chore(deps)(deps): Bump the production-deps group across 1 directory with 14 updates - #123
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Conversation
…with 14 updates Bumps the production-deps group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.3` | `2.112.4` | | [jose](https://github.com/panva/jose) | `6.2.9` | `6.2.10` | | [@tanstack/query-async-storage-persister](https://github.com/TanStack/query/tree/HEAD/packages/query-async-storage-persister) | `5.102.6` | `5.102.8` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.6` | `5.102.8` | | [@tanstack/react-query-persist-client](https://github.com/TanStack/query/tree/HEAD/packages/react-query-persist-client) | `5.102.6` | `5.102.8` | | [expo-linking](https://github.com/expo/expo/tree/HEAD/packages/expo-linking) | `57.0.7` | `57.0.8` | | [expo-router](https://github.com/expo/expo/tree/HEAD/packages/expo-router) | `57.0.15` | `57.0.17` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.8` | | [react-native](https://github.com/react/react-native/tree/HEAD/packages/react-native) | `0.86.2` | `0.87.1` | | [react-native-nitro-modules](https://github.com/mrousavy/nitro) | `0.37.0` | `0.37.1` | | [react-native-reanimated](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated) | `4.5.1` | `4.6.0` | | [react-native-safe-area-context](https://github.com/AppAndFlow/react-native-safe-area-context) | `5.7.0` | `5.9.1` | | [react-native-screens](https://github.com/software-mansion/react-native-screens) | `4.26.2` | `4.27.0` | | [react-native-worklets](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-worklets) | `0.10.1` | `0.12.1` | Updates `@supabase/supabase-js` from 2.112.3 to 2.112.4 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.112.4/packages/core/supabase-js) Updates `jose` from 6.2.9 to 6.2.10 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.9...v6.2.10) Updates `@tanstack/query-async-storage-persister` from 5.102.6 to 5.102.8 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/query-async-storage-persister/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/query-async-storage-persister@5.102.8/packages/query-async-storage-persister) Updates `@tanstack/react-query` from 5.102.6 to 5.102.8 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query) Updates `@tanstack/react-query-persist-client` from 5.102.6 to 5.102.8 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-persist-client/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-persist-client@5.102.8/packages/react-query-persist-client) Updates `expo-linking` from 57.0.7 to 57.0.8 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-linking) Updates `expo-router` from 57.0.15 to 57.0.17 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-router) Updates `react` from 19.2.3 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-native` from 0.86.2 to 0.87.1 - [Release notes](https://github.com/react/react-native/releases) - [Changelog](https://github.com/react/react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react-native/commits/v0.87.1/packages/react-native) Updates `react-native-nitro-modules` from 0.37.0 to 0.37.1 - [Release notes](https://github.com/mrousavy/nitro/releases) - [Commits](margelo/nitro@v0.37.0...v0.37.1) Updates `react-native-reanimated` from 4.5.1 to 4.6.0 - [Release notes](https://github.com/software-mansion/react-native-reanimated/releases) - [Changelog](https://github.com/software-mansion/react-native-reanimated/blob/main/packages/react-native-reanimated/CHANGELOG.md) - [Commits](https://github.com/software-mansion/react-native-reanimated/commits/4.6.0/packages/react-native-reanimated) Updates `react-native-safe-area-context` from 5.7.0 to 5.9.1 - [Release notes](https://github.com/AppAndFlow/react-native-safe-area-context/releases) - [Commits](appandflow/react-native-safe-area-context@v5.7.0...v5.9.1) Updates `react-native-screens` from 4.26.2 to 4.27.0 - [Release notes](https://github.com/software-mansion/react-native-screens/releases) - [Commits](software-mansion/react-native-screens@4.26.2...4.27.0) Updates `react-native-worklets` from 0.10.1 to 0.12.1 - [Release notes](https://github.com/software-mansion/react-native-reanimated/releases) - [Changelog](https://github.com/software-mansion/react-native-reanimated/blob/main/packages/react-native-worklets/CHANGELOG.md) - [Commits](https://github.com/software-mansion/react-native-reanimated/commits/worklets-0.12.1/packages/react-native-worklets) --- updated-dependencies: - dependency-name: "@supabase/supabase-js" dependency-version: 2.112.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: jose dependency-version: 6.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@tanstack/query-async-storage-persister" dependency-version: 5.102.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@tanstack/react-query" dependency-version: 5.102.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@tanstack/react-query-persist-client" dependency-version: 5.102.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: expo-linking dependency-version: 57.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: expo-router dependency-version: 57.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: react-native dependency-version: 0.87.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: react-native-nitro-modules dependency-version: 0.37.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: react-native-reanimated dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: react-native-safe-area-context dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: react-native-screens dependency-version: 4.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: react-native-worklets dependency-version: 0.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This was referenced Sep 5, 2026
toruiwasa
added a commit
that referenced
this pull request
Sep 5, 2026
expo/bundledNativeModules.json, shipped inside the installed expo package, fixes the version of 14 of apps/mobile's dependencies for the SDK in use. Dependabot has no knowledge of that matrix and proposes whatever npm published last. PR #123 showed what that costs: react-native 0.87.1 against an SDK 57 tree that expects 0.86.x, plus reanimated 4.6.0 and worklets 0.12.1 against the pins added in #119 — 0.12.x worklets being the exact break that made the iOS build fail to compile in #117. For the two packages also pinned by `overrides` in pnpm-workspace.yaml the failure is quieter and worse: pnpm rewrites the specifier back to the override, `pnpm install --frozen-lockfile` still passes, and the PR goes green while leaving package.json declaring a version that is neither installed nor linked. These versions move when the SDK moves, via `expo install --fix` during an SDK upgrade. `expo` itself is deliberately not listed — its bump is the signal that the others may move, and it must keep arriving. Each rule spells out all three update-types rather than being a bare dependency-name rule: naming the version-update types scopes the rule to version updates, so Dependabot security updates for these packages still arrive. A bare rule would suppress those too. The list is derived from bundledNativeModules.json rather than curated; the regeneration command is in the comment. Closes #124 Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Contributor
Author
|
Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/production-deps-3475f284f8
branch
September 5, 2026 03:30
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the production-deps group with 14 updates in the / directory:
2.112.32.112.46.2.96.2.105.102.65.102.85.102.65.102.85.102.65.102.857.0.757.0.857.0.1557.0.1719.2.319.2.80.86.20.87.10.37.00.37.14.5.14.6.05.7.05.9.14.26.24.27.00.10.10.12.1Updates
@supabase/supabase-jsfrom 2.112.3 to 2.112.4Release notes
Sourced from @supabase/supabase-js's releases.
... (truncated)
Changelog
Sourced from @supabase/supabase-js's changelog.
Commits
c7397c1chore(supabase): bump supabase cli to 2.113.0 (#2606)bbc167cchore(release): version 2.112.3 changelogs (#2608)Updates
josefrom 6.2.9 to 6.2.10Release notes
Sourced from jose's releases.
Changelog
Sourced from jose's changelog.
Commits
3eab152chore(release): 6.2.10021abf4refactor(jws): specialize compact processinga998927refactor(jwe): specialize compact processingeedb124refactor(jose): share binary input validation52ba159refactor(jwt): share producer claim state85e30edrefactor(jose): share compact token processing internals0bd81d2test(jose): cover hidden critical-header options9cf7876test(jose): reject callable object impostorsf23cafdtest(jose): preserve resolved key data properties1ee6f61refactor(jwe): consolidate CBC decryption failuresUpdates
@tanstack/query-async-storage-persisterfrom 5.102.6 to 5.102.8Release notes
Sourced from @tanstack/query-async-storage-persister's releases.
Changelog
Sourced from @tanstack/query-async-storage-persister's changelog.
Commits
2969edfci: Version Packages (#11316)2eb3c7cci: Version Packages (#11313)Updates
@tanstack/react-queryfrom 5.102.6 to 5.102.8Release notes
Sourced from @tanstack/react-query's releases.
... (truncated)
Changelog
Sourced from @tanstack/react-query's changelog.
Commits
2969edfci: Version Packages (#11316)2eb3c7cci: Version Packages (#11313)Updates
@tanstack/react-query-persist-clientfrom 5.102.6 to 5.102.8Release notes
Sourced from @tanstack/react-query-persist-client's releases.
Changelog
Sourced from @tanstack/react-query-persist-client's changelog.
Commits
2969edfci: Version Packages (#11316)2eb3c7cci: Version Packages (#11313)Updates
expo-linkingfrom 57.0.7 to 57.0.8Commits
Updates
expo-routerfrom 57.0.15 to 57.0.17Commits
Updates
reactfrom 19.2.3 to 19.2.8Release notes
Sourced from react's releases.
Changelog
Sourced from react's changelog.
Commits
1dd4ecb[FlightReply] Performance improvements when decoding (#37087)b0d2fdb[19.2.x] Update required references to GitHub repo (#36753)6117d7cVersion 19.2.7 (#36591)eaf3e95Version 19.2.623f4f9f19.2.590ab3f8Version 19.2.4Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.
Updates
react-nativefrom 0.86.2 to 0.87.1Release notes
Sourced from react-native's releases.
... (truncated)
Changelog
Sourced from react-native's changelog.
... (truncated)
Commits
a59eff6Release 0.87.11a6b526[0.87] Regenerate ReactNativeApi snapshot with CI toolchaindda5dd3[0.87] Regenerate ReactNativeApi snapshot476887cMerge remote-tracking branch 'refs/remotes/origin/pr/58052' into 0.87-stablee6e404eHold an app's spm.modules names to the same rules as a library's (#58060)c951129Resolve SwiftPM manifest naming collisions (#58044)33624ceHonor a library's spm.name when scaffolding its Package.swift (#58033)617a82fFail with clear error message when a dep depends on an autolinking plugin hos...5e24a69Drop the inert publicHeadersPath from spm.modules (#58059)40af900Read both export styles from a library's react-native.config.js (#58034)Updates
react-native-nitro-modulesfrom 0.37.0 to 0.37.1Release notes
Sourced from react-native-nitro-modules's releases.
Commits
971d6bachore: release 0.37.16050171chore: Lockfilec164d24chore: Verify HybridObject memory pressure via Hermes APIs (#1524)f1ee55dchore: bump satori from 0.29.0 to 0.33.3 in /docs (#1527)84d184dfix: Report nativeArrayBuffermemory pressure (#1523)6d0b5e2fix: Hide React Native version checks from public headers (#1521)Updates
react-native-reanimatedfrom 4.5.1 to 4.6.0Release notes
Sourced from react-native-reanimated's releases.