Skip to content

Update dependencies together and group Next.js tooling - #90

Merged
kevinjylin merged 19 commits into
mainfrom
dependabot/npm_and_yarn/next-16.4.0
Oct 13, 2026
Merged

kevinjylin merged 19 commits into
mainfrom
dependabot/npm_and_yarn/next-16.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

This PR integrates the nine existing dependency updates against current main so their combined lockfile is tested before merging. It resolves overlapping manifest changes while preserving both Playwright 1.64.0 and @types/node 26.6.5, and both Motion 14.1.0 and Next.js 16.4.0.

Next.js and eslint-config-next now move together to 16.4.0. A Dependabot group keeps those packages together in future updates. The remaining updates are Supabase JS 2.117.3, google-genai >=2.29.0, setup-node 7.1.0, and upload-artifact 7.0.2; GitHub Actions remain pinned to commit SHAs.

Includes the original commits from #82, #83, #84, #85, #86, #87, #88, and #89. Use a merge commit to preserve their ancestry and mark the included PRs merged automatically.

Validation: each original dependency PR passed all five App CI jobs. The combined update passed local lint and dependency audit, with only the existing accepted braces advisory. Fresh combined App CI passed all five jobs: secret scan, lint and contract tests, pipeline unit tests, production build, and Playwright e2e. Contract tests passed 214/214, pipeline tests passed 845/845, and browser tests passed 44/44. Local lint, contract tests, and production build also passed. Dependabot validated the new grouping. Vercel skipped the Dependabot preview through the existing ignored-build policy.

dependabot Bot added 9 commits October 13, 2026 07:03
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [google-genai](https://github.com/googleapis/python-genai) to permit the latest version.
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.28.0...v2.29.0)

---
updated-dependencies:
- dependency-name: google-genai
  dependency-version: 2.29.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) from 16.3.8 to 16.4.0.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.0/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: eslint-config-next
  dependency-version: 16.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) from 2.117.2 to 2.117.3.
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.117.3/packages/core/supabase-js)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.117.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 26.6.4 to 26.6.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.63.0 to 1.64.0.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [motion](https://github.com/motiondivision/motion) from 14.0.0 to 14.1.0.
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.0.0...v14.1.0)

---
updated-dependencies:
- dependency-name: motion
  dependency-version: 14.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [next](https://github.com/vercel/next.js) from 16.3.8 to 16.4.0.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.8...v16.4.0)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 13, 2026
@vercel

vercel Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
highlander-hub Ignored Ignored Preview Oct 13, 2026 11:09pm UTC

@kevinjylin kevinjylin changed the title Bump next from 16.3.8 to 16.4.0 Update dependencies together and group Next.js tooling Oct 13, 2026
@kevinjylin
kevinjylin merged commit 087db80 into main Oct 13, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/next-16.4.0 branch October 13, 2026 23:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant