Skip to content

chore(deps): bump the patch-and-minor group across 1 directory with 19 updates - #335

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/patch-and-minor-236eba17e6
Open

chore(deps): bump the patch-and-minor group across 1 directory with 19 updates#335
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/patch-and-minor-236eba17e6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group with 19 updates in the / directory:

Package From To
playwright 1.62.1 1.63.0
tsx 4.23.12 4.23.13
@anthropic-ai/sdk 0.117.1 0.126.0
hono 4.13.7 4.13.8
hono-rate-limiter 0.5.3 0.5.4
node-ical 0.27.1 0.27.2
zod 4.4.3 4.6.5
@types/node 26.2.0 26.6.1
@types/pg 8.21.0 8.23.1
dompurify 3.4.13 3.4.15
lucide-react 1.31.0 1.46.0
next 16.3.3 16.3.5
postcss 8.5.26 8.5.28
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.4 19.3.0
@types/d3-selection 3.0.11 3.0.12
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.4 19.3.0
eslint-config-next 16.3.3 16.3.5

Updates playwright from 1.62.1 to 1.63.0

Release notes

Sourced from playwright's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits
  • 1b025d7 chore: mark v1.63.0 (#42569)
  • 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
  • 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
  • e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
  • 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
  • 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
  • 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
  • 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
  • 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
  • bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
  • Additional commits viewable in compare view

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits

Updates @anthropic-ai/sdk from 0.117.1 to 0.126.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.126.0

0.126.0 (2026-09-15)

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

  • api: add auto mode tool permissions for Managed Agents (7829b43)
  • api: add compaction parameter and signed compaction blocks (beta) (05fd878)
  • api: add enum types for workspace data-residency geo fields (89c5920)
  • api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)
  • api: add url_sources to the web fetch tool (ee23dd2)
  • api: add workspace_id parameter to user profiles methods (f5b9fb7)

Bug Fixes

  • api: mark usage iteration model as nullable (bec3bec)
  • api: use one input transformation type for message and delta event (e016d25)
  • client: ignore invalid Retry-After values and validate maxRetries (7829b43)
  • client: retry connection errors in the async client and stop blocking in the coroutine retry loop (7829b43)
  • client: stop waiting for a retry as soon as the request is aborted (941aaea)
  • client: use the default backoff when Retry-After is out of range (1090c44)
  • internal: stop a declaration file using a type that needs TypeScript 5.7 (e32a956)

Performance Improvements

  • add "sideEffects": false so bundlers can drop unused modules (f804366)
  • mark classes as pure so bundlers can drop unused ones (f804366)

Chores

  • docs: clarify that session_thread_id on tool use events is informational (a07ecf3)
  • docs: correct the compaction beta's parameter descriptions (eb9abd2)
  • internal: move the sub-packages off ts-node and modernise their tsconfig (1d7cd91)
  • internal: move tsconfig off settings deprecated in TypeScript 6 (e0d58f6)
  • internal: pin the pnpm version with an integrity hash (f804366)
  • internal: root package drops ts-node; repo root becomes ESM (3f371a1)
  • internal: stop using ts-node for the publish script and the ecosystem test runner (2e589c8)
  • tests: stop the mock server without failing a passing test run (a364c12)

Documentation

  • api: clarify usage.iterations entry typing under server-side fallback (c5f0ef3)
  • api: compaction instructions replace the server's summarization prompt (941aaea)
  • api: fix typo in temperature deprecation message (4a8b49b)
  • stop documenting unions with their first variant's description (fa06caf)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.126.0 (2026-09-15)

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

  • api: add auto mode tool permissions for Managed Agents (7829b43)
  • api: add compaction parameter and signed compaction blocks (beta) (05fd878)
  • api: add enum types for workspace data-residency geo fields (89c5920)
  • api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)
  • api: add url_sources to the web fetch tool (ee23dd2)
  • api: add workspace_id parameter to user profiles methods (f5b9fb7)

Bug Fixes

  • api: mark usage iteration model as nullable (bec3bec)
  • api: use one input transformation type for message and delta event (e016d25)
  • client: ignore invalid Retry-After values and validate maxRetries (7829b43)
  • client: retry connection errors in the async client and stop blocking in the coroutine retry loop (7829b43)
  • client: stop waiting for a retry as soon as the request is aborted (941aaea)
  • client: use the default backoff when Retry-After is out of range (1090c44)
  • internal: stop a declaration file using a type that needs TypeScript 5.7 (e32a956)

Performance Improvements

  • add "sideEffects": false so bundlers can drop unused modules (f804366)
  • mark classes as pure so bundlers can drop unused ones (f804366)

Chores

  • docs: clarify that session_thread_id on tool use events is informational (a07ecf3)
  • docs: correct the compaction beta's parameter descriptions (eb9abd2)
  • internal: move the sub-packages off ts-node and modernise their tsconfig (1d7cd91)
  • internal: move tsconfig off settings deprecated in TypeScript 6 (e0d58f6)
  • internal: pin the pnpm version with an integrity hash (f804366)
  • internal: root package drops ts-node; repo root becomes ESM (3f371a1)
  • internal: stop using ts-node for the publish script and the ecosystem test runner (2e589c8)
  • tests: stop the mock server without failing a passing test run (a364c12)

Documentation

  • api: clarify usage.iterations entry typing under server-side fallback (c5f0ef3)
  • api: compaction instructions replace the server's summarization prompt (941aaea)
  • api: fix typo in temperature deprecation message (4a8b49b)
  • stop documenting unions with their first variant's description (fa06caf)

... (truncated)

Commits
  • d103182 Merge pull request #1200 from anthropics/release-please--branches--main--chan...
  • 39273d1 chore: release main
  • eb9abd2 chore(docs): correct the compaction beta's parameter descriptions
  • 05fd878 feat(api): add compaction parameter and signed compaction blocks (beta)
  • e0d58f6 chore(internal): move tsconfig off settings deprecated in TypeScript 6
  • e016d25 fix(api): use one input transformation type for message and delta event
  • 1d7cd91 chore(internal): move the sub-packages off ts-node and modernise their tsconfig
  • ee23dd2 feat(api): add url_sources to the web fetch tool
  • a364c12 chore(tests): stop the mock server without failing a passing test run
  • 1f32871 feat(api): add thinking_mismatch_allowed entries to input_transformations (beta)
  • Additional commits viewable in compare view

Updates hono from 4.13.7 to 4.13.8

Release notes

Sourced from hono's releases.

v4.13.8

What's Changed

Full Changelog: honojs/hono@v4.13.7...v4.13.8

Commits
  • 098e119 4.13.8
  • e8c8c21 perf(jsx/dom): optimize matching-head child lookup during reconciliation (#5329)
  • 8755b17 docs(combine): fix except() JSDoc param and add missing @​returns (#5346)
  • edd138e fix(request): keep the request media type when reusing a cached body (#5366)
  • 9b4e9c2 fix(accept): clamp a negative q to 0, not 1 (#5357)
  • 65cff90 fix(accept): treat the q parameter name as case-insensitive (#5349)
  • f147de5 fix(accepts, language): skip accept entries with quality 0 when matching (#5311)
  • 90e1b94 fix(aws-lambda): respect backpressure when streaming the response body (#5351)
  • 7792f5d perf(jsx/dom): reduce lookup work for large keyed updates (#5340)
  • e7b38ee docs: fix typos in code comments and link third-party middleware section (#5343)
  • See full diff in compare view

Updates hono-rate-limiter from 0.5.3 to 0.5.4

Release notes

Sourced from hono-rate-limiter's releases.

0.5.4

Bug Fixes 🐛

Documentation 📚

Internal Changes 🔧

Changelog

Sourced from hono-rate-limiter's changelog.

0.5.4

Bug Fixes 🐛

Documentation 📚

Internal Changes 🔧

Commits
  • 30436b4 release: 0.5.4
  • cbfa238 docs: warn that UnstorageStore is not concurrency-safe (#68)
  • d593af1 fix(websocket): only skip counting on the real message outcome (#69)
  • ac4a73b fix: guard RedisStore.decrement against going below zero (#67)
  • 1b752c6 fix: handle SCRIPT LOAD rejection in RedisStore constructor (#65)
  • 846f4a0 ci: add craft release system (#66)
  • 20623ad docs: fix 'succesful' typo in JSDoc (#63)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hono-rate-limiter since your current version.


Updates node-ical from 0.27.1 to 0.27.2

Release notes

Sourced from node-ical's releases.

0.27.2

What's Changed

New Contributors

Full Changelog: jens-maus/node-ical@0.27.1...0.27.2

Commits
  • 517e972 fix(rrule): prevent DATE-only events from dropping when UNTIL contains a UTC ...
  • 0b3a229 chore(deps): bump actions/setup-node from 6 to 7 (#540)
  • 5739bc3 chore(deps): bump github/codeql-action from 4 to 4.37.3 (#539)
  • 36fc63d chore: update dependencies and align linting (#532)
  • 9fd6579 chore(deps-dev): bump fast-xml-parser from 5.10.1 to 5.11.1 (#549)
  • af93bd6 chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#546)
  • 04d67ea chore(deps-dev): bump lint-staged from 17.2.0 to 17.4.1 (#550)
  • 4e67e0c chore(deps-dev): bump simple-git-hooks from 2.13.1 to 2.14.0 (#552)
  • 7baf4af chore(deps-dev): bump dayjs from 1.11.21 to 1.11.23 (#548)
  • 4ca1471 chore(deps-dev): bump mocha from 11.7.6 to 11.8.0 (#545)
  • Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Updates @types/node from 26.2.0 to 26.6.1

Commits

Updates @types/pg from 8.21.0 to 8.23.1

Commits

Updates dompurify from 3.4.13 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates lucide-react from 1.31.0 to 1.46.0

Release notes

Sourced from lucide-react's releases.

Version 1.46.0

What's Changed

Full Changelog: lucide-icons/lucide@1.45.0...1.46.0

Version 1.45.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Version 1.44.0

What's Changed

... (truncated)

Commits
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • See full diff in compare view

Updates next from 16.3.3 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
  • next/image: Reject empty images when reading/writing to the disk cache (#98186)
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
  • Add CSP nonce to script tags of loading and template files (#98403)
  • Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

Commits
  • ca2c75e v16.3.5
  • 14fb290 [backport] Fix use cache prerender signal retention (#98448)
  • 2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
  • 4b56cee [16.3.x] Backport docs fixes (

@dependabot
chore(deps): bump the patch-and-minor group across 1 directory with 1…
a7cbf86 
…9 updates

Bumps the patch-and-minor group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [playwright](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.117.1` | `0.126.0` |
| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.8` |
| [hono-rate-limiter](https://github.com/rhinobase/hono-rate-limiter) | `0.5.3` | `0.5.4` |
| [node-ical](https://github.com/jens-maus/node-ical) | `0.27.1` | `0.27.2` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.1` |
| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.21.0` | `8.23.1` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.15` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.46.0` |
| [next](https://github.com/vercel/next.js) | `16.3.3` | `16.3.5` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [@types/d3-selection](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/d3-selection) | `3.0.11` | `3.0.12` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.3` | `16.3.5` |



Updates `playwright` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `@anthropic-ai/sdk` from 0.117.1 to 0.126.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.117.1...sdk-v0.126.0)

Updates `hono` from 4.13.7 to 4.13.8
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.7...v4.13.8)

Updates `hono-rate-limiter` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/rhinobase/hono-rate-limiter/releases)
- [Changelog](https://github.com/rhinobase/hono-rate-limiter/blob/main/CHANGELOG.md)
- [Commits](rhinobase/hono-rate-limiter@v0.5.3...0.5.4)

Updates `node-ical` from 0.27.1 to 0.27.2
- [Release notes](https://github.com/jens-maus/node-ical/releases)
- [Commits](jens-maus/node-ical@0.27.1...0.27.2)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

Updates `@types/node` from 26.2.0 to 26.6.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/pg` from 8.21.0 to 8.23.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg)

Updates `dompurify` from 3.4.13 to 3.4.15
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.15)

Updates `lucide-react` from 1.31.0 to 1.46.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.46.0/packages/lucide-react)

Updates `next` from 16.3.3 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.3...v16.3.5)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/d3-selection` from 3.0.11 to 3.0.12
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/d3-selection)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `eslint-config-next` from 16.3.3 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: playwright
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.126.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: hono
  dependency-version: 4.13.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: hono-rate-limiter
  dependency-version: 0.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: node-ical
  dependency-version: 0.27.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@types/node"
  dependency-version: 26.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@types/pg"
  dependency-version: 8.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: dompurify
  dependency-version: 3.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: lucide-react
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: next
  dependency-version: 16.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@types/d3-selection"
  dependency-version: 3.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: eslint-config-next
  dependency-version: 16.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants