Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 20 updates - #122

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-36d50e21f0
Open

chore(deps): bump the production-dependencies group across 1 directory with 20 updates#122
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-36d50e21f0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 20 updates in the / directory:

Package From To
@aparajita/capacitor-secure-storage 8.0.0 8.0.1
@capacitor/core 8.5.1 8.5.2
@capacitor/filesystem 8.1.3 8.1.4
@capacitor/ios 8.5.1 8.5.2
@capacitor/keyboard 8.0.5 8.0.6
@capacitor/share 8.0.1 8.0.3
@tanstack/react-router 1.170.18 1.170.41
@tauri-apps/api 2.11.1 2.12.1
@tauri-apps/plugin-process 2.3.1 2.4.0
@tauri-apps/plugin-updater 2.11.0 2.13.1
dexie 4.4.4 4.4.6
lucide-react 1.25.0 1.52.0
papaparse 5.5.4 5.7.0
radix-ui 1.6.4 1.6.7
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
recharts 3.10.0 3.10.1
sonner 2.0.7 2.0.8
tailwind-merge 3.6.0 3.7.0
zod 4.4.3 4.6.5

Updates @aparajita/capacitor-secure-storage from 8.0.0 to 8.0.1

Changelog

Sourced from @​aparajita/capacitor-secure-storage's changelog.

8.0.1 (2026-09-23)

Bug Fixes

  • android: read the clear prefix option under the name the JS layer sends (8adef50), closes #27
  • ensure the prefix is never blank (b122b2d), closes #27
  • point at unversioned symlink (9af9d1e)
Commits
  • 3b0d314 chore(release): 8.0.1
  • 5b0d6c2 chore: sync demo files
  • b122b2d fix: ensure the prefix is never blank
  • 6036460 chore: pnpm updated its config
  • 3ea110c chore: serena was updated, rewrote config
  • 47dc1b4 chore: migrate settings from package.json
  • 9af9d1e fix: point at unversioned symlink
  • 95b3c07 Merge pull request #28 from jeremy-friesen-qs/fix/clear-items-with-prefix-opt...
  • 8adef50 fix(android): read the clear prefix option under the name the JS layer sends
  • 43bc5c3 chore: fix pnpm bug in ionic cli
  • Additional commits viewable in compare view

Updates @capacitor/core from 8.5.1 to 8.5.2

Release notes

Sourced from @​capacitor/core's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Changelog

Sourced from @​capacitor/core's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • See full diff in compare view

Updates @capacitor/filesystem from 8.1.3 to 8.1.4

Release notes

Sourced from @​capacitor/filesystem's releases.

v8.1.4

8.1.4 (2026-10-02)

Bug Fixes

  • contain Directory-scoped paths to their target directory (#91) (40394b7)
  • ios: raw file paths without a scheme couldn't be accessed (#84) (74495f5)
  • ios: update native lib to latest version (#93) (cb9f6ff)

This release is also available on:

Changelog

Sourced from @​capacitor/filesystem's changelog.

8.1.4 (2026-10-02)

Bug Fixes

  • contain Directory-scoped paths to their target directory (#91) (40394b7)
  • ios: raw file paths without a scheme couldn't be accessed (#84) (74495f5)
  • ios: update native lib to latest version (#93) (cb9f6ff)
Commits
  • 4a46c5a chore(release): 8.1.4 [skip ci]
  • cb9f6ff fix(ios): update native lib to latest version (#93)
  • 40394b7 fix: contain Directory-scoped paths to their target directory (#91)
  • 72bab10 chore(android): fix build warnings (#86)
  • 74495f5 fix(ios): raw file paths without a scheme couldn't be accessed (#84)
  • See full diff in compare view

Updates @capacitor/ios from 8.5.1 to 8.5.2

Release notes

Sourced from @​capacitor/ios's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Changelog

Sourced from @​capacitor/ios's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • See full diff in compare view

Updates @capacitor/keyboard from 8.0.5 to 8.0.6

Release notes

Sourced from @​capacitor/keyboard's releases.

v8.0.6

8.0.6 (2026-10-02)

Bug Fixes

  • ios: silence the protocol property synthesis warnings in Keyboard.m (#83) (f28aef4)

This release is also available on:

Changelog

Sourced from @​capacitor/keyboard's changelog.

8.0.6 (2026-10-02)

Bug Fixes

  • ios: silence the protocol property synthesis warnings in Keyboard.m (#83) (f28aef4)
Commits
  • 235b3f6 chore(release): 8.0.6 [skip ci]
  • f28aef4 fix(ios): silence the protocol property synthesis warnings in Keyboard.m (#83)
  • d8a5fb7 chore: format Package.swift (#70)
  • 354f338 ci: use exit code instead of output text to detect pod trunk push success
  • See full diff in compare view

Updates @capacitor/share from 8.0.1 to 8.0.3

Release notes

Sourced from @​capacitor/share's releases.

@​capacitor/share@​8.0.3

8.0.3 (2026-10-02)

Bug Fixes

  • share: present share sheet from the topmost view controller on iOS (#2574) (ed6cf8f)

@​capacitor/share@​8.0.2

8.0.2 (2026-09-16)

Bug Fixes

  • share: Add nonce validation to broadcast receiver on Android (#2592) (fa8ddfb)
Commits
  • 87c0bb8 chore(release): publish [skip ci]
  • 0706269 fix(app): silence the String?-to-Any coercion warning in getAppLanguage on iO...
  • 03fca06 docs(screen-orientation): fix iOS orientation snippet for UIScene (#2597)
  • bf42d23 fix(status-bar): avoid retain cycle between StatusBar and the bridge (#2569)
  • 5608b1c fix(browser): only fire browserFinished when the Custom Tab actually terminat...
  • ed6cf8f fix(share): present share sheet from the topmost view controller on iOS (#2574)
  • fd606de fix(push-notifications): show foreground notification image on Android (#2572)
  • 467dafd chore(release): publish [skip ci]
  • fa8ddfb fix(share): Add nonce validation to broadcast receiver on Android (#2592)
  • 89070d4 chore: migrate local notifications to new repo (#2584)
  • Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.18 to 1.170.41

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.41

Patch Changes

  • #8529 60b8ad1 - Compose only enabled route boundaries instead of rendering inactive wrapper components.

  • #8568 614bc27 - Update TanStack Store to 0.11.2 to prevent unrelated atom reads inside subscription observers from triggering extra notifications.

  • #8530 ff66a03 - Consolidate the root match context provider while preserving match context in the root shell.

  • #8522 863c8a7 - Reuse Link href classification and active/inactive results across location updates while preserving live history href formatting.

  • Updated dependencies [d521abd]:

    • @​tanstack/router-core@​1.171.34

@​tanstack/react-router@​1.170.40

Patch Changes

  • #8436 f5ffd38 - Skip unused Link preload cleanup when preloading is disabled and ignore queued viewport notifications after their effect has been cleaned up.

  • Updated dependencies [488d046, 0c1b5e3, 3cdd1af]:

    • @​tanstack/router-core@​1.171.33

@​tanstack/react-router@​1.170.39

Patch Changes

  • #8435 73bfc15 - Avoid hydration-triggered rerenders for links that do not compare URL hashes while preserving hash-sensitive active state and ClientOnly behavior.
Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.41

Patch Changes

  • #8529 60b8ad1 - Compose only enabled route boundaries instead of rendering inactive wrapper components.

  • #8568 614bc27 - Update TanStack Store to 0.11.2 to prevent unrelated atom reads inside subscription observers from triggering extra notifications.

  • #8530 ff66a03 - Consolidate the root match context provider while preserving match context in the root shell.

  • #8522 863c8a7 - Reuse Link href classification and active/inactive results across location updates while preserving live history href formatting.

  • Updated dependencies [d521abd]:

    • @​tanstack/router-core@​1.171.34

1.170.40

Patch Changes

  • #8436 f5ffd38 - Skip unused Link preload cleanup when preloading is disabled and ignore queued viewport notifications after their effect has been cleaned up.

  • Updated dependencies [488d046, 0c1b5e3, 3cdd1af]:

    • @​tanstack/router-core@​1.171.33

1.170.39

Patch Changes

  • #8435 73bfc15 - Avoid hydration-triggered rerenders for links that do not compare URL hashes while preserving hash-sensitive active state and ClientOnly behavior.

1.170.38

Patch Changes

1.170.37

Patch Changes

  • #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

  • #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

  • #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

    Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

    Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

... (truncated)

Commits
  • 57e126e ci: Version Packages (#8531)
  • 614bc27 chore(deps): update TanStack Store to 0.11.2 (#8568)
  • 60b8ad1 perf(react-router): omit inactive route wrapper components (#8529)
  • 863c8a7 perf(react-router): reuse link selector results (#8522)
  • ff66a03 perf(react-router): consolidate root match provider (CodSpeed experiment) (#8...
  • f0e751d ci: Version Packages (#8497)
  • 763ac8b test(react-router): regression for #2072 router context invalidation (#8499)
  • f5ffd38 perf(router): skip unused link preload cleanup across adapters (#8436)
  • ddad69a ci: Version Packages (#8486)
  • 73bfc15 perf(react-router): avoid redundant link hydration updates (#8435)
  • Additional commits viewable in compare view

Updates @tauri-apps/api from 2.11.1 to 2.12.1

Release notes

Sourced from @​tauri-apps/api's releases.

@​tauri-apps/api v2.12.1

All found vulnerabilities were already reviewed and decided to be ignored
2 ignored: 2 high

[2.12.1]

Bug Fixes

  • c9a3cb892 (#16166 by @​FabianLars) The macos-private-api feature flag / macOSPrivateAPI tauri.conf.json value is no longer required to use transparency or fullscreen on macOS.
$ pnpm build && cd ./dist && pnpm publish --access public --loglevel debug --no-git-checks
$ rollup -c --configPlugin typescript
�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m997ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.5s�[22m�[39m
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=npm%3Aregistry.npmjs.org 200 336ms
📦 @tauri-apps/api@2.12.1 → https://registry.npmjs.org/
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=sigstore 200 107ms
Signed provenance statement with source and build information
✅ Published package @tauri-apps/api@2.12.1

@​tauri-apps/api v2.12.0

All found vulnerabilities were already reviewed and decided to be ignored
2 ignored: 2 high

[2.12.0]

... (truncated)

Commits

Updates @tauri-apps/plugin-process from 2.3.1 to 2.4.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tauri-apps/plugin-process since your current version.


Updates @tauri-apps/plugin-updater from 2.11.0 to 2.13.1

Release notes

Sourced from @​tauri-apps/plugin-updater's releases.

updater-js v2.13.1

[2.13.1]

  • ecd3273e (#3480 by @​renovate) Updated windows-rs dependencies:

    • deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
    • opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
    • single-instance: updated windows-sys to 0.61
    • updater: updated windows-sys to 0.61

  • 90b9869e (#3573 by @​renovate) Updated dirs to v7

  • 22e286f3 (#3501 by @​renovate) Updated dependency infer to 0.22

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.13.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 6.7kB dist-js/index.cjs
npm notice 7.1kB dist-js/index.d.ts
npm notice 6.6kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.13.1
npm notice filename: tauri-apps-plugin-updater-2.13.1.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 25.1 kB
npm notice shasum: 2ad227ba05293fe34c5c59c0ff8a1cd690c8e9a8
npm notice integrity: sha512-+STDzJ0sdQLIm[...]/AJz0jxysytiw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005269671
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-updater@2.13.1

updater v2.13.1

... (truncated)

Commits
  • e511284 publish new versions (#3647)
  • ce59e96 docs(log): remove unrelated single-instance comment from log readme
  • 29130c2 ci: run clippy on all platforms (#3650)
  • 4353819 chore: add changefile to re-release plugin-http npm package as 2.8.0 (#3656)
  • ec14142 chore(deps): update dependency @​types/node to v24 (#3649)
  • 90b9869 chore(deps): update rust crate dirs to v7 (#3573)
  • 22e286f chore(deps): update rust crate infer to 0.22 (#3501)
  • ecd3273 chore(deps): update windows-rs and webview2 crates (#3480)
  • aa2cc64 fix(android): Migrate Gradle scripts to compilerOptions DSL (#3478)
  • a2364a5 fix: integration test
  • Additional commits viewable in compare view

Updates dexie from 4.4.4 to 4.4.6

Release notes

Sourced from dexie's releases.

Dexie v4.4.6

This is a maintenance release that improves schema synchronization in dexie-cloud-addon, fixes an issue with updating hooks in the minified production bundle, fixes filtered chunked exports in dexie-export-import, and adds OAuth provider types for Facebook, LinkedIn, and Discord.

Related Package Releases

Package Version
dexie 4.4.6
dexie-cloud-addon 4.4.15
dexie-react-hooks 4.4.0+ (no change)
y-dexie 4.4.0+ (no change)
dexie-export-import 4.4.1

Bug Fixes

dexie@4.4.6

  • fix: keep updating-hook modifications intact in minified production bundles — Multiple updating-hook subscribers now reliably receive the record modifications object when using the minified production build. (#2333, fixes #2330). Contributed by @​Tyagiquamar.

dexie-cloud-addon@4.4.15

  • fix: resync tables added to the schema — Tables that are new to a client are now detected by comparing the declared cloud schema with the schema persisted from earlier syncs. They are marked for an initial synchronization so their current contents are full-loaded, while pending sync state is preserved until completion is acknowledged by the server. (#2332, fixes dexie-cloud#205).

  • feat: include additional social provider types — Added Facebook, LinkedIn, and Discord to OAuthProviderInfo. (#2327).

dexie-export-import@4.4.1

  • fix: avoid trailing commas in filtered chunked exports — exportDB() no longer produces invalid JSON when a later chunk contains no rows matching the active filter. (#2328, fixes #1070). Contributed by @​buildwithakhila.

Thanks to @​Tyagiquamar and @​buildwithakhila for their contributions.

Dexie v4.4.5

This is a maintenance release that fixes an issue with indexes named after inherited Object properties and improves authentication recovery in dexie-cloud-addon.

Related Package Releases

Package Version
dexie 4.4.5
dexie-cloud-addon 4.4.14+
dexie-react-hooks 4.4.0+ (no change)
y-dexie 4.4.0+ (no change)
dexie-export-import 4.4.0+ (no change)

Bug Fixes

dexie@4.4.5

  • fix: don't crash when an index is named constructor — Tables with a primary key or index named constructor could cause db.open() to fail with TypeError: indexList.push is not a function. The internal index lookup now uses an object without a prototype, avoiding collisions with inherited Object.prototype properties such as constructor, toString, and valueOf. (#2325, fixes #1920). Contributed by @​tarann26.

... (truncated)

Commits
  • adc6f50 dexie@4.4.6
  • 22798e9 Remove package-lock files. We're using pnpm!
  • 58d1afe dexie-export-import@4.4.1
  • 0cd6f42 fix(updating hook): keep modifications intact in minified bundle (#2333)
  • 0fa2b84 dexie-cloud-addon@4.4.15
  • 1e01299 fix(dexie-cloud): resync tables added to the schema (#2332)
  • 32ad221 fix(dexie-export-import): don't emit a trailing comma when a chunk is fully f...
  • 51c138b fix(dexie-cloud): include new social provider types (#2327)
  • 4df3823 npm audit fix on samples/dexie-cloud-todo-app
  • 22bdff1 dexie@4.4.5
  • Additional commits viewable in compare view

Updates lucide-react from 1.25.0 to 1.52.0

Release notes

Sourced from lucide-react's releases.

Version 1.52.0

What's Changed

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.50.0...1.51.0

Version 1.50.0

What's Changed

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
c5c8863 
…y with 20 updates

Bumps the production-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aparajita/capacitor-secure-storage](https://github.com/aparajita/capacitor-secure-storage) | `8.0.0` | `8.0.1` |
| [@capacitor/core](https://github.com/ionic-team/capacitor) | `8.5.1` | `8.5.2` |
| [@capacitor/filesystem](https://github.com/ionic-team/capacitor-filesystem) | `8.1.3` | `8.1.4` |
| [@capacitor/ios](https://github.com/ionic-team/capacitor) | `8.5.1` | `8.5.2` |
| [@capacitor/keyboard](https://github.com/ionic-team/capacitor-keyboard) | `8.0.5` | `8.0.6` |
| [@capacitor/share](https://github.com/ionic-team/capacitor-plugins) | `8.0.1` | `8.0.3` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.18` | `1.170.41` |
| [@tauri-apps/api](https://github.com/tauri-apps/tauri) | `2.11.1` | `2.12.1` |
| [@tauri-apps/plugin-process](https://github.com/tauri-apps/plugins-workspace) | `2.3.1` | `2.4.0` |
| [@tauri-apps/plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.11.0` | `2.13.1` |
| [dexie](https://github.com/dexie/Dexie.js) | `4.4.4` | `4.4.6` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.52.0` |
| [papaparse](https://github.com/mholt/PapaParse) | `5.5.4` | `5.7.0` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.4` | `1.6.7` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [recharts](https://github.com/recharts/recharts) | `3.10.0` | `3.10.1` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |



Updates `@aparajita/capacitor-secure-storage` from 8.0.0 to 8.0.1
- [Changelog](https://github.com/aparajita/capacitor-secure-storage/blob/main/CHANGELOG.md)
- [Commits](aparajita/capacitor-secure-storage@v8.0.0...v8.0.1)

Updates `@capacitor/core` from 8.5.1 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.1...8.5.2)

Updates `@capacitor/filesystem` from 8.1.3 to 8.1.4
- [Release notes](https://github.com/ionic-team/capacitor-filesystem/releases)
- [Changelog](https://github.com/ionic-team/capacitor-filesystem/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor-filesystem@v8.1.3...v8.1.4)

Updates `@capacitor/ios` from 8.5.1 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.1...8.5.2)

Updates `@capacitor/keyboard` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/ionic-team/capacitor-keyboard/releases)
- [Changelog](https://github.com/ionic-team/capacitor-keyboard/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor-keyboard@v8.0.5...v8.0.6)

Updates `@capacitor/share` from 8.0.1 to 8.0.3
- [Release notes](https://github.com/ionic-team/capacitor-plugins/releases)
- [Changelog](https://github.com/ionic-team/capacitor-plugins/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ionic-team/capacitor-plugins/compare/@capacitor/share@8.0.1...@capacitor/share@8.0.3)

Updates `@tanstack/react-router` from 1.170.18 to 1.170.41
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.41/packages/react-router)

Updates `@tauri-apps/api` from 2.11.1 to 2.12.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.11.1...@tauri-apps/api-v2.12.1)

Updates `@tauri-apps/plugin-process` from 2.3.1 to 2.4.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@os-v2.3.1...os-v2.4.0)

Updates `@tauri-apps/plugin-updater` from 2.11.0 to 2.13.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@updater-v2.11.0...updater-v2.13.1)

Updates `dexie` from 4.4.4 to 4.4.6
- [Release notes](https://github.com/dexie/Dexie.js/releases)
- [Commits](dexie/Dexie.js@v4.4.4...v4.4.6)

Updates `lucide-react` from 1.25.0 to 1.52.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.52.0/packages/lucide-react)

Updates `papaparse` from 5.5.4 to 5.7.0
- [Release notes](https://github.com/mholt/PapaParse/releases)
- [Changelog](https://github.com/mholt/PapaParse/blob/master/CHANGELOG.md)
- [Commits](mholt/PapaParse@5.5.4...5.7.0)

Updates `radix-ui` from 1.6.4 to 1.6.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `recharts` from 3.10.0 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.10.0...v3.10.1)

Updates `sonner` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](emilkowalski/sonner@v2.0.7...v2.0.8)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

---
updated-dependencies:
- dependency-name: "@aparajita/capacitor-secure-storage"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@capacitor/core"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@capacitor/filesystem"
  dependency-version: 8.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@capacitor/ios"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@capacitor/keyboard"
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@capacitor/share"
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tauri-apps/api"
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tauri-apps/plugin-process"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tauri-apps/plugin-updater"
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dexie
  dependency-version: 4.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: papaparse
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: radix-ui
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026
@coderabbitai

coderabbitai Bot commented Oct 8, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 9ecf882b-2019-4224-85af-374cd18d7e3d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants