Bump the minor-and-patch group across 1 directory with 24 updates

[dependabot]

Bumps the minor-and-patch group with 24 updates in the / directory:

Package	From	To
@chakra-ui/charts	3.36.0	3.36.1
@chakra-ui/react	3.36.0	3.36.1
@neo4j-nvl/base	1.2.0	1.2.1
@neo4j-nvl/react	1.2.0	1.2.1
@vercel/blob	2.4.1	2.7.0
ai	7.0.0-beta.178	7.0.58
better-auth	1.6.20	1.6.26
neo4j-driver	6.1.0	6.2.0
next	16.2.9	16.3.0
react	19.2.7	19.2.8
@types/react	19.2.17	19.2.18
react-dom	19.2.7	19.2.8
@types/react-dom	19.2.3	19.2.4
react-icons	5.6.0	5.7.0
recharts	3.8.1	3.10.1
resend	6.14.0	6.18.1
satellite.js	7.0.1	7.1.0
workflow	4.5.0	4.8.1
@chakra-ui/cli	3.36.0	3.36.1
@playwright/test	1.61.0	1.62.1
csv-parse	7.0.0	7.0.2
microsandbox	0.5.7	0.6.8
tsx	4.22.4	4.23.11
vitest	4.1.9	4.1.10

Updates @chakra-ui/charts from 3.36.0 to 3.36.1

Changelog

Sourced from @​chakra-ui/charts's changelog.

3.36.1

Commits

• f813394 Version Packages (#10857)
• See full diff in compare view

Updates @chakra-ui/react from 3.36.0 to 3.36.1

Release notes

Sourced from @​chakra-ui/react's releases.

@​chakra-ui/react@​3.36.1

Patch Changes

• #10868 f32a160 Thanks @​WahabKhan7528! - OverlayManager: add has() method to createOverlay return

• #10885 e503f8d Thanks @​dfedoryshchev! - - Bleed: Fix incorrect css prop application

• 129c50f Thanks @​segunadebayo! - Fix issue where the checked ring of RadioCard and CheckboxCard (outline variant) gets clipped when a parent has overflow: hidden|auto|scroll. The ring is now drawn with an inset shadow instead of an outer shadow.

• #10859 6f10270 Thanks @​dfedoryshchev! - - Checkmark: Fix incorrect css prop application

• #10884 e7431f1 Thanks @​sanjibani! - - Docs: fix Stack.Separator references in the v3 migration guide. The standalone Separator component is now used in both the StackDivider and Stack Props examples.

• 0fe3055 Thanks @​segunadebayo! - Fix error when merging recipes (e.g. composing a recipe-based component through the chakra factory). Recipe merging now normalizes compiled and raw configs before combining them, and no longer throws or mutates the source configs.

• #10879 e882dc0 Thanks @​dfedoryshchev! - - Float: Fix incorrect css prop application

• 2ed9026 Thanks @​segunadebayo! - Add a default minSize of { width: 240, height: 100 } to FloatingPanel.Root to prevent the panel from being resized to zero. Pass your own minSize to override it.

• #10863 b5de5e2 Thanks @​dfedoryshchev! - - Image: Fix

... (truncated)

Changelog

Sourced from @​chakra-ui/react's changelog.

3.36.1

Patch Changes

• #10868 f32a160 Thanks @​WahabKhan7528! - OverlayManager: add has() method to createOverlay return

• #10885 e503f8d Thanks @​dfedoryshchev! - - Bleed: Fix incorrect css prop application

• 129c50f Thanks @​segunadebayo! - Fix issue where the checked ring of RadioCard and CheckboxCard (outline variant) gets clipped when a parent has overflow: hidden|auto|scroll. The ring is now drawn with an inset shadow instead of an outer shadow.

• #10859 6f10270 Thanks @​dfedoryshchev! - - Checkmark: Fix incorrect css prop application

• #10884 e7431f1 Thanks @​sanjibani! - - Docs: fix Stack.Separator references in the v3 migration guide. The standalone Separator component is now used in both the StackDivider and Stack Props examples.

• 0fe3055 Thanks @​segunadebayo! - Fix error when merging recipes (e.g. composing a recipe-based component through the chakra factory). Recipe merging now normalizes compiled and raw configs before combining them, and no longer throws or mutates the source configs.

• #10879 e882dc0 Thanks @​dfedoryshchev! - - Float: Fix incorrect css prop application

• 2ed9026 Thanks @​segunadebayo! - Add a default minSize of { width: 240, height: 100 } to FloatingPanel.Root to prevent the panel from being resized to zero. Pass your own minSize to override it.

• #10863 b5de5e2

... (truncated)

Commits

• f813394 Version Packages (#10857)
• e503f8d fix: correct css prop usage in Bleed component (#10885)
• 0fe3055 perf(react): cache compiled recipes and memoize variant resolution
• e882dc0 fix: correct css prop usage in Float component (#10879)
• ff2067e fix(deps): update non-major dependencies
• c4e79c1 fix: forward the rel attribute on LinkOverlay (#10873)
• f32a160 feat(overlay): add has() method to createOverlay return (#10868)
• a1548ba fix: correct misspelled "permuations" variable in breakpoints (#10864)
• b5de5e2 fix: correct className usage in Image component (#10863)
• 6f10270 fix: correct css prop usage in Checkmark component (#10859)
• Additional commits viewable in compare view

Updates @neo4j-nvl/base from 1.2.0 to 1.2.1

Updates @neo4j-nvl/react from 1.2.0 to 1.2.1

Updates @vercel/blob from 2.4.1 to 2.7.0

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.7.0

Minor Changes

• ad5a134: Add image optimization support: a new optimizeImage option on put and a new putFromUrl method. Both optimize the image through Vercel Image Optimization before storing it (only the optimized output is stored) and require OIDC authentication.

  const result = await put("avatars/foo.webp", body, {
    access: "public",
    optimizeImage: { width: 128, quality: 75, format: "webp" },
  });
  const result = await putFromUrl(
  "avatars/foo.webp",
  "https://example.com/photo.jpg",
  {
  access: "public",
  optimizeImage: { width: 128, quality: 75, format: "webp" },
  }
  );

@​vercel/blob@​2.6.1

Patch Changes

• d0118c4: Add a useCache option to presignUrl() for get operations. When useCache: false, the presigned URL includes a cache=0 query param so fetches bypass the CDN cache and read the latest content directly from origin storage. Like get(), the bypass only applies to private blobs. The param is not part of the signed payload, so holders of a presigned URL can also add or remove it manually.

@​vercel/blob@​2.6.0

Minor Changes

• c4976ba: Add rename(fromUrlOrPathname, toPathname, options) to move a blob to another pathname. The blob is copied to the new pathname and the source is deleted afterwards; if the copy fails the source is left untouched. By default renaming onto an existing blob throws — pass allowOverwrite: true to replace it, or addRandomSuffix: true to generate a unique destination. Requires a read-write token (client tokens are not supported).
• 89d94e9: Restore the useCache option on get(). Passing useCache: false bypasses the CDN cache and serves the blob directly from origin storage (via the cache=0 query parameter), guaranteeing the latest content at the cost of slower reads. Defaults to true.

@​vercel/blob@​2.5.0

Minor Changes

• 31a8b8f: Deprecate the useCache option on get(). The backend no longer honors the cache=0 query parameter it produced, so the option is now a no-op — reads always go through the standard caching path. The option is still accepted (and ignored) to avoid breaking existing callers, and will be removed in a future major version.

Patch Changes

• 9ac2586: Read the Vercel OIDC token via @vercel/oidc's refreshing getVercelOidcToken instead of the non-refreshing getVercelOidcTokenSync. This refreshes an expired token in development environments. In production with a valid token, behavior is unchanged. If a refresh is needed but fails, the token is treated as absent so callers still fall back to BLOB_READ_WRITE_TOKEN.

Changelog

Sourced from @​vercel/blob's changelog.

2.7.0

Minor Changes

• ad5a134: Add image optimization support: a new optimizeImage option on put and a new putFromUrl method. Both optimize the image through Vercel Image Optimization before storing it (only the optimized output is stored) and require OIDC authentication.

  const result = await put("avatars/foo.webp", body, {
    access: "public",
    optimizeImage: { width: 128, quality: 75, format: "webp" },
  });
  const result = await putFromUrl(
  "avatars/foo.webp",
  "https://example.com/photo.jpg",
  {
  access: "public",
  optimizeImage: { width: 128, quality: 75, format: "webp" },
  }
  );

2.6.1

Patch Changes

• d0118c4: Add a useCache option to presignUrl() for get operations. When useCache: false, the presigned URL includes a cache=0 query param so fetches bypass the CDN cache and read the latest content directly from origin storage. Like get(), the bypass only applies to private blobs. The param is not part of the signed payload, so holders of a presigned URL can also add or remove it manually.

2.6.0

Minor Changes

• c4976ba: Add rename(fromUrlOrPathname, toPathname, options) to move a blob to another pathname. The blob is copied to the new pathname and the source is deleted afterwards; if the copy fails the source is left untouched. By default renaming onto an existing blob throws — pass allowOverwrite: true to replace it, or addRandomSuffix: true to generate a unique destination. Requires a read-write token (client tokens are not supported).
• 89d94e9: Restore the useCache option on get(). Passing useCache: false bypasses the CDN cache and serves the blob directly from origin storage (via the cache=0 query parameter), guaranteeing the latest content at the cost of slower reads. Defaults to true.

2.5.0

Minor Changes

• 31a8b8f: Deprecate the useCache option on get(). The backend no longer honors the cache=0 query parameter it produced, so the option is now a no-op — reads always go through the standard caching path. The option is still accepted (and ignored) to avoid breaking existing callers, and will be removed in a future major version.

Patch Changes

• 9ac2586: Read the Vercel OIDC token via @vercel/oidc's refreshing getVercelOidcToken instead of the non-refreshing getVercelOidcTokenSync. This refreshes an expired token in development environments. In production with a valid token, behavior is unchanged. If a refresh is needed but fails, the token is treated as absent so callers still fall back to BLOB_READ_WRITE_TOKEN.

Commits

• 7637604 Version Packages (#1097)
• ad5a134 [blob] Add optimizeImage option to put and new putFromUrl method (#1093)
• f5cb880 Version Packages (#1085)
• d0118c4 [@​vercel/blob] Add useCache option to presigned get URLs (#1084)
• 20e17d7 Version Packages (#1083)
• c4976ba [@​vercel/blob] Add rename operation (#1082)
• 89d94e9 [@​vercel/blob] Restore the useCache option on get() (#1081)
• 2c45378 [@​vercel/blob] Test OIDC token refresh between requests (#1078)
• bb04f82 Version Packages (#1077)
• 9ac2586 [@​vercel/blob] Use refreshing getVercelOidcToken from @​vercel/oidc (#1076)
• Additional commits viewable in compare view

Updates ai from 7.0.0-beta.178 to 7.0.58

Changelog

Sourced from ai's changelog.

7.0.58

Patch Changes

• 72ad23f: Respect ToolLoopAgent timeouts configured in agent settings.

• ad6a650: feat(video): allow aspectRatio: 'adaptive' on generateVideo

  Some video models derive the output ratio from the input and reject explicit {width}:{height} values — BytePlus Seedance 2.5 does this for first-frame, first-and-last-frame, editing, and extension tasks. aspectRatio on VideoModelV3CallOptions, VideoModelV4CallOptions, and experimental_generateVideo is now `${number}:${number}` | 'adaptive', so those calls no longer need a type assertion. Support is provider-specific.

• 81cd026: Reduce bundle size by making internal Zod v4 imports tree-shakeable.

• Updated dependencies [c477556]

• Updated dependencies [ad6a650]

• Updated dependencies [81cd026]

  • @​ai-sdk/gateway@​4.0.46
  • @​ai-sdk/provider@​4.0.7
  • @​ai-sdk/provider-utils@​5.0.25

7.0.57

Patch Changes

• Updated dependencies [1937bef]
  • @​ai-sdk/provider-utils@​5.0.24
  • @​ai-sdk/gateway@​4.0.45

7.0.56

Patch Changes

• 25c9120: Expose provider metadata on language-model-call end callbacks and telemetry spans.

• 89080c8: fix (ai/gateway): make retried doStart calls idempotent

  generateVideo retries doStart, which creates a billable generation, so a retry after a lost response could start a second one. It now mints one idempotency token per logical start — outside the retry closure — and forwards it as an idempotency-key header, so a provider that deduplicates (the Vercel AI Gateway does) sees the same key on every attempt. GatewayVideoModel simply forwards the caller's headers rather than inferring retry identity from an options object, which would collide across unrelated calls.

• 79d6195: Stop pending and active resumed chat streams after cancellation, and prevent overlapping resumptions from applying stale updates.

• Updated dependencies [89080c8]

• Updated dependencies [89080c8]

  • @​ai-sdk/gateway@​4.0.44

... (truncated)

Commits

• 63db193 Version Packages (#18587)
• 72ad23f fix: ToolLoopAgent settings-level timeouts being ignored by generate and stre...
• 81cd026 perf: make zod imports tree-shakeable (#18304)
• ad6a650 feat(video): allow aspectRatio: 'adaptive' on generateVideo (#18586)
• ae26160 Version Packages (#18566)
• 2f04a5e Version Packages (#18560)
• 89080c8 feat (provider/gateway): support async video operations (doStart/doStatus) on...
• 25c9120 feat: expose provider metadata in language model call end callbacks (#18100)
• 79d6195 fix: resumed chat streams updating state after cancellation or a newer resume...
• bb31e6b Version Packages (#18508)
• Additional commits viewable in compare view

Updates better-auth from 1.6.20 to 1.6.26

Release notes

Sourced from better-auth's releases.

v1.6.26

better-auth

Bug Fixes

• Fixed session cleanup on user deletion to also remove sessions from secondary storage (#10520)
• Fixed findSessions to skip invalid secondary-storage session entries without discarding other valid sessions (#10580)
• Fixed email OTP sign-up to pass the verification type to custom OTP generators (#10608)
• Fixed email OTP password reset to allow retrying after entering an invalid password (#10552)
• Fixed email OTP verification to no longer reveal whether an email is registered before the OTP is verified (#10605)
• Fixed jwtClient() collapsing createAuthClient type inference when combined with other client plugins (#10513)
• Fixed JWT key minting inside database transactions to use the transaction-scoped adapter, preventing deadlocks on SQLite and ensuring keys commit with their surrounding transaction on Postgres and MySQL (#10623)
• Fixed oAuthProxy to preserve Apple user data from form_post callbacks (#10599)
• Fixed oneTapClient() collapsing createAuthClient type inference when combined with other client plugins (#10635)
• Fixed database rate-limit cleanup to complete when no background task handler is configured (#10619)
• Improved nextCookies performance in instrumented Next.js applications by reusing the next/headers import promise (#10467)

For detailed changes, see CHANGELOG

@better-auth/core

Features

• Added a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain (#10576)

For detailed changes, see CHANGELOG

@better-auth/redis-storage

Bug Fixes

• Fixed listKeys() and clear() to use SCAN instead of KEYS so large keyspaces no longer block the Redis server (#10507)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​Emmaccen, @​gustavovalverde, @​jashkarangiya, @​jeroenvandermerwe, @​jlucaso1, @​krish-vachhani, @​mrosberghaus, @​XXMOHAMED012

Full changelog: v1.6.25...v1.6.26

v1.6.25

better-auth

Bug Fixes

• Fixed Apple OAuth not sending the PKCE code challenge during authorization, causing token exchange failures (#10294)
• Fixed Google One Tap creating new users when sign-up was disabled on the Google provider (#10479)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.6.26

Patch Changes

• #10619 9ede805 Thanks @​jeroenvandermerwe! - Ensure database rate-limit cleanup completes when no background task handler is configured.

• #10608 5a811f1 Thanks @​bytaesu! - Pass the email verification type to custom OTP generators after email sign-up.

• #10605 d8327f1 Thanks @​XXMOHAMED012! - The email OTP verification check no longer reveals whether an email is registered before the OTP itself is verified.

• #10513 e2c73fb Thanks @​mrosberghaus! - Fix jwtClient() collapsing createAuthClient type inference when combined with other client plugins such as inferAdditionalFields. Additional user fields (for example on updateUser) are preserved again.

• #10635 af50c45 Thanks @​krish-vachhani! - Fix oneTapClient() collapsing createAuthClient type inference when combined with other client plugins. The oneTap action is available on the client again.

• #10633 701cd43 Thanks @​gustavovalverde! - Minting or reading a JWKS signing key inside an active database transaction now uses the transaction-scoped adapter instead of the root connection. On a single-connection SQLite database with native transactions enabled, this no longer deadlocks, and on Postgres and MySQL the key commits with the surrounding transaction instead of independently of it.

• #10599 e7b0eba Thanks @​bytaesu! - Preserve Apple user data from form_post callbacks when using oAuthProxy.

• #10552 2b4a14f Thanks @​bytaesu! - Allow users to retry email OTP password resets after entering an invalid password.

• #10467 7552a3b Thanks @​jlucaso1! - Improve nextCookies performance in instrumented Next.js applications.

• #10580 ea38fca Thanks @​Emmaccen! - Skip invalid secondary-storage session entries without discarding other valid sessions.

• #10520 a03e4c1 Thanks @​bytaesu! - Ensure deleting a user also removes their sessions from secondary storage.

• Updated dependencies [a30e274]:

  • @​better-auth/core@​1.6.26
  • @​better-auth/drizzle-adapter@​1.6.26
  • @​better-auth/kysely-adapter@​1.6.26
  • @​better-auth/memory-adapter@​1.6.26
  • @​better-auth/mongo-adapter@​1.6.26
  • @​better-auth/prisma-adapter@​1.6.26
  • @​better-auth/telemetry@​1.6.26

1.6.25

Patch Changes

• #10479 5124c34 Thanks @​krish-vachhani! - Prevent Google One Tap from creating new users when sign-up is disabled for the Google provider.

• #10444 7439359 Thanks @​birkskyum! - Expose the real $fetch instance and $store atoms from the Solid client instead of resolving them as dynamic API routes.

• Updated dependencies [0ffd1fb]:

  • @​better-auth/core@​1.6.25
  • @​better-auth/drizzle-adapter@​1.6.25
  • @​better-auth/kysely-adapter@​1.6.25
  • @​better-auth/memory-adapter@​1.6.25
  • @​better-auth/mongo-adapter@​1.6.25
  • @​better-auth/prisma-adapter@​1.6.25

... (truncated)

Commits

• a16b30e chore: release v1.6.26 (#10521)
• 9ede805 fix(rate-limit): await database cleanup by default (#10619)
• af50c45 fix(one-tap): preserve client plugin inference with oneTapClient (#10635)
• 222facf fix(jwt): resolve the transaction-scoped adapter when signing (#10623)
• d8327f1 fix(email-otp): verify OTP before revealing whether the email exists (#10605)
• e7b0eba fix(oauth-proxy): preserve Apple user data (#10599)
• 5a811f1 fix(email-otp): pass verification type on sign-up (#10608)
• e18606b chore(deps): upgrade OpenTelemetry to v2 (#10601)
• ea38fca fix(db): skip null-parsed session token in findSessions instead of returning ...
• 7552a3b perf(next-js): reuse the next/headers import promise in production (#10467)
• Additional commits viewable in compare view

Updates neo4j-driver from 6.1.0 to 6.2.0

Commits

• 631416f add UUID to object mapping (#1442)
• 0017123 add support for Bolt 6.1 and UUIDs (#1415)
• 085ff7d bump deno to 6.2.0 (#1430)
• See full diff in compare view

Updates next from 16.2.9 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

• Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
• Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
• Normalize encoded dynamic placeholders in app routes: #91603
• Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
• Update tokio from 1.43.0 to 1.47.3: #90945
• [turbopack] Simplify snapshotting logic: #91178
• Turbopack: enable server HMR for app route handlers: #91466
• turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
• [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
• Skip loadBindings() Lightning CSS check during next start: #91538
• turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
• Turbopack: Add importModule() support to webpack loaders: #89630
• turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
• turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
• feat(node-streams): add config flag, define-env, and env precedence test: #90427
• Rename /_next/webpack-hmr to /_next/hmr: #91415
• Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
• Handle encoded params further: #91627
• [turbopack] Respect {eval:true} in worker_threads constructors: #91666
• Fix missing route in otel spans without base-server: #91665
• [turbopack] Optimize compaction cpu usage: #91468
• Fix layout segment optimization: move app-page imports to server-utility transition: #91701
• Fix server actions in standalone mode with cacheComponents: #91711
• turbo-persistence: remove Unmergeable mmap advice: #91713
• turbopack: move "compact database" tracing span to backend layer: #91693
• Turbopack: lazy require metadata and handle TLA: #91705
• Fix adapter outputs for dynamic metadata routes: #91680
• Turbopack: fix webpack loader runner layer: #91727
• [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
• Add module count field to module graph tracing spans: #91697
• turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
• Turbopack: pull in updated vercel/nft tests: #91651
• [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
• [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
• [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
• Avoid deprecated TS node10 moduleResolution defaults: #91847
• [turbopack] Rebuild the docker build scripts: #91799
• Fix TS6 baseUrl deprecation for extended tsconfig: #91855
• Add next internal post-build CLI command for Turbopack database compaction: #91336
• Turbopack: Define Effect as a trait instead of a closure: #89080
• Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
• turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
• Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
• Use charCodeAt for normalizePathTrailingSlash: #91380
• Turbopack: Only patch lockfile when bindings fails to load: #91379
• [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
• [devtools] Make instant navs panel draggable: #91914
• [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

• d73f562 v16.3.0
• 2e0d4cb Edits to turbopackFileSystemCache (#96531)
• 86df9c7 docs: cover direct visits and client navigations in the instant() e2e example...
• 47a52c0 [turbopack / next.js] Add an end-to-end test for new root detection (#96544)
• 8e878d4 Remove implicit Partial Prefetching opt-in from instant (#96539)
• e37ddd1 Fix deploy test TypeScript exclusions (#96545)
• 8a4920c docs: clarify first-party Skills workflows (#96495)
• 4344b83 Flag newly disabled deploy tests (#96505)
• 459617a fix: double fragment on navigation (#93132)
• cbf0cef Enable TypeScript CLI by default (#96497)
• Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates react-icons from 5.6.0 to 5.7.0

Release notes

Sourced from react-icons's releases.

v5.7.0

What's Changed

• update packages by @​kamijin-fanta in react-icons/react-icons#1153

Full Changelog: react-icons/react-icons@v5.6.0...v5.7.0

Icon Library	License	Version	Count
Circum Icons	MPL-2.0 license	1.0.0	288
Font Awesome 5	CC BY 4.0 License	5.15.4-3-gafecf2a	1612
Font Awesome 6	CC BY 4.0 License	6.7.2-1-g840c215	2060
Ionicons 4	MIT	4.6.3	696
Ionicons 5	MIT	5.5.4	1332
Material Design icons	Apache License Version 2.0	4.0.0-161-gf3fb4442b2	4341
Typicons	CC BY-SA 3.0	2.1.2	336
Github Octicons icons	MIT	18.3.0	264
Feather	MIT	4.29.2	287
Lucide	ISC	0.462.0	1541
Game Icons	CC BY 3.0	12920d6565588f0512542a3cb0cdfd36a497f910	4040
Weather Icons	SIL OFL 1.1	2.0.12	219
Devicons	MIT	1.8.0	192
Ant Design Icons	MIT	4.4.2	831
Bootstrap Icons	MIT	1.13.1	2754
Remix Icon	Apache License Version 2.0	4.9.1	3229
Flat Color Icons	MIT	1.0.2	329
Grommet-Icons	Apache License Version 2.0	4.14.0	637
Heroicons	MIT	1.0.6	460
Heroicons 2	MIT	2.2.0	972
Simple Icons	CC0 1.0 Universal	16.24.0	3446
Simple Line Icons	MIT	2.5.5	189
IcoMoon Free	CC BY 4.0 License	d006795ede82361e1bac1ee76f215cf1dc51e4ca	491
BoxIcons	MIT	2.1.4	1634
css.gg

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
trail-graph	Error		Aug 12, 2026 5:34pm

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.