Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 16 updates#90

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-bcfdc9729d
Open

chore(deps): bump the production-dependencies group across 1 directory with 16 updates#90
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-bcfdc9729d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Bumps the production-dependencies group with 16 updates in the / directory:

Package From To
dompurify 3.3.1 3.3.3
react 19.2.4 19.2.5
react-dom 19.2.4 19.2.5
@next/mdx 16.1.6 16.2.3
@upstash/ratelimit 2.0.7 2.0.8
@upstash/redis 1.35.7 1.37.0
@upstash/vector 1.2.2 1.2.3
dotenv 17.2.3 17.4.2
motion 12.29.2 12.38.0
next 16.1.6 16.2.3
next-intl 4.5.8 4.9.1
openai 6.9.1 6.34.0
tailwind-merge 3.4.0 3.5.0
tailwindcss 4.1.18 4.2.2
@tailwindcss/vite 4.1.18 4.2.2
react-router 7.13.0 7.14.0

Updates dompurify from 3.3.1 to 3.3.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.3

  • Fixed an engine requirement for Node 20 which caused hiccups, thanks @​Rotzbua

DOMPurify 3.3.2

  • Fixed a possible bypass caused by jsdom's faulty raw-text tag parsing, thanks multiple reporters
  • Fixed a prototype pollution issue when working with custom elements, thanks @​christos-eth
  • Fixed a lenient config parsing in _isValidAttribute, thanks @​christos-eth
  • Bumped and removed several dependencies, thanks @​Rotzbua
  • Fixed the test suite after bumping dependencies, thanks @​Rotzbua
Commits
  • 8bcbf73 chore: Preparing 3.3.3 release
  • 5faddd6 fix: engine requirement (#1210)
  • 0f91e3a Update README.md
  • d5ff1a8 Merge branch 'main' of github.com:cure53/DOMPurify
  • c3efd48 fix: moved back from jsdom 28 to jsdom 20
  • 988b888 fix: moved back from jsdom 28 to jsdom 20
  • 2726c74 chore: Preparing 3.3.2 release
  • 6202c7e build(deps): bump @​tootallnate/once and jsdom (#1204)
  • 302b51d fix: Expanded the regex ever so slightly to also cover script
  • cd85175 Merge branch 'main' of github.com:cure53/DOMPurify
  • Additional commits viewable in compare view

Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates react-dom from 19.2.4 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates @next/mdx from 16.1.6 to 16.2.3

Release notes

Sourced from @​next/mdx's releases.

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

  • Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)
  • Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)
  • Deduplicate output assets and detect content conflicts on emit (#92292)
  • Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
  • turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @​icyJoseph, @​sokra, @​wbinnssmith, @​eps1lon and @​ztanner for helping!

v16.2.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • backport: Move expanded adapters docs to API reference (#92115) (#92129)
  • Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (#92130)
  • [create-next-app] Skip interactive prompts when CLI flags are provided (#91840)
  • next.config.js: Accept an option for serverFastRefresh (#91968)
  • Turbopack: enable server HMR for app route handlers (#91466)
  • Turbopack: exclude metadata routes from server HMR (#92034)
  • Fix CI for glibc linux builds
  • Backport: disable bmi2 in qfilter #92177
  • [backport] Fix CSS HMR on Safari (#92174)

Credits

Huge thanks to @​nextjs-bot, @​icyJoseph, @​ijjk, @​gaojude, @​wbinnssmith, @​lukesandberg, and @​bgw for helping!

v16.2.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • docs: post release amends (#91715)
  • docs: fix broken Activity Patterns demo link in preserving UI state guide (#91698)
  • Fix adapter outputs for dynamic metadata routes (#91680)
  • Turbopack: fix webpack loader runner layer (#91727)
  • Fix server actions in standalone mode with cacheComponents (#91711)
  • turbo-persistence: remove Unmergeable mmap advice (#91713)
  • Fix layout segment optimization: move app-page imports to server-utility transition (#91701)
  • Turbopack: lazy require metadata and handle TLA (#91705)
  • [turbopack] Respect {eval:true} in worker_threads constructors (#91666)

... (truncated)

Commits

Updates @upstash/ratelimit from 2.0.7 to 2.0.8

Release notes

Sourced from @​upstash/ratelimit's releases.

v2.0.8

What's Changed

New Contributors

Full Changelog: upstash/ratelimit-js@v2.0.7...v2.0.8

Commits
  • a8b1b99 DX-2254: add global dynamic limit (#147)
  • 8589adb fix: bump next (#146)
  • ade4aa8 Merge pull request #145 from upstash/vercel/react-server-components-cve-vu-qx...
  • e19785d Fix React Server Components CVE vulnerabilities
  • 67e8bc2 DX-2280: Remove specific runner configuration from test job in GitHub Actions...
  • See full diff in compare view

Updates @upstash/redis from 1.35.7 to 1.37.0

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.37.0

Minor Changes

  • 6f2a831: Release redis search

Patch Changes

  • 3980b45: Add monorepo structure

@upstash/redis@1.37.0-canary-20260312092231-7405c30f6a505815bbeb69b713a22978f104ec1f

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@​1.30.3-canary-20260312082754-96a99a4e83fc560b77c36808627213e528c2f110...@​upstash/redis@​1.37.0-canary-20260312092231-7405c30f6a505815bbeb69b713a22978f104ec1f

@​upstash/redis@​1.37.0-canary-20260312084440-fba95e89e54d8ba63f020400247a1ef0dbdd2c84

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@​1.30.3-canary-20260312082754-96a99a4e83fc560b77c36808627213e528c2f110...@​upstash/redis@​1.37.0-canary-20260312084440-fba95e89e54d8ba63f020400247a1ef0dbdd2c84

Commits
  • 7e8fbed chore: version packages (#1420)
  • 703f6d4 fix: handle FROM field option in SEARCH.DESCRIBE deserialization (#1426)
  • 15b4fc9 fix: use pnpm publish for search packages to resolve workspace:* deps (#1425)
  • fba95e8 DX-2445: fix redis version, add repository.url to search packages (#1424)
  • 6f2a831 fix: redis package version and changeset for search release (#1423)
  • 96a99a4 DX-2445: Add new search client packages (#1422)
  • efd3bc6 DX-2445: use workflow_run instead of release event for npm publish (#1421)
  • 2dc4212 fix: add commit message (#1419)
  • 3980b45 DX-2445: Add monorepo structure (#1418)
  • 89cc220 DX-2381: Redis Search (#1409)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​upstash/redis since your current version.


Updates @upstash/vector from 1.2.2 to 1.2.3

Release notes

Sourced from @​upstash/vector's releases.

v1.2.3

What's Changed

New Contributors

Full Changelog: upstash/vector-js@v1.2.2...v1.2.3

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​upstash/vector since your current version.


Updates dotenv from 17.2.3 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

  • Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

  • Add a new README section on dotenv’s approach to the agentic future.

Changed

  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.
Commits

Updates motion from 12.29.2 to 12.38.0

Changelog

Sourced from motion's changelog.

[12.38.0] 2026-03-16

Added

  • Added layoutAnchor prop to configure custom anchor point for resolving relative projection boxes.

Fixed

  • Reorder: Fix axis switching after window resize.
  • Reorder: Fix with virtualised lists.
  • AnimatePresence: Ensure children are removed when exit animation matches current values.

[12.37.0] 2026-03-16

Added

  • Support for hardware accelerating "start" and "end" offsets in scroll and useScroll.
  • Support for oklch, oklab, lab, lch, color, color-mix, light-dark color types.

Fixed

  • Fix whileInView with client-side navigation.
  • Fix draggable elements when layout updates due to surrounding element re-renders.
  • Improved memory pressure of layout animations.
  • Ensure motion value returned from useSpring reports correct isAnimating().

[12.36.0] 2026-03-09

Added

  • Allow dragSnapToOrigin to accept "x" or "y" for per-axis snapping.
  • Added axis-locked layout animations with layout="x" and layout="y".
  • Added skipInitialAnimation to useSpring.

Fixed

  • Fixed height and width: auto animations with box-sizing: border-box.
  • Reset component values when exit animation finishes.
  • Ensure anticipate easing returns 1 at p === 1.
  • Fix @emotion/is-prop-valid resolve error in Storybook.
  • Remove data-pop-layout-id from exiting elements when animation interrupted.
  • Ensure we skip WAAPI for non-animatable keyframes.
  • Ensure we skip WAAPI for SVG transforms.
  • Ensure MotionValue props are not passed to SVG.
  • AnimatePresence: Prevent mode="wait" elements from getting stuck when switched rapidly.

[12.35.2] 2026-03-09

Fixed

... (truncated)

Commits
  • 0bfc9fe v12.38.0
  • 343cb0c Updating layoutAnchor
  • ee99ad2 Updating changelog
  • 062660b Updating changgelog
  • 303da7d Updating readme
  • b075adc Merge pull request #3647 from motiondivision/feat/layout-anchor
  • f0991d6 Add missing layoutAnchor !== false guard in attemptToResolveRelativeTarget
  • b5798e9 Merge pull request #3642 from motiondivision/worktree-fix-issue-3078
  • 7686c19 Merge pull request #3636 from motiondivision/worktree-fix-issue-3061
  • a95c487 Fix auto-scroll in reorder-virtualized test page
  • Additional commits viewable in compare view

Updates next from 16.1.6 to 16.2.3

Release notes

Sourced from next's releases.

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

  • Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)
  • Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)
  • Deduplicate output assets and detect content conflicts on emit (#92292)
  • Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
  • turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @​icyJoseph, @​sokra, @​wbinnssmith, @​eps1lon and @​ztanner for helping!

v16.2.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • backport: Move expanded adapters docs to API reference (#92115) (#92129)
  • Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (#92130)
  • [create-next-app] Skip interactive prompts when CLI flags are provided (#91840)
  • next.config.js: Accept an option for serverFastRefresh (#91968)
  • Turbopack: enable server HMR for app route handlers (#91466)
  • Turbopack: exclude metadata routes from server HMR (#92034)
  • Fix CI for glibc linux builds
  • Backport: disable bmi2 in qfilter #92177
  • [backport] Fix CSS HMR on Safari (#92174)

Credits

Huge thanks to @​nextjs-bot, @​icyJoseph, @​ijjk, @​gaojude, @​wbinnssmith, @​lukesandberg, and @​bgw for helping!

v16.2.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • docs: post release amends (#91715)
  • docs: fix broken Activity Patterns demo link in preserving UI state guide (#91698)
  • Fix adapter outputs for dynamic metadata routes (#91680)
  • Turbopack: fix webpack loader runner layer (#91727)
  • Fix server actions in standalone mode with cacheComponents (#91711)
  • turbo-persistence: remove Unmergeable mmap advice (#91713)
  • Fix layout segment optimization: move app-page imports to server-utility transition (#91701)
  • Turbopack: lazy require metadata and handle TLA (#91705)
  • [turbopack] Respect {eval:true} in worker_threads constructors (#91666)

... (truncated)

Commits
  • d5f649b v16.2.3
  • 2873928 [16.x] Avoid consuming cyclic models multiple times (#75)
  • d7c7765 [backport]: Ensure app-page reports stale ISR revalidation errors via onReque...
  • c573e8c fix(server-hmr): metadata routes overwrite page runtime HMR handler (#92273)
  • 57b8f65 next-core: deduplicate output assets and detect content conflicts on emit (#9...
  • f158df1 Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
  • 356d605 turbo-tasks-backend: stability fixes for task cancellation and error handling...
  • 3b77a6e Fix DashMap read-write self-deadlock in task_cache causing hangs (#92210)
  • b2f208a Backport: new view-transitions guide, update and fixes (#92264)
  • 52faae3 v16.2.2
  • Additional commits viewable in compare view

Updates next-intl from 4.5.8 to 4.9.1

Release notes

Sourced from next-intl's releases.

v4.9.1

4.9.1 (2026-04-10)

Bug Fixes

v4.9.0

4.9.0 (2026-04-01)

Features

v4.8.4

4.8.4 (2026-03-31)

Bug Fixes

v4.8.3

4.8.3 (2026-02-16)

Bug Fixes

v4.8.2

4.8.2 (2026-02-02)

Bug Fixes

  • Avoid throwing config errors for non-Next.js consumers of next.config.ts (#2245) (f57800e) – by @​amannn

v4.8.1

4.8.1 (2026-01-30)

Bug Fixes

v4.8.0

4.8.0 (2026-01-28)

Features

Fixes

... (truncated)

Changelog

Sourced from next-intl's changelog.

4.9.1 (2026-04-10)

Bug Fixes

4.9.0 (2026-04-01)

Features

4.8.4 (2026-03-31)

Bug Fixes

4.8.3 (2026-02-16)

Bug Fixes

4.8.2 (2026-02-02)

Bug Fixes

  • Avoid throwing config errors for non-Next.js consumers of next.config.ts (#2245) (f57800e) – by @​amannn

4.8.1 (2026-01-30)

Bug Fixes

4.8.0 (2026-01-28)

Features

4.7.0 (2026-01-01)

Features

4.6.1 (2025-12-16)

... (truncated)

Commits
  • b4aa538 v4.9.1
  • 1c80b66 fix: Improve middleware pathname validation (#2304)
  • b65f8c4 v4.9.0
  • 02811f5 feat: Support transitionTypes on Link (#2302)
  • 722785b v4.8.4
  • 5e7bcd7 fix: Remove TypeScript peer dependency and update examples to TypeScript v6 (...
  • c9d6051 fix: Remove TypeScript peer dependency and update examples to TypeScript v6 (...
  • 5be07b6 fix: Remove TypeScript peer dependency and update examples to TypeScript v6 (...
  • 58326e7 docs: Fix typos (#2282)
  • ed19787 docs: Fix typos (#2283)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for next-intl since your current version.


Updates openai from 6.9.1 to 6.34.0

Release notes

Sourced from openai's releases.

v6.34.0

6.34.0 (2026-04-08)

Full Changelog: v6.33.0...v6.34.0

Features

  • api: add phase field to Message in conversations (eb7cbc1)
  • client: add support for short-lived tokens (#839) (a72ebcf)

Bug Fixes

  • api: remove web_search_call.results from ResponseIncludable in responses (1f6968e)

Chores

  • internal: codegen related update (1081460)
  • internal: update multipart form array serialization (3faee8d)
  • tests: bump steady to v0.20.1 (b73cc6b)

Documentation

  • api: add multi-file ingestion recommendations to vector-stores files/file-batches (1bc32a3)

v6.33.0

6.33.0 (2026-03-25)

Full Changelog: v6.32.0...v6.33.0

Features

  • api: add keys field to computer action types (27a850e)
  • client: add async iterator and stream() to WebSocket classes (e1c16ee)

Bug Fixes

  • api: align SDK response types with expanded item schemas (491cd52)
  • types: make type required in ResponseInputMessageItem (2012293)

Chores

  • ci: skip lint on metadata-only changes (74a917f)
  • internal: refactor imports (cfe9c60)
  • internal: update gitignore (71bd114)
  • tests: bump steady to v0.19.4 (f2e9dea)

... (truncated)

Changelog

Sourced from openai's changelog.

6.34.0 (2026-04-08)

Full Changelog: v6.33.0...v6.34.0

Features

  • api: add phase field to Message in conversations (eb7cbc1)
  • client: add support for short-lived tokens (#839) (a72ebcf)

Bug Fixes

  • api: remove web_search_call.results from ResponseIncludable in responses (1f6968e)

Chores

  • internal: codegen related update (1081460)
  • internal: update multipart form array serialization (3faee8d)
  • tests: bump steady to v0.20.1 (b73cc6b)

Documentation

  • api: add multi-file ingestion recommendations to vector-stores files/file-batches (1bc32a3)

6.33.0 (2026-03-25)

Full Changelog: v6.32.0...v6.33.0

Features

  • api: add keys field to computer action types (27a850e)
  • client: add async iterator and stream() to WebSocket classes (e1c16ee)

Bug Fixes

  • api: align SDK response types with expanded item schemas (491cd52)
  • types: make type required in ResponseInputMessageItem (2012293)

Chores

  • ci: skip lint on metadata-only changes (74a917f)
  • internal: refactor imports (cfe9c60)
  • internal: update gitignore (71bd114)
  • tests: bump steady to v0.19.4 (f2e9dea)
  • tests: bump steady to v0.19.5 (37c6cf4)
  • tests: bump steady to v0.19.6 (496b3af)

... (truncated)

Commits
  • 35feb53 Merge pull request #1797 from openai/release-please--branches--master--change...
  • 398e589 release: 6.34.0
  • a72ebcf feat(client): add support for short-lived tokens (#839)
  • b73cc6b chore(tests): bump steady to v0.20.1
  • eb7cbc1 feat(api): add phase field to Message in conversations
  • 1f6968e fix(api): remove web_search_call.results from ResponseIncludable in responses
  • 1081460 chore(internal): codegen related update
  • 1bc32a3 docs(api): add multi-file ingestion recommendations to vector-stores files/fi...
  • 3faee8d chore(internal): update multipart form array serialization
  • be64904 Merge pull request #1798 from openai/codex/pin-github-workflow-refs-20260326-...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for openai since your current version.


Updates tailwind-merge from 3.4.0 to 3.5.0

Release notes

Sourced from tailwind-merge's releases.

v3.5.0

New Features

Full Changelog: dcastil/tailwind-merge@v3.4.1...v3.5.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via @​thnxdev for sponsoring tailwind-merge! ❤️

v3.4.1

Bug Fixes

Full Changelog: dcastil/tailwind-merge@v3.4.0...v3.4.1

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via Description has been truncated

…y with 16 updates

Bumps the production-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.3.1` | `3.3.3` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` |
| [@next/mdx](https://github.com/vercel/next.js/tree/HEAD/packages/next-mdx) | `16.1.6` | `16.2.3` |
| [@upstash/ratelimit](https://github.com/upstash/ratelimit) | `2.0.7` | `2.0.8` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.35.7` | `1.37.0` |
| [@upstash/vector](https://github.com/upstash/vector-js) | `1.2.2` | `1.2.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `17.4.2` |
| [motion](https://github.com/motiondivision/motion) | `12.29.2` | `12.38.0` |
| [next](https://github.com/vercel/next.js) | `16.1.6` | `16.2.3` |
| [next-intl](https://github.com/amannn/next-intl) | `4.5.8` | `4.9.1` |
| [openai](https://github.com/openai/openai-node) | `6.9.1` | `6.34.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.4.0` | `3.5.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.2.2` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.1.18` | `4.2.2` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.13.0` | `7.14.0` |



Updates `dompurify` from 3.3.1 to 3.3.3
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.1...3.3.3)

Updates `react` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `@next/mdx` from 16.1.6 to 16.2.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.2.3/packages/next-mdx)

Updates `@upstash/ratelimit` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/upstash/ratelimit/releases)
- [Commits](upstash/ratelimit-js@v2.0.7...v2.0.8)

Updates `@upstash/redis` from 1.35.7 to 1.37.0
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/v1.35.7...@upstash/redis@1.37.0)

Updates `@upstash/vector` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/upstash/vector-js/releases)
- [Commits](upstash/vector-js@v1.2.2...v1.2.3)

Updates `dotenv` from 17.2.3 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.3...v17.4.2)

Updates `motion` from 12.29.2 to 12.38.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.29.2...v12.38.0)

Updates `next` from 16.1.6 to 16.2.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.1.6...v16.2.3)

Updates `next-intl` from 4.5.8 to 4.9.1
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.5.8...v4.9.1)

Updates `openai` from 6.9.1 to 6.34.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.9.1...v6.34.0)

Updates `tailwind-merge` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.4.0...v3.5.0)

Updates `tailwindcss` from 4.1.18 to 4.2.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/tailwindcss)

Updates `@tailwindcss/vite` from 4.1.18 to 4.2.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/@tailwindcss-vite)

Updates `react-router` from 7.13.0 to 7.14.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.14.0/packages/react-router)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@next/mdx"
  dependency-version: 16.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@upstash/ratelimit"
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@upstash/redis"
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@upstash/vector"
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: motion
  dependency-version: 12.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next-intl
  dependency-version: 4.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 6.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-router
  dependency-version: 7.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 13, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from joseph0926 as a code owner April 13, 2026 00:21
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 13, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
firsttx-docs Ready Ready Preview, Comment Apr 13, 2026 0:22am
firsttx-playground Ready Ready Preview, Comment Apr 13, 2026 0:22am

@github-actions
Copy link
Copy Markdown

Coverage Report for prepaint

Status Category Percentage Covered / Total
🔵 Lines 82.55% 549 / 665
🔵 Statements 79.63% 575 / 722
🔵 Functions 83.33% 95 / 114
🔵 Branches 65.94% 275 / 417
File CoverageNo changed files found.
Generated in workflow #311 for commit 925feff by the Vitest Coverage Report Action

@github-actions
Copy link
Copy Markdown

Coverage Report for local-first

Status Category Percentage Covered / Total
🔵 Lines 86.56% 393 / 454
🔵 Statements 85.99% 399 / 464
🔵 Functions 82.9% 97 / 117
🔵 Branches 74.62% 150 / 201
File CoverageNo changed files found.
Generated in workflow #311 for commit 925feff by the Vitest Coverage Report Action

@github-actions
Copy link
Copy Markdown

Coverage Report for tx

Status Category Percentage Covered / Total
🔵 Lines 94.34% 267 / 283
🔵 Statements 94.15% 274 / 291
🔵 Functions 100% 61 / 61
🔵 Branches 83.56% 122 / 146
File CoverageNo changed files found.
Generated in workflow #311 for commit 925feff by the Vitest Coverage Report Action

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants