chore(deps): bump the root-production-minor-patch group with 2 updates - #3
Closed
dependabot[bot] wants to merge 17 commits into
Closed
chore(deps): bump the root-production-minor-patch group with 2 updates#3dependabot[bot] wants to merge 17 commits into
dependabot[bot] wants to merge 17 commits into
Conversation
Wire the Next.js app shell with shared UI components, marketing homepage, core lib helpers and static assets for a shippable landing experience.
Introduce @shared/app-strings and @shared/app-errors so product copy and service errors stay centralized instead of hardcoded across the app.
Add the database workspace package with auth schema, initial migration, seed script and root db helpers for local and production workflows.
Implement signed cookie sessions, password hashing, auth service layer and login/signup server actions for credential-based authentication.
Add authenticated app and admin pages plus /api/health for production runtime probes and route-guard integration via the root proxy.
Add encrypted secrets workflow with SOPS, documented env contracts in .env.example and encrypted local/production secret templates.
Add docker compose stacks, production Dockerfile, nginx config, server bootstrap script and worker scaffolding for the production runtime.
Add CI/CD pipelines, PR and issue templates, label automation, Dependabot config and CODEOWNERS for predictable repository governance.
Add vitest configuration, test setup and unit tests for auth, shared packages, database client and the health check API route.
Add Claude Code settings, safety hooks, repo rules, audit agents and repeatable skills for commits, PRs, verification and migrations.
Document codebase structure, local development, secret management, production runtime, CI/CD pipelines and quality gate expectations.
Add contributor onboarding, feature overview, setup instructions and project badges so new users can clone and ship from one repository.
Wire pre-commit checks for migration validation, lint-staged formatting, type-checking and unit tests to keep main merge-ready by default.
Ignore nested node_modules directories so pnpm workspace installs stay local and out of version control.
Establish the pnpm workspace, Next.js build config, lint/format tooling, and repository agent rules so contributors have a consistent baseline.
Bumps the root-production-minor-patch group with 2 updates: [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom). Updates `react` from 19.2.4 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.4 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-production-minor-patch - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
dependabot
Bot
added
the
dependencies
github-actions
Bot
added
area:ci
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/root-production-minor-patch-073a1f481f
branch
July 10, 2026 08:15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the root-production-minor-patch group with 2 updates: react and react-dom.
Updates
reactfrom 19.2.4 to 19.2.7Release notes
Sourced from react's releases.
Changelog
Sourced from react's changelog.
Commits
6117d7cVersion 19.2.7 (#36591)eaf3e95Version 19.2.623f4f9f19.2.5Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.
Updates
react-domfrom 19.2.4 to 19.2.7Release notes
Sourced from react-dom's releases.
Changelog
Sourced from react-dom's changelog.
Commits
6117d7cVersion 19.2.7 (#36591)eaf3e95Version 19.2.623f4f9f19.2.5Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions