Skip to content

chore(deps): Bump the minor-and-patch group with 7 updates - #6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-5c84b529be
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-5c84b529be

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown

Bumps the minor-and-patch group with 7 updates:

Package From To
turbo 2.11.7 2.11.8
next 16.4.0 16.4.2
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
tsx 4.21.0 4.23.15
vitest 5.0.4 5.0.5
lenis 1.3.26 1.3.27

Updates turbo from 2.11.7 to 2.11.8

Release notes

Sourced from turbo's releases.

Turborepo v2.11.8

What's Changed

Changelog

... (truncated)

Commits
  • 7663d6b publish 2.11.8 to registry
  • ad820cb fix: Disable agent guidance by default (#14490)
  • 6e9c65b fix: Prevent Git index refresh during dirty hash collection (#14489)
  • b5fe180 feat: Validate sealed native setup baselines (#14482)
  • cb615c3 chore: Add copyable Factory snapshot command (#14481)
  • 71d0766 fix: Upgrade turbo-gen Handlebars to 4.7.10 (#14471)
  • 2935202 docs: Explain declaring Cargo sources read from outside the crate (#14480)
  • 215637c fix: Report inferred framework env vars for deferred tasks in dry runs (#14478)
  • d6d63bd fix: Carry uv tool configuration into pruned workspaces (#14449)
  • 768d5ba fix: Hash Clippy configuration for Cargo lint tasks (#14448)
  • Additional commits viewable in compare view

Updates next from 16.4.0 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

High:

Commits
  • 2864b17 v16.4.2
  • a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
  • f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
  • 845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
  • 6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
  • a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
  • 8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
  • 29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
  • 3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
  • 9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates tsx from 4.21.0 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

  • exclude bare builtins from namespace inheritance (38e1588)
  • expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
  • make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

  • restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

... (truncated)

Commits
  • ca66105 test: fix drive-less file URLs in ESM resolver fixtures
  • 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
  • 38e1588 fix: exclude bare builtins from namespace inheritance
  • 562c434 fix: make namespaced register() overloads portable for declaration emit
  • edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
  • 70e7828 test: upgrade tinyspy for disposable API
  • 9ed2022 ci: avoid duplicate release notifications
  • 872e77f refactor: use disposables for cleanup
  • 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
  • 28e1f12 fix(cache): bound shared transform cache memory (#835)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.


Updates vitest from 5.0.4 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates lenis from 1.3.26 to 1.3.27

Release notes

Sourced from lenis's releases.

v1.3.27

  • fix lenis class coming back after destroy()
  • scrollTo() accepts SVG elements
Commits
  • e01eefb Merge pull request #558 from darkroomengineering/release/v1.3.27
  • 08868fc v1.3.27
  • 1f60fb9 Merge pull request #557 from darkroomengineering/fix/svg-scroll-targets-v1
  • ef84677 fix(core): accept SVG elements as scrollTo targets
  • ad99a23 Merge pull request #542 from cipherprofessor/fix/clear-reset-velocity-timeout...
  • bc152f9 chore: point CODEOWNERS at the engineering team (#547)
  • 2e14ce8 fix(core): clear pending native-scroll velocity timeout on destroy()
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [turbo](https://github.com/vercel/turborepo) | `2.11.7` | `2.11.8` |
| [next](https://github.com/vercel/next.js) | `16.4.0` | `16.4.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.15` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.4` | `5.0.5` |
| [lenis](https://github.com/darkroomengineering/lenis) | `1.3.26` | `1.3.27` |


Updates `turbo` from 2.11.7 to 2.11.8
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.11.7...v2.11.8)

Updates `next` from 16.4.0 to 16.4.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.0...v16.4.2)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `tsx` from 4.21.0 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.15)

Updates `vitest` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

Updates `lenis` from 1.3.26 to 1.3.27
- [Release notes](https://github.com/darkroomengineering/lenis/releases)
- [Commits](darkroomengineering/lenis@v1.3.26...v1.3.27)

---
updated-dependencies:
- dependency-name: turbo
  dependency-version: 2.11.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: lenis
  dependency-version: 1.3.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
@vercel

vercel Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
01.app Ready Ready Preview Oct 19, 2026 4:51am UTC

@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 26, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-5c84b529be branch October 26, 2026 04:31

This branch was successfully deployed

1 active deployment
Preview — 6982c3a8 Deployed Oct 19, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants