build(deps): bump the all-others group across 1 directory with 10 updates by dependabot[bot] · Pull Request #461 · anyulled/devbcn-nextjs

dependabot · 2026-10-05T13:08:08Z

Bumps the all-others group with 10 updates in the / directory:

Package	From	To
@supabase/supabase-js	`2.116.0`	`2.117.2`
baseline-browser-mapping	`2.11.22`	`2.11.27`
lucide-react	`1.45.0`	`1.50.0`
react-hook-form	`7.87.0`	`7.89.0`
sass	`1.104.0`	`1.105.1`
zod	`4.6.2`	`4.6.5`
dotenv	`17.4.2`	`18.0.5`
globals	`17.12.0`	`17.13.0`
portless	`0.15.6`	`0.15.7`
tsx	`4.23.13`	`4.23.15`

Updates @supabase/supabase-js from 2.116.0 to 2.117.2

Release notes

Sourced from @supabase/supabase-js's releases.

v2.117.2

2.117.2 (2026-09-25)

🩹 Fixes

postgrest: avoid instantiation depth errors for large relationship unions (#2701)

❤️ Thank You

Han Qiao @sweatybridge

v2.117.2-canary.0

2.117.2-canary.0 (2026-09-24)

🩹 Fixes

postgrest: avoid instantiation depth errors for large relationship unions (#2701)

❤️ Thank You

Han Qiao @sweatybridge

v2.117.1

2.117.1 (2026-09-23)

🩹 Fixes

auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

Katerina Skroumpelou @mandarini

v2.117.1-canary.0

2.117.1-canary.0 (2026-09-23)

🩹 Fixes

auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

Katerina Skroumpelou @mandarini

v2.117.0

2.117.0 (2026-09-22)

🚀 Features

auth: forward options.mediation to navigator.credentials.get in signInWithPasskey (#2675)

... (truncated)

Changelog

Sourced from @supabase/supabase-js's changelog.

2.117.2 (2026-09-25)

This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.

2.117.1 (2026-09-23)

🩹 Fixes

auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

Katerina Skroumpelou @mandarini

2.117.0 (2026-09-22)

🚀 Features

auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

fadymak

Commits

54c225d chore(release): version 2.117.1 changelogs (#2700)
739b351 fix(auth): return stored session when a refresh loses to another tab (#2698)
f34d428 chore(release): version 2.117.0 changelogs (#2697)
cc45ccf feat(auth): enable passkey API by default and deprecate experimental passkey ...
c511286 docs(realtime): document relationship of accessToken() and heartbeat (#2680)
84af33f chore(release): version 2.116.0 changelogs (#2679)
See full diff in compare view

Updates baseline-browser-mapping from 2.11.22 to 2.11.27

Commits

6141d06 Patch to 2.11.27 because browser or feature data changed
e1d166b Browser or feature data changed
42972a7 Updating static site
c1934c6 Patch to 2.11.26 because browser or feature data changed
4873684 Browser or feature data changed
9030798 Updating static site
a5df351 Updating static site
ecc5b54 Updating static site
719bf7a Patch to 2.11.25 because browser or feature data changed
c4f5b49 Browser or feature data changed
Additional commits viewable in compare view

Updates lucide-react from 1.45.0 to 1.50.0

Release notes

Sourced from lucide-react's releases.

Version 1.50.0

What's Changed

fix(shared): escape attribute values in buildLucideSvg by @Saadanjum0 in lucide-icons/lucide#4940

fix(github/actions): use canonical metadata instructions for PR suggestions by @karsa-mistmere in lucide-icons/lucide#4910

fix(icons): replaced nut & nut-off with compliant designs by @karsa-mistmere in lucide-icons/lucide#4840

chore(deps-dev): bump @angular/router from 22.1.7 to 22.2.0 by @dependabot[bot] in lucide-icons/lucide#4945

chore(deps): bump next from 16.3.4 to 16.3.6 by @dependabot[bot] in lucide-icons/lucide#4946

chore(deps-dev): bump the svelte-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4918

test(integrations): add Vue integration fixtures for Vite, Nuxt and Vike by @ericfennis in lucide-icons/lucide#4882

feat(svelte): export context subpath by @vugarbbakhishov-hub in lucide-icons/lucide#4927

fix(lucide-preact): add Preact v11 compatibility by @JoviDeCroock in lucide-icons/lucide#4924

feat(icons): added layout-grid-circles icon by @karsa-mistmere in lucide-icons/lucide#4567

New Contributors

@Saadanjum0 made their first contribution in lucide-icons/lucide#4940

@JoviDeCroock made their first contribution in lucide-icons/lucide#4924

Full Changelog: lucide-icons/lucide@1.49.0...1.50.0

Version 1.49.0

What's Changed

feat(icons): added letters icon by @karsa-mistmere in lucide-icons/lucide#4779

fix(packages): declare @types/react as an optional peer dependency by @unrevised6419 in lucide-icons/lucide#4892

feat(icons): added bangladeshi-taka icon by @TanvirMahin24 in lucide-icons/lucide#4869

feat(icons): added printer-3d icon by @Azuzula in lucide-icons/lucide#4414

New Contributors

@unrevised6419 made their first contribution in lucide-icons/lucide#4892

@TanvirMahin24 made their first contribution in lucide-icons/lucide#4869

@Azuzula made their first contribution in lucide-icons/lucide#4414

Full Changelog: lucide-icons/lucide@1.48.0...1.49.0

Version 1.48.0

What's Changed

feat(icons): added briefcase-plus icon by @tylerkade in lucide-icons/lucide#4757

feat(icons): added square-sparkles icon by @nananecy in lucide-icons/lucide#3610

feat(icons): added line-dot-left-horizontal icon by @nathan-de-pachtere in lucide-icons/lucide#3855

fix(packages/svelte,solid): fix shared type imports in Solid and Svelte by @karsa-mistmere in lucide-icons/lucide#4846

chore(deps-dev): bump react-native from 0.76.9 to 0.87.1 in the react-native-deps group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4673

feat(packages): export __iconNode data across framework packages by @lx3133584 in lucide-icons/lucide#4761

fix(icons): Tweak card-sim chip by @danielbayley in lucide-icons/lucide#3649

feat(icons): added line-dot-top-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3856

feat(icons): added line-dot-bottom-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3857

fix(packages/react-native): pass testID to the rendered Svg element by @OlegBezr in lucide-icons/lucide#4881

chore(@lucide/vue): Fix types @lucide/vue package and added workflow for it. by @ericfennis in lucide-icons/lucide#4883

test(packages/shared): cover buildLucideIconForReact by @vugarbbakhishov-hub in lucide-icons/lucide#4872

feat(site): Better icon detail page and add unreleased flag by @ericfennis in lucide-icons/lucide#4877

fix(icons): changed map-pinned icon by @jguddas in lucide-icons/lucide#4880

fix(icons): changed mail-pen by @karsa-mistmere in lucide-icons/lucide#4899

... (truncated)

Commits

e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
See full diff in compare view

Updates react-hook-form from 7.87.0 to 7.89.0

Release notes

Sourced from react-hook-form's releases.

Version 7.89.0

🐞 Fixes

Fix form state select option (#13784)

Remove duplicate default value field (#13783)

Fix validateField skipping refs without setCustomValidity under native validation (#13782)

Fix form-level validation using a stale validate function (#13777)

Fix useFieldArray touched fields handling (#13776)

Fix pending delayError timers for nested paths (#13775)

Fix getValues extracting unmarked field array entries (#13773)

Fix field array touched state not being re-indexed when unsubscribed (#13772)

Fix nested delayError timers remaining when a parent validates clean (#13771)

Fix nested delayError timers remaining after resetField() resets a parent (#13769)

Fix stale field array root errors after an operation satisfies the validation rule (#13767)

Fix setValue() not revalidating dependencies when shouldValidate is enabled (#13765)

Fix stale built-in validation results after reset() during handleSubmit() (#13761)

Fix stale form-level validation results after reset() (#13762)

Fix validation rules removed from register options at runtime remaining active (#13758)

Fix useController required validation not using the controlled value (#13756)

Fix stale form-level errors remaining after successful re-validation (#13755)

Fix useFieldArray marking the form dirty when the array default value is null (#13750)

Fix isValid not being recomputed when the errors prop is emptied (#13748)

Fix form-level validation running more than once per traversal (#13747)

Fix stale built-in validation results after reset() during onChange (#13745)

Fix stale resolver results after reset() during onChange (#13744)

Fix setValue() not triggering field array root validation when shouldValidate is enabled (#13743)

Fix getFieldState(name, formState) updates after reset() (#13741)

Fix dirty state remaining for rows removed from a field array (#13739)

🧹 Refactors

Replace rimraf cleanup with fs.rmSync (#13770)

Reduce bundle size (#13759)

📦 Dependencies

Add optional @types/react peer dependency (#13781)

❤️ Thank You

Thanks to @niketchandivade, @unrevised6419, @Lucasfarg, @dfedoryshchev, @locphamnice, @Abdalluh28, @giaBaoJS, @Mohamedshawky4, @roli-lpci, @soroush5, @zigzagdev and @bluebill1049 for their contributions! 🎉

Version 7.88.0

✨ Features

Add Error Message component (#13472)

Add the Error Message component for displaying validation errors from React Hook Form.

🐞 Fixes

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.89.0] - 2026-09-26

Changed

Add optional @types/react peer dependency

Fixed

validateField calling setCustomValidity on refs that don't implement it under native validation

Form-level validate running a stale function instead of the latest one

Form-level validation leaving stale errors after a successful re-validation

Form-level validation running more than once per traversal

Stale validation results (resolver, built-in, form-level validate) being applied after reset in onChange and handleSubmit

Pending delayError timers for nested paths not being cancelled when a parent validates clean or is reset via resetField

getValues(names, { dirtyFields }) returning every row of a field array instead of only the marked entries

Field array touched state not being re-indexed when touchedFields is not subscribed

useFieldArray emitting touchedFields in form state updates when unnecessary

Stale field array root error not clearing once an array operation satisfies the rule

useFieldArray marking the form dirty when the array default is null

Dirty state lingering for rows removed from a field array

setValue with shouldValidate not revalidating deps

setValue with shouldValidate not triggering validation for a field array root

Validation rules removed from register options at runtime still being applied

useController validating required against the input value instead of the controlled value

isValid not recomputing when the errors prop is emptied

getFieldState(name, formState) with a resolver after reset()

[7.88.0] - 2026-09-12

Added

<ErrorMessage /> component for rendering a field's validation error

Fixed

setValue dirty state comparison ignoring valueAs* / setValueAs transforms

Nested delayError timers not being cancelled when a parent is cleared or unregistered

Cleared delayError errors coming back once the pending timer fires

criteriaMode not refreshing when form options are updated at runtime

resetField leaving stale validating state for the field

reset not clearing isValidating and validatingFields, and ignoring keepIsValidating

replace() leaving errors and touched state for removed rows

remove() leaking deleted values onto surviving items

handleSubmit applying a stale resolver result after reset

handleSubmit dropping resolver-reported root errors on submit

Stale resolver state updates being applied after reset

trigger dropping registered nested errors when targeting their parent

trigger setting a parent error when the target has only nested resolver errors

useWatch compute cache not being initialized with the initial output

flatten / jsonToFormData not preserving FileList and not skipping undefined

... (truncated)

Commits

4722d22 7.89.0
72a4c98 👟 chore: correct form state select option (#13784)
14c7bec 🕵🏻‍♂️ chore: remove duplicate default value field (#13783)
d9cab62 🤖 chore: add optional @types/react peer dependency (#13781)
c12546c 🐞 fix(validateField): skip refs without setCustomValidity under native valida...
5fd9ef6 🐞 fix(validate): run the latest form level validate function (#13777)
7893230 🐞 fix(useFieldArray): improve touched fields handling and add tests (#13776)
ad8abf6 🐴 cancel pending delayError timers for nested paths (#13775)
eb159da 🐞 fix(getValues): extract only the marked entries of a field array (#13773)
4647014 🐞 fix: re-index field array touched state when it is not subscribed (#13772)
Additional commits viewable in compare view

Updates sass from 1.104.0 to 1.105.1

Release notes

Sourced from sass's releases.

Dart Sass 1.105.1

To install Sass 1.105.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Improve error messages for @extends across different media queries.

See the full changelog for changes in earlier releases.

Dart Sass 1.105.0

To install Sass 1.105.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

Add a SassModule class and a corresponding Value.assertModule() method.

See the full changelog for changes in earlier releases.

Dart Sass 1.104.1

To install Sass 1.104.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

... (truncated)

Changelog

Sourced from sass's changelog.

1.105.1

Improve error messages for @extends across different media queries.

1.105.0

Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

Add a SassModule class and a corresponding Value.assertModule() method.

1.104.1

Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

Commits

db3c666 Merge pull request #2869 from sass/extend-media-errors
2ac4515 Improve span boundaries for media queries and selectors
706cfbf Fix InterpolationMap._expandInterpolationSpanRight()
792a948 Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize (#2870)
61ab702 Improve errors for @extend across media queries
288d4e2 Auto-merge dependabot PRs as the Sass bot account (#2866)
4bf2b92 Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#2865)
850d57e [meta.load] Add support for meta.load() and related features (#2861)
6180be0 Bump postcss from 8.5.26 to 8.5.28 in /pkg/sass-parser (#2863)
da84fb5 Fix --watch not recompiling sources modified during a compilation (#2850)
Additional commits viewable in compare view

Updates zod from 4.6.2 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post

f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections

de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)

56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)

ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"

cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""

0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5

59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)

ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)

2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump

f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged

75d63ee1 docs: show only the .properties() method form in the 4.6 post

46da9572 docs: match the error-message examples to what the parsers emit

Commits

59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
0f3f5ee 4.6.5
cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
743aedb 4.6.4
Additional commits viewable in compare view

Updates dotenv from 17.4.2 to 18.0.5

Changelog

Sourced from dotenv's changelog.

18.0.5 (2026-09-30)

Changed

Fix missing typescript module declaration (#1068)

Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

NEW: Dotenv now has a CLI. (#1022)
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
NEW: Dotenv now has a fast parser thanks to @homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
</tr></table> 

... (truncated)

Commits

05215e0 18.0.5
25bdd0a changelog
2d640d2 Merge pull request #1066 from AyanAta42/master
c84e2b4 Merge pull request #1068 from matzehecht/fix-typescript
570146a Optimize fast parser comment scanning
4aa0665 add typescript module declaration for dotenv/config
f1380ec Bound fast parser comment scans to the current line
a626f72 add link
b36a142 video links
86804c0 18.0.4
Additional commits viewable in compare view

Updates globals from 17.12.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

Update globals (2026-10-01) (#354) b007369

sindresorhus/globals@v17.12.0...v17.13.0

Commits

ce512bc 17.13.0
b007369 Update globals (2026-10-01) (#354)
16cb1fe Meta tweaks
See full diff in compare view

Updates portless from 0.15.6 to 0.15.7

Release notes

Sourced from portless's releases.

v0.15.7

New Features

Turbo JSONC workspaces: Workspaces that only have turbo.jsonc now use Turbo orchestration, the same as turbo.json. (#422)

Unresolved hostname warning: After registering a route, portless asks the proxy to sync the hosts file and warns when the hostname still does not resolve. (#374)

WebMCP documentation site: The docs moved to Geistdocs and expose their pages to agents through WebMCP. (#427)

Bug Fixes

Hosts sync data loss: Manual hosts sync refuses to write when the hosts file cannot be read, verifies what it wrote, and removes stale managed entries when no routes remain. (#424)

Local CA certificate: The generated CA no longer carries a duplicate Basic Constraints extension on OpenSSL 1.1.1 and LibreSSL, which macOS and OpenSSL 3 rejected and left *.localhost untrusted. (#443)

Proxy crash on backend restart: The proxy no longer forwards client hop-by-hop headers, which left backend sockets open and crashed the proxy with ECONNRESET when a backend restarted. (#445)

Wildcard fallback order: With --wildcard, an unregistered subdomain now routes to the most specific registered parent instead of the first one stored. (#446)

Occupied app ports: Free app ports are checked on 127.0.0.1, ::1, 0.0.0.0 and ::, so portless no longer assigns a port another server already holds. (#447)

Version manager node: Child commands now use the node a version manager put first on PATH; portless's own node directory is only a fallback. (#448)

Contributors

@Railly

@ctate

@Knat-Dev

@EfeDurmaz16

@octo-patch

@bilinkis

@luizfm

@Geektrovert

@thazhemadam

@begininvoke

Changelog

Sourced from portless's changelog.

0.15.7

New Features

Turbo JSONC workspaces: Workspaces that only have turbo.jsonc now use Turbo orchestration, the same as turbo.json. (#422)

Unresolved hostname warning: After registering a route, portless asks the proxy to sync the hosts file and warns when the hostname still does not resolve. (#374)

WebMCP documentation site: The docs moved to Geistdocs and expose their pages to agents through WebMCP. (#427)

Bug Fixes

Hosts sync data loss: Manual hosts sync refuses to write when the hosts file cannot be read, verifies what it wrote, and removes stale managed entries when no routes remain. (#424)

Local CA certificate: The generated CA no longer carries a duplicate Basic Constraints extension on OpenSSL 1.1.1 and LibreSSL, which macOS and OpenSSL 3 rejected and left *.localhost untrusted. (#443)

Proxy crash on backend restart: The proxy no longer forwards client hop-by-hop headers, which left backend sockets open and crashed the proxy with ECONNRESET when a backend restarted. (#445)

Wildcard fallback order: With --wildcard, an unregistered subdomain now routes to the most specific registered parent instead of the first one stored. (#446)

Occupied app ports: Free app ports are checked on 127.0.0.1, ::1, 0.0.0.0 and ::, so portless no longer assigns a port another server already holds. (#447)

Version manager node: Child commands now use the node a version manager put first on PATH; portless's own node directory is only a fallback. (#448)

Contributors

@Railly

@ctate

@Knat-Dev

@EfeDurmaz16

@octo-patch

@bilinkis

@luizfm

@Geektrovert

@thazhemadam

@begininvoke

Commits

e06a357 Prepare v0.15.7 release (#449)
4cb73e8 fix(cli): only assign app ports that are free on every local address (#447)
6767f99 fix(cli): put the user's PATH ahead of portless's own node directory (#448)
71fd45f fix(proxy): pick the most specific parent route in wildcard fallback (#446)
3761a7b fix(proxy): stop forwarding client hop-by-hop headers to backends (#445)
208dceb fix(certs): stop generating a CA with duplicate Basic Constraints (#443)
ef41e79 docs: prepare native WebMCP migration (#435)
67c4739 Prevent hosts sync data loss on read failures (#424)
b52c2d6 Migrate portless docs to Geistdocs with WebMCP (#427)
05d8a9a Add Labs status badges to README (#426)
Additional commits viewable in compare view

Updates tsx from 4.23.13 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

exclude bare builtins from namespace inheritance (38e1588)

expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)

make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

npm package (@latest dist-tag)

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

npm package (@latest dist-tag)

Commits

ca66105 test: fix drive-less file URLs in ESM resolver fixtures
2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
38e1588 fix: exclude bare builtins from namespace inheritance
562c434 fix: make namespaced register() overloads portable for declaration emit
edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
70e7828 test: upgrade tinyspy for disposable API
9ed2022 ci: avoid duplicate release notifications
872e77f refactor: use disposables for cleanup
6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Depe...

Description has been truncated

…ates Bumps the all-others group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.116.0` | `2.117.2` | | [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.22` | `2.11.27` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.45.0` | `1.50.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.89.0` | | [sass](https://github.com/sass/dart-sass) | `1.104.0` | `1.105.1` | | [zod](https://github.com/colinhacks/zod) | `4.6.2` | `4.6.5` | | [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.5` | | [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` | | [portless](https://github.com/vercel-labs/portless) | `0.15.6` | `0.15.7` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | Updates `@supabase/supabase-js` from 2.116.0 to 2.117.2 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.117.2/packages/core/supabase-js) Updates `baseline-browser-mapping` from 2.11.22 to 2.11.27 - [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases) - [Commits](web-platform-dx/baseline-browser-mapping@v2.11.22...v2.11.27) Updates `lucide-react` from 1.45.0 to 1.50.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.50.0/packages/lucide-react) Updates `react-hook-form` from 7.87.0 to 7.89.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.87.0...v7.89.0) Updates `sass` from 1.104.0 to 1.105.1 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.104.0...1.105.1) Updates `zod` from 4.6.2 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.2...v4.6.5) Updates `dotenv` from 17.4.2 to 18.0.5 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.4.2...v18.0.5) Updates `globals` from 17.12.0 to 17.13.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.12.0...v17.13.0) Updates `portless` from 0.15.6 to 0.15.7 - [Release notes](https://github.com/vercel-labs/portless/releases) - [Changelog](https://github.com/vercel-labs/portless/blob/main/CHANGELOG.md) - [Commits](vercel-labs/portless@v0.15.6...v0.15.7) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) --- updated-dependencies: - dependency-name: "@supabase/supabase-js" dependency-version: 2.117.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-others - dependency-name: baseline-browser-mapping dependency-version: 2.11.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-others - dependency-name: lucide-react dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-others - dependency-name: react-hook-form dependency-version: 7.89.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-others - dependency-name: sass dependency-version: 1.105.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-others - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-others - dependency-name: dotenv dependency-version: 18.0.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-others - dependency-name: globals dependency-version: 17.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-others - dependency-name: portless dependency-version: 0.15.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-others - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-others ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-05T13:08:34Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 71a79f29-28d0-4666-a1ce-43065c2214c5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026

dependabot Bot requested a review from anyulled as a code owner October 5, 2026 13:08

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026

github-actions Bot added the size/size/M label Oct 5, 2026

Navigation Menu

Repository navigation

build(deps): bump the all-others group across 1 directory with 10 updates - #461

build(deps): bump the all-others group across 1 directory with 10 updates#461
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-others-c988698798

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

coderabbitai Bot commented Oct 5, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026

v2.117.2

2.117.2 (2026-09-25)

🩹 Fixes

❤️ Thank You

v2.117.2-canary.0

2.117.2-canary.0 (2026-09-24)

🩹 Fixes

❤️ Thank You

v2.117.1

2.117.1 (2026-09-23)

🩹 Fixes

❤️ Thank You

v2.117.1-canary.0

2.117.1-canary.0 (2026-09-23)

🩹 Fixes

❤️ Thank You

v2.117.0

2.117.0 (2026-09-22)

🚀 Features

2.117.2 (2026-09-25)

2.117.1 (2026-09-23)

🩹 Fixes

❤️ Thank You

2.117.0 (2026-09-22)

🚀 Features

❤️ Thank You

Version 1.50.0

What's Changed

New Contributors

Version 1.49.0

What's Changed

New Contributors

Version 1.48.0

What's Changed

Version 7.89.0

🐞 Fixes

🧹 Refactors

📦 Dependencies

❤️ Thank You

Version 7.88.0

✨ Features

🐞 Fixes

[7.89.0] - 2026-09-26

Changed

Fixed

[7.88.0] - 2026-09-12

Added

Fixed

Dart Sass 1.105.1

Changes

Dart Sass 1.105.0

Changes

JS API

Dart API

Dart Sass 1.104.1

Changes

Command Line Interface

1.105.1

1.105.0

JS API

Dart API

1.104.1

Command Line Interface

v4.6.5

Commits:

v4.6.4

v4.6.3

18.0.5 (2026-09-30)

Changed

18.0.4 (2026-09-25)

Changed

18.0.3 (2026-09-22)

Changed

18.0.2 (2026-09-21)

Changed

18.0.1 (2026-09-18)

Changed

18.0.0 (2026-09-17)