Skip to content

chore(deps): bump the production-minor-and-patch group across 1 directory with 12 updates - #22

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-and-patch-a1e6a07f45
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-and-patch-a1e6a07f45

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown

Bumps the production-minor-and-patch group with 12 updates in the / directory:

Package From To
@hcaptcha/react-hcaptcha 2.0.2 2.2.0
@marsidev/react-turnstile 1.5.3 1.6.1
@supabase/ssr 0.7.0 0.12.7
@supabase/supabase-js 2.83.0 2.117.1
autoprefixer 10.5.4 10.6.1
katex 0.16.47 0.18.9
lucide-react 1.25.0 1.48.0
next 16.3.5 16.3.6
pg 8.16.3 8.23.0
react-icons 5.5.0 5.7.0
recharts 3.10.0 3.10.1
zod 4.4.3 4.6.5

Updates @hcaptcha/react-hcaptcha from 2.0.2 to 2.2.0

Release notes

Sourced from @​hcaptcha/react-hcaptcha's releases.

v2.2.0

What's Changed

New Contributors

Full Changelog: hCaptcha/react-hcaptcha@2.1.0...v2.2.0

2.1.0

What's Changed

  • change loader error handling to clarify script error cases

Full Changelog: hCaptcha/react-hcaptcha@2.0.2...2.1.0

Commits
  • 0f25fe3 fix(state): isApiReady state update race condition (#421)
  • 1991ed1 Update README to clarify behavior of getRespKey (#420)
  • da6b076 chore(package): Bump version to 2.1.0 (#416)
  • 1f4b929 change loader error handling (#415)
  • d3e2880 Add best practices note for uncommon scenarios
  • e095a4f chore(deps): bump diff from 4.0.2 to 4.0.4 (#395)
  • a935ca7 chore(deps): bump minimatch from 3.1.2 to 9.0.9 (#394)
  • 94af070 chore(deps): bump picomatch from 2.3.1 to 4.0.4 (#393)
  • 2c28805 chore(deps-dev): bump webpack-dev-server from 5.2.2 to 5.2.4 (#392)
  • c4bb408 chore(deps-dev): bump esbuild from 0.17.18 to 0.25.0 (#360)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hcaptcha/react-hcaptcha since your current version.


Updates @marsidev/react-turnstile from 1.5.3 to 1.6.1

Release notes

Sourced from @​marsidev/react-turnstile's releases.

@​marsidev/react-turnstile@​1.6.1

Patch Changes

  • #269 1d53766 Thanks @​joaompneves! - Report invalid render parameters through onError. Turnstile rejects invalid parameters (an empty siteKey, an unknown theme, a malformed action, ...) by throwing before the widget is created, which previously surfaced as an unhandled promise rejection and never reached onError. Those failures are now passed to onError (as the validation message) when it is provided, or logged with console.error otherwise, both when the widget renders on mount and when render() is called through the ref.
    View changes on GitHub

@​marsidev/react-turnstile@​1.6.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

@​marsidev/react-turnstile@​1.5.5

   🐞 Bug Fixes

    View changes on GitHub

@​marsidev/react-turnstile@​1.5.4

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 735f927 chore: version packages (#271)
  • 6706f1a Pin changesets/action to v1.9.0 (#270)
  • 1d53766 Surface invalid render parameters through onError (#269)
  • b7088e6 chore: bump oxfmt from 0.62.0 to 0.63.0 (#268)
  • 78d0af6 chore: bump oxlint from 1.77.0 to 1.78.0 (#267)
  • 30c4fee chore: bump the dependencies group across 2 directories with 3 updates (#266)
  • a99952b ci: bump changesets/action in the github-actions group (#265)
  • b808418 chore: bump oxfmt from 0.61.0 to 0.62.0 (#261)
  • 558f852 chore: bump jsdom from 29.1.1 to 30.0.1 (#262)
  • 6983611 chore: bump oxlint from 1.72.0 to 1.77.0 (#263)
  • Additional commits viewable in compare view

Updates @supabase/ssr from 0.7.0 to 0.12.7

Release notes

Sourced from @​supabase/ssr's releases.

v0.12.7

0.12.7 (2026-09-08)

Bug Fixes

  • apply non-browser defaults when cookies only sets encode (#294) (9d6e2a5)

v0.12.7-rc.162

What's Changed

Full Changelog: supabase/ssr@v0.12.6...v0.12.7-rc.162

v0.12.6

0.12.6 (2026-09-04)

Bug Fixes

  • avoid duplicate cache headers per server client (#283) (af750e2)

v0.12.6-rc.158

What's Changed

New Contributors

Full Changelog: supabase/ssr@v0.12.5...v0.12.6-rc.158

v0.12.5

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

v0.12.5-rc.154

What's Changed

... (truncated)

Changelog

Sourced from @​supabase/ssr's changelog.

0.12.7 (2026-09-08)

Bug Fixes

  • apply non-browser defaults when cookies only sets encode (#294) (9d6e2a5)

0.12.6 (2026-09-04)

Bug Fixes

  • avoid duplicate cache headers per server client (#283) (af750e2)

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

0.12.4 (2026-07-28)

Bug Fixes

  • flush PKCE verifier slot removals on the server (#275) (6df6f03)

0.12.3 (2026-07-14)

Bug Fixes

  • cookies: keep domain-scoped deletion in name-keyed cookie stores (#258) (d3a8a98), closes #256

0.12.2 (2026-07-14)

Bug Fixes

  • align parseCookieHeader return type with getAll cookie method (#239) (e8fe1d5), closes #115

0.12.1 (2026-07-13)

Bug Fixes

  • cookies: deduplicate server cookie writes (#246) (035eabe)

0.12.0 (2026-06-09)

... (truncated)

Commits
  • 9b28f49 chore(main): release 0.12.7 (#295)
  • 9d6e2a5 fix: apply non-browser defaults when cookies only sets encode (#294)
  • 4ed9f65 chore: add workflow for autoclosing stale issues (#292)
  • 71c33a7 chore(main): release 0.12.6 (#291)
  • c7c7e68 docs: fix typos in tsdoc and design doc (#288)
  • af750e2 fix: avoid duplicate cache headers per server client (#283)
  • 905c7c3 build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#290)
  • 9e2564d chore: update @​supabase/supabase-js to v2.114.0 (#289)
  • c5310fd chore(main): release 0.12.5 (#286)
  • c1700f2 fix: warn when auth.storage is ignored by createBrowserClient/createServerCli...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​supabase/ssr since your current version.


Updates @supabase/supabase-js from 2.83.0 to 2.117.1

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.117.1

2.117.1 (2026-09-23)

🩹 Fixes

  • auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

v2.117.1-canary.0

2.117.1-canary.0 (2026-09-23)

🩹 Fixes

  • auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

v2.117.0

2.117.0 (2026-09-22)

🚀 Features

  • auth: forward options.mediation to navigator.credentials.get in signInWithPasskey (#2675)
  • auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

  • fadymak
  • James Argarin
  • Katerina Skroumpelou

v2.117.0-canary.1

2.117.0-canary.1 (2026-09-22)

🚀 Features

  • auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

  • fadymak

v2.117.0-canary.0

2.117.0-canary.0 (2026-09-17)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.117.1 (2026-09-23)

🩹 Fixes

  • auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

2.117.0 (2026-09-22)

🚀 Features

  • auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

  • fadymak

2.116.0 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)

🩹 Fixes

  • supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

2.115.0 (2026-09-03)

🚀 Features

  • postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

2.114.0 (2026-09-02)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.113.0 (2026-09-02)

... (truncated)

Commits
  • 739b351 fix(auth): return stored session when a refresh loses to another tab (#2698)
  • f34d428 chore(release): version 2.117.0 changelogs (#2697)
  • cc45ccf feat(auth): enable passkey API by default and deprecate experimental passkey ...
  • c511286 docs(realtime): document relationship of accessToken() and heartbeat (#2680)
  • 84af33f chore(release): version 2.116.0 changelogs (#2679)
  • 5aedaab feat(auth): add MFA recovery codes API (#2676)
  • e4f675a fix(supabase): warn when schema is passed outside db options (#2663)
  • dbe7679 chore(release): version 2.115.0 changelogs (#2664)
  • 3eb6193 docs(supabase): clarify db.schema needs the second generic (#2662)
  • 92fb8ba feat(postgrest): add getOpenApiSpec() (#2651)
  • Additional commits viewable in compare view

Updates autoprefixer from 10.5.4 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

  • Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

Changelog

Sourced from autoprefixer's changelog.

10.6.1

  • Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

Commits
  • c99614d Release 10.6.1 version
  • f1d08cb Update dependencies
  • cf1ebcb Fix grid gap inheritance from row-gap and column-gap longhands (#1557)
  • e1212dc Release 10.6.0 version
  • dac3c5f Add support for prefixing initial-letter (#1556)
  • b031690 Release 10.5.6 version
  • da65c36 Add warning when Autoprefixer can cover CSS for old Safari
  • 604f8d9 Update dependencies
  • 54608ca Fix old WebKit gradients with color hints (#1554)
  • 7e81fff Release 10.5.5 version
  • Additional commits viewable in compare view

Updates katex from 0.16.47 to 0.18.9

Release notes

Sourced from katex's releases.

v0.18.9

0.18.9 (2026-09-23)

Features

v0.18.8

0.18.8 (2026-09-23)

Bug Fixes

v0.18.7

0.18.7 (2026-09-06)

Features

v0.18.6

0.18.6 (2026-09-05)

Bug Fixes

  • array: preserve tags on empty final rows (#4277) (02d552c)

v0.18.5

0.18.5 (2026-08-31)

Bug Fixes

v0.18.4

0.18.4 (2026-08-10)

Bug Fixes

v0.18.3

0.18.3 (2026-08-09)

... (truncated)

Changelog

Sourced from katex's changelog.

0.18.9 (2026-09-23)

Features

0.18.8 (2026-09-23)

Bug Fixes

0.18.7 (2026-09-06)

Features

0.18.6 (2026-09-05)

Bug Fixes

  • array: preserve tags on empty final rows (#4277) (02d552c)

0.18.5 (2026-08-31)

Bug Fixes

0.18.4 (2026-08-10)

Bug Fixes

0.18.3 (2026-08-09)

Bug Fixes

0.18.2 (2026-08-08)

... (truncated)

Commits
  • 71a7bc0 chore(release): 0.18.9 [ci skip]
  • aafa187 feat(types): add contrib module declarations (#4250)
  • e749fd1 chore(release): 0.18.8 [ci skip]
  • ddfcc29 fix(array): preserve trailing rows in align (#4283)
  • 96e751c chore(deps): bump github/codeql-action from 4.38.0 to 4.38.1 (#4292)
  • 726c2d4 chore(deps): bump github/codeql-action from 4.37.9 to 4.38.0 (#4287)
  • f71045d chore(deps): update dependency js-yaml to v4.3.2 [security] (#4286)
  • cd5ec4f chore(release): 0.18.7 [ci skip]
  • ab509fd feat: add \reflectbox and \mapsfrom support (#4262)
  • 9eb45b7 chore(release): 0.18.6 [ci skip]
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates lucide-react from 1.25.0 to 1.48.0

Release notes

Sourced from lucide-react's releases.

Version 1.48.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Version 1.47.0

What's Changed

New Contributors

... (truncated)

Commits
  • f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates next from 16.3.5 to 16.3.6

Release notes

Sourced from next's releases.

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

Commits

Updates pg from 8.16.3 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

pg@8.22.0

pg@8.21.0

pg@8.20.0

  • Add onConnect callback to pg.Pool constructor options allowing for async initialization of newly created & connected pooled clients.

pg@8.19.0

pg@8.18.0

pg@8.17.0

  • Throw correct error if database URL parsing fails.

pg@8.16.0

pg@8.15.0

  • Add support for esm importing. CommonJS importing is still also supported.

pg@8.14.0

pg@8.13.0

pg@8.12.0

... (truncated)

Commits

Updates react-icons from 5.5.0 to 5.7.0

Release notes

Sourced from react-icons's releases.

v5.7.0

What's Changed

Full Changelog: react-icons/react-icons@v5.6.0...v5.7.0

Icon Library License Version Count
Circum Icons MPL-2.0 license 1.0.0 288
Font Awesome 5 CC BY 4.0 License 5.15.4-3-gafecf2a 1612
Font Awesome 6 CC BY 4.0 License 6.7.2-1-g840c215 2060
Ionicons 4 MIT 4.6.3 696
Ionicons 5 MIT 5.5.4 1332
Material Design icons Apache License Version 2.0 4.0.0-161-gf3fb4442b2 4341
Typicons CC BY-SA 3.0 2.1.2 336
Github Octicons icons MIT 18.3.0 264
Feather MIT 4.29.2 287
Lucide ISC 0.462.0 1541
Game Icons CC BY 3.0 12920d6565588f0512542a3cb0cdfd36a497f910 4040
Weather Icons SIL OFL 1.1 2.0.12 219
Devicons MIT 1.8.0 192
Ant Design Icons MIT 4.4.2 831
Bootstrap Icons MIT 1.13.1 2754
Remix Icon Apache License Version 2.0 4.9.1 3229
Flat Color Icons MIT 1.0.2 329

…tory with 12 updates

Bumps the production-minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@hcaptcha/react-hcaptcha](https://github.com/hCaptcha/react-hcaptcha) | `2.0.2` | `2.2.0` |
| [@marsidev/react-turnstile](https://github.com/marsidev/react-turnstile) | `1.5.3` | `1.6.1` |
| [@supabase/ssr](https://github.com/supabase/ssr) | `0.7.0` | `0.12.7` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.83.0` | `2.117.1` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.9` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.48.0` |
| [next](https://github.com/vercel/next.js) | `16.3.5` | `16.3.6` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.16.3` | `8.23.0` |
| [react-icons](https://github.com/react-icons/react-icons) | `5.5.0` | `5.7.0` |
| [recharts](https://github.com/recharts/recharts) | `3.10.0` | `3.10.1` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |



Updates `@hcaptcha/react-hcaptcha` from 2.0.2 to 2.2.0
- [Release notes](https://github.com/hCaptcha/react-hcaptcha/releases)
- [Commits](hCaptcha/react-hcaptcha@2.0.2...v2.2.0)

Updates `@marsidev/react-turnstile` from 1.5.3 to 1.6.1
- [Release notes](https://github.com/marsidev/react-turnstile/releases)
- [Commits](https://github.com/marsidev/react-turnstile/compare/@marsidev/react-turnstile@1.5.3...@marsidev/react-turnstile@1.6.1)

Updates `@supabase/ssr` from 0.7.0 to 0.12.7
- [Release notes](https://github.com/supabase/ssr/releases)
- [Changelog](https://github.com/supabase/ssr/blob/main/CHANGELOG.md)
- [Commits](supabase/ssr@v0.7.0...v0.12.7)

Updates `@supabase/supabase-js` from 2.83.0 to 2.117.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.117.1/packages/core/supabase-js)

Updates `autoprefixer` from 10.5.4 to 10.6.1
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.4...10.6.1)

Updates `katex` from 0.16.47 to 0.18.9
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.18.9)

Updates `lucide-react` from 1.25.0 to 1.48.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.48.0/packages/lucide-react)

Updates `next` from 16.3.5 to 16.3.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.5...v16.3.6)

Updates `pg` from 8.16.3 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `react-icons` from 5.5.0 to 5.7.0
- [Release notes](https://github.com/react-icons/react-icons/releases)
- [Commits](react-icons/react-icons@v5.5.0...v5.7.0)

Updates `recharts` from 3.10.0 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.10.0...v3.10.1)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

---
updated-dependencies:
- dependency-name: "@hcaptcha/react-hcaptcha"
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: "@marsidev/react-turnstile"
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: "@supabase/ssr"
  dependency-version: 0.12.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.117.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: autoprefixer
  dependency-version: 10.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: katex
  dependency-version: 0.18.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: next
  dependency-version: 16.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: react-icons
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@vercel

vercel Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
study-buddy-v2 Ready Ready Preview Sep 28, 2026 5:25am UTC
study-buddy-v2-c8h3 Ready Ready Preview Sep 28, 2026 5:25am UTC

This branch was successfully deployed

2 active deployments
Preview – study-buddy-v2-c8h3 — 661229eb Deployed Sep 28, 2026 by vercel[bot]
Preview – study-buddy-v2 — 661229eb Deployed Sep 28, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants