Skip to content

fix(deps)(deps): bump the production-dependencies group across 1 directory with 10 updates#528

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-production-dependencies-858f6e360e
Closed

fix(deps)(deps): bump the production-dependencies group across 1 directory with 10 updates#528
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-production-dependencies-858f6e360e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on @tailwindcss/typography, @vercel/ncc, discord-api-types, drizzle-kit, drizzle-orm, drizzle-zod, esbuild, hume, lucide-react and zustand to permit the latest version.
Updates @tailwindcss/typography to 0.5.19

Release notes

Sourced from @​tailwindcss/typography's releases.

v0.5.19

Fixed

  • Fixed broken color styles (#405)
Changelog

Sourced from @​tailwindcss/typography's changelog.

[0.5.19] - 2025-09-24

Fixed

  • Fixed broken color styles (#405)

[0.5.18] - 2025-09-19

Fixed

  • Fixed undefined variable error (#403)

[0.5.17] - 2025-09-19

Added

  • Add modifiers for description list elements (#357)
  • Add prose-picture modifier (#367)

Fixed

  • Include unit in hr border-width value (#379)
  • Ensure <kbd> styles work with Tailwind CSS v4 (#387)

Changed

  • Remove lodash dependencies (#402)

[0.5.16] - 2025-01-07

Fixed

  • Support installing with beta versions of Tailwind CSS v4 (#365)

[0.5.15] - 2024-08-28

Fixed

  • Support installing with alpha versions of Tailwind CSS v4 (#358)

[0.5.14] - 2024-08-07

Fixed

  • Fix table text alignment (#346)

[0.5.13] - 2024-04-26

Fixed

... (truncated)

Commits

Updates @vercel/ncc to 0.38.4

Release notes

Sourced from @​vercel/ncc's releases.

0.38.4

0.38.4 (2025-09-18)

Bug Fixes

Commits
  • e72d34d fix(cjs-build): enable evaluating import.meta in cjs build (#1236)
  • 186af2b chore(deps): Bump amannn/action-semantic-pull-request from 5.5.3 to 6.1.1 (#1...
  • 162c7d4 chore(deps): Bump actions/checkout from 4 to 5 (#1283)
  • 24734b5 chore(deps): Bump cipher-base from 1.0.4 to 1.0.6 (#1280)
  • 7bf44d5 chore(deps): Bump sha.js from 2.4.11 to 2.4.12 (#1281)
  • 50f1851 chore(deps): Bump tmp from 0.2.3 to 0.2.4 (#1278)
  • d797f1b chore(deps-dev): Bump koa from 2.16.1 to 3.0.1 (#1272)
  • 9bdbd47 chore(deps): Bump pbkdf2 from 3.1.2 to 3.1.3 (#1266)
  • cbfd660 chore(deps-dev): bump test deps for aws-sdk (#1263)
  • d17397f chore(deps-dev): Bump axios from 1.7.7 to 1.8.2 (#1262)
  • Additional commits viewable in compare view

Updates discord-api-types to 0.38.47

Release notes

Sourced from discord-api-types's releases.

0.38.47

0.38.47 (2026-04-16)

Features

Full Changelog: discordjs/discord-api-types@0.38.46...0.38.47

Changelog

Sourced from discord-api-types's changelog.

0.38.47 (2026-04-16)

Features

  • RESTJSONErrorCodes: add CannotForwardMessageWithUnreadableContent (#1628) (09c71fe)
  • RESTJSONErrorCodes: rename ChannelSendRateLimit to ChannelWriteRateLimit (#1627) (d5dc47a)

0.38.46 (2026-04-13)

Bug Fixes

  • APIUser global_name description (#1586) (d165766)
  • Channel: add applied_tags to forum thread form data body (#1615) (19d04c0)
  • Gateway: correct scheduled event user remove dispatch type (#1614) (b2a8b74)
  • ReactionType: rename Super to Burst (#1613) (c21ae24)
  • Webhook: add delete message query, fix thread_id type (#1611) (27ef064)

Features

  • Message: more attachment and embed fields and flags (#1609) (702e541)
  • UserFlags: mark ActiveDeveloper as deprecated (#1604) (5acf5c5)

0.38.45 (2026-04-09)

Bug Fixes

  • OAuth2: include flags in current application result (#1610) (1506ff0)
  • User: use Snowflake for DM recipient_id (#1612) (3a296fa)

0.38.44 (2026-04-02)

Bug Fixes

  • APIApplication: make event_webhooks_status optional (#1603) (c76a1bc)

0.38.43 (2026-03-28)

Bug Fixes

  • Channel: correct PATCH channel field nullability (#1575) (a4aa724)
  • Gateway: invite create timestamp type, zstd-stream (#1569) (38b9467)
  • Guild: correct optionality and nullability (#1574) (cf6476d)
  • guildScheduledEvent: entity_type required, channel_id nullable (#1573) (bf12195)
  • poll: mark expiry as nullable (#1576) (dea22dc)

... (truncated)

Commits
  • 2e5e31b chore(release): 0.38.47 🎉 (#1632)
  • 0bd00dd refactor(RESTJSONErrorCodes): rename ServerSendRateLimit to `ServerWriteRat...
  • d5dc47a feat(RESTJSONErrorCodes): rename ChannelSendRateLimit to `ChannelWriteRateL...
  • 09c71fe feat(RESTJSONErrorCodes): add CannotForwardMessageWithUnreadableContent (#1...
  • 3691d77 chore(release): 0.38.46 🎉 (#1624)
  • bece6b8 chore(deps): lock file maintenance (#1623)
  • e9e7f5c chore(deps): update eslint/prettier (#1621)
  • e1b27cd chore(deps): update patch/minor dependencies (#1622)
  • 5acf5c5 feat(UserFlags): mark ActiveDeveloper as deprecated (#1604)
  • d165766 fix: APIUser global_name description (#1586)
  • Additional commits viewable in compare view

Updates drizzle-kit to 0.31.10

Release notes

Sourced from drizzle-kit's releases.

drizzle-kit@0.31.10

  • Updated to hanji@0.0.8 - native bun stringWidth, stripANSI support, errors for non-TTY environments
  • We've migrated away from esbuild-register to tsx loader, it will now allow to use drizzle-kit seamlessly with both ESM and CJS modules
  • We've also added native Bun and Deno launch support, which will not trigger tsx loader and utilise native bun and deno imports capabilities and faster startup times
Commits
  • 4aa6ecf Kit updates (#5490)
  • e8e6edf feat(drizzle-kit): support d1 via binding (#5302)
  • a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
  • c445637 Merge pull request #5095 from drizzle-team/main-workflows
  • e7b3aaa Merge branch 'main' into main-workflows
  • 0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
  • 45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
  • 6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
  • 53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
  • ce88a18 Merge remote-tracking branch 'origin/ext-deps-kit' into main-workflows
  • Additional commits viewable in compare view

Updates drizzle-orm from 0.44.7 to 0.45.2

Release notes

Sourced from drizzle-orm's releases.

0.45.2

  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @​EthanKim88, @​0x90sh and @​wgoodall01 for reaching out to us with a reproduction and suggested fix

0.45.1

  • Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

  • Fixed pg-native Pool detection in node-postgres transactions
  • Allowed subqueries in select fields
  • Updated typo algorythm => algorithm
  • Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)
  • Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)
Commits
  • 273c780 + 0.45.2 (#5534)
  • 4aa6ecf Kit updates (#5490)
  • e8e6edf feat(drizzle-kit): support d1 via binding (#5302)
  • a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
  • c445637 Merge pull request #5095 from drizzle-team/main-workflows
  • e7b3aaa Merge branch 'main' into main-workflows
  • 0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
  • 45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
  • 6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
  • 53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for drizzle-orm since your current version.


Updates drizzle-zod from 0.5.1 to 0.8.3

Commits

Updates esbuild from 0.25.12 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0

  • Add support for with { type: 'text' } imports (#4435)

    The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

    import string from './example.txt' with { type: 'text' }
    console.log(string)
  • Add integrity checks to fallback download path (#4343)

    Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

    This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

  • Update the Go compiler from 1.25.7 to 1.26.1

    This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

    • It now uses the new garbage collector that comes with Go 1.26.
    • The Go compiler is now more aggressive with allocating memory on the stack.
    • The executable format that the Go linker uses has undergone several changes.
    • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

    You can read the Go 1.26 release notes for more information.

v0.27.7

  • Fix lowering of define semantics for TypeScript parameter properties (#4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
    class Foo {
      constructor(public x = 1) {}
      y = 2
    }
    // Old output (with --loader=ts --target=es2021)
    class Foo {
    constructor(x = 1) {
    this.x = x;
    __publicField(this, "y", 2);
    }
    x;
    }
    // New output (with --loader=ts --target=es2021)
    class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

0.27.2

  • Allow import path specifiers starting with #/ (#4361)

    Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

    This change was contributed by @​hybrist.

  • Automatically add the -webkit-mask prefix (#4357, #4358)

    This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

    /* Original code */
    main {
      mask: url(x.png) center/5rem no-repeat
    }
    /* Old output (with --target=chrome110) */
    main {
    mask: url(x.png) center/5rem no-repeat;
    }
    /* New output (with --target=chrome110) */
    main {
    -webkit-mask: url(x.png) center/5rem no-repeat;
    mask: url(x.png) center/5rem no-repeat;
    }

    This change was contributed by @​BPJEnnova.

  • Additional minification of switch statements (#4176, #4359)

    This release contains additional minification patterns for reducing switch statements. Here is an example:

    // Original code
    switch (x) {
      case 0:
        foo()
        break
      case 1:
      default:
        bar()
    }

... (truncated)

Commits
  • 6a794df publish 0.28.0 to npm
  • 64ee0ea fix #4435: support with { type: text } imports
  • ef65aee fix sort order in snapshots_packagejson.txt
  • 1a26a8e try to fix test-old-ts, also shuffle CI tasks
  • 556ce6c use '' instead of null to omit build hashes
  • 8e675a8 ci: allow missing binary hashes for tests
  • 7067763 Reapply "update go 1.25.7 => 1.26.1"
  • 39473a9 fix #4343: integrity check for binary download
  • 2025c9f publish 0.27.7 to npm
  • c6b586e fix typo in Makefile for @esbuild/win32-x64
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.


Updates hume from 0.12.2 to 0.15.16

Release notes

Sourced from hume's releases.

0.15.16

What's Changed

Full Changelog: HumeAI/hume-typescript-sdk@0.15.15...0.15.16

0.15.15

What's Changed

  • add new external LLM model: claude-opus-4-6
  • rm external LLM model: gemini-3-flash-preview that was erroneously released in the previous version (not available yet on Google U.S. server)

Full Changelog: HumeAI/hume-typescript-sdk@0.15.14...0.15.15

0.15.14

What's Changed

  • add prompt_expansion parameter for external LLMs (link to docs)
  • add new external LLM models: claude-opus-4-6, gpt-5.1, gpt-5.1-priority, gpt-5.2, gpt-5.2-priority
  • upd config creation: external LLM model_provider is now fully optional, providing just the model_resource is enough
  • fix missing external LLM provider: X_AI

Full Changelog: HumeAI/hume-typescript-sdk@0.15.13...0.15.14

0.15.13

What's Changed

Full Changelog: HumeAI/hume-typescript-sdk@0.15.12...0.15.13

v0.15.12

What's Changed

Full Changelog: HumeAI/hume-typescript-sdk@0.15.11...0.15.12

v0.15.11

What's Changed

Full Changelog: HumeAI/hume-typescript-sdk@0.15.10...0.15.11

0.15.10

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hume since your current version.


Updates lucide-react from 0.525.0 to 0.577.0

Release notes

Sourced from lucide-react's releases.

Version 0.577.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.576.0...0.577.0

Version 0.576.0

What's Changed

Full Changelog: lucide-icons/lucide@0.575.0...0.576.0

Version 0.575.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.573.0...0.575.0

Version 0.574.0

What's Changed

New Contributors

... (truncated)

Commits
  • f6c0d06 chore(deps): bump rollup from 4.53.3 to 4.59.0 (#4106)
  • 67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
  • b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
  • 076e0bb chore(dependencies): Update dependencies (#3809)
  • 80d6f73 fix(icons): Rename fingerprint icon to fingerprint-pattern (#3767)
  • 1cfb3ff chore(deps-dev): bump vite from 6.3.5 to 6.3.6 (#3611)
  • e71198d chore: icon alias improvements (#2861)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lucide-react since your current version.


Updates zustand from 5.0.6 to 5.0.13

Release notes

Sourced from zustand's releases.

v5.0.13

This release includes an improvement in the devtools middleware.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.12...v5.0.13

v5.0.12

Two small fixes.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.11...v5.0.12

v5.0.11

This release includes small improvements in middleware thanks to contributors.

What's Changed

New Contributors

... (truncated)

Commits
  • 6bc451e 5.0.13
  • 8ec2169 chore(deps): update dev dependencies (#3486)
  • 4e9bcf0 fix(devtools): support Firefox/Safari stack format in findCallerName (#3469)
  • 4b96f4e fix(docs): correct react-dom test utils import path (#3474)
  • c7516c1 fix(tests): change parameters for 'expect' in test (#3483)
  • 1b04af1 docs(persist): fix signature to require persistOptions (#3477)
  • 95d3f33 test(middleware/immer): add runtime tests for immer middleware (#3471)
  • 3201328 Update TypeScript guide links in README.md (#3466)
  • 00f96a3 chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 (#3447)
  • 6330044 test: expand React subscribe test coverage (#3442)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for zustand since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
@vercel

vercel Bot commented Apr 20, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
interviewoptimiser Error Error May 16, 2026 9:32pm

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-production-dependencies-858f6e360e branch from d3b8567 to 6e989a3 Compare April 27, 2026 03:08
…ctory with 10 updates

Updates the requirements on [@tailwindcss/typography](https://github.com/tailwindlabs/tailwindcss-typography), [@vercel/ncc](https://github.com/vercel/ncc), [discord-api-types](https://github.com/discordjs/discord-api-types), [drizzle-kit](https://github.com/drizzle-team/drizzle-orm), [drizzle-orm](https://github.com/drizzle-team/drizzle-orm), [drizzle-zod](https://github.com/drizzle-team/drizzle-orm), [esbuild](https://github.com/evanw/esbuild), [hume](https://github.com/HumeAI/hume-typescript-sdk), [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) and [zustand](https://github.com/pmndrs/zustand) to permit the latest version.

Updates `@tailwindcss/typography` to 0.5.19
- [Release notes](https://github.com/tailwindlabs/tailwindcss-typography/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss-typography/blob/main/CHANGELOG.md)
- [Commits](tailwindlabs/tailwindcss-typography@v0.5.16...v0.5.19)

Updates `@vercel/ncc` to 0.38.4
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.38.3...0.38.4)

Updates `discord-api-types` to 0.38.47
- [Release notes](https://github.com/discordjs/discord-api-types/releases)
- [Changelog](https://github.com/discordjs/discord-api-types/blob/main/CHANGELOG.md)
- [Commits](discordjs/discord-api-types@0.38.16...0.38.47)

Updates `drizzle-kit` to 0.31.10
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.4...drizzle-kit@0.31.10)

Updates `drizzle-orm` from 0.44.7 to 0.45.2
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.44.7...0.45.2)

Updates `drizzle-zod` from 0.5.1 to 0.8.3
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/commits)

Updates `esbuild` from 0.25.12 to 0.28.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)
- [Commits](evanw/esbuild@v0.25.12...v0.28.0)

Updates `hume` from 0.12.2 to 0.15.16
- [Release notes](https://github.com/HumeAI/hume-typescript-sdk/releases)
- [Commits](HumeAI/hume-typescript-sdk@0.12.2...0.15.16)

Updates `lucide-react` from 0.525.0 to 0.577.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react)

Updates `zustand` from 5.0.6 to 5.0.13
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.6...v5.0.13)

---
updated-dependencies:
- dependency-name: "@tailwindcss/typography"
  dependency-version: 0.5.19
  dependency-type: direct:production
  dependency-group: production-dependencies
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.4
  dependency-type: direct:production
  dependency-group: production-dependencies
- dependency-name: discord-api-types
  dependency-version: 0.38.47
  dependency-type: direct:production
  dependency-group: production-dependencies
- dependency-name: drizzle-kit
  dependency-version: 0.31.10
  dependency-type: direct:production
  dependency-group: production-dependencies
- dependency-name: drizzle-orm
  dependency-version: 0.45.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: drizzle-zod
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: esbuild
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: hume
  dependency-version: 0.15.16
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 0.577.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-production-dependencies-858f6e360e branch from 6e989a3 to b2a7f91 Compare May 16, 2026 21:29
@dependabot @github

dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 1, 2026
@dependabot dependabot Bot deleted the dependabot-npm_and_yarn-production-dependencies-858f6e360e branch June 1, 2026 05:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants