Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 29 updates - #55

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-f1ca82f1de
Open

chore(deps): bump the minor-and-patch group across 1 directory with 29 updates#55
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-f1ca82f1de

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 29 updates in the / directory:

Package From To
lucide-react 1.31.0 1.69.0
next 16.4.2 16.4.5
@playwright/test 1.64.1 1.65.0
globals 17.13.0 17.14.0
pm2 7.0.4 7.1.2
typescript-eslint 8.71.2 8.72.1
@fastify/cookie 11.1.3 11.1.5
@fastify/cors 11.3.1 11.4.1
@fastify/multipart 10.1.4 10.1.7
@fastify/rate-limit 11.2.1 11.2.2
@fastify/swagger 9.9.2 9.9.3
@fastify/swagger-ui 6.1.2 6.1.3
@opentelemetry/api 1.9.1 1.10.0
@opentelemetry/exporter-trace-otlp-http 0.223.0 0.301.0
@opentelemetry/instrumentation-http 0.223.0 0.301.0
@opentelemetry/sdk-node 0.223.0 0.301.0
@opentelemetry/semantic-conventions 1.43.0 1.44.0
bullmq 6.3.15 6.7.0
fastify 5.12.7 5.12.8
jose 6.2.12 6.2.15
semver 7.8.5 7.8.6
@animate-ui/react 2.2.1 2.4.2
@tailwindcss/postcss 4.3.3 4.3.4
cn 0.4.0 0.5.2
tailwindcss 4.3.3 4.3.4
eslint-config-next 16.4.2 16.4.5
shadcn 4.21.5 4.23.0
@aws-sdk/client-s3 3.1152.0 3.1163.0
@aws-sdk/s3-request-presigner 3.1152.0 3.1163.0

Updates lucide-react from 1.31.0 to 1.69.0

Release notes

Sourced from lucide-react's releases.

Version 1.69.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.68.0...1.69.0

Version 1.68.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.67.0...1.68.0

Version 1.67.0

What's Changed

New Contributors

... (truncated)

Commits
  • b196797 Update deps (#5146)
  • 588113e test(build-icons): cover Windows file URL imports (#4862)
  • 14cab02 feat(site): Add sponsor page (#5132)
  • 1668a0c chore(deps): bump rollup to 4.65.1 and keep typescript on v6 (#5110)
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • 3f1255e chore(deps-dev): bump @​vitejs/plugin-react (#4995)
  • Additional commits viewable in compare view

Updates next from 16.4.2 to 16.4.5

Release notes

Sourced from next's releases.

v16.4.5

This release contains security fixes for the following advisories:

Moderate

v16.4.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary. The announced security released for November will be published tomorrow.

Core Changes

  • [lts-active] test: disable the reads fallback params after a client navigation deployment test (#100668)
  • [lts-active] Reload on missed Turbopack startup CSS updates (#100619)
  • [lts-active] Revert "Optimize strict module factory chunks (#98421)" (#100866)
  • [lts-active] Emit the Turbopack shared-runtime bootstrap in the PPR resume so it gets the CSP nonce (#100907)
  • [lts-active] [ci] Pin deploy test deployments to Node.js 22.x (#100886)
  • [lts-active] fix(analyze): use route summaries as the analyzer route index (#100974)
  • [lts-active] Use fast-jwt instead of jsonwebtoken (#100885)

Credits

Huge thanks to @​icyJoseph, @​mischnic, @​wbinnssmith, @​lukesandberg, and @​eps1lon for helping!

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits
  • 4e5335a v16.4.5
  • 809be72 [lts-active] Strip internal middleware cookie headers from edge responses (#282)
  • 2842833 [lts-active] Fix stale compressed framing for forwarded fetch responses (#281)
  • 6596840 [lts-active] [use cache] Fix cache key when binary args are used (#280)
  • 18eeffb [lts-active] Fix shared shell poisoning from request-supplied placeholder par...
  • e66e656 [lts-active] [next/image] Fix false-positive AVIF/HEIC detection (#278)
  • d605874 [lts-active] Fix unstable_cache leaking cold 'use cache' fills across roo...
  • 80c96ed [lts-active] Fix outer 'use cache' entries reused across root param values ...
  • b175f52 v16.4.4
  • ba4a4c1 [lts-active] Use fast-jwt instead of jsonwebtoken (#100885)
  • Additional commits viewable in compare view

Updates @playwright/test from 1.64.1 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
  // No other test runs while this one is running.
});

  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
  test.skip('Not implemented yet');
});

... (truncated)

Commits
  • a1f35e1 chore: mark v1.65.0 (#43925)
  • a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
  • 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
  • daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
  • 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
  • 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
  • 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
  • d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
  • 6e3f5ff docs: release notes for v1.65 (#43874)
  • aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
  • Additional commits viewable in compare view

Updates globals from 17.13.0 to 17.14.0

Release notes

Sourced from globals's releases.

v17.14.0

  • Update globals (2026-11-01) (#355) 7abfb5d

sindresorhus/globals@v17.13.0...v17.14.0

Commits

Updates pm2 from 7.0.4 to 7.1.2

Release notes

Sourced from pm2's releases.

v7.1.2

7.1.2

Bug Fixes

  • pm2 update under a pm2 startup systemd unit no longer gets its new daemon and apps killed by ExecStop=pm2 kill (systemd >= 232) #5000
  • filter_env: true works again (ignored since 4.4.1): apps only inherit PATH, HOME, USER, locales and a few OS variables besides their env #6176
  • filter_env also applies to --update-env restart/reload and to cluster workers; --filter-env alone means true #6176
  • pm2.disconnect() no longer throws nor calls back twice when a socket takes more than 200ms to close
  • pm2 start --container uses keymetrics/pm2:<node>-trixie (was the 2018 latest image, and --node-version pointed to tags that do not exist)

Breaking change

  • filter_env: true apps no longer inherit other shell variables (NODE_ENV, NODE_OPTIONS, HTTP_PROXY...): declare them in env #6176
  • An app keeps the shell env it already received when the filter comes later (started before 7.1.2 or without filter_env, dump.pm2 included): pm2 delete it and start it again #6176

v7.1.1

7.1.1

Bug Fixes

  • Windows: memory is reported again when pm2 runs as a service (pidusage 4.1.0, wmic is used again when available) #6173
  • Linux: overlapping monitoring calls no longer leak a /proc/<pid>/stat fd per new pid in the daemon (grew with every restart)
  • pm2.connect() right after pm2.disconnect() no longer crashes with Cannot read properties of null (reading 'sock') #6002

v7.1.0

7.1.0

Features

  • pm2 monit / pm2 dash now preload the last 200 lines (out + err merged) of every process from its log files, most recent first; --lines <n> to display more #5187
  • pm2 monit: Ctrl+Up / Ctrl+Down (and PageUp / PageDown) scroll the focused log pane page by page

Bug Fixes

  • Shell environment variables named like a PM2 option (name, namespace, cron_restart, instances...) no longer override the app configuration #6006 #6016 #5747 #5622 #5030 #5032 #4943 #4778 #4821 #3210
  • Variables declared in env: and named like a PM2 option (env: { port: 3000 }, time, watch...) still reach the app: only the ambient shell environment is filtered, not what the user declares
  • Cluster mode: the pid list of the previous kill (_tree_pids, since 7.0.0) no longer leaks into the app's process.env after a restart, nor gets reused as the pid list of a later kill
  • pm2 monit: align the Custom Metrics pane in columns (value right-aligned, fixed unit column, numbers rounded to 2 decimals) and shorten long metric names instead of pushing values out of the pane
  • pm2 monit: the footer no longer overlaps the bottom border of the Custom Metrics / Metadata panes
  • pm2 monit: logs, metrics and metadata panes update instantly when the selected process changes

... (truncated)

Changelog

Sourced from pm2's changelog.

7.1.2

Bug Fixes

  • pm2 update under a pm2 startup systemd unit no longer gets its new daemon and apps killed by ExecStop=pm2 kill (systemd >= 232) #5000
  • filter_env: true works again (ignored since 4.4.1): apps only inherit PATH, HOME, USER, locales and a few OS variables besides their env #6176
  • filter_env also applies to --update-env restart/reload and to cluster workers; --filter-env alone means true #6176
  • pm2.disconnect() no longer throws nor calls back twice when a socket takes more than 200ms to close
  • pm2 start --container uses keymetrics/pm2:<node>-trixie (was the 2018 latest image, and --node-version pointed to tags that do not exist)

Breaking change

  • filter_env: true apps no longer inherit other shell variables (NODE_ENV, NODE_OPTIONS, HTTP_PROXY...): declare them in env #6176
  • An app keeps the shell env it already received when the filter comes later (started before 7.1.2 or without filter_env, dump.pm2 included): pm2 delete it and start it again #6176

7.1.1

Bug Fixes

  • Windows: memory is reported again when pm2 runs as a service (pidusage 4.1.0, wmic is used again when available) #6173
  • Linux: overlapping monitoring calls no longer leak a /proc/<pid>/stat fd per new pid in the daemon (grew with every restart)
  • pm2.connect() right after pm2.disconnect() no longer crashes with Cannot read properties of null (reading 'sock') #6002

7.1.0

Features

  • pm2 monit / pm2 dash now preload the last 200 lines (out + err merged) of every process from its log files, most recent first; --lines <n> to display more #5187
  • pm2 monit: Ctrl+Up / Ctrl+Down (and PageUp / PageDown) scroll the focused log pane page by page

Bug Fixes

  • Shell environment variables named like a PM2 option (name, namespace, cron_restart, instances...) no longer override the app configuration #6006 #6016 #5747 #5622 #5030 #5032 #4943 #4778 #4821 #3210
  • Variables declared in env: and named like a PM2 option (env: { port: 3000 }, time, watch...) still reach the app: only the ambient shell environment is filtered, not what the user declares
  • Cluster mode: the pid list of the previous kill (_tree_pids, since 7.0.0) no longer leaks into the app's process.env after a restart, nor gets reused as the pid list of a later kill
  • pm2 monit: align the Custom Metrics pane in columns (value right-aligned, fixed unit column, numbers rounded to 2 decimals) and shorten long metric names instead of pushing values out of the pane
  • pm2 monit: the footer no longer overlaps the bottom border of the Custom Metrics / Metadata panes
  • pm2 monit: logs, metrics and metadata panes update instantly when the selected process changes (no longer wait for the next refresh tick)
  • pm2 monit: characters of old log lines no longer stay stuck on screen — emoji are now measured as 2 cells, and \r, cursor escape sequences, control chars and {tags} in logs are sanitized #5397
  • @pm2/blessed is now vendored in modules/blessed (one less npm dependency)
  • chokidar 3.6.0 is now vendored in modules/chokidar with a bounded brace expansion, dropping the vulnerable braces dependency (GHSA-vfj7-8cjw-p6xm, no patched version)
  • Logs: no more lost lines in fork mode with --time / log_date_format when an app writes more than 64KB at once (partial line at a pipe chunk boundary was dropped) #6125
  • Logs: in cluster mode with --time, every line of a multi-line write is now date-prefixed (not only the first)
  • pm2 logs "/regex/" --lines 0 now streams matching apps (regex was ignored in stream-only mode); regexes with an inner / are no longer mangled, apps started after pm2 logs are picked up, and only one bus subscription is opened #5196
  • pm2 reloadLogs no longer crashes the app in fork mode when out_file/error_file are NULL and only log_file is set #5509
  • Logs: log streams are now flushed (end()) instead of destroyed on pm2 reloadLogs / app exit, so buffered data is no longer truncated
  • pm2 serve: a request with a malformed percent-escape (GET /%) no longer crashes the server (answers 400); handler exceptions answer 500 instead of killing the process
  • Logs: in cluster mode, output that bypasses process.stdout.write (pino/sonic-boom, npm start, children spawned with stdio inherit) no longer ends up in pm2.log — workers get piped stdio and the daemon routes it to the app log files and pm2 logs #3675 #4719 #4872 #4916 #4953 #5633 #4816
  • Logs: in cluster mode, the worker's stdout/stderr pipes are made blocking so a raw write bigger than the pipe buffer (fs.writeSync(1, ...), native addons) is no longer silently truncated at 64 KB #4044 #4872
  • exec_mode: cluster on a non Node.js/Bun script (bash, python, binary) now falls back to fork mode with a warning instead of crashing with SyntaxError: Invalid or unexpected token (ELF) #4775

... (truncated)

Commits

Updates typescript-eslint from 8.71.2 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @fastify/cookie from 11.1.3 to 11.1.5

Release notes

Sourced from @​fastify/cookie's releases.

v11.1.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.4...v11.1.5

v11.1.4

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.3...v11.1.4

Commits
  • a96460b Bumped v11.1.5
  • 7f9551e fix: forward custom encode option to cookie serializer (#377)
  • 4f47cf1 Bumped v11.1.4
  • c07e472 fix: forward encode option to cookie serializer (#374)
  • d27beb4 perf(signer): add early delimiter check in unsign to avoid redundant HMAC com...
  • See full diff in compare view

Updates @fastify/cors from 11.3.1 to 11.4.1

Release notes

Sourced from @​fastify/cors's releases.

v11.4.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.4.0...v11.4.1

v11.4.0

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-cors@v11.3.1...v11.4.0

Commits
  • 33424f5 Bumped v11.4.1
  • 115ff7c fix: preserve header tokens with whitespace preceding commas in vary parser (...
  • a84d816 Bumped v11.4.0
  • 32cf1c2 Merge commit from fork
  • d1dfe62 docs: clarify that RegExp origins are not anchored (#424)
  • 94eba39 chore: bump fastify/workflows/.github/workflows/reusable-release.yml
  • See full diff in compare view

Updates @fastify/multipart from 10.1.4 to 10.1.7

Release notes

Sourced from @​fastify/multipart's releases.

v10.1.7

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fastify-multipart@v10.1.6...v10.1.7

v10.1.6

What's Changed

New Contributors

Full Changelog: fastify/fastify-multipart@v10.1.5...v10.1.6

v10.1.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-multipart@v10.1.4...v10.1.5

Commits
  • 3978273 Bumped v10.1.7
  • 437d3e7 Merge commit from fork
  • a3d5814 chore: bump fastify/workflows/.github/workflows/reusable-release.yml
  • 39d1579 docs: clarify multipart array validation (#627)
  • 81443ed Bumped v10.1.6
  • 7afc28d chore: merge ajvFilePlugin type tests into one file
  • da8fee4 fix: correct ajvFilePlugin type to be compatible with Fastify ajv.plugins (#606)
  • 18d9795 Bumped v10.1.5
  • 8fec686 fix: type decoded file values assigned in onFile (#624)
  • See full diff in compare view

Updates @fastify/rate-limit from 11.2.1 to 11.2.2

Release notes

Sourced from @​fastify/rate-limit's releases.

v11.2.2

What's Changed

New Contributors

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 2…
267f4a0 
…9 updates

Bumps the minor-and-patch group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.69.0` |
| [next](https://github.com/vercel/next.js) | `16.4.2` | `16.4.5` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.13.0` | `17.14.0` |
| [pm2](https://github.com/Unitech/pm2) | `7.0.4` | `7.1.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.2` | `8.72.1` |
| [@fastify/cookie](https://github.com/fastify/fastify-cookie) | `11.1.3` | `11.1.5` |
| [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.3.1` | `11.4.1` |
| [@fastify/multipart](https://github.com/fastify/fastify-multipart) | `10.1.4` | `10.1.7` |
| [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit) | `11.2.1` | `11.2.2` |
| [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.9.2` | `9.9.3` |
| [@fastify/swagger-ui](https://github.com/fastify/fastify-swagger-ui) | `6.1.2` | `6.1.3` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.1` | `1.10.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.301.0` |
| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.301.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.301.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.43.0` | `1.44.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `6.3.15` | `6.7.0` |
| [fastify](https://github.com/fastify/fastify) | `5.12.7` | `5.12.8` |
| [jose](https://github.com/panva/jose) | `6.2.12` | `6.2.15` |
| [semver](https://github.com/npm/node-semver) | `7.8.5` | `7.8.6` |
| [@animate-ui/react](https://github.com/imskyleen/animate-ui/tree/HEAD/packages/react) | `2.2.1` | `2.4.2` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.3` | `4.3.4` |
| [cn](https://github.com/shadcn-ui/cn/tree/HEAD/packages/cn) | `0.4.0` | `0.5.2` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.3` | `4.3.4` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.4.2` | `16.4.5` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.5` | `4.23.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1152.0` | `3.1163.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1152.0` | `3.1163.0` |



Updates `lucide-react` from 1.31.0 to 1.69.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.69.0/packages/lucide-react)

Updates `next` from 16.4.2 to 16.4.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.2...v16.4.5)

Updates `@playwright/test` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `globals` from 17.13.0 to 17.14.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.13.0...v17.14.0)

Updates `pm2` from 7.0.4 to 7.1.2
- [Release notes](https://github.com/Unitech/pm2/releases)
- [Changelog](https://github.com/Unitech/pm2/blob/master/CHANGELOG.md)
- [Commits](Unitech/pm2@v7.0.4...v7.1.2)

Updates `typescript-eslint` from 8.71.2 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

Updates `@fastify/cookie` from 11.1.3 to 11.1.5
- [Release notes](https://github.com/fastify/fastify-cookie/releases)
- [Commits](fastify/fastify-cookie@v11.1.3...v11.1.5)

Updates `@fastify/cors` from 11.3.1 to 11.4.1
- [Release notes](https://github.com/fastify/fastify-cors/releases)
- [Commits](fastify/fastify-cors@v11.3.1...v11.4.1)

Updates `@fastify/multipart` from 10.1.4 to 10.1.7
- [Release notes](https://github.com/fastify/fastify-multipart/releases)
- [Commits](fastify/fastify-multipart@v10.1.4...v10.1.7)

Updates `@fastify/rate-limit` from 11.2.1 to 11.2.2
- [Release notes](https://github.com/fastify/fastify-rate-limit/releases)
- [Commits](fastify/fastify-rate-limit@v11.2.1...v11.2.2)

Updates `@fastify/swagger` from 9.9.2 to 9.9.3
- [Release notes](https://github.com/fastify/fastify-swagger/releases)
- [Commits](fastify/fastify-swagger@v9.9.2...v9.9.3)

Updates `@fastify/swagger-ui` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/fastify/fastify-swagger-ui/releases)
- [Commits](fastify/fastify-swagger-ui@v6.1.2...v6.1.3)

Updates `@opentelemetry/api` from 1.9.1 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.1...v1.10.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.223.0 to 0.301.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.301.0)

Updates `@opentelemetry/instrumentation-http` from 0.223.0 to 0.301.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.301.0)

Updates `@opentelemetry/sdk-node` from 0.223.0 to 0.301.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.301.0)

Updates `@opentelemetry/semantic-conventions` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.43.0...semconv/v1.44.0)

Updates `bullmq` from 6.3.15 to 6.7.0
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v6.3.15...v6.7.0)

Updates `fastify` from 5.12.7 to 5.12.8
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.7...v5.12.8)

Updates `jose` from 6.2.12 to 6.2.15
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.12...v6.2.15)

Updates `semver` from 7.8.5 to 7.8.6
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.5...v7.8.6)

Updates `@animate-ui/react` from 2.2.1 to 2.4.2
- [Release notes](https://github.com/imskyleen/animate-ui/releases)
- [Commits](https://github.com/imskyleen/animate-ui/commits/v2.4.2/packages/react)

Updates `@tailwindcss/postcss` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/@tailwindcss-postcss)

Updates `cn` from 0.4.0 to 0.5.2
- [Release notes](https://github.com/shadcn-ui/cn/releases)
- [Changelog](https://github.com/shadcn-ui/cn/blob/main/packages/cn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/cn/commits/cn@0.5.2/packages/cn)

Updates `tailwindcss` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/tailwindcss)

Updates `eslint-config-next` from 16.4.2 to 16.4.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.5/packages/eslint-config-next)

Updates `shadcn` from 4.21.5 to 4.23.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.23.0/packages/shadcn)

Updates `@aws-sdk/client-s3` from 3.1152.0 to 3.1163.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1163.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1152.0 to 3.1163.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1163.0/packages/s3-request-presigner)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: globals
  dependency-version: 17.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pm2
  dependency-version: 7.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@fastify/cookie"
  dependency-version: 11.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@fastify/cors"
  dependency-version: 11.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@fastify/multipart"
  dependency-version: 10.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@fastify/rate-limit"
  dependency-version: 11.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@fastify/swagger"
  dependency-version: 9.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@fastify/swagger-ui"
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.301.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation-http"
  dependency-version: 0.301.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.301.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: bullmq
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fastify
  dependency-version: 5.12.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: semver
  dependency-version: 7.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@animate-ui/react"
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: cn
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.4.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: shadcn
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1163.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1163.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants