deps: bump the production-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the production-dependencies group with 7 updates in the / directory:

Package	From	To
@playwright/test	1.60.0	1.61.0
@tanstack/react-virtual	3.14.2	3.14.3
stripe	22.2.0	22.2.2
@react-navigation/bottom-tabs	7.18.0	7.18.2
@react-navigation/native	7.3.1	7.3.3
@supabase/supabase-js	2.108.1	2.108.2
@clerk/nextjs	7.5.2	7.5.7

Updates @playwright/test from 1.60.0 to 1.61.0

Release notes

Sourced from @​playwright/test's releases.

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

• apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

• New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
• New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
• The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

• The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
• Supported expect.soft.poll(...).
• New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
• New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
• testInfo.errors now lists each sub-error of an AggregateError as a separate entry.

... (truncated)

Commits

• 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
• a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
• 8133dcf cherry-pick(#41283): docs: add Ubuntu 26.04 and Node.js 26.x to system requir...
• 812432e chore: mark v1.61.0 (#41277)
• ac05145 fix(fetch): report serverAddr and securityDetails for reused sockets (#41267)
• 056efc9 fix(trace-viewer): add keyboard navigation to NetworkFilters component (#41...
• 41f7b9a chore: fixes uncovered by the .NET 1.61 roll (#41266)
• ba50778 fix(mcp): assign caps as array for legacy --vision flag (#41253)
• b8ee5ae docs: release notes for v1.61 (#41261)
• 49c1f69 fix(trace viewer): load trace from a local file (#41263)
• Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.2 to 3.14.3

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.3

Patch Changes

• #1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

• Updated dependencies [ef69ea3]:

  • @​tanstack/virtual-core@​3.17.1

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.3

Patch Changes

• #1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

• Updated dependencies [ef69ea3]:

  • @​tanstack/virtual-core@​3.17.1

Commits

• 75ae896 ci: Version Packages (#1202)
• 2ba5eb6 fix(react-virtual): make directDomUpdates a no-op without containerRef (#1201)
• ef69ea3 fix(virtual-core): adjust scroll on first measurement during backward scroll ...
• 932c358 test(react-virtual): add e2e test for React Compiler with directDomUpdates, b...
• See full diff in compare view

Updates stripe from 22.2.0 to 22.2.2

Release notes

Sourced from stripe's releases.

v22.2.2

• #2725 Fixes CJS type exports for stripe package (reported in #2683)
• #2758 Fix Stripe.ErrorType.StripeError incorrectly being usable as a runtime class (reported in #2661)
• #2753 handle shadowed namespaces (reported in #2691)

See the changelog for more details.

v22.2.1

• #2750 URI Encode path params
• #2747 Fix V2ListIterator: concurrency guard and empty page handling
• #2740 Add "source" field to user-agent header
• #2734 Fix parseHttpHeaderAsNumber to return undefined instead of NaN

See the changelog for more details.

Changelog

Sourced from stripe's changelog.

22.2.2 - 2026-06-18

• #2725 Fixes CJS type exports for stripe package (reported in #2683)
• #2758 Fix Stripe.ErrorType.StripeError incorrectly being usable as a runtime class (reported in #2661)
• #2753 handle shadowed namespaces (reported in #2691)

22.2.1 - 2026-06-12

• #2750 URI Encode path params
• #2747 Fix V2ListIterator: concurrency guard and empty page handling
• #2740 Add "source" field to user-agent header
• #2734 Fix parseHttpHeaderAsNumber to return undefined instead of NaN

Commits

• 9be501c Bump version to 22.2.2
• 580b824 Fixes CJS type exports for stripe package (#2725)
• 047dd0c Fix Stripe.ErrorType.StripeError incorrectly being usable as a runtime clas...
• fe2f78c handle shadowed namespaces (#2753)
• 56a570f Add PR disclaimer to README (#2754)
• d3b8ecd Remove retired manual API tests covered by generated examples (#2752)
• ed488fc Bump version to 22.2.1
• 17c13c6 URI Encode path params (#2750)
• cfb436e Fix V2ListIterator: concurrency guard and empty page handling (#2747)
• 8056da8 Add "source" field to user-agent header (#2740)
• Additional commits viewable in compare view

Updates @react-navigation/bottom-tabs from 7.18.0 to 7.18.2

Changelog

Sourced from @​react-navigation/bottom-tabs's changelog.

7.18.2 (2026-06-15)

Note: Version bump only for package @​react-navigation/bottom-tabs

7.18.1 (2026-06-14)

Note: Version bump only for package @​react-navigation/bottom-tabs

Commits

• f4af343 chore: publish
• c9ddec7 chore: publish
• See full diff in compare view

Updates @react-navigation/native from 7.3.1 to 7.3.3

Release notes

Sourced from @​react-navigation/native's releases.

@​react-navigation/native@​7.3.2

7.3.2 (2026-06-14)

Bug Fixes

• rollback history if update was prevented (045720a) - by @​satya164

Changelog

Sourced from @​react-navigation/native's changelog.

7.3.3 (2026-06-15)

Note: Version bump only for package @​react-navigation/native

7.3.2 (2026-06-14)

Bug Fixes

• rollback history if update was prevented (045720a) - by @​satya164

Commits

• f4af343 chore: publish
• 6a17f49 refactor: avoid relying on sync update for prevent remove check
• c9ddec7 chore: publish
• 045720a fix: rollback history if update was prevented
• See full diff in compare view

Updates @supabase/supabase-js from 2.108.1 to 2.108.2

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.108.2

2.108.2 (2026-06-15)

🩹 Fixes

• auth: preserve valid session on refresh failure and cooldown repeat failures (#2436)
• realtime: clarify httpSend() 404 error and server migration note (#2444)
• release: pin Deno and bound JSR publish to survive stranded-task hangs (#2439)
• release: restore JSR publish flags and enable for beta (#2440)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.108.2-canary.5

2.108.2-canary.5 (2026-06-15)

This was a version bump only, there were no code changes.

v2.108.2-canary.4

2.108.2-canary.4 (2026-06-12)

🩹 Fixes

• realtime: clarify httpSend() 404 error and server migration note (#2444)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.108.2-canary.3

2.108.2-canary.3 (2026-06-11)

This was a version bump only, there were no code changes.

v2.108.2-canary.2

2.108.2-canary.2 (2026-06-11)

🩹 Fixes

• release: restore JSR publish flags and enable for beta (#2440)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.108.2-canary.1

2.108.2-canary.1 (2026-06-11)

🩹 Fixes

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.108.2 (2026-06-15)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.108.0 (2026-06-08)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.107.0 (2026-06-02)

🚀 Features

• auth: remove navigator.locks-based mutex; introduce commit guard + dispose() (#2392)
• supabase: update X-Client-Info to structured metadata format (#2359)
• realtime: allow httpSend to send binary payload (#2400)

❤️ Thank You

• Claude Sonnet 4.6
• Eduardo Gurgel
• Guilherme Souza
• Katerina Skroumpelou @​mandarini
• Omar Al Matar @​Bewinxed

2.106.2 (2026-05-25)

🩹 Fixes

• misc: add react-native export condition for Hermes-safe resolution (#2393)

❤️ Thank You

• Myroslav Hryhschenko @​BLOCKMATERIAL

2.106.1 (2026-05-20)

🩹 Fixes

• misc: hide dynamic import from hermesc (#2381)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

2.106.0 (2026-05-18)

🚀 Features

• supabase: W3C/OpenTelemetry trace context propagation (#2163)

... (truncated)

Commits

• 76f3f02 test(auth): add passkey unit and e2e coverage (#2442)
• See full diff in compare view

Updates @clerk/nextjs from 7.5.2 to 7.5.7

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.5.7

Patch Changes

• Updated dependencies [01789b4]:
  • @​clerk/shared@​4.20.0
  • @​clerk/backend@​3.8.2
  • @​clerk/react@​6.10.4

@​clerk/nextjs@​7.5.6

Patch Changes

• Updated dependencies [c84f8df, 53e7b11, e51e22a]:
  • @​clerk/shared@​4.19.1
  • @​clerk/react@​6.10.3
  • @​clerk/backend@​3.8.1

@​clerk/nextjs@​7.5.5

Patch Changes

• Updated dependencies [fb11e32]:
  • @​clerk/react@​6.10.2

@​clerk/nextjs@​7.5.3

Patch Changes

• Updated dependencies [f4167ec, 17e4164, ed2cf75, 67c04a4, 51c8fdc, c2ba971, 8744728, d9b5c7d]:
  • @​clerk/shared@​4.18.0
  • @​clerk/react@​6.10.0
  • @​clerk/backend@​3.7.1

Changelog

Sourced from @​clerk/nextjs's changelog.

7.5.7

Patch Changes

• Updated dependencies [01789b4]:
  • @​clerk/shared@​4.20.0
  • @​clerk/backend@​3.8.2
  • @​clerk/react@​6.10.4

7.5.6

Patch Changes

• Updated dependencies [c84f8df, 53e7b11, e51e22a]:
  • @​clerk/shared@​4.19.1
  • @​clerk/react@​6.10.3
  • @​clerk/backend@​3.8.1

7.5.5

Patch Changes

• Updated dependencies [fb11e32]:
  • @​clerk/react@​6.10.2

7.5.4

Patch Changes

• Updated dependencies [d5968d0, f4ecc13, ffbc650]:
  • @​clerk/shared@​4.19.0
  • @​clerk/backend@​3.8.0
  • @​clerk/react@​6.10.1

7.5.3

Patch Changes

• Updated dependencies [f4167ec, 17e4164, ed2cf75, 67c04a4, 51c8fdc, c2ba971, 8744728, d9b5c7d]:
  • @​clerk/shared@​4.18.0
  • @​clerk/react@​6.10.0
  • @​clerk/backend@​3.7.1

Commits

• e68a59a ci(repo): Version packages (#8938)
• 88525a6 ci(repo): Version packages (#8914)
• a49608d ci(repo): Version packages (#8910)
• f4488f5 ci(repo): Version packages (#8876)
• 9d7db80 ci(repo): Version packages (#8836)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
crew-roster	Ready	Preview, Comment	Jun 21, 2026 9:44am

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.