build(deps): bump the npm-minor-and-patch group across 1 directory with 21 updates by dependabot[bot] · Pull Request #21 · Orazen/Muster

dependabot · 2026-09-19T22:34:19Z

Bumps the npm-minor-and-patch group with 21 updates in the / directory:

Package	From	To
@lottiefiles/dotlottie-react	`0.19.15`	`0.19.16`
@trycua/cua-driver	`0.20.0`	`0.28.2`
better-auth	`1.7.1`	`1.7.5`
framer-motion	`13.1.1`	`13.4.0`
jose	`6.2.9`	`6.2.12`
lucide-react	`1.47.0`	`1.46.0`
posthog-js	`1.415.6`	`1.433.7`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
react-router-dom	`7.18.2`	`7.18.4`
tailwind-merge	`3.6.0`	`3.7.0`
zod	`4.4.3`	`4.6.5`
@oxlint/plugins	`1.78.0`	`1.83.0`
@playwright/test	`1.62.1`	`1.63.0`
@trycua/cua-driver-darwin-x64	`0.20.0`	`0.28.2`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
oxlint	`1.78.0`	`1.83.0`
playwright	`1.62.1`	`1.63.0`
wrangler	`4.123.0`	`4.133.0`
yaml	`2.9.0`	`2.9.1`

Updates @lottiefiles/dotlottie-react from 0.19.15 to 0.19.16

Release notes

Sourced from @lottiefiles/dotlottie-react's releases.

@lottiefiles/dotlottie-react@0.19.16

Patch Changes

Updated dependencies [0874fae]

Updated dependencies [727add3]

@lottiefiles/dotlottie-web@0.80.0

Changelog

Sourced from @lottiefiles/dotlottie-react's changelog.

0.19.16

Patch Changes

Updated dependencies [0874fae]

Updated dependencies [727add3]

@lottiefiles/dotlottie-web@0.80.0

Commits

bb5abcf chore: update versions (#964)
See full diff in compare view

Updates @trycua/cua-driver from 0.20.0 to 0.28.2

Release notes

Sourced from @trycua/cua-driver's releases.

cua-driver-rs: v0.28.2

Cua Driver 0.28.2

Summary

This release includes 4 fixes.

Fixes

preserve semantic Hyprland AX scrolling. (#3820)

unify desktop snapshot identity and payload ownership. (#3616)

capture macOS desktops without relying on PATH. (#3755)

route background text through Hyprland input. (#3877)

Contributors

This release contains maintainer changes only.

Install

macOS and Linux:
/bin/bash -c "$(curl -fsSL https://cua.ai/driver/install.sh)"
Windows:
irm https://cua.ai/driver/install.ps1 | iex
Cua Driver ships universal macOS binaries, x86_64 and arm64 Windows builds, and Linux preview builds. Release assets also include tag-pinned installer and uninstaller scripts.

Why GitHub says “Pre-release”

GitHub's label is used only to keep this monorepo's repository-wide “Latest” pointer from switching between independently released products. A plain Cua Driver SemVer is a stable release; npm and PyPI publish it on their normal stable channels, and the installers resolve the versioned cua-driver-rs-v* releases directly.

SHA256 Checksums
c3b4423dd4290f65f03579013f2c350e5a08b03458c9ae34ac4904865ec3f833  _install-rust.sh
448fbf0f9b6ca13dc0bdd3adb0f0f8432293abb0519efd2fe77be90e816e6539  checksums.txt
818ddefa0fa8ba2ec9cba837c7aa634a4b064221c748752cf49c5b08e2c94e8c  cua-driver-rs-0.28.2-darwin-arm64.tar.gz
</tr></table> 

... (truncated)

Commits

fc18825 chore(main): release cua-driver-rs 0.28.2 (#3821)
2d8eb12 ci: make macOS E2E log filenames artifact-safe (#3893)
42d764b fix(cua-driver): route background text through Hyprland input (#3877)
14dd8cf docs(sandbox): drop the unreleased notice from the OSWorld on Fleet guide (#3...
6be0aae chore(main): release sandbox 0.8.0 (#3840)
5fcd673 fix(ci): validate attribution configuration changes against their ancestor (#...
d740aa8 docs: add Codex native Computer Use Windows Fleet guide (#3865)
05a0358 feat(growth): restore daily reporting and campaign attribution (#7832)
1c554ed test(cua-driver): isolate uninstall autostart process discovery (#3854)
db8ba21 feat(sandbox): OSWorld disks on Fleet via agent_type="osworld" + "Run OSWorld...
Additional commits viewable in compare view

Updates better-auth from 1.7.1 to 1.7.5

Release notes

Sourced from better-auth's releases.

v1.7.5

better-auth

Features

Added database.schemaName support for direct PostgreSQL connections. (#11203)

Bug Fixes

Improved server-side logging for Cloudflare Turnstile verification failures. (#11283)

Fixed PostgreSQL migrations incorrectly identifying tables and views across schemas. (#11270)

Fixed MySQL index validation for existing string columns. (#11272)

Removed the unused optional better-sqlite3 peer dependency to prevent installation conflicts. (#11209)

For detailed changes, see CHANGELOG

@better-auth/core

Features

Added database.schemaName support for direct PostgreSQL connections. (#11203)

Bug Fixes

Fixed database option type inference outside Cloudflare Workers. (#11290)

For detailed changes, see CHANGELOG

@better-auth/cimd

Bug Fixes

Fixed unnecessary pacing of consecutive CIMD OAuth requests when metadata cannot be cached. (#11161)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

Fixed lazy database initialization when using Drizzle relations. (#11263)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Features

Added database.schemaName support for direct PostgreSQL connections. (#11203)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.5

Patch Changes

#11283 e56c45b Thanks @bytaesu! - Log Cloudflare Turnstile error codes and binding mismatches on the server so CAPTCHA verification failures can be diagnosed.

#11209 8d37cc3 Thanks @siam923! - Remove the unused optional better-sqlite3 peer dependency to prevent installation conflicts.

#11272 348fc26 Thanks @bytaesu! - Use MySQL's reported byte lengths when validating indexes on existing string columns.

#11203 cb627eb Thanks @dshukertjr! - Add a database.schemaName option for direct PostgreSQL connections. When set, the adapter and the CLI qualify every statement with that schema, so auth generate writes a schema-qualified migration that creates the schema before its tables instead of relying on the connection's search_path.

#11270 133f6a2 Thanks @bytaesu! - Prevent PostgreSQL migrations from treating tables in other schemas or views in the active schema as Better Auth tables.

Updated dependencies [e18bc83, cb627eb, dae97ed]:

@better-auth/drizzle-adapter@1.7.5

@better-auth/kysely-adapter@1.7.5

@better-auth/core@1.7.5

@better-auth/memory-adapter@1.7.5

@better-auth/mongo-adapter@1.7.5

@better-auth/prisma-adapter@1.7.5

@better-auth/telemetry@1.7.5

1.7.4

Patch Changes

#11205 3f890eb Thanks @bytaesu! - Support Vitest 5 in the testing utilities while retaining support for previously supported Vitest versions.

#11224 c1756a2 Thanks @bytaesu! - Add experimental.instrumentation.enabled to disable Better Auth OpenTelemetry span creation per auth instance. Instrumentation remains enabled by default and independent of usage reporting.

#11217 9b9638e Thanks @onmax! - Allow testUtils auth helpers to accept additional session fields through the session option, including required fields without defaults and per-session overrides of configured defaults.

Updated dependencies [3ff842a, b905bfe, c1756a2]:

@better-auth/core@1.7.4

@better-auth/drizzle-adapter@1.7.4

@better-auth/kysely-adapter@1.7.4

@better-auth/memory-adapter@1.7.4

@better-auth/mongo-adapter@1.7.4

@better-auth/prisma-adapter@1.7.4

@better-auth/telemetry@1.7.4

1.7.3

Patch Changes

#11060 3660f06 Thanks @bytaesu! - Handle malformed custom-scheme callback URLs without excessive processing.

#11037 5bd7096 Thanks @bytaesu! - Prevent repeated TOTP enrollment from replacing an active authenticator and its backup codes.

... (truncated)

Commits

5468e6b chore: release v1.7.5 (#11245)
e56c45b fix(captcha): log Turnstile verification failures (#11283)
cb627eb feat(postgres): add support for custom schema name in PostgreSQL connections ...
348fc26 fix(db): use reported MySQL index byte bounds (#11272)
b93f73d refactor(db): model migration targets by dialect (#11271)
133f6a2 fix(db): use Kysely metadata for PostgreSQL schema introspection (#11270)
34ad3be refactor(cookies): centralize cookie cache version validation (#11254)
8d37cc3 fix(deps): remove unused better-sqlite3 peer dependency (#11209)
735008f chore: release v1.7.4 (#11216)
80b1d64 chore(deps): bump next (#11226)
Additional commits viewable in compare view

Updates framer-motion from 13.1.1 to 13.4.0

Changelog

Sourced from framer-motion's changelog.

[13.4.0] 2026-09-14

Added

AnimateView: View transitions for React 19.3, built on React's ViewTransition.

[13.3.0] 2026-09-14

Added

Hooks for Motion Editor.

Changed

springValue/useSpring: 80% reduction in time when retargeting.

animate: 10% smaller.

animate: 20% reduction in startup time.

animate: 10% reduction in per-frame JS.

frame: Frame scheduling 10% faster.

Fixed

animate: Fixed path drawing calculations.

[13.2.0] 2026-09-03

Added

animate.addEffect() for registering effects that lets animate drive non-DOM subjects alongside DOM elements.

threeEffect (motion/three) supporting Three.js objects, materials, shader uniforms, TSL uniform nodes and more.

vgpuEffect (motion/vgpu) supporting shared uniforms, Effect/Draw/Compute bindings ("params.time"), scene nodes, cameras, lights, materials, orbit controls, CSS colors and vector components.

createEffect now accepts test, read and step options and exposes bound motion values via effect.get().

Changed

Reduced filesize and improved performance of spring.

MotionValueState no longer caches values in latest; effect renders read their motion values directly. set() drops its useDefaultValueType argument.

Commits

a6ea2f9 v13.4.0
d6ef844 Changelog
75c4dcf Merge pull request #3824 from motiondivision/codex/react-animate-view
a5a7856 Co-locate AnimateView layer animation in framer-motion
5c8bc09 Keep AnimateView group morph with custom values; gate view tests in Playwright
12018e8 Add AnimateView via motion/react-animate-view
939c267 Updating changelog
16cf742 Latest
49f1fe1 v13.3.0
f777c92 Updating changelog
Additional commits viewable in compare view

Updates jose from 6.2.9 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

clarify and shorten public API guidance (be62530)

Refactor

simplify JWS and JWE operation cores (92e9640)

Performance

avoid copying AES-GCM output (6925d43)

deduplicate pending jwks key imports (bf5138b)

encode single-signature JWS input once (7bc9a33)

normalize General JWE shared headers once (78637bd)

normalize jwks selection metadata once (fd3ae3f)

use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

render subpath indexes as tables (94589ee)

shorten API index descriptions (681482f)

Refactor

model JWE key management modes (e01dda6)

types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

jose: consume serialization members once (9bee285)

jose: reject empty protected and JWE AAD members (8da4145)

jose: validate serialized header values (b711d8f)

jwe: conceal invalid decrypted CEK lengths (41fafe0)

jwe: enforce AES-GCM tag boundaries (9a5b744)

jwe: validate explicit encryption parameters (7a02697)

jwk: accept empty octet-sequence keys (3f871e7)

jwk: normalize key resolution inputs (f54ee7b)

jwks: enforce verification key metadata (f9ba510)

jwks: order overlapping remote reloads (9a1a913)

jwks: reject invalid remote duration values (7bdb9e5)

jwk: validate ext and key_ops parameters (4d91c37)

jws: reject mixed payload encoding modes (dc69713)

jws: validate unencoded payload strings (541f282)

jwt: enforce explicit verification policies (b347182)

jwt: prevent replacing protected headers (ae07d09)

jwt: reject invalid duration inputs (282f9aa)

jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

clarify and shorten public API guidance (be62530)

Refactor

simplify JWS and JWE operation cores (92e9640)

Performance

avoid copying AES-GCM output (6925d43)

deduplicate pending jwks key imports (bf5138b)

encode single-signature JWS input once (7bc9a33)

normalize General JWE shared headers once (78637bd)

normalize jwks selection metadata once (fd3ae3f)

use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

render subpath indexes as tables (94589ee)

shorten API index descriptions (681482f)

Refactor

model JWE key management modes (e01dda6)

types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

jose: consume serialization members once (9bee285)

jose: reject empty protected and JWE AAD members (8da4145)

jose: validate serialized header values (b711d8f)

jwe: conceal invalid decrypted CEK lengths (41fafe0)

jwe: enforce AES-GCM tag boundaries (9a5b744)

jwe: validate explicit encryption parameters (7a02697)

jwk: accept empty octet-sequence keys (3f871e7)

jwk: normalize key resolution inputs (f54ee7b)

jwks: enforce verification key metadata (f9ba510)

jwks: order overlapping remote reloads (9a1a913)

jwks: reject invalid remote duration values (7bdb9e5)

jwk: validate ext and key_ops parameters (4d91c37)

jws: reject mixed payload encoding modes (dc69713)

jws: validate unencoded payload strings (541f282)

jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits

505a55b chore(release): 6.2.12
7bc9a33 perf: encode single-signature JWS input once
78637bd perf: normalize General JWE shared headers once
bf5138b perf: deduplicate pending jwks key imports
b23a6f3 perf: use native encoding for larger ASCII strings
fd3ae3f perf: normalize jwks selection metadata once
6925d43 perf: avoid copying AES-GCM output
be62530 docs: clarify and shorten public API guidance
1b41312 build: preserve README when generation fails
0b51829 build: check tree-shaking for every public binding
Additional commits viewable in compare view

Updates lucide-react from 1.47.0 to 1.46.0

Commits

See full diff in compare view

Updates posthog-js from 1.415.6 to 1.433.7

Release notes

Sourced from posthog-js's releases.

posthog-js@1.433.7

1.433.7

Patch Changes

#4979 c767b98 Thanks @darkopia! - fix(surveys): keep URL prefill working when localStorage is unavailable, such as on a page with an opaque origin or in private browsing (2026-09-16)

Updated dependencies [2828b6b]:

@posthog/browser-common@0.9.0

posthog-js@1.433.6

1.433.6

Patch Changes

#4926 ec4062b Thanks @posthog! - Stop treating a <link rel=preload as=style> resource hint as a stylesheet when recording. Because it carries the URL of the sheet it preloads, the recorder matched it to the loaded stylesheet and inlined the whole sheet onto it, putting the CSS in every full snapshot twice and reporting a failed stylesheet deferral on every snapshot. (2026-09-16)

posthog-js@1.433.5

1.433.5

Patch Changes

#4962 85b775a Thanks @posthog! - Docstrings for identity_hash and setIdentity() now say the hash is signed with the Secret API key from Support settings, not a project secret API key or a personal API key. (2026-09-15)

Updated dependencies [85b775a]:

@posthog/types@1.412.1

posthog-js@1.433.4

1.433.4

Patch Changes

#4941 07c1045 Thanks @marandaneto! - Capture causes and AggregateError members with relationship metadata and individual stacks, limiting output to 50 entries and 1,000 member inspections. (2026-09-15)

#4898 372afba Thanks @posthog! - Contain a throw from a third-party patched AbortController.abort() when our own fetch timeout fires, so it is retried instead of escaping as an uncaught error, and report a single outcome per request. (2026-09-15)

#4910 38b61f9 Thanks @posthog! - Keep the end of a session recording when one replay event is too large to stringify: that event is dropped and the rest of the buffer still ships, instead of the size estimate throwing and stopping the unload flush. (2026-09-15)

#4909 5d4f1f7 Thanks @posthog! - Keep the session recording observers that started when one of them fails to initialize, and report the failed observers in the recorder debug properties. (2026-09-15)

Updated dependencies [07c1045]:

@posthog/core@1.54.1

posthog-js@1.433.3

1.433.3

... (truncated)

Commits

aa7ab7f chore: update versions and lockfile [version bump]
437164d refactor(browser-next): give analytics permanent buffer ownership (#4963)
fec440c feat(browser-next): add immediate capture delivery (#4676)
2828b6b feat(browser): make shared capture synchronous (#4675)
c767b98 fix(surveys): keep URL prefill working when localStorage is unavailable (#4979)
e96852d chore: update versions and lockfile [version bump]
d14b608 chore: add semantic type checks for every SDK (#4985)
d59ac46 feat(react-native): let JS own consent by disabling native opt-out persistenc...
ec4062b fix(replay): do not treat a stylesheet preload link as a stylesheet (#4926)
d086f89 test(ai): add Anthropic HTTP record and replay pilot (#4971)
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031,

…th 21 updates Bumps the npm-minor-and-patch group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@lottiefiles/dotlottie-react](https://github.com/LottieFiles/dotlottie-web/tree/HEAD/packages/react) | `0.19.15` | `0.19.16` | | [@trycua/cua-driver](https://github.com/trycua/cua) | `0.20.0` | `0.28.2` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.1` | `1.7.5` | | [framer-motion](https://github.com/motiondivision/motion) | `13.1.1` | `13.4.0` | | [jose](https://github.com/panva/jose) | `6.2.9` | `6.2.12` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.47.0` | `1.46.0` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.415.6` | `1.433.7` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.4` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` | | [@oxlint/plugins](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint-plugins) | `1.78.0` | `1.83.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` | | [@trycua/cua-driver-darwin-x64](https://github.com/trycua/cua) | `0.20.0` | `0.28.2` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.78.0` | `1.83.0` | | [playwright](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.123.0` | `4.133.0` | | [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` | Updates `@lottiefiles/dotlottie-react` from 0.19.15 to 0.19.16 - [Release notes](https://github.com/LottieFiles/dotlottie-web/releases) - [Changelog](https://github.com/LottieFiles/dotlottie-web/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/LottieFiles/dotlottie-web/commits/@lottiefiles/dotlottie-react@0.19.16/packages/react) Updates `@trycua/cua-driver` from 0.20.0 to 0.28.2 - [Release notes](https://github.com/trycua/cua/releases) - [Changelog](https://github.com/trycua/cua/blob/main/docs/release-attribution-and-announcements-plan.md) - [Commits](trycua/cua@cua-driver-rs-v0.20.0...cua-driver-rs-v0.28.2) Updates `better-auth` from 1.7.1 to 1.7.5 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.7.5/packages/better-auth) Updates `framer-motion` from 13.1.1 to 13.4.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v13.1.1...v13.4.0) Updates `jose` from 6.2.9 to 6.2.12 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.9...v6.2.12) Updates `lucide-react` from 1.47.0 to 1.46.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.46.0/packages/lucide-react) Updates `posthog-js` from 1.415.6 to 1.433.7 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.415.6...posthog-js@1.433.7) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-router-dom` from 7.18.2 to 7.18.4 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `zod` from 4.4.3 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.5) Updates `@oxlint/plugins` from 1.78.0 to 1.83.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/apps_v1.83.0/npm/oxlint-plugins) Updates `@playwright/test` from 1.62.1 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.1...v1.63.0) Updates `@trycua/cua-driver-darwin-x64` from 0.20.0 to 0.28.2 - [Release notes](https://github.com/trycua/cua/releases) - [Changelog](https://github.com/trycua/cua/blob/main/docs/release-attribution-and-announcements-plan.md) - [Commits](trycua/cua@cua-driver-rs-v0.20.0...cua-driver-rs-v0.28.2) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `oxlint` from 1.78.0 to 1.83.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.83.0/npm/oxlint) Updates `playwright` from 1.62.1 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.1...v1.63.0) Updates `wrangler` from 4.123.0 to 4.133.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.133.0/packages/wrangler) Updates `yaml` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.9.0...v2.9.1) --- updated-dependencies: - dependency-name: "@lottiefiles/dotlottie-react" dependency-version: 0.19.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@trycua/cua-driver" dependency-version: 0.28.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: better-auth dependency-version: 1.7.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: framer-motion dependency-version: 13.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: jose dependency-version: 6.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: lucide-react dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: posthog-js dependency-version: 1.433.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react-router-dom dependency-version: 7.18.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@oxlint/plugins" dependency-version: 1.83.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@playwright/test" dependency-version: 1.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@trycua/cua-driver-darwin-x64" dependency-version: 0.28.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: oxlint dependency-version: 1.83.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: playwright dependency-version: 1.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: wrangler dependency-version: 4.133.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: yaml dependency-version: 2.9.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-19T22:34:20Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-09-19T22:49:17Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot closed this Sep 19, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-d32f8d6181 branch September 19, 2026 22:49

Navigation Menu

build(deps): bump the npm-minor-and-patch group across 1 directory with 21 updates - #21

build(deps): bump the npm-minor-and-patch group across 1 directory with 21 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-d32f8d6181

dependabot Bot commented on behalf of github Sep 19, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​lottiefiles/dotlottie-react@​0.19.16

Patch Changes

0.19.16

Patch Changes

cua-driver-rs: v0.28.2

Cua Driver 0.28.2

Summary

Fixes

Contributors

Install

Why GitHub says “Pre-release”

SHA256 Checksums

v1.7.5

better-auth

Features

Bug Fixes

@better-auth/core

Features

Bug Fixes

@better-auth/cimd

Bug Fixes

@better-auth/drizzle-adapter

Bug Fixes

@better-auth/kysely-adapter

Features

1.7.5

Patch Changes

1.7.4

Patch Changes

1.7.3

Patch Changes

[13.4.0] 2026-09-14

Added

[13.3.0] 2026-09-14

Added

Changed

Fixed

[13.2.0] 2026-09-03

Added

Changed

v6.2.12

Documentation

Refactor

Performance

v6.2.11

Documentation

Refactor

v6.2.10

Fixes

6.2.12 (2026-09-05)

Documentation

Refactor

Performance

6.2.11 (2026-09-04)

Documentation

Refactor

6.2.10 (2026-08-21)

Fixes

posthog-js@1.433.7

1.433.7

Patch Changes

posthog-js@1.433.6

1.433.6

Patch Changes

posthog-js@1.433.5

1.433.5

Patch Changes

posthog-js@1.433.4

1.433.4

Patch Changes

posthog-js@1.433.3

1.433.3

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

dependabot Bot commented on behalf of github Sep 19, 2026 •

edited

Loading

`@lottiefiles/dotlottie-react@0`.19.16

`better-auth`

`@better-auth/core`

`@better-auth/cimd`

`@better-auth/drizzle-adapter`

`@better-auth/kysely-adapter`