Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 15 updates - #34

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-9bb833adf3
Open

chore(deps): bump the production-dependencies group across 1 directory with 15 updates#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-9bb833adf3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 15 updates in the / directory:

Package From To
@base-ui/react 1.6.0 1.8.0
@faker-js/faker 10.5.0 10.6.0
@libsql/client 0.17.4 0.18.0
@xyflow/react 12.11.2 12.11.6
better-sqlite3 13.0.1 13.0.3
immer 11.1.15 11.1.18
json-schema-faker 0.6.2 0.6.3
nanoid 6.0.0 6.0.1
next 16.2.11 16.3.4
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
shadcn 4.13.1 4.21.0
sonner 2.0.7 2.0.8
zod 4.4.3 4.5.4
zustand 5.0.14 5.0.15

Updates @base-ui/react from 1.6.0 to 1.8.0

Release notes

Sourced from @​base-ui/react's releases.

v1.8.0

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.8.0

Sep 4, 2026

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

... (truncated)

Commits
  • 47b4052 [release] v1.8.0 (#5609)
  • dd13809 [toast] Accept an updater function in the update method instead of on data (#...
  • 670e95c [docs] Update docs infra to restore generated types (#5616)
  • e8526f7 [utils] Restore frozen EMPTY_ARRAY (#5620)
  • b7f6683 [number field] Preserve consumer selection when focusing the input (#5619)
  • b8c5d78 [context menu] Correct generated API metadata (#5523)
  • 261d699 [combobox][autocomplete] Document that items must not contain nullish entries...
  • 0a6ff44 [toast] Replace custom data wholesale and accept a function to derive it (#5611)
  • 2e1bddd [combobox][select] Make the multiple selection anchor lookup linear (#5613)
  • ad83c8a [code-infra] Run TypeScript 7 alongside the TS6 JS API (#5603)
  • Additional commits viewable in compare view

Updates @faker-js/faker from 10.5.0 to 10.6.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.6.0

What's Changed

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.6.0 (2026-08-14)

New Locales

  • locale: add 060 Japanese mobile phone number formats (#3922) (afa272d)
  • locale: add Norwegian (nb_NO) animal module (#3901) (1232937)
  • locale: add Norwegian (nb_NO) food module (#3900) (bd23594)
  • locale: add vehicle data for de (#3958) (974490f)
  • locale: better middle names by gender for en locale (#3932) (aba3fb1)
  • locale: better organize first_name by gender for en (#3924) (119386b)

Features

Changed Locales

Bug Fixes

  • apidocs: scope code group tab identifiers (#3976) (3125eaf)
  • color: give the LCH hue its full 360 degree range (#3978) (1ce5994)
  • color: stop scaling the HSLA alpha into a percentage (#3979) (1143329)
  • groupBy handling for prototype property keys (#3906) (c898ff1)
  • internet: exclude reserved port 0 from internet.port() (#3948) (d4b35a4)
  • internet: generate long passwords without stack overflow (#3946) (4782978)
  • internet: validate CIDR prefix length and octet range in ipv4() (#3933) (15cb8fb)
  • locale: exclude forbidden letter combinations from nl postcodes (#3888) (9bebe67)
  • locale: only generate valid French postal codes (#3905) (711f36f)
  • locale: update nl_BE phone number patterns (#3981) (9616076)
  • locale: use only common surnames for zh_CN last names (#3938) (58394eb)
  • locale: use only valid letters in en_CA postcodes (#3951) (3b184d6)
  • string: reject refDates that a ULID timestamp cannot encode (#3982) (81717bc)
  • vehicle: calculate VIN check digit (#3954) (a4c6757)
  • word: pick nearest length for closest strategy (#3943) (42fd322)
Commits
  • 2cb0423 chore(release): 10.6.0 (#3986)
  • 531588f chore(deps): lock file maintenance (#3923)
  • 328f018 chore(deps): update eslint (#3930)
  • a5c8bd7 chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24 docker...
  • fe3f17b chore(deps): update all non-major dependencies (#3974)
  • ae38b18 docs(lorem): document the fail default strategy for word (#3944)
  • 1ce5994 fix(color): give the LCH hue its full 360 degree range (#3978)
  • 1143329 fix(color): stop scaling the HSLA alpha into a percentage (#3979)
  • a4c6757 fix(vehicle): calculate VIN check digit (#3954)
  • d68f978 infra: ensure markdown rendered is only ever initialized once (#3984)
  • Additional commits viewable in compare view

Updates @libsql/client from 0.17.4 to 0.18.0

Commits
  • 9496c78 0.18.0
  • f336495 fix(sqlite3): settle in-flight operations when the pool is torn down
  • 1174d51 fix(sqlite3): give a client a connection pool, like the hrana clients
  • 05e3344 fix(sqlite3): keep connection handle for in-memory databases across transactions
  • See full diff in compare view

Updates @xyflow/react from 12.11.2 to 12.11.6

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

@​xyflow/react@​12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

@​xyflow/react@​12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

  • #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

  • #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

@​xyflow/react@​12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

  • #5943 d1def59 - Invoke an error if handle can not be found

  • #5947 2ba040f - Use correct nodeExtent for internal setNodes.

  • #5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

  • #5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

... (truncated)

Changelog

Sourced from @​xyflow/react's changelog.

12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

  • #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

  • #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

... (truncated)

Commits
  • 9fd41fd chore(packages): bump
  • 19f9c2a fix(react/store): reset defaultEdgeOptions
  • 2acefb5 fix(react/store): reset functions #5991
  • 8f0a5d6 chore(packages): bump
  • 286816c chore(packages): bump
  • 3319ef4 fix(react): keep minimap bounds at the viewport when all nodes are hidden
  • b7186f3 fix(react): minimap still works after reactflow remounts #5971
  • d8edc77 Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...
  • 59b1a60 Simplify node click handling in MiniMap component
  • 25869f2 chore(system): add attr warning handler
  • Additional commits viewable in compare view

Updates better-sqlite3 from 13.0.1 to 13.0.3

Release notes

Sourced from better-sqlite3's releases.

v13.0.3

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v13.0.2...v13.0.3

v13.0.2

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v13.0.1...v13.0.2

Commits

Updates immer from 11.1.15 to 11.1.18

Release notes

Sourced from immer's releases.

v11.1.18

11.1.18 (2026-08-19)

Bug Fixes

  • remove global var Iterator declaration conflicting with ESNext lib (#1290) (b00474e), closes #1273

v11.1.17

11.1.17 (2026-08-16)

Bug Fixes

  • preserve structural sharing for no-op array-methods calls (0c3efdd)

v11.1.16

11.1.16 (2026-08-05)

Bug Fixes

  • key inserted array indices by name in the array-methods plugin (e3df956)
Commits
  • b00474e fix: remove global var Iterator declaration conflicting with ESNext lib (#1...
  • 6c7a3de chore(deps): bump shell-quote from 1.8.4 to 1.10.0 (#1279)
  • 6c5343e chore(deps): bump tar from 7.5.16 to 7.5.22 (#1280)
  • 50e7e73 chore(deps-dev): bump immutable from 3.8.3 to 4.3.9 (#1277)
  • 92ca628 chore(deps): bump ip-address from 10.2.0 to 10.4.0 (#1282)
  • 80392ff chore(deps): bump fast-uri from 3.1.2 to 3.1.5 in /website (#1284)
  • a43091c chore(deps): bump brace-expansion from 1.1.14 to 1.1.18 in /website (#1287)
  • 706d8d8 chore(deps): bump nanoid from 3.3.12 to 3.3.18 in /website (#1288)
  • 907395a Merge pull request #1289 from maximilliangrand/fix/array-methods-noop-structu...
  • 9491138 Skip new references for arrays when sort or reverse is a no-op
  • Additional commits viewable in compare view

Updates json-schema-faker from 0.6.2 to 0.6.3

Release notes

Sourced from json-schema-faker's releases.

v0.6.3

Features

  • Add dependentSchemas and dependentRequired keyword support
  • Add synchronous generateSync/createGeneratorSync API (#854)

Fixes

  • Skip double generation in dependencies handler when a property is in both required and properties
  • Scoped $defs resolution, quoted JSONPath keys, recursive descent fixes
  • Register nested local definitions during schema walk (#869)
  • Allow extensions to proceed into subschemas (#871)
  • Parse bracket-quoted JSONPath keys (#873)
  • Remove unused array item flag (#874)
  • Isolate autoIncrement counters by schema path (#872)
  • Apply optional property filtering to root example and default values
  • Trampoline recursive schema walks to avoid stack overflow on deep schemas
  • Prevent unhandled promise rejection at sync-mode async boundaries
  • Allow refResolver in generateSync(), throw only if it returns a Promise
Commits
  • 95b1845 chore: release 0.6.3
  • 4a993cb Merge pull request #880 from json-schema-faker/fix/875-dependent-schemas
  • 61d2af2 fix: address review feedback on dependentSchemas/dependentRequired
  • 424f894 feat: implement dependentSchemas and dependentRequired keywords
  • 9ba4cca Merge pull request #879 from json-schema-faker/feat/854-generate-sync
  • 0316496 fix: trampoline recursive schema walks to avoid stack overflow on deep schemas
  • 57d383b fix: prevent unhandled promise rejection at sync-mode async boundaries
  • 92fb595 fix: allow refResolver in generateSync(), throw only if it returns a Promise
  • fdc27f8 feat: add synchronous generateSync/createGeneratorSync API (#854)
  • ca5eb00 Merge pull request #870 from luke-perry-ck/lp/fix-root-example-exclusions
  • Additional commits viewable in compare view

Updates nanoid from 6.0.0 to 6.0.1

Release notes

Sourced from nanoid's releases.

6.0.1

  • Fixed docs.
Changelog

Sourced from nanoid's changelog.

6.0.1

  • Fixed docs.
Commits

Updates next from 16.2.11 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

...

Description has been truncated

@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: pnpm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
fack-api Error Error Sep 7, 2026 9:47am UTC

@codecov-commenter

codecov-commenter commented Sep 7, 2026

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-9bb833adf3 branch from 4315506 to 4374974 Compare September 7, 2026 09:38
@dependabot
chore(deps): bump the production-dependencies group across 1 director…
9b604d7 
…y with 15 updates

Bumps the production-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.8.0` |
| [@faker-js/faker](https://github.com/faker-js/faker) | `10.5.0` | `10.6.0` |
| [@libsql/client](https://github.com/tursodatabase/libsql-client-ts/tree/HEAD/packages/libsql-client) | `0.17.4` | `0.18.0` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.11.6` |
| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `13.0.1` | `13.0.3` |
| [immer](https://github.com/immerjs/immer) | `11.1.15` | `11.1.18` |
| [json-schema-faker](https://github.com/json-schema-faker/json-schema-faker) | `0.6.2` | `0.6.3` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.0` | `6.0.1` |
| [next](https://github.com/vercel/next.js) | `16.2.11` | `16.3.4` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.13.1` | `4.21.0` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |



Updates `@base-ui/react` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.8.0/packages/react)

Updates `@faker-js/faker` from 10.5.0 to 10.6.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v10.5.0...v10.6.0)

Updates `@libsql/client` from 0.17.4 to 0.18.0
- [Release notes](https://github.com/tursodatabase/libsql-client-ts/releases)
- [Changelog](https://github.com/tursodatabase/libsql-client-ts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tursodatabase/libsql-client-ts/commits/v0.18.0/packages/libsql-client)

Updates `@xyflow/react` from 12.11.2 to 12.11.6
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.6/packages/react)

Updates `better-sqlite3` from 13.0.1 to 13.0.3
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v13.0.1...v13.0.3)

Updates `immer` from 11.1.15 to 11.1.18
- [Release notes](https://github.com/immerjs/immer/releases)
- [Commits](immerjs/immer@v11.1.15...v11.1.18)

Updates `json-schema-faker` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/json-schema-faker/json-schema-faker/releases)
- [Commits](json-schema-faker/json-schema-faker@v0.6.2...v0.6.3)

Updates `nanoid` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.0...6.0.1)

Updates `next` from 16.2.11 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.3.4)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `shadcn` from 4.13.1 to 4.21.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.21.0/packages/shadcn)

Updates `sonner` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](emilkowalski/sonner@v2.0.7...v2.0.8)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

---
updated-dependencies:
- dependency-name: "@base-ui/react"
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@faker-js/faker"
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@libsql/client"
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@xyflow/react"
  dependency-version: 12.11.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: better-sqlite3
  dependency-version: 13.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: immer
  dependency-version: 11.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: json-schema-faker
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: nanoid
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: shadcn
  dependency-version: 4.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-9bb833adf3 branch from 4374974 to 9b604d7 Compare September 7, 2026 09:46
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@codecov-commenter