chore(deps): bump the minor-patch group across 1 directory with 5 updates

[dependabot]

Bumps the minor-patch group with 5 updates in the / directory:

Package	From	To
@supabase/supabase-js	2.116.0	2.117.2
@vercel/functions	3.9.8	3.9.9
framer-motion	13.4.0	13.4.4
posthog-js	1.434.2	1.434.15
vite	8.3.0	8.3.1

Updates @supabase/supabase-js from 2.116.0 to 2.117.2

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.117.2

2.117.2 (2026-09-25)

🩹 Fixes

• postgrest: avoid instantiation depth errors for large relationship unions (#2701)

❤️ Thank You

• Han Qiao @​sweatybridge

v2.117.2-canary.0

2.117.2-canary.0 (2026-09-24)

🩹 Fixes

• postgrest: avoid instantiation depth errors for large relationship unions (#2701)

❤️ Thank You

• Han Qiao @​sweatybridge

v2.117.1

2.117.1 (2026-09-23)

🩹 Fixes

• auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.117.1-canary.0

2.117.1-canary.0 (2026-09-23)

🩹 Fixes

• auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.117.0

2.117.0 (2026-09-22)

🚀 Features

• auth: forward options.mediation to navigator.credentials.get in signInWithPasskey (#2675)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.117.2 (2026-09-25)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.117.1 (2026-09-23)

🩹 Fixes

• auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

2.117.0 (2026-09-22)

🚀 Features

• auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

• fadymak

Commits

• 54c225d chore(release): version 2.117.1 changelogs (#2700)
• 739b351 fix(auth): return stored session when a refresh loses to another tab (#2698)
• f34d428 chore(release): version 2.117.0 changelogs (#2697)
• cc45ccf feat(auth): enable passkey API by default and deprecate experimental passkey ...
• c511286 docs(realtime): document relationship of accessToken() and heartbeat (#2680)
• 84af33f chore(release): version 2.116.0 changelogs (#2679)
• See full diff in compare view

Updates @vercel/functions from 3.9.8 to 3.9.9

Commits

• See full diff in compare view

Updates framer-motion from 13.4.0 to 13.4.4

Changelog

Sourced from framer-motion's changelog.

[13.4.4] 2026-09-25

Changed

• scroll: 44% smaller.
• useScroll: 33% smaller.
• Scroll callbacks: 50% faster.
• Removed ScrollTimeline support for JS callbacks as benchmarked no improvement over scrollInfo.

Fixed

• useDragControls: Fixed snapToCursor origin drift on repeated calls.
• drag: Improved pointerend timing.
• spring: Check invalid spring values before applying.
• AnimatePresence: Ensure children don't stick during reentry.

[13.4.3] 2026-09-24

Fixed

• <motion>: Ensure animations replay when Suspense reveals memoized content.

[13.4.2] 2026-09-23

Fixed

• Reorder: Don't scale position of elements at origin 0 when dragConstraints changes.
• Unrecognised easing names no longer throw.

[13.4.1] 2026-09-22

Fixed

• animate: CSS variable writes on SVGs apply to style attribute.

Commits

• 33f6e72 v13.4.4
• e50ec7b Updating changelog
• 6e98fce Fix spelling mistakes in code comments
• a47d6f2 Fix AnimatePresence child stuck at initial after re-entering during exit (#3834)
• 164be2b v13.4.3
• d2747a2 Updating changelog
• 720530a Merge pull request #3833 from motiondivision/cursor/bc-824bfd3c-7a94-4eee-be1...
• 7eb469a Fix #3832: Replay animations when Suspense reveals memoized motion content
• be8a4b3 Add failing Cypress test for Suspense reveal of memoized content (#3832)
• ef59724 Add failing tests for animations after Suspense reveals memoized content (#3832)
• Additional commits viewable in compare view

Updates posthog-js from 1.434.2 to 1.434.15

Release notes

Sourced from posthog-js's releases.

posthog-js@1.434.15

1.434.15

Patch Changes

• #5115 8531e40 Thanks @​turnipdabeets! - Fix SPA $pageview events from pushState/replaceState navigations carrying the previous page's title (2026-09-26)

posthog-js@1.434.14

1.434.14

Patch Changes

• #5097 ae954ab Thanks @​turnipdabeets! - Fix useThumbSurvey from @posthog/react/surveys and posthog-js/react/surveys ignoring the client passed to PostHogProvider, which left it capturing no survey events. (2026-09-25)

posthog-js@1.434.13

1.434.13

Patch Changes

• #5098 a7250f0 Thanks @​Piccirello! - Replay loads a recorded font under the replay iframe's content security policy, not the embedding page's. (2026-09-24)

posthog-js@1.434.12

1.434.12

Patch Changes

• #5073 60bd968 Thanks @​ksvat! - The replayer no longer freezes the tab on a mutation that adds tens of thousands of nodes at once. It now applies a batch of 1,000 or more adds against a detached subtree, so the document updates style and layout once instead of per insert. A recorded batch of 25,746 style elements went from 92 seconds of blocked main thread to 1.5 seconds. (2026-09-23)

posthog-js@1.434.11

1.434.11

Patch Changes

• #5051 1549919 Thanks @​DeepanshuPal! - Avoid cross-domain cookie probes when cross-subdomain cookies are disabled. (2026-09-23)

posthog-js@1.434.10

1.434.10

Patch Changes

• #5060 a9c40ec Thanks @​marandaneto! - Fix SDK initialization when a script loader pre-creates window.posthog as a placeholder object. (2026-09-23)

posthog-js@1.434.9

1.434.9

... (truncated)

Commits

• 4e596e0 chore: update versions and lockfile [version bump]
• 8531e40 fix(browser): capture SPA pageview title after the router updates it (#5115)
• 3c24aa5 test(node): strengthen SDK regression coverage (#5105)
• 521bcd4 chore: update versions and lockfile [version bump]
• f8d7db4 feat(react-native-plugin): add getSessionReplayDebugProperties() (#5111)
• 63b38ad feat(react-native): add androidNdkCrashes option for Android NDK crash captur...
• 490ffe8 chore: update versions and lockfile [version bump]
• e0cad46 chore(deps): bump baseline-browser-mapping (#5110)
• ac479db fix(node): support snake_case flag definition caches (#4832)
• f23f868 chore: update versions and lockfile [version bump]
• Additional commits viewable in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

• deps: update all non-major dependencies (#23482) (3c752c8)
• deps: update all non-major dependencies (#23537) (e8990c4)
• deps: update rolldown-related dependencies (#23483) (9aecbbf)
• handle server.ws: false in mergeConfig (#23511) (f68c0d5)
• merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
• optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
• optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
• server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
• sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

• merge prereleases in changelog (#23466) (99bd9d1)
• optimizer: add debug log when waiting for dep before init (#23566) (63567c7)
• update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

• assets regexp use non-capture (#23491) (f4b4431)
• remove duplicate configurations (#23532) (9abd99b)
• replace find with some (#23554) (af7cdf6)

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

• deps: update all non-major dependencies (#23482) (3c752c8)
• deps: update all non-major dependencies (#23537) (e8990c4)
• deps: update rolldown-related dependencies (#23483) (9aecbbf)
• handle server.ws: false in mergeConfig (#23511) (f68c0d5)
• merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
• optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
• optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
• server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
• sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

• merge prereleases in changelog (#23466) (99bd9d1)
• optimizer: add debug log when waiting for dep before init (#23566) (63567c7)
• update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

• assets regexp use non-capture (#23491) (f4b4431)
• remove duplicate configurations (#23532) (9abd99b)
• replace find with some (#23554) (af7cdf6)

Commits

• 39ddf7c release: v8.3.1 (#23573)
• f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
• 6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
• 04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
• 5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
• 63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
• e8990c4 fix(deps): update all non-major dependencies (#23537)
• af7cdf6 refactor: replace find with some (#23554)
• 39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
• 9abd99b refactor: remove duplicate configurations (#23532)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
dev-ledger	Ready	Preview	Sep 29, 2026 8:24pm UTC

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.