Skip to content

chore(deps): bump the prod group with 8 updates - #78

Merged
Arcadi4 merged 1 commit into
devfrom
dependabot/npm_and_yarn/prod-fc34fe7ee1
Aug 9, 2026
Merged

chore(deps): bump the prod group with 8 updates#78
Arcadi4 merged 1 commit into
devfrom
dependabot/npm_and_yarn/prod-fc34fe7ee1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod group with 8 updates:

Package From To
@codemirror/lang-markdown 6.5.1 6.5.2
@codemirror/view 6.43.7 6.43.8
@supabase/supabase-js 2.111.0 2.112.1
mermaid 11.16.0 11.16.1
motion 12.43.0 13.0.0
next-intl 4.13.4 4.13.5
shiki 4.4.1 4.4.2
undici 8.9.0 8.10.0

Updates @codemirror/lang-markdown from 6.5.1 to 6.5.2

Commits

Updates @codemirror/view from 6.43.7 to 6.43.8

Commits

Updates @supabase/supabase-js from 2.111.0 to 2.112.1

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.1

2.112.1 (2026-08-05)

🩹 Fixes

  • auth: preserve 5xx error message (#2587)
  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

v2.112.1-canary.1

2.112.1-canary.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

v2.112.1-canary.0

2.112.1-canary.0 (2026-08-03)

🩹 Fixes

  • auth: preserve 5xx error message (#2587)

❤️ Thank You

v2.112.0

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • auth: accept uppercase UUIDs in validateUUID (#2467)
  • postgrest: honour throwOnError when maybeSingle finds multiple rows (#2580)
  • storage: resolve createSignedUrls return type mismatch (#2474)
  • storage: expose service error code on StorageApiError (#2537)
  • supabase: forward db retry option (#2571)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • supabase: forward db retry option (#2571)

❤️ Thank You

Commits
  • 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
  • a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
  • e6c975c fix(supabase): forward db retry option (#2571)
  • a262492 chore(release): version 2.111.0 changelogs (#2572)
  • See full diff in compare view

Updates mermaid from 11.16.0 to 11.16.1

Release notes

Sourced from mermaid's releases.

mermaid@11.16.1

Patch Changes

  • #8022 12d472c Thanks @​aloisklink! - fix: handle CSS sibling combinators in compileCSS

  • #8022 2cd6dcf Thanks @​aloisklink! - fix: increase protections against prototype pollution

    User-controlled input already has protections against prototype pollution.

    Fixes: GHSA-c4c3-pg64-4m4v

  • #8022 99af3fc Thanks @​aloisklink! - fix(architecture): use Maps and Sets to store groups/services

    Services are now rendered in the order they are defined and more service IDs are now supported.

  • #8022 2cd6dcf Thanks @​aloisklink! - deprecate: Deprecate the mermaidAPI.setConfig() function

    Calling this function has no observable effect, as the next time a render() or parse() is called, the currentConfig is cleared.

  • #8022 630aa7e Thanks @​aloisklink! - fix(xychart): support zero-width x-axis ranges

  • #8022 59b22fa Thanks @​aloisklink! - fix(radar): limit number of ticks to 32

    Setting a ticks value higher than this would only show 32 ticks.

Commits
  • 7ecca0c Version Packages (#8023)
  • 95b1b9c docs: change mermaidAPI.setConfig() changeset (#8024)
  • acc69f1 Merge pull request #8022 from mermaid-js/release/11.16.1
  • eba7287 docs: point changesets to correct commit hashes
  • 12d472c Merge commit from fork
  • 2cd6dcf Merge commit from fork
  • 630aa7e Merge commit from fork
  • 59b22fa Merge commit from fork
  • 99af3fc Merge commit from fork
  • 2337f7e Merge branch 'test/improve-example.html' into release/11.16.1
  • Additional commits viewable in compare view

Updates motion from 12.43.0 to 13.0.0

Changelog

Sourced from motion's changelog.

[13.0.0] 2026-08-05

Changed

  • Removed optional @emotion/is-prop-valid dependency in favour of explicit <MotionConfig isValidProp={isPropValid}>.

Fixed

  • Hardware-accelerated SVG elements correctly apply final style on animation complete.
  • AnimatePresence: Ensure nodes are marked as safe to remove when rendering propagate with no motion children.
Commits
  • e4029ce v13.0.0
  • c862954 Updating changelog
  • b2bc637 Merge pull request #3781 from motiondivision/fix/3779-svg-duration-zero-indep...
  • 96d35b6 Merge pull request #3783 from motiondivision/fix/2652-remove-external-is-vali...
  • 165541a Fix #3779: read SVG CSS properties from styles
  • e0be524 Fix #2652: scope custom prop validation
  • 34058c2 Merge pull request #3784 from motiondivision/fix/3777-empty-propagate
  • 0851575 Fix #3777: complete propagated exits without children
  • 6acedcc Fix #2652: remove automatic prop validator loading
  • 233593b Fix #3779: consolidate SVG style properties
  • Additional commits viewable in compare view

Updates next-intl from 4.13.4 to 4.13.5

Release notes

Sourced from next-intl's releases.

v4.13.5

4.13.5 (2026-08-04)

Bug Fixes

Changelog

Sourced from next-intl's changelog.

4.13.5 (2026-08-04)

Bug Fixes

Commits
  • 672b4b6 v4.13.5
  • 1446d0d fix: Deprecate setRequestLocale and add blog post on next/root-params (#1...
  • e671f92 docs: Add guidance for messages defined outside of components (#2367)
  • a2da470 docs: Add studio link to footer (#2366)
  • 14e7406 docs: Update eloqnt/cli links
  • 567afd1 ci: Rename root publish script to release (#2365)
  • 87b1a2a ci: Fix release recovery to run from release.yml (Trusted Publishing) (#2364)
  • 49005db ci: Add manual recovery workflow for partial npm publishes (#2363)
  • See full diff in compare view

Updates shiki from 4.4.1 to 4.4.2

Release notes

Sourced from shiki's releases.

v4.4.2

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates undici from 8.9.0 to 8.10.0

Release notes

Sourced from undici's releases.

v8.10.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.9.0...v8.10.0

Commits
  • c8d80e6 Bumped v8.10.0 (#5644)
  • 66923b4 fix: preserve DNS origin hostname on sockets (#5577)
  • 3926499 fix: retry refused HTTP/2 streams (#5598)
  • 73d6e9e fix(h2): detach upgrade close handler after GOAWAY (#5641)
  • b111adb fix(mock): emit request body lifecycle hooks (#5367)
  • ae4a3e3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)
  • ec3fbf1 build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)
  • 2151720 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)
  • b96a116 fix(interceptors): allow interceptors without opts.origin (#5628)
  • a18ef2d fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.1` | `6.5.2` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.7` | `6.43.8` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.111.0` | `2.112.1` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.0` | `11.16.1` |
| [motion](https://github.com/motiondivision/motion) | `12.43.0` | `13.0.0` |
| [next-intl](https://github.com/amannn/next-intl) | `4.13.4` | `4.13.5` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.4.1` | `4.4.2` |
| [undici](https://github.com/nodejs/undici) | `8.9.0` | `8.10.0` |


Updates `@codemirror/lang-markdown` from 6.5.1 to 6.5.2
- [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-markdown/commits)

Updates `@codemirror/view` from 6.43.7 to 6.43.8
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@supabase/supabase-js` from 2.111.0 to 2.112.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.1/packages/core/supabase-js)

Updates `mermaid` from 11.16.0 to 11.16.1
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.0...mermaid@11.16.1)

Updates `motion` from 12.43.0 to 13.0.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.43.0...v13.0.0)

Updates `next-intl` from 4.13.4 to 4.13.5
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.13.4...v4.13.5)

Updates `shiki` from 4.4.1 to 4.4.2
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.2/packages/shiki)

Updates `undici` from 8.9.0 to 8.10.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.9.0...v8.10.0)

---
updated-dependencies:
- dependency-name: "@codemirror/lang-markdown"
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: mermaid
  dependency-version: 11.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: motion
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod
- dependency-name: next-intl
  dependency-version: 4.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: shiki
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: undici
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 9, 2026
@vercel

vercel Bot commented Aug 9, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
gtmc Ready Ready Preview Aug 9, 2026 7:14am

Request Review

@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Aug 9, 2026
@Arcadi4
Arcadi4 merged commit 7c04e64 into dev Aug 9, 2026
3 checks passed
@Arcadi4
Arcadi4 deleted the dependabot/npm_and_yarn/prod-fc34fe7ee1 branch August 9, 2026 13:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant