Skip to content

Bump the prod group across 1 directory with 15 updates - #369

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-3aa0f8998e
Open

Bump the prod group across 1 directory with 15 updates#369
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-3aa0f8998e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the prod group with 15 updates in the / directory:

Package From To
dotenv 17.2.3 18.0.5
es-toolkit 1.44.0 1.52.0
pino 10.3.0 10.3.1
uuid 13.0.0 14.0.2
@faker-js/faker 10.2.0 10.6.0
ts-essentials 10.1.1 10.2.1
@inquirer/prompts 8.2.0 8.7.2
@inquirer/testing 3.0.4 3.3.13
tsx 4.21.0 4.23.15
yargs 18.0.0 18.2.0
sql-formatter 15.7.0 15.9.0
@docusaurus/core 3.9.2 3.10.2
@docusaurus/preset-classic 3.9.2 3.10.2
react 19.2.4 19.3.0
react-dom 19.2.4 19.3.0

Updates dotenv from 17.2.3 to 18.0.5

Changelog

Sourced from dotenv's changelog.

18.0.5 (2026-09-30)

Changed

  • Fix missing typescript module declaration (#1068)
  • Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

  • import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

  • Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

  • Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

  • Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

  • NEW: Dotenv now has a CLI. (#1022)
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
  • NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
</tr></table>

... (truncated)

Commits

Updates es-toolkit from 1.44.0 to 1.52.0

Release notes

Sourced from es-toolkit's releases.

v1.52.0

Released on August 28th, 2026.

  • Added the es-toolkit/iterator entrypoint, a lazy iterator module with chunk, count, dropWhile, head, iterate, partition, range, scan, takeWhile, uniqBy, and zip ([#1815]), plus cartesianProduct ([#2031]). The same functions are also available from es-toolkit/fp/iterator.

  • Added defer and deferAsync to es-toolkit/util. ([#2032])

  • Added flowAsync to es-toolkit/fp, a promise-aware left-to-right composition. ([#2033])

  • Added the EmptyObject, IsEqual, JSONValue, Primitive, SetOptional, SetRequired, and UnknownRecord types. ([#2044])

  • Fixed merge to infer the deep merged return type, and exported the Merge type. ([#1959])

  • Fixed omitBy and pickBy to type numeric callback keys as strings, and exported the ObjectKeys type. ([#2037])

  • Fixed attempt and attemptAsync to default their error type parameter to unknown. ([#2052])

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected edge cases now matches Lodash, so results may differ if you relied on the previous output.

  • Fixed compat/debounce to skip the maxWait invocation when both leading and trailing are false. ([#1678])

  • Fixed compat/toString to convert objects with a custom valueOf. ([#2034])

  • Fixed compat/mergeWith to assign null values in array sources. ([#1929])

  • Fixed compat/has and compat/hasIn to normalize the -0 path key. ([#2035])

  • Fixed compat/differenceWith and compat/without to normalize -0 to 0. ([#2049])

  • Fixed compat/findLastIndex to convert fromIndex to an integer. ([#2047])

  • Fixed compat/xorWith to match Lodash when no comparator is given. ([#2057])

  • Covered the new iterator entrypoints in the dist and browser compatibility checks. ([#2030])

  • Made the agent skills portable when installed on their own. ([#2054])

  • Fixed documentation typos and the Deno install commands. ([#2062])

v1.51.0

Released on August 17th, 2026.

  • Added the es-toolkit/bigint entrypoint: bigint counterparts of the math functions (sum, sumBy, max, min, maxBy, minBy, clamp, inRange, median, medianBy, percentile, range, rangeRight), kept separate so the number implementations stay unchanged. ([#1966])

  • Added dedent, which removes common leading whitespace from template strings. ([#1679])

  • Added deepFreeze for recursively freezing objects. ([#1680])

  • Added mapValuesAsync and mapKeysAsync. ([#1544])

... (truncated)

Changelog

Sourced from es-toolkit's changelog.

Version v1.52.0

Released on August 28th, 2026.

  • Added the es-toolkit/iterator entrypoint, a lazy iterator module with chunk, count, dropWhile, head, iterate, partition, range, scan, takeWhile, uniqBy, and zip (#1815), plus cartesianProduct (#2031). The same functions are also available from es-toolkit/fp/iterator.

  • Added defer and deferAsync to es-toolkit/util. (#2032)

  • Added flowAsync to es-toolkit/fp, a promise-aware left-to-right composition. (#2033)

  • Added the EmptyObject, IsEqual, JSONValue, Primitive, SetOptional, SetRequired, and UnknownRecord types. (#2044)

  • Fixed merge to infer the deep merged return type, and exported the Merge type. (#1959)

  • Fixed omitBy and pickBy to type numeric callback keys as strings, and exported the ObjectKeys type. (#2037)

  • Fixed attempt and attemptAsync to default their error type parameter to unknown. (#2052)

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected edge cases now matches Lodash, so results may differ if you relied on the previous output.

  • Fixed compat/debounce to skip the maxWait invocation when both leading and trailing are false. (#1678)

  • Fixed compat/toString to convert objects with a custom valueOf. (#2034)

  • Fixed compat/mergeWith to assign null values in array sources. (#1929)

  • Fixed compat/has and compat/hasIn to normalize the -0 path key. (#2035)

  • Fixed compat/differenceWith and compat/without to normalize -0 to 0. (#2049)

  • Fixed compat/findLastIndex to convert fromIndex to an integer. (#2047)

  • Fixed compat/xorWith to match Lodash when no comparator is given. (#2057)

  • Covered the new iterator entrypoints in the dist and browser compatibility checks. (#2030)

  • Made the agent skills portable when installed on their own. (#2054)

  • Fixed documentation typos and the Deno install commands. (#2062)

Version v1.51.0

Released on August 17th, 2026.

  • Added the es-toolkit/bigint entrypoint: bigint counterparts of the math functions (sum, sumBy, max, min, maxBy, minBy, clamp, inRange, median, medianBy, percentile, range, rangeRight), kept separate so the number implementations stay unchanged. (#1966)
  • Added dedent, which removes common leading whitespace from template strings. (#1679)
  • Added deepFreeze for recursively freezing objects. (#1680)
  • Added mapValuesAsync and mapKeysAsync. (#1544)
  • Added toPascalCaseKeys, toKebabCaseKeys, and toConstantCaseKeys, completing the object key casing family. (#1984)
  • Exported the ToCamelCaseKeys, ToPascalCaseKeys, ToSnakeCaseKeys, ToKebabCaseKeys, and ToConstantCaseKeys types. (#1651)

... (truncated)

Commits
  • 32f4c8f chore: release v1.52.0 (#2066)
  • 2bb189c refactor(types): rename JsonValue to JSONValue (#2065)
  • 159d0ce fix(plugin): make skills portable when installed individually (#2054)
  • 5330c38 build(deps): bump github/codeql-action/analyze from 4.37.7 to 4.37.8 (#2059)
  • ce32074 build(deps): bump github/codeql-action/upload-sarif (#2060)
  • 34f8b71 build(deps): bump github/codeql-action/init from 4.37.7 to 4.37.8 (#2061)
  • df05716 fix(compat/xorWith): match lodash when no comparator is given (#2057)
  • 4c51da7 docs: fix typos and Deno install commands (#2062)
  • 0949c8b fix[attempt, attemptAsync]: default error type parameter to unknown (#2052)
  • 2714363 feat(types): add seven compile-time type utilities (#2044)
  • Additional commits viewable in compare view

Updates pino from 10.3.0 to 10.3.1

Release notes

Sourced from pino's releases.

v10.3.1

What's Changed

Full Changelog: pinojs/pino@v10.3.0...v10.3.1

Commits
  • 6b34498 Bumped v10.3.1
  • f1203e6 fix(transport): sanitize invalid NODE_OPTIONS preloads for workers (#2391)
  • 6a8e598 docs: clarify transport level filtering behavior (#2390)
  • 49a4807 Merge branch 'main' of github.com:pinojs/pino
  • 960bbbb build(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.23.2 (#2386)
  • e2a5b4a build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#2385)
  • 04859e2 chore: update gitignore for ai assistant files
  • See full diff in compare view

Updates uuid from 13.0.0 to 14.0.2

Release notes

Sourced from uuid's releases.

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years
Commits
  • fd59f02 chore(main): release 14.0.2 (#967)
  • f3c564e docs: point the Node support permalink at the CI version matrix (#974)
  • b1da338 fix(v1): set the multicast bit on v1Bytes's own randomly-generated node (#973)
  • 6adcc1d fix(v1): carry nsecs overflow into the timestamp's high bits (#972)
  • ea83515 docs: cleanup API summary (#968)
  • ac36860 chore: pin publint version in CI (#966)
  • a67db57 fix(v7): align default seq formula in v7Bytes with updateV7State (#965)
  • 7017780 chore(main): release 14.0.1 (#964)
  • f2c3e4b chore: fix release-please workflow (#963)
  • 27ffae5 fix: add types condition to node export for moduleResolution bundler (#961)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @faker-js/faker from 10.2.0 to 10.6.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.6.0

What's Changed

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.6.0 (2026-08-14)

New Locales

  • locale: add 060 Japanese mobile phone number formats (#3922) (afa272d)
  • locale: add Norwegian (nb_NO) animal module (#3901) (1232937)
  • locale: add Norwegian (nb_NO) food module (#3900) (bd23594)
  • locale: add vehicle data for de (#3958) (974490f)
  • locale: better middle names by gender for en locale (#3932) (aba3fb1)
  • locale: better organize first_name by gender for en (#3924) (119386b)

Features

Changed Locales

Bug Fixes

  • apidocs: scope code group tab identifiers (#3976) (3125eaf)
  • color: give the LCH hue its full 360 degree range (#3978) (1ce5994)
  • color: stop scaling the HSLA alpha into a percentage (#3979) (1143329)
  • groupBy handling for prototype property keys (#3906) (c898ff1)
  • internet: exclude reserved port 0 from internet.port() (#3948) (d4b35a4)
  • internet: generate long passwords without stack overflow (#3946) (4782978)
  • internet: validate CIDR prefix length and octet range in ipv4() (#3933) (15cb8fb)
  • locale: exclude forbidden letter combinations from nl postcodes (#3888) (9bebe67)
  • locale: only generate valid French postal codes (#3905) (711f36f)
  • locale: update nl_BE phone number patterns (#3981) (9616076)
  • locale: use only common surnames for zh_CN last names (#3938) (58394eb)
  • locale: use only valid letters in en_CA postcodes (#3951) (3b184d6)
  • string: reject refDates that a ULID timestamp cannot encode (#3982) (81717bc)
  • vehicle: calculate VIN check digit (#3954) (a4c6757)
  • word: pick nearest length for closest strategy (#3943) (42fd322)

10.5.0 (2026-06-17)

New Locales

... (truncated)

Commits
  • 2cb0423 chore(release): 10.6.0 (#3986)
  • 531588f chore(deps): lock file maintenance (#3923)
  • 328f018 chore(deps): update eslint (#3930)
  • a5c8bd7 chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24 docker...
  • fe3f17b chore(deps): update all non-major dependencies (#3974)
  • ae38b18 docs(lorem): document the fail default strategy for word (#3944)
  • 1ce5994 fix(color): give the LCH hue its full 360 degree range (#3978)
  • 1143329 fix(color): stop scaling the HSLA alpha into a percentage (#3979)
  • a4c6757 fix(vehicle): calculate VIN check digit (#3954)
  • d68f978 infra: ensure markdown rendered is only ever initialized once (#3984)
  • Additional commits viewable in compare view

Updates ts-essentials from 10.1.1 to 10.2.1

Release notes

Sourced from ts-essentials's releases.

v10.2.1

Patch Changes

  • 4ad58f2: Added PublicInterface<Type> utility type

v10.2.0

Minor Changes

  • a0a0cc2: Add NonUnion utility type
  • e9b7366: Deprecated NonNever and renamed it to OmitNeverProperties
  • 34f52e0: Added RequireAtLeastOne utility type
  • 675a244: Added UnionKeys utility type
  • 34f52e0: Added RequireAtMostOne utility type
  • bceeef1: Deprecated Exact and renamed it to IsExact
  • 88bfc52: Add JsonValue, JsonPrimitive, JsonObject and JsonArray utility types
  • bb7d19f: Add OverrideDeepReadonlyOptions to DeepReadonly<Type, OverrideDeepReadonlyOptions?> to allow configuring passthrough behaviour for built-in types (Date, Error, RegExp) per use-case

Patch Changes

  • afa25a9: Fix Prettify<Type> type when Type is a class with private/protected members
  • 16e427d: Fix IsTuple<Type> type when Type is a tuple with both optional elements and a rest element, like [string?, ...number[]]
  • 77767a1: Deprecated NonEmptyArray and renamed it to AnyNonEmptyArray
  • 44dbae4: Fix DeepPartial<Type> when Type is an array containing rest element, like [string, ...number[]]
  • a105b07: Added Iterable support for DeepReadonly and DeepWritable
  • b83d62b: Fix assignability for UnionKeys
  • b83d62b: Fix assignability for UnionToIntersection
Changelog

Sourced from ts-essentials's changelog.

10.2.1

Patch Changes

  • 4ad58f2: Added PublicInterface<Type> utility type

10.2.0

Minor Changes

  • a0a0cc2: Add NonUnion utility type
  • e9b7366: Deprecated NonNever and renamed it to OmitNeverProperties
  • 34f52e0: Added RequireAtLeastOne utility type
  • 675a244: Added UnionKeys utility type
  • 34f52e0: Added RequireAtMostOne utility type
  • bceeef1: Deprecated Exact and renamed it to IsExact
  • 88bfc52: Add JsonValue, JsonPrimitive, JsonObject and JsonArray utility types
  • bb7d19f: Add OverrideDeepReadonlyOptions to DeepReadonly<Type, OverrideDeepReadonlyOptions?> to allow configuring passthrough behaviour for built-in types (Date, Error, RegExp) per use-case

Patch Changes

  • afa25a9: Fix Prettify<Type> type when Type is a class with private/protected members
  • 16e427d: Fix IsTuple<Type> type when Type is a tuple with both optional elements and a rest element, like [string?, ...number[]]
  • 77767a1: Deprecated NonEmptyArray and renamed it to AnyNonEmptyArray
  • 44dbae4: Fix DeepPartial<Type> when Type is an array containing rest element, like [string, ...number[]]
  • a105b07: Added Iterable support for DeepReadonly and DeepWritable
  • b83d62b: Fix assignability for UnionKeys
  • b83d62b: Fix assignability for UnionToIntersection
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ts-essentials since your current version.


Updates @inquirer/prompts from 8.2.0 to 8.7.2

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.2

What's new

  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (@inquirer/core, #2255, closes #1816).
  • confirm() now trims surrounding whitespace from answers before matching yes/no keywords (@inquirer/confirm, #2254).

Included

  • @inquirer/checkbox@^5.2.5
  • @inquirer/confirm@^6.3.2
  • @inquirer/editor@^5.3.3
  • @inquirer/expand@^5.1.5
  • @inquirer/input@^5.1.6
  • @inquirer/number@^4.2.3
  • @inquirer/password@^5.2.2
  • @inquirer/rawlist@^5.3.5
  • @inquirer/search@^4.3.3
  • @inquirer/select@^5.2.5

@​inquirer/prompts@​8.7.1

What's new

  • All bundled prompts now pin @inquirer/type to an exact version in their published manifests. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

  • @inquirer/checkbox@^5.2.4
  • @inquirer/confirm@^6.3.1
  • @inquirer/editor@^5.3.2
  • @inquirer/expand@^5.1.4
  • @inquirer/input@^5.1.5
  • @inquirer/number@^4.2.2
  • @inquirer/password@^5.2.1
  • @inquirer/rawlist@^5.3.4
  • @inquirer/search@^4.3.2
  • @inquirer/select@^5.2.4

@​inquirer/prompts@​8.7.0

What's new

  • password gains the toggleMask option (ctrl+t to reveal the typed value).
  • confirm now matches localized yes/no answers per-locale.
  • Prettified prompt and theme types for better IDE display.
  • Added inquirer-grouped-checkbox to the community prompts list (#2236).

Included

... (truncated)

Commits
  • cbdb34b chore: Publish new release
  • 8340d2d fix(@​inquirer/core): clear hook effects before settling prompts
  • 2475e07 test(@​inquirer/core): cover hook cleanup error semantics
  • 15cd8d3 fix(confirm): ignore surrounding whitespace in answers
  • 9cb0da6 chore(deps): Bump github/codeql-action/analyze from 4.37.7 to 4.37.9
  • 1c750bc chore(deps-dev): Bump the build group with 3 updates (#2251)
  • 81f1525 chore(deps-dev): Bump @​types/node in the types group (#2252)
  • 7c27f26 chore(deps-dev): Bump oxfmt in the formatting group (#2249)
  • 6119088 chore(deps): Bump github/codeql-action/init from 4.37.7 to 4.37.9 (#2250)
  • 0d167c0 chore(deps-dev): Bump the linting group with 4 updates (#2248)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/prompts since your current version.


Updates @inquirer/testing from 3.0.4 to 3.3.13

Release notes

Sourced from @​inquirer/testing's releases.

@​inquirer/testing@​3.3.13

No source changes. Released in lockstep with the @inquirer/core@12.0.3 wave.

@​inquirer/testing@​3.3.12

What's new

  • Keypress simulation now works under TERM=dumb. Node's readline disables all line editing (backspace, arrows, etc.) when Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 2, 2026
@coderabbitai

coderabbitai Bot commented Oct 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: fc986c0b-667e-44a0-b00c-7fdbcad10665

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
Bump the prod group across 1 directory with 15 updates
b600922 
Bumps the prod group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `18.0.5` |
| [es-toolkit](https://github.com/toss/es-toolkit) | `1.44.0` | `1.52.0` |
| [pino](https://github.com/pinojs/pino) | `10.3.0` | `10.3.1` |
| [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.2` |
| [@faker-js/faker](https://github.com/faker-js/faker) | `10.2.0` | `10.6.0` |
| [ts-essentials](https://github.com/ts-essentials/ts-essentials) | `10.1.1` | `10.2.1` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.2.0` | `8.7.2` |
| [@inquirer/testing](https://github.com/SBoudrias/Inquirer.js) | `3.0.4` | `3.3.13` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.15` |
| [yargs](https://github.com/yargs/yargs) | `18.0.0` | `18.2.0` |
| [sql-formatter](https://github.com/sql-formatter-org/sql-formatter) | `15.7.0` | `15.9.0` |
| [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) | `3.9.2` | `3.10.2` |
| [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) | `3.9.2` | `3.10.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.3.0` |



Updates `dotenv` from 17.2.3 to 18.0.5
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.3...v18.0.5)

Updates `es-toolkit` from 1.44.0 to 1.52.0
- [Release notes](https://github.com/toss/es-toolkit/releases)
- [Changelog](https://github.com/toss/es-toolkit/blob/main/CHANGELOG.md)
- [Commits](toss/es-toolkit@v1.44.0...v1.52.0)

Updates `pino` from 10.3.0 to 10.3.1
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.0...v10.3.1)

Updates `uuid` from 13.0.0 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v13.0.0...v14.0.2)

Updates `@faker-js/faker` from 10.2.0 to 10.6.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v10.2.0...v10.6.0)

Updates `ts-essentials` from 10.1.1 to 10.2.1
- [Release notes](https://github.com/ts-essentials/ts-essentials/releases)
- [Changelog](https://github.com/ts-essentials/ts-essentials/blob/master/CHANGELOG.md)
- [Commits](ts-essentials/ts-essentials@v10.1.1...v10.2.1)

Updates `@inquirer/prompts` from 8.2.0 to 8.7.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.2.0...@inquirer/prompts@8.7.2)

Updates `@inquirer/testing` from 3.0.4 to 3.3.13
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/testing@3.0.4...@inquirer/testing@3.3.13)

Updates `tsx` from 4.21.0 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.15)

Updates `yargs` from 18.0.0 to 18.2.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.0.0...v18.2.0)

Updates `sql-formatter` from 15.7.0 to 15.9.0
- [Release notes](https://github.com/sql-formatter-org/sql-formatter/releases)
- [Commits](sql-formatter-org/sql-formatter@v15.7.0...v15.9.0)

Updates `@docusaurus/core` from 3.9.2 to 3.10.2
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus)

Updates `@docusaurus/preset-classic` from 3.9.2 to 3.10.2
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic)

Updates `react` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

---
updated-dependencies:
- dependency-name: "@docusaurus/core"
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: "@docusaurus/preset-classic"
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: "@faker-js/faker"
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: "@inquirer/testing"
  dependency-version: 3.3.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: dotenv
  dependency-version: 18.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod
- dependency-name: es-toolkit
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: pino
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: sql-formatter
  dependency-version: 15.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: ts-essentials
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod
- dependency-name: yargs
  dependency-version: 18.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the prod group with 15 updates Bump the prod group across 1 directory with 15 updates Oct 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-3aa0f8998e branch from a39d845 to b600922 Compare October 5, 2026 06:37

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants