Skip to content

deps(deps): bump the minor-and-patch group with 12 updates#18

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/minor-and-patch-4485556d1b
Closed

deps(deps): bump the minor-and-patch group with 12 updates#18
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/minor-and-patch-4485556d1b

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Bumps the minor-and-patch group with 12 updates:

Package From To
@supabase/supabase-js 2.93.1 2.93.3
framer-motion 12.29.2 12.30.0
next 16.1.5 16.1.6
openai 6.16.0 6.17.0
puppeteer 24.36.0 24.36.1
resend 6.8.0 6.9.1
undici 7.19.1 7.20.0
@types/node 25.0.10 25.2.0
@types/react 19.2.9 19.2.10
@vitejs/plugin-react 5.1.2 5.1.3
autoprefixer 10.4.23 10.4.24
eslint-config-next 16.1.5 16.1.6

Updates @supabase/supabase-js from 2.93.1 to 2.93.3

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.93.3

2.93.3 (2026-01-29)

🩹 Fixes

  • auth: add webauthn tests and fix fallback naming (#1763)
  • ci: add persist-credentials: false to release job checkouts (#2074)
  • storage: handle empty 200 responses in vector operations (#2073)

❤️ Thank You

v2.93.2

2.93.2 (2026-01-27)

🩹 Fixes

  • supabase: revert client platform and runtime detection headers (#2067)

❤️ Thank You

  • Guilherme Souza

v2.93.2-canary.0

2.93.2-canary.0 (2026-01-27)

🩹 Fixes

  • supabase: revert client platform and runtime detection headers (#2067)

❤️ Thank You

  • Guilherme Souza
Changelog

Sourced from @​supabase/supabase-js's changelog.

2.93.3 (2026-01-29)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.93.2 (2026-01-27)

🩹 Fixes

  • supabase: revert client platform and runtime detection headers (#2067)

❤️ Thank You

  • Guilherme Souza
Commits

Updates framer-motion from 12.29.2 to 12.30.0

Changelog

Sourced from framer-motion's changelog.

[12.30.0] 2026-02-02

Added

  • MotionConfig: Add skipAnimations option.

Fixed

  • animate: Prevent error when calling stop() on removed elements.
  • animateLayout: Fixing shared element animations when animate called before animateLayout.

[12.29.3] 2026-02-02

Fixed

  • Reorder: Fixed viewport autoscroll.
Commits
  • f3ebcdb v12.30.0
  • 5f6c358 Updating changelog
  • ad4dd59 Merge pull request #3523 from motiondivision/claude/investigate-motion-issue-...
  • be9917e Merge pull request #3511 from motiondivision/vanilla-scale-correction
  • 8b45585 Updating changelog
  • eca4a40 Merge pull request #3510 from motiondivision/claude/fix-issue-3509-1OlJw
  • c84f4cf Fix animateMini crash when element removed from DOM during scroll cancellation
  • 7cf8824 v12.29.3
  • c2d4cc4 Updating changelog
  • cdbd047 Merge pull request #3508 from lgaspari/feat/reorder-auto-scroll-page
  • Additional commits viewable in compare view

Updates next from 16.1.5 to 16.1.6

Release notes

Sourced from next's releases.

v16.1.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Upgrade to swc 54 (#88207)
  • implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
  • tweak LRU sentinel key (#89123)

Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

Commits

Updates openai from 6.16.0 to 6.17.0

Release notes

Sourced from openai's releases.

v6.17.0

6.17.0 (2026-01-28)

Full Changelog: v6.16.0...v6.17.0

Features

Bug Fixes

  • api: mark assistants as deprecated (3ae2a14)

Chores

  • ci: upgrade actions/github-script (4ea73d3)
  • internal: update actions/checkout version (f163b77)
  • internal: upgrade babel, qs, js-yaml (2e2f3c6)
Changelog

Sourced from openai's changelog.

6.17.0 (2026-01-28)

Full Changelog: v6.16.0...v6.17.0

Features

Bug Fixes

  • api: mark assistants as deprecated (3ae2a14)

Chores

  • ci: upgrade actions/github-script (4ea73d3)
  • internal: update actions/checkout version (f163b77)
  • internal: upgrade babel, qs, js-yaml (2e2f3c6)
Commits
  • 114e795 release: 6.17.0
  • df95bf2 feat(api): add shell_call_output status field
  • f19b5b3 feat(api): api updates
  • e0a7828 fix(api): mark assistants as deprecated
  • e81a8a9 chore(ci): upgrade actions/github-script
  • c49cae8 Update README models to gpt-5.2
  • ae80b55 codegen metadata
  • a4b6473 feat(api): api update
  • 315426d chore(internal): update actions/checkout version
  • 604082a chore(internal): upgrade babel, qs, js-yaml
  • See full diff in compare view

Updates puppeteer from 24.36.0 to 24.36.1

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.36.1

24.36.1 (2026-01-27)

♻️ Chores

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 2.11.1 to 2.11.2

puppeteer: v24.36.1

24.36.1 (2026-01-27)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 2.11.1 to 2.11.2
      • puppeteer-core bumped from 24.36.0 to 24.36.1
Changelog

Sourced from puppeteer's changelog.

24.36.1 (2026-01-27)

♻️ Chores

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 2.11.1 to 2.11.2
Commits

Updates resend from 6.8.0 to 6.9.1

Release notes

Sourced from resend's releases.

v6.9.1

What's Changed

Full Changelog: resend/resend-node@v6.9.0...v6.9.1

v6.9.0

What's Changed

New Contributors

Full Changelog: resend/resend-node@v6.8.0...v6.9.0

Commits
  • e015620 chore: bump to 6.9.1 (#816)
  • 6f0195a fix(deps): update dependency next to v16.1.5 (#810)
  • aec5a72 chore: add react and react-dom as devDependencies (#814)
  • e97db88 fix(deps): update react monorepo (#811)
  • fe07bd1 chore(deps): update dependency @​biomejs/biome to v2.3.13 (#806)
  • f1baaec chore(deps): update pnpm to v10.28.2 (#807)
  • 8a8ebcc fix(deps): update dependency mailparser to v3.9.1 (#809)
  • 2a48341 chore: bump to 6.9.0 (#808)
  • 0d97792 feat: add method to help with forwarding inbound emails (#797)
  • f0dfcb0 feat: export all interfaces from main index (#802)
  • Additional commits viewable in compare view

Updates undici from 7.19.1 to 7.20.0

Release notes

Sourced from undici's releases.

v7.20.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v7.19.2...v7.20.0

v7.19.2

What's Changed

New Contributors

Full Changelog: nodejs/undici@v7.19.1...v7.19.2

Commits

Updates @types/node from 25.0.10 to 25.2.0

Commits

Updates @types/react from 19.2.9 to 19.2.10

Commits

Updates @vitejs/plugin-react from 5.1.2 to 5.1.3

Changelog

Sourced from @​vitejs/plugin-react's changelog.

5.1.3 (2026-02-02)

Commits

Updates autoprefixer from 10.4.23 to 10.4.24

Release notes

Sourced from autoprefixer's releases.

10.4.24

  • Made Autoprefixer a little faster (by @​Cherry).
Changelog

Sourced from autoprefixer's changelog.

10.4.24

  • Made Autoprefixer a little faster (by @​Cherry).
Commits

Updates eslint-config-next from 16.1.5 to 16.1.6

Release notes

Sourced from eslint-config-next's releases.

v16.1.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Upgrade to swc 54 (#88207)
  • implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
  • tweak LRU sentinel key (#89123)

Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.93.1` | `2.93.3` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.29.2` | `12.30.0` |
| [next](https://github.com/vercel/next.js) | `16.1.5` | `16.1.6` |
| [openai](https://github.com/openai/openai-node) | `6.16.0` | `6.17.0` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.36.0` | `24.36.1` |
| [resend](https://github.com/resend/resend-node) | `6.8.0` | `6.9.1` |
| [undici](https://github.com/nodejs/undici) | `7.19.1` | `7.20.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.10` | `25.2.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.9` | `19.2.10` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.1.2` | `5.1.3` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.23` | `10.4.24` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.1.5` | `16.1.6` |


Updates `@supabase/supabase-js` from 2.93.1 to 2.93.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.93.3/packages/core/supabase-js)

Updates `framer-motion` from 12.29.2 to 12.30.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.29.2...v12.30.0)

Updates `next` from 16.1.5 to 16.1.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.1.5...v16.1.6)

Updates `openai` from 6.16.0 to 6.17.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.16.0...v6.17.0)

Updates `puppeteer` from 24.36.0 to 24.36.1
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.36.0...puppeteer-v24.36.1)

Updates `resend` from 6.8.0 to 6.9.1
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v6.8.0...v6.9.1)

Updates `undici` from 7.19.1 to 7.20.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.19.1...v7.20.0)

Updates `@types/node` from 25.0.10 to 25.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.9 to 19.2.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@vitejs/plugin-react` from 5.1.2 to 5.1.3
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.3/packages/plugin-react)

Updates `autoprefixer` from 10.4.23 to 10.4.24
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.23...10.4.24)

Updates `eslint-config-next` from 16.1.5 to 16.1.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.1.6/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.93.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: framer-motion
  dependency-version: 12.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: openai
  dependency-version: 6.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: puppeteer
  dependency-version: 24.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: resend
  dependency-version: 6.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: undici
  dependency-version: 7.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 5.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: autoprefixer
  dependency-version: 10.4.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 2, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@socket-security
Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
License policy violation: npm @zone-eu/mailsplit under EUPL-1.2

License: EUPL-1.2 - the applicable license policy does not allow this license (4) (package/LICENSE.EUPL-1.2)

From: pnpm-lock.yamlnpm/resend@6.9.1npm/@zone-eu/mailsplit@5.4.8

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@zone-eu/mailsplit@5.4.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@ralyodio ralyodio closed this Feb 3, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 3, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/minor-and-patch-4485556d1b branch February 3, 2026 02:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant