Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 9 updates - #279

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4762cc5a19
Open

chore(deps): bump the production-dependencies group across 1 directory with 9 updates#279
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4762cc5a19

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
@prisma/adapter-pg 7.8.0 7.9.1
@prisma/client 7.8.0 7.9.1
@sentry/nextjs 10.66.0 10.69.0
jose 6.2.3 6.2.8
marked 18.0.6 18.0.9
next 16.2.10 16.3.0
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
resend 6.17.2 6.18.1

Updates @prisma/adapter-pg from 7.8.0 to 7.9.1

Release notes

Sourced from @​prisma/adapter-pg's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:

# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)

@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @​AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.

</tr></table>

... (truncated)

Commits

Updates @prisma/client from 7.8.0 to 7.9.1

Release notes

Sourced from @​prisma/client's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:

# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)

@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @​AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.

</tr></table>

... (truncated)

Commits
  • b829850 ci: upgrade pnpm to 11 to restore pnpm audit (#29725)
  • 280fd56 fix(client): mask each quoted string in maskQuery independently (#29723)
  • 4da3774 fix(client): reject invalid raw dates (#29697)
  • a7cec97 chore(deps): update engines to 7.9.0-1.e922089b7d7502aff4249d5da3420f6fa55fc6...
  • 58f8439 fix(client): pin pg-protocol in prisma-client-imports-postgres e2e test (#29687)
  • 918cf5d fix(client): improve adapter-related Prisma 7 error messages (#29624)
  • 93da6ea ci(e2e): shard client e2e suite across 3 jobs to fix chronic timeouts (#29619)
  • 3937779 fix: remove duplicate 'the the' in test comments (#29610)
  • fda8fbc chore(deps): bump @​prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
  • 0036baf fix(client-engine-runtime): surface unmapped driver errors as user-facing P20...
  • See full diff in compare view

Updates @sentry/nextjs from 10.66.0 to 10.69.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.69.0

Important Changes

  • feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

  • feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)
  • feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)
  • feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#22767)
  • fix(v10/cloudflare): Prevent AI provider skips (#22771)
  • fix(v10/core): Summarize SQLite upserts so Durable Object cf_ spans stay filtered (#22766)
  • fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • fix(v10/gatsby): Add React 19 to peer dependency range (#22675)
  • fix(v10/node): Unpin @apm-js-collab/code-transformer-bundler-plugins (#22678)
  • fix(v10/server-utils): Do not inject dc into client bundle (#22765)
  • test(v10/cloudflare): Pin mcp as agent depends on it (#22769)

Bundle size 📦

Path Size
@​sentry/browser 27.11 KB
@​sentry/browser - with treeshaking flags 25.59 KB
@​sentry/browser (incl. Tracing) 45.51 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.25 KB
@​sentry/browser (incl. Tracing, Profiling) 50.15 KB
@​sentry/browser (incl. Tracing, Replay) 83.84 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.71 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.44 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.79 KB
@​sentry/browser (incl. Feedback) 43.88 KB
@​sentry/browser (incl. sendFeedback) 31.79 KB
@​sentry/browser (incl. FeedbackAsync) 36.8 KB
@​sentry/browser (incl. Metrics) 28.17 KB
@​sentry/browser (incl. Logs) 28.39 KB
@​sentry/browser (incl. Metrics & Logs) 29.07 KB
@​sentry/react 28.87 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.69.0

Important Changes

  • feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

  • feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)
  • feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)
  • feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#22767)
  • fix(v10/cloudflare): Prevent AI provider skips (#22771)
  • fix(v10/core): Summarize SQLite upserts so Durable Object cf_ spans stay filtered (#22766)
  • fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • fix(v10/gatsby): Add React 19 to peer dependency range (#22675)
  • fix(v10/node): Unpin @apm-js-collab/code-transformer-bundler-plugins (#22678)
  • fix(v10/server-utils): Do not inject dc into client bundle (#22765)
  • test(v10/cloudflare): Pin mcp as agent depends on it (#22769)

10.68.0

  • feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
  • feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
  • feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
  • feat(server-utils): Allow integrations to be part of marker (#22094)
  • feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
  • feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
  • feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
  • feat(v10): Add url.full and url.path to http.server spans (#22533)
  • feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
  • feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
  • feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
  • feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
  • feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
  • feat(v10/core): Add instrumentStateGraph API (#22491)
  • feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
  • feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
  • feat(v10/react-router): Make instrumentation API the default (#22525)

... (truncated)

Commits
  • 417af5d release: 10.69.0
  • e7cf605 meta(changelog): Update changelog for 10.69.0 (#22807)
  • 7c5a00e fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
  • df53214 feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
  • e96e15e feat(v10/cloudflare): Add Spotlight integration for local dev event forwardin...
  • ea4a322 fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
  • 6a84103 feat(v10/cloudflare): Instrument Agents automatically (#22788)
  • f0c3569 feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
  • 0516355 feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#2...
  • d3a6e52 fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#2...
  • Additional commits viewable in compare view

Updates jose from 6.2.3 to 6.2.8

Release notes

Sourced from jose's releases.

v6.2.8

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Fixes

  • require own JOSE properties for presence checks (90ab09c)

Refactor

v6.2.6

Fixes

  • types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)
  • stop claiming the JWK "use" parameter is used during import (47a07b2)
  • update CHANGELOG.md (fc51bf5)

Refactor

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.8 (2026-08-03)

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

6.2.7 (2026-08-01)

Fixes

  • require own JOSE properties for presence checks (90ab09c)

Refactor

6.2.6 (2026-07-31)

Fixes

  • types: accept host CryptoKey declarations (b48a15b)

6.2.5 (2026-07-29)

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)

... (truncated)

Commits
  • 8b768eb chore(release): 6.2.8
  • 1500459 refactor: name the "alg" source in unsupported algorithm failures
  • 714f870 fix: reject a non-string "alg" in EmbeddedJWK
  • 925f3bb refactor: index the JWS and JWE registries without a wrapper
  • 505c383 fix: enforce a single recipient when decrypting dir and ECDH-ES
  • 514831d chore(deps): bump the actions group with 3 updates
  • 45965db chore: cleanup after release
  • 60b941f chore(release): 6.2.7
  • 90ab09c fix: require own JOSE properties for presence checks
  • 767d7f1 refactor: reduce bundle size
  • Additional commits viewable in compare view

Updates marked from 18.0.6 to 18.0.9

Release notes

Sourced from marked's releases.

v18.0.9

18.0.9 (2026-08-04)

Bug Fixes

  • an unmatched strong run before emphasis stays literal (#4008) (e8544e6)
  • Fix spurious deeper nesting in a blockquote continuation (#4030) (452f1ed)
  • pedantic foo: and "word" emphasis parsing (#3999) (823093f)

v18.0.8

18.0.8 (2026-08-04)

Bug Fixes

  • fall back to default checkbox renderer when extension returns false (#4023) (e1b6139)

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

  • Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991
  • Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)
  • keep empty list after blockquote as a sibling block (#4004) (3f144a0)
  • preserve code spans adjacent to tildes (#4012) (0de7188)
  • Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1
  • treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)
Commits
  • 8e858a4 chore(release): 18.0.9 [skip ci]
  • 641e5df docs: explain partial extensions in use (#4033)
  • 452f1ed fix: Fix spurious deeper nesting in a blockquote continuation (#4030)
  • e8544e6 fix: an unmatched strong run before emphasis stays literal (#4008)
  • 823093f fix: pedantic foo: and "word" emphasis parsing (#3999)
  • 12a84a8 chore(release): 18.0.8 [skip ci]
  • 3a1a706 chore(deps-dev): bump undici from 6.24.0 to 6.27.0 (#4042)
  • 58ed4af chore(deps-dev): bump eslint from 10.7.0 to 10.8.0 (#4032)
  • 01539fb chore(deps-dev): bump @​semantic-release/git from 10.0.1 to 11.0.1 (#4031)
  • e1b6139 fix: fall back to default checkbox renderer when extension returns false (#4023)
  • Additional commits viewable in compare view

Updates next from 16.2.10 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

  • Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
  • Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
  • Normalize encoded dynamic placeholders in app routes: #91603
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
  • Update tokio from 1.43.0 to 1.47.3: #90945
  • [turbopack] Simplify snapshotting logic: #91178
  • Turbopack: enable server HMR for app route handlers: #91466
  • turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
  • [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
  • Skip loadBindings() Lightning CSS check during next start: #91538
  • turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
  • Turbopack: Add importModule() support to webpack loaders: #89630
  • turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
  • turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
  • feat(node-streams): add config flag, define-env, and env precedence test: #90427
  • Rename /_next/webpack-hmr to /_next/hmr: #91415
  • Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
  • Handle encoded params further: #91627
  • [turbopack] Respect {eval:true} in worker_threads constructors: #91666
  • Fix missing route in otel spans without base-server: #91665
  • [turbopack] Optimize compaction cpu usage: #91468
  • Fix layout segment optimization: move app-page imports to server-utility transition: #91701
  • Fix server actions in standalone mode with cacheComponents: #91711
  • turbo-persistence: remove Unmergeable mmap advice: #91713
  • turbopack: move "compact database" tracing span to backend layer: #91693
  • Turbopack: lazy require metadata and handle TLA: #91705
  • Fix adapter outputs for dynamic metadata routes: #91680
  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
  • [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
  • [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336
  • Turbopack: Define Effect as a trait instead of a closure: #89080
  • Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • [devtools] Make instant navs panel draggable: #91914
  • [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates resend from 6.17.2 to 6.18.1

Release notes

Sourced from resend's releases.

v6.18.1

What's Changed

Full Changelog: resend/resend-node@v6.18.0...v6.18.1

v6.18.0

Support tags and scheduledAt in batch email options (d8ffa8b)

Add resend.suppressions with add, get, list, remove, and batch add/remove methods for managing suppression list entries (877fa56)

v6.18.0-canary.0

Add resend.suppressions with add, get, list, remove, and batch add/remove methods for managing suppression list entries (877fa56)

Changelog

Sourced from resend's changelog.

resend@6.18.0

Support tags and scheduledAt in batch email options

Add resend.suppressions with add, get, list, remove, and batch add/remove methods for managing suppression list entries

resend@6.18.0-canary.0 (canary)

Add resend.suppressions with add, get, list, remove, and batch add/remove methods for managing suppression list entries

Commits
Attestation changes

This version has no provenance attestation, while the previous version (6.17.2) was attested. Review the package versions before updating.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from projectamazonph as a code owner August 3, 2026 00:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@vercel

vercel Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
amph-v2-greenfield Error Error Aug 10, 2026 2:29am

@dependabot dependabot Bot changed the title chore(deps): bump the production-dependencies group with 9 updates chore(deps): bump the production-dependencies group across 1 directory with 9 updates Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-4762cc5a19 branch from add1ffc to 3dd4ebd Compare August 3, 2026 05:19
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-4762cc5a19 branch from 3dd4ebd to 636ad6c Compare August 10, 2026 00:18
@dependabot
chore(deps): bump the production-dependencies group across 1 director…
804bf44 
…y with 9 updates

Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.8.0` | `7.9.1` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.8.0` | `7.9.1` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.66.0` | `10.69.0` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.8` |
| [marked](https://github.com/markedjs/marked) | `18.0.6` | `18.0.9` |
| [next](https://github.com/vercel/next.js) | `16.2.10` | `16.3.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [resend](https://github.com/resend/resend-node) | `6.17.2` | `6.18.1` |



Updates `@prisma/adapter-pg` from 7.8.0 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/adapter-pg)

Updates `@prisma/client` from 7.8.0 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/client)

Updates `@sentry/nextjs` from 10.66.0 to 10.69.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.69.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.66.0...10.69.0)

Updates `jose` from 6.2.3 to 6.2.8
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.8)

Updates `marked` from 18.0.6 to 18.0.9
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.6...v18.0.9)

Updates `next` from 16.2.10 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.10...v16.3.0)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `resend` from 6.17.2 to 6.18.1
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.17.2...v6.18.1)

---
updated-dependencies:
- dependency-name: "@prisma/adapter-pg"
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@prisma/client"
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: jose
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 18.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: resend
  dependency-version: 6.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-4762cc5a19 branch from 636ad6c to 804bf44 Compare August 10, 2026 02:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@projectamazonph projectamazonph Awaiting requested review from projectamazonph projectamazonph is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants