Skip to content

chore(deps)(deps): bump the production-dependencies group with 7 updates - #290

Merged
seketman merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-326644e864
Sep 1, 2026
Merged

chore(deps)(deps): bump the production-dependencies group with 7 updates#290
seketman merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-326644e864

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 7 updates:

Package From To
@supabase/ssr 0.12.4 0.12.5
@supabase/supabase-js 2.111.0 2.112.4
lucide-react 1.27.0 1.37.0
next 16.3.0 16.3.3
next-intl 4.13.4 4.14.1
node-html-parser 9.0.1 9.0.2
unpdf 1.8.0 1.8.1

Updates @supabase/ssr from 0.12.4 to 0.12.5

Release notes

Sourced from @​supabase/ssr's releases.

v0.12.5

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

v0.12.5-rc.154

What's Changed

New Contributors

Full Changelog: supabase/ssr@v0.12.4...v0.12.5-rc.154

Changelog

Sourced from @​supabase/ssr's changelog.

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142
Commits
  • c5310fd chore(main): release 0.12.5 (#286)
  • c1700f2 fix: warn when auth.storage is ignored by createBrowserClient/createServerCli...
  • b4797e3 chore: update @​supabase/supabase-js to v2.112.4 (#285)
  • 6f5bc21 chore: update @​supabase/supabase-js to v2.112.3 (#282)
  • 35187b2 build(deps): bump postcss from 8.5.15 to 8.5.25 in the npm_and_yarn group acr...
  • 1b761fd build(deps): bump pnpm/action-setup from 6.0.9 to 6.0.10 (#280)
  • 69a6209 docs: add React Router middleware example (#274)
  • See full diff in compare view

Updates @supabase/supabase-js from 2.111.0 to 2.112.4

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.4

2.112.4 (2026-08-24)

🩹 Fixes

  • auth: convert stolen-lock AbortError when acquireTimeout is 0 (#2616)
  • auth: warn on deprecated lock option and prevent unhandled refresh rejection (#2627)
  • postgrest: move override fixtures out of generated types, repair codegen (#2605)
  • realtime: respect custom logger for send() REST fallback warning (#2612)

❤️ Thank You

v2.112.4-canary.3

2.112.4-canary.3 (2026-08-24)

🩹 Fixes

  • auth: warn on deprecated lock option and prevent unhandled refresh rejection (#2627)

❤️ Thank You

v2.112.4-canary.2

2.112.4-canary.2 (2026-08-24)

🩹 Fixes

  • auth: convert stolen-lock AbortError when acquireTimeout is 0 (#2616)
  • realtime: respect custom logger for send() REST fallback warning (#2612)

❤️ Thank You

v2.112.4-canary.1

2.112.4-canary.1 (2026-08-12)

This was a version bump only, there were no code changes.

v2.112.4-canary.0

2.112.4-canary.0 (2026-08-11)

🩹 Fixes

  • postgrest: move override fixtures out of generated types, repair codegen (#2605)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.4 (2026-08-24)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: improve trace propagation sampling and diagnostics (#2604)
  • supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • supabase: forward db retry option (#2571)

❤️ Thank You

Commits
  • c7397c1 chore(supabase): bump supabase cli to 2.113.0 (#2606)
  • bbc167c chore(release): version 2.112.3 changelogs (#2608)
  • e44447c fix(supabase): improve trace propagation sampling and diagnostics (#2604)
  • 9f0358c fix(supabase): add trace context headers to canonical CORS allow-list (#2603)
  • 84beab1 chore(release): version 2.112.2 changelogs (#2599)
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
  • a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
  • Additional commits viewable in compare view

Updates lucide-react from 1.27.0 to 1.37.0

Release notes

Sourced from lucide-react's releases.

Version 1.37.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.35.0...1.37.0

Version 1.36.0

What's Changed

... (truncated)

Commits
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates next from 16.3.0 to 16.3.3

Release notes

Sourced from next's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

... (truncated)

Commits
  • a9a1cb7 v16.3.3
  • 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 3a15b4a [16.3.x] [next/image]: disable avif image optimization
  • 7378b51 Backport/docs fixes 16.3 (#97649)
  • 528c1cd [16.3.x] Stop generating error codes (#97780)
  • d0ac882 v16.3.2
  • 81deb92 [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
  • cd714d9 [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • 5ac2327 [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • 0ccb3e7 [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • Additional commits viewable in compare view

Updates next-intl from 4.13.4 to 4.14.1

Release notes

Sourced from next-intl's releases.

v4.14.1

4.14.1 (2026-08-28)

Bug Fixes

v4.14.0

4.14.0 (2026-08-27)

Features

⚠️ If you're using useExtracted and the po format, this requires an update to your messages.

Please see amannn/next-intl#2393 for details and an upgrade prompt.

v4.13.7

4.13.7 (2026-08-17)

Bug Fixes

v4.13.6

4.13.6 (2026-08-10)

Bug Fixes

See the blog post on next/root-params.

v4.13.5

4.13.5 (2026-08-04)

Bug Fixes

Changelog

Sourced from next-intl's changelog.

4.14.1 (2026-08-28)

Bug Fixes

4.14.0 (2026-08-27)

Features

4.13.7 (2026-08-17)

Bug Fixes

4.13.6 (2026-08-10)

Bug Fixes

4.13.5 (2026-08-04)

Bug Fixes

Commits

Updates node-html-parser from 9.0.1 to 9.0.2

Changelog

Sourced from node-html-parser's changelog.

9.0.2 (2026-08-28)

Bug Fixes

  • avoid O(n^2) text node append during parse (6aba40e), closes #317
  • update test scripts for improved execution flow (c36ab5a)
Commits
  • 42fd230 chore(release): 9.0.2
  • c36ab5a fix: update test scripts for improved execution flow
  • 3d0c249 Merge pull request #321 from taoqf/migrate-to-bun-from-yarn
  • 033223a Refactor code structure for improved readability and maintainability
  • 0cb973b Merge pull request #320 from nurkiewicz/fix/317-quadratic-text-node-append
  • ae65354 Update to Typescript 7.0
  • 6aba40e fix: avoid O(n^2) text node append during parse
  • See full diff in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates unpdf from 1.8.0 to 1.8.1

Release notes

Sourced from unpdf's releases.

v1.8.1

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@supabase/ssr](https://github.com/supabase/ssr) | `0.12.4` | `0.12.5` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.111.0` | `2.112.4` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.27.0` | `1.37.0` |
| [next](https://github.com/vercel/next.js) | `16.3.0` | `16.3.3` |
| [next-intl](https://github.com/amannn/next-intl) | `4.13.4` | `4.14.1` |
| [node-html-parser](https://github.com/taoqf/node-fast-html-parser) | `9.0.1` | `9.0.2` |
| [unpdf](https://github.com/unjs/unpdf) | `1.8.0` | `1.8.1` |


Updates `@supabase/ssr` from 0.12.4 to 0.12.5
- [Release notes](https://github.com/supabase/ssr/releases)
- [Changelog](https://github.com/supabase/ssr/blob/main/CHANGELOG.md)
- [Commits](supabase/ssr@v0.12.4...v0.12.5)

Updates `@supabase/supabase-js` from 2.111.0 to 2.112.4
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.4/packages/core/supabase-js)

Updates `lucide-react` from 1.27.0 to 1.37.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.37.0/packages/lucide-react)

Updates `next` from 16.3.0 to 16.3.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.0...v16.3.3)

Updates `next-intl` from 4.13.4 to 4.14.1
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.13.4...v4.14.1)

Updates `node-html-parser` from 9.0.1 to 9.0.2
- [Release notes](https://github.com/taoqf/node-fast-html-parser/releases)
- [Changelog](https://github.com/taoqf/node-html-parser/blob/main/CHANGELOG.md)
- [Commits](taoqf/node-html-parser@v9.0.1...v9.0.2)

Updates `unpdf` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/unjs/unpdf/releases)
- [Commits](unjs/unpdf@v1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: "@supabase/ssr"
  dependency-version: 0.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: next-intl
  dependency-version: 4.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: node-html-parser
  dependency-version: 9.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: unpdf
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from seketman as a code owner September 1, 2026 21:01
@vercel

vercel Bot commented Sep 1, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
hitfactor Ready Ready Preview Sep 1, 2026 9:01pm UTC

@seketman
seketman merged commit 1efff27 into main Sep 1, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-326644e864 branch September 1, 2026 21:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant