Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 12 updates#58

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-1eca9c4471
Open

chore(deps): bump the production-dependencies group across 1 directory with 12 updates#58
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-1eca9c4471

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 12 updates in the / directory:

Package From To
@supabase/supabase-js 2.105.2 2.108.1
@tailwindcss/typography 0.5.19 0.5.20
@tsparticles/all 3.9.1 4.1.3
@tsparticles/engine 3.9.1 4.1.3
@tsparticles/react 3.0.0 4.1.3
@vitejs/plugin-react-swc 4.3.0 4.3.1
axios 1.16.0 1.17.0
framer-motion 12.38.0 12.40.0
lucide-react 1.14.0 1.17.0
openai 6.35.0 6.42.0
react-router-dom 7.14.2 7.17.0
resend 6.12.2 6.12.4

Updates @supabase/supabase-js from 2.105.2 to 2.108.1

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.108.1

2.108.1 (2026-06-09)

🩹 Fixes

  • ci: forward DOGFOOD_APP_CLIENT_ID to dogfood workflow (#2434)
  • postgrest: then typing (#2349)

❤️ Thank You

v2.108.1-canary.2

2.108.1-canary.2 (2026-06-09)

This was a version bump only, there were no code changes.

v2.108.1-canary.1

2.108.1-canary.1 (2026-06-08)

🩹 Fixes

  • postgrest: then typing (#2349)

❤️ Thank You

v2.108.1-canary.0

2.108.1-canary.0 (2026-06-08)

🩹 Fixes

  • ci: forward DOGFOOD_APP_CLIENT_ID to dogfood workflow (#2434)

❤️ Thank You

v2.108.0

2.108.0 (2026-06-08)

🚀 Features

  • auth: auth.resend() consistent confirmation flow (#2144)

🩹 Fixes

  • auth: do not console.error AuthApiError already returned through contract (#2428)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.108.0 (2026-06-08)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.107.0 (2026-06-02)

🚀 Features

  • auth: remove navigator.locks-based mutex; introduce commit guard + dispose() (#2392)
  • supabase: update X-Client-Info to structured metadata format (#2359)
  • realtime: allow httpSend to send binary payload (#2400)

❤️ Thank You

2.106.2 (2026-05-25)

🩹 Fixes

  • misc: add react-native export condition for Hermes-safe resolution (#2393)

❤️ Thank You

2.106.1 (2026-05-20)

🩹 Fixes

  • misc: hide dynamic import from hermesc (#2381)

❤️ Thank You

2.106.0 (2026-05-18)

🚀 Features

  • supabase: W3C/OpenTelemetry trace context propagation (#2163)

🩹 Fixes

  • release: mark @​supabase/tracing private and snapshot it for JSR (#2370)

... (truncated)

Commits
  • 65fafe5 chore(release): version 2.108.0 changelogs (#2433)
  • 57014e1 chore(release): version 2.107.0 changelogs (#2421)
  • 54ec2b6 feat(auth): remove navigator.locks-based mutex; introduce commit guard + disp...
  • 3397c92 feat(supabase): update X-Client-Info to structured metadata format (#2359)
  • 335207f feat(realtime): allow httpSend to send binary payload (#2400)
  • 42f12dd docs(repo): ship per-package AGENTS.md and migrations via npm (#2397)
  • b200b74 chore(release): version 2.106.2 changelogs (#2396)
  • a5f09cf chore(repo): adopt pnpm catalog and clean up devDeps (#2389)
  • c72cc56 fix(misc): add react-native export condition for Hermes-safe resolution (#2393)
  • a7bdb23 docs(supabase): expand tracePropagation tsdoc with examples (#2388)
  • Additional commits viewable in compare view

Updates @tailwindcss/typography from 0.5.19 to 0.5.20

Release notes

Sourced from @​tailwindcss/typography's releases.

v0.5.20

Fixed

  • Support installing with stable versions of Tailwind CSS v4 (#424)
Changelog

Sourced from @​tailwindcss/typography's changelog.

[0.5.20] - 2026-06-08

Fixed

  • Support installing with stable versions of Tailwind CSS v4 (#424)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tailwindcss/typography since your current version.


Updates @tsparticles/all from 3.9.1 to 4.1.3

Release notes

Sourced from @​tsparticles/all's releases.

v4.1.3

What's Changed

🔧 Other Changes

Full Changelog: tsparticles/tsparticles@v4.1.2...v4.1.3

v4.1.1

What's Changed

🔧 Other Changes

Full Changelog: tsparticles/tsparticles@v4.1.0...v4.1.1

v4.1.0

What's Changed

🧰 Maintenance

🔧 Other Changes

... (truncated)

Changelog

Sourced from @​tsparticles/all's changelog.

4.1.3 (2026-06-03)

Note: Version bump only for package @​tsparticles/all

4.1.2 (2026-06-01)

Bug Fixes

4.1.1 (2026-05-31)

Note: Version bump only for package @​tsparticles/all

4.1.0 (2026-05-29)

Features

4.0.5 (2026-05-19)

Note: Version bump only for package @​tsparticles/all

4.0.4 (2026-05-19)

Note: Version bump only for package @​tsparticles/all

4.0.3 (2026-05-18)

Bug Fixes

  • fixed basic bundle deps, it was missing blend plugin that was in all by mistake (83cdf89)

4.0.2 (2026-05-16)

Note: Version bump only for package @​tsparticles/all

4.0.1 (2026-05-15)

Note: Version bump only for package @​tsparticles/all

4.0.0 (2026-05-15)

Note: Version bump only for package @​tsparticles/all

4.0.0-beta.17 (2026-05-15)

Note: Version bump only for package @​tsparticles/all

... (truncated)

Commits
  • b7ace06 chore(release): published new version
  • fdcbe48 chore(release): published new version
  • 429c147 fix: bundle exports fix
  • 2a16be4 chore(release): published new version
  • ce41d45 chore(release): published new version
  • a4d9933 feat: added ribbon shape
  • 4d8b281 chore(release): published new version
  • ccaa764 chore(release): published new version
  • 0414bc5 chore(release): published new version
  • 35c6c9d build: fix CI build, and updated some docs
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tsparticles/all since your current version.


Updates @tsparticles/engine from 3.9.1 to 4.1.3

Release notes

Sourced from @​tsparticles/engine's releases.

v4.1.3

What's Changed

🔧 Other Changes

Full Changelog: tsparticles/tsparticles@v4.1.2...v4.1.3

v4.1.1

What's Changed

🔧 Other Changes

Full Changelog: tsparticles/tsparticles@v4.1.0...v4.1.1

v4.1.0

What's Changed

🧰 Maintenance

🔧 Other Changes

... (truncated)

Changelog

Sourced from @​tsparticles/engine's changelog.

4.1.3 (2026-06-03)

Bug Fixes

  • various fixes after deeper review (d1a1e59)

4.1.2 (2026-06-01)

Note: Version bump only for package @​tsparticles/engine

4.1.1 (2026-05-31)

Note: Version bump only for package @​tsparticles/engine

4.1.0 (2026-05-29)

Bug Fixes

  • fixed behavior when cannon has maxDistance 0 (9742680)

Features

4.0.5 (2026-05-19)

Note: Version bump only for package @​tsparticles/engine

4.0.4 (2026-05-19)

Note: Version bump only for package @​tsparticles/engine

4.0.3 (2026-05-18)

Note: Version bump only for package @​tsparticles/engine

4.0.2 (2026-05-16)

Note: Version bump only for package @​tsparticles/engine

4.0.1 (2026-05-15)

Note: Version bump only for package @​tsparticles/engine

4.0.0 (2026-05-15)

Note: Version bump only for package @​tsparticles/engine

4.0.0-beta.17 (2026-05-15)

... (truncated)

Commits
  • b7ace06 chore(release): published new version
  • d1a1e59 fix: various fixes after deeper review
  • fdcbe48 chore(release): published new version
  • 7055709 build: updated typedoc markdowns
  • 2a16be4 chore(release): published new version
  • ce41d45 chore(release): published new version
  • 7b9b218 chore(all): changed private fields to # syntax
  • 58a9a57 feat: improved ribbon shape
  • dff3e87 feat: improved ribbon shape
  • 34e9ba5 chore(engine): moved size and opacity options to their updaters, fixed build ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tsparticles/engine since your current version.

Install script changes

This version adds install script that runs during installation. Review the package contents before updating.


Updates @tsparticles/react from 3.0.0 to 4.1.3

Release notes

Sourced from @​tsparticles/react's releases.

v4.1.3

What's Changed

🔧 Other Changes

Full Changelog: tsparticles/tsparticles@v4.1.2...v4.1.3

v4.1.1

What's Changed

🔧 Other Changes

Full Changelog: tsparticles/tsparticles@v4.1.0...v4.1.1

v4.1.0

What's Changed

🧰 Maintenance

🔧 Other Changes

... (truncated)

Changelog

Sourced from @​tsparticles/react's changelog.

4.1.3 (2026-06-03)

Bug Fixes

  • fixed issue with react component after previous fix, not loading correctly in strict mode (7eee06a)
  • various fixes after deeper review (255111c)

4.1.2 (2026-06-01)

Note: Version bump only for package @​tsparticles/react

4.1.1 (2026-05-31)

Bug Fixes

4.1.0 (2026-05-29)

Bug Fixes

  • fixed peer deps versions when using workspace syntax, fixes #5799 (4580105)

4.0.5 (2026-05-19)

Note: Version bump only for package @​tsparticles/react

4.0.4 (2026-05-19)

Note: Version bump only for package @​tsparticles/react

4.0.3 (2026-05-18)

Note: Version bump only for package @​tsparticles/react

4.0.2 (2026-05-16)

Note: Version bump only for package @​tsparticles/react

4.0.1 (2026-05-15)

Note: Version bump only for package @​tsparticles/react

4.0.0 (2026-05-15)

Note: Version bump only for package @​tsparticles/react

4.0.0-beta.17 (2026-05-15)

Note: Version bump only for package @​tsparticles/react

... (truncated)

Commits
  • b7ace06 chore(release): published new version
  • 255111c fix: various fixes after deeper review
  • 7eee06a fix: fixed issue with react component after previous fix, not loading correct...
  • fdcbe48 chore(release): published new version
  • 2a16be4 chore(release): published new version
  • 3e83574 fix: fixed issue #5805
  • ce41d45 chore(release): published new version
  • 4580105 fix: fixed peer deps versions when using workspace syntax, fixes #5799
  • 4d8b281 chore(release): published new version
  • ccaa764 chore(release): published new version
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tsparticles/react since your current version.


Updates @vitejs/plugin-react-swc from 4.3.0 to 4.3.1

Release notes

Sourced from @​vitejs/plugin-react-swc's releases.

plugin-react-swc@4.3.1

Avoid esbuild warnings with Vite 8 #1195

Fixes #1187.

Changelog

Sourced from @​vitejs/plugin-react-swc's changelog.

4.3.1 (2026-05-14)

Avoid esbuild warnings with Vite 8 #1195

Fixes #1187.

Commits

Updates axios from 1.16.0 to 1.17.0

Release notes

Sourced from axios's releases.

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
  • Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
  • React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
  • Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
  • Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
  • Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
  • Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
  • Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)

🔧 Maintenance & Chores

  • HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
  • Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
  • CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
  • Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
  • Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#10890, #10889, #10921, #10945, #10905, #10933, #10915, #10887, #10955)
  • Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

... (truncated)

Changelog

Sourced from axios's changelog.

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
  • Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
  • React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
  • Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
  • Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
  • Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
  • Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
  • Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)

🔧 Maintenance & Chores

  • HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
  • Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
  • CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
  • Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
  • Document...

    Description has been truncated

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
06ddd50 
…y with 12 updates

Bumps the production-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.105.2` | `2.108.1` |
| [@tailwindcss/typography](https://github.com/tailwindlabs/tailwindcss-typography) | `0.5.19` | `0.5.20` |
| [@tsparticles/all](https://github.com/tsparticles/tsparticles/tree/HEAD/bundles/all) | `3.9.1` | `4.1.3` |
| [@tsparticles/engine](https://github.com/tsparticles/tsparticles/tree/HEAD/engine) | `3.9.1` | `4.1.3` |
| [@tsparticles/react](https://github.com/tsparticles/tsparticles/tree/HEAD/wrappers/react) | `3.0.0` | `4.1.3` |
| [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react-swc) | `4.3.0` | `4.3.1` |
| [axios](https://github.com/axios/axios) | `1.16.0` | `1.17.0` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.38.0` | `12.40.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.14.0` | `1.17.0` |
| [openai](https://github.com/openai/openai-node) | `6.35.0` | `6.42.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.14.2` | `7.17.0` |
| [resend](https://github.com/resend/resend-node) | `6.12.2` | `6.12.4` |



Updates `@supabase/supabase-js` from 2.105.2 to 2.108.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.108.1/packages/core/supabase-js)

Updates `@tailwindcss/typography` from 0.5.19 to 0.5.20
- [Release notes](https://github.com/tailwindlabs/tailwindcss-typography/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss-typography/blob/main/CHANGELOG.md)
- [Commits](tailwindlabs/tailwindcss-typography@v0.5.19...v0.5.20)

Updates `@tsparticles/all` from 3.9.1 to 4.1.3
- [Release notes](https://github.com/tsparticles/tsparticles/releases)
- [Changelog](https://github.com/tsparticles/tsparticles/blob/main/bundles/all/CHANGELOG.md)
- [Commits](https://github.com/tsparticles/tsparticles/commits/v4.1.3/bundles/all)

Updates `@tsparticles/engine` from 3.9.1 to 4.1.3
- [Release notes](https://github.com/tsparticles/tsparticles/releases)
- [Changelog](https://github.com/tsparticles/tsparticles/blob/main/engine/CHANGELOG.md)
- [Commits](https://github.com/tsparticles/tsparticles/commits/v4.1.3/engine)

Updates `@tsparticles/react` from 3.0.0 to 4.1.3
- [Release notes](https://github.com/tsparticles/tsparticles/releases)
- [Changelog](https://github.com/tsparticles/tsparticles/blob/main/wrappers/react/CHANGELOG.md)
- [Commits](https://github.com/tsparticles/tsparticles/commits/v4.1.3/wrappers/react)

Updates `@vitejs/plugin-react-swc` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/v4.3.1/packages/plugin-react-swc)

Updates `axios` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.0...v1.17.0)

Updates `framer-motion` from 12.38.0 to 12.40.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.38.0...v12.40.0)

Updates `lucide-react` from 1.14.0 to 1.17.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.17.0/packages/lucide-react)

Updates `openai` from 6.35.0 to 6.42.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.35.0...v6.42.0)

Updates `react-router-dom` from 7.14.2 to 7.17.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.17.0/packages/react-router-dom)

Updates `resend` from 6.12.2 to 6.12.4
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v6.12.2...v6.12.4)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.108.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tailwindcss/typography"
  dependency-version: 0.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tsparticles/all"
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@tsparticles/engine"
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@tsparticles/react"
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@vitejs/plugin-react-swc"
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: axios
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: framer-motion
  dependency-version: 12.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 6.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: resend
  dependency-version: 6.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the major Breaking change - bumps major version label Jun 9, 2026
@socket-security

socket-security Bot commented Jun 9, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​tsparticles/​react@​3.0.0 ⏵ 4.1.3100 +110064 -3595 +45100
Updatedreact-router-dom@​7.14.2 ⏵ 7.17.01001006598100
Updated@​tsparticles/​engine@​3.9.1 ⏵ 4.1.37510010097 +47100
Updatedopenai@​6.35.0 ⏵ 6.42.078 +9100100 +1100100
Updatedlucide-react@​1.14.0 ⏵ 1.17.0100 +110098 +19580
Updated@​tsparticles/​all@​3.9.1 ⏵ 4.1.38510010097 +13100
Updated@​vitejs/​plugin-react-swc@​4.3.0 ⏵ 4.3.1100 +110010091100
Updatedaxios@​1.16.0 ⏵ 1.17.096 -110010095100
Updated@​tailwindcss/​typography@​0.5.19 ⏵ 0.5.2010010010096100
Updated@​supabase/​supabase-js@​2.105.2 ⏵ 2.108.1100 +2910010098 -2100
Updatedframer-motion@​12.38.0 ⏵ 12.40.099 +1100100 +198100
Updatedresend@​6.12.2 ⏵ 6.12.498100100100 +2100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

major Breaking change - bumps major version

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants