Sentry.logger.warn('stale website version, reloading page');

  • feat(replay): Add Request body with attachRawBodyFromRequest option (#18501)

    To attach the raw request body (from Request objects passed as the first fetch argument) to replay events, you can now use the attachRawBodyFromRequest option in the Replay integration:

    Sentry.init({
      integrations: [
        Sentry.replayIntegration({
          attachRawBodyFromRequest: true,
        }),
      ],
    });
    

... (truncated)

Commits
  • 528ade2 release: 10.32.1
  • 25f695d Merge pull request #18578 from getsentry/prepare-release/10.32.1
  • a981a3d meta(changelog): Update changelog for 10.32.1
  • 0d8547c fix(vercelai): Fix input token count (#18574)
  • 71384a2 chore(lint): prefer 'unknown' to 'any', fix lint warnings
  • d1dd308 chore(test): Remove cloudflare-astro e2e test (#18567)
  • 12f3007 fix(ember): Make implementation field optional (hash routes) (#18564)
  • 3fda84d fix(cloudflare): Add hono transaction name when error is thrown (#18529)
  • a538901 Merge pull request #18563 from getsentry/master
  • 063c4dc Merge pull request #18562 from getsentry/ab/skip-ci-when-no-code-changes
  • Additional commits viewable in compare view

Updates @t3-oss/env-nextjs from 0.13.8 to 0.13.10

Changelog

Sourced from @​t3-oss/env-nextjs's changelog.

0.13.10

Patch Changes

  • Updated dependencies [a778bf3]:
    • @​t3-oss/env-core@​0.13.10

0.13.9

Patch Changes

  • Updated dependencies [5987d5a]:
    • @​t3-oss/env-core@​0.13.9
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​t3-oss/env-nextjs since your current version.


Updates drizzle-orm from 0.44.7 to 0.45.1

Release notes

Sourced from drizzle-orm's releases.

0.45.1

  • Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

  • Fixed pg-native Pool detection in node-postgres transactions
  • Allowed subqueries in select fields
  • Updated typo algorythm => algorithm
  • Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)
  • Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)
Commits
  • a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
  • c445637 Merge pull request #5095 from drizzle-team/main-workflows
  • e7b3aaa Merge branch 'main' into main-workflows
  • 0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
  • 45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
  • 6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
  • 53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
  • ce88a18 Merge remote-tracking branch 'origin/ext-deps-kit' into main-workflows
  • 5c8a4c5 +
  • 73e2ea4 feat: Add release router workflow to manage feature and latest releases
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for drizzle-orm since your current version.


Updates next from 16.0.10 to 16.1.1

Release notes

Sourced from next's releases.

v16.1.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Turbopack: Create junction points instead of symlinks on Windows (#87606)

Credits

Huge thanks to @​sokra and @​ztanner for helping!

v16.1.1-canary.6

Misc Changes

  • [test] Move off of as much url.parse as possible: #87286

Credits

Huge thanks to @​eps1lon for helping!

v16.1.1-canary.5

Example Changes

  • fix: Change Dockerfile.bun to use group/useradd instead of addgroup/user: #87443
  • fix(examples): resolve hydration mismatch in blog-starter: #87703

Credits

Huge thanks to @​pji2918 and @​nathannewyen for helping!

v16.1.1-canary.4

Core Changes

  • Turbopack: Symlink handling follow-up: #87637

Misc Changes

  • chore: add a missing period to rspack description: #86526

Credits

Huge thanks to @​sokra and @​Marukome0743 for helping!

v16.1.1-canary.3

Core Changes

  • Turbopack: Create junction points instead of symlinks on Windows: #87606

Misc Changes

... (truncated)

Commits

Updates next-intl from 4.5.8 to 4.6.1

Release notes

Sourced from next-intl's releases.

v4.6.1

4.6.1 (2025-12-16)

Bug Fixes

v4.6.0

4.6.0 (2025-12-12)

Features

  • Custom formats for useExtracted, consistency fixes for file references, pruning of messages and sorting of keys (#2155) (c02818e) – by @​amannn
Changelog

Sourced from next-intl's changelog.

4.6.1 (2025-12-16)

Bug Fixes

4.6.0 (2025-12-12)

Features

  • Custom formats for useExtracted, consistency fixes for file references, pruning of messages and sorting of keys (#2155) (c02818e) – by @​amannn
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for next-intl since your current version.


Updates posthog-js from 1.300.0 to 1.310.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.310.1

1.310.1

Patch Changes

  • #2797 8b1a39a Thanks @​adboio! - product tours: support custom appearance, clean up animations (2025-12-23)

posthog-js@1.310.0

1.310.0

Minor Changes

Patch Changes

posthog-js@1.309.1

1.309.1

Patch Changes

posthog-js@1.309.0

1.309.0

Minor Changes

... (truncated)

Commits
  • 968b6e2 chore: update versions and lockfile [version bump]
  • 8b1a39a feat(product tours): allow customization (#2797)
  • ddf9e1e fix(ci): use read instead of head pipe to avoid SIGPIPE (#2807)
  • 1fda766 chore: add readme for webpack, rollup and react (#2806)
  • d5b645c chore: add vite playground (#2808)
  • 8c6929a chore: update versions and lockfile [version bump]
  • deced33 fix(ci): make Slack notifications non-blocking in release workflow (#2805)
  • 5c2cea5 feat(err): add batch size option (#2804)
  • 6851061 feat: start / stop exception autocapture programatically (#2770)
  • 6b415a0 fix(llma): extract model from response for OpenAI stored prompts (#2789)
  • Additional commits viewable in compare view

Updates react-hook-form from 7.68.0 to 7.69.0

Release notes

Sourced from react-hook-form's releases.

🎄 Version 7.69.0

📏 feat: align API with useWatch (#13192) 🤦🏻‍♂️ chore: update @​deprecated names prop on (#13198) 🏥 chore: safely call function methods on elements (#13190) 🪖 chore: cve-2025-67779 (#13196) 🪖 chore: cve-2025-55184 & cve-2025-55183 (#13194) 🪖 chore: CVE-2025-55182 Critical RCE vulnerabilty (#13175) 🔬 test: add regression tests for #12837 and #13136 (

Ecosystem:
npm
Version Change:
4.0.15 → 4.0.16
Update Type:
Patch
Ecosystem:
npm
Version Change:
5.1.1 → 5.1.2
Update Type:
Patch
Package:
zod
Ecosystem:
npm
Version Change:
4.1.13 → 4.2.1
Update Type:
Minor
Package:
eslint
Ecosystem:
npm
Version Change:
9.39.1 → 9.39.2
Update Type:
Patch
Package:
@types/node
Ecosystem:
npm
Version Change:
24.10.1 → 24.10.4
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.0.15 → 4.0.16
Update Type:
Patch
Package:
next
Ecosystem:
npm
Version Change:
16.0.10 → 16.1.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
4.1.17 → 4.1.18
Update Type:
Patch
Ecosystem:
npm
Version Change:
10.1.4 → 10.1.10
Update Type:
Patch
Package:
tailwindcss
Ecosystem:
npm
Version Change:
4.1.17 → 4.1.18
Update Type:
Patch
Package:
storybook
Ecosystem:
npm
Version Change:
10.1.4 → 10.1.10
Update Type:
Patch
Ecosystem:
npm
Version Change:
16.0.10 → 16.1.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
16.0.10 → 16.1.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
6.35.6 → 6.36.5
Update Type:
Minor
Ecosystem:
npm
Version Change:
4.0.15 → 4.0.16
Update Type:
Patch
Package:
posthog-js
Ecosystem:
npm
Version Change:
1.300.0 → 1.310.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
7.68.0 → 7.69.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
20.1.0 → 20.2.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
6.3.0 → 6.7.3
Update Type:
Minor
Ecosystem:
npm
Version Change:
10.28.0 → 10.32.1
Update Type:
Minor
Package:
knip
Ecosystem:
npm
Version Change:
5.71.0 → 5.78.0
Update Type:
Minor
Package:
drizzle-orm
Ecosystem:
npm
Version Change:
0.44.7 → 0.45.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
10.1.4 → 10.1.10
Update Type:
Patch
Ecosystem:
npm
Version Change:
10.1.4 → 10.1.10
Update Type:
Patch
Ecosystem:
npm
Version Change:
20.0.0 → 20.2.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.4.24 → 0.4.26
Update Type:
Patch
Ecosystem:
npm
Version Change:
0.13.8 → 0.13.10
Update Type:
Patch
Ecosystem:
npm
Version Change:
2.3.12 → 2.4.0
Update Type:
Minor
Package:
@types/pg
Ecosystem:
npm
Version Change:
8.15.6 → 8.16.0
Update Type:
Minor
Package:
lefthook
Ecosystem:
npm
Version Change:
2.0.7 → 2.0.13
Update Type:
Patch
Ecosystem:
npm
Version Change:
3.29.0 → 3.32.1
Update Type:
Minor
Package:
next-intl
Ecosystem:
npm
Version Change:
4.5.8 → 4.6.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
10.1.4 → 10.1.10
Update Type:
Patch
Package:
drizzle-kit
Ecosystem:
npm
Version Change:
0.31.7 → 0.31.8
Update Type:
Patch
Ecosystem:
npm
Version Change:
20.1.0 → 20.2.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
1.0.2 → 1.1.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.12.7 → 0.12.8
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.2.2 → 1.3.5
Update Type:
Minor
Package:
checkly
Ecosystem:
npm
Version Change:
6.9.5 → 6.9.7
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.5.1 → 4.9.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
10.1.4 → 10.1.10
Update Type:
Patch
Ecosystem:
npm
Version Change:
0.8.14 → 0.8.16
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.0.15 → 4.0.16
Update Type:
Patch
Technical Details
ID: 12290292
UUID: 3765477471
Node ID: PR_kwDOQv_Yxs66utLg
Host: GitHub
Repository: ApplicationAgentProtocol/applicationagentprotocol.github.io