Skip to content

chore(deps): bump the app-minor-patch group across 1 directory with 25 updates - #152

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/app-minor-patch-c8eb4802a7
Closed

chore(deps): bump the app-minor-patch group across 1 directory with 25 updates#152
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/app-minor-patch-c8eb4802a7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the app-minor-patch group with 25 updates in the /app directory:

Package From To
@prisma/adapter-pg 7.8.0 7.10.0
@prisma/client 7.8.0 7.10.0
adm-zip 0.6.0 0.6.1
csv-parse 7.0.1 7.0.2
firebase 12.16.0 12.19.0
firebase-admin 14.2.0 14.4.0
lucide-react 1.25.0 1.45.0
next 16.2.10 16.3.4
pg 8.22.0 8.23.0
@types/pg 8.20.0 8.23.1
radix-ui 1.6.4 1.6.7
react 19.2.7 19.3.0
@types/react 19.2.17 19.3.0
react-dom 19.2.7 19.3.0
@types/react-dom 19.2.3 19.3.0
recharts 3.9.2 3.10.1
sonner 2.0.7 2.0.8
@firebase/rules-unit-testing 5.0.1 5.0.2
@playwright/test 1.61.1 1.63.0
@types/node 26.1.1 26.5.1
eslint 10.7.0 10.10.0
eslint-config-next 16.2.10 16.3.4
prisma 7.8.0 7.10.0
spdx-license-list 6.11.0 6.12.0
tsx 4.23.1 4.23.13

Updates @prisma/adapter-pg from 7.8.0 to 7.10.0

Release notes

Sourced from @​prisma/adapter-pg's releases.

7.10.0

Prisma ORM 7.10.0

Prisma ORM 7.10.0 introduces a compatibility package for running Prisma 7 alongside newer Prisma versions, secures Prisma Studio's local server, and includes fixes across Prisma Client and the PostgreSQL, MariaDB, Neon, SQLite, and Prisma Postgres Serverless adapters.

Highlights

Run Prisma 7 alongside Prisma 8

This release introduces @prisma/prisma7, a compatibility package that lets you retain a matching Prisma 7 CLI and configuration while installing Prisma 8 in the same project.

Once 7.10.0 is released, a side-by-side installation can use:

npm install --save-dev prisma@8 @prisma/prisma7@7.10.0
npm install @prisma/client@7.10.0

Use prisma for the directly installed Prisma 8 CLI and prisma7 for Prisma 7:

npx prisma --version
npx prisma7 --version
npx prisma7 generate
npx prisma7 migrate dev
npx prisma7 db push

Prisma 7 now prefers version-specific configuration files, allowing its configuration to coexist with Prisma 8's prisma.config.* files:

// prisma7.config.ts
import { defineConfig } from '@prisma/prisma7/config'
export default defineConfig({
schema: 'prisma/schema.prisma',
migrations: {
path: 'prisma/migrations',
},
})

Without an explicit --config option, Prisma 7 searches for:

  1. Root-level prisma7.config.* files.
  2. .config/prisma7.* files.
  3. Existing prisma.config.* files as a backwards-compatible fallback.

The supported extensions are .js, .ts, .mjs, .cjs, .mts, and .cts. An explicit config path always takes precedence:

... (truncated)

Commits
  • 3fa65ac fix(p2002): correct modelName in nested create unique constraint errors #2959...
  • a180209 fix(adapter-pg): map PostgreSQL deadlocks to P2034 (#29717)
  • 800f1d1 fix(adapter-pg): preserve constraint name for unique violations (23505) (#29587)
  • 7ef2104 fix(postgres): handle SQLSTATE 23001 for RESTRICT violations (#29554)
  • 35003fd chore(adapter-pg): remove duplicate values parameter (#29650)
  • d6d9fc9 chore: remove parameterization from sqlcommenter-query-insights (#29518)
  • See full diff in compare view

Updates @prisma/client from 7.8.0 to 7.10.0

Release notes

Sourced from @​prisma/client's releases.

7.10.0

Prisma ORM 7.10.0

Prisma ORM 7.10.0 introduces a compatibility package for running Prisma 7 alongside newer Prisma versions, secures Prisma Studio's local server, and includes fixes across Prisma Client and the PostgreSQL, MariaDB, Neon, SQLite, and Prisma Postgres Serverless adapters.

Highlights

Run Prisma 7 alongside Prisma 8

This release introduces @prisma/prisma7, a compatibility package that lets you retain a matching Prisma 7 CLI and configuration while installing Prisma 8 in the same project.

Once 7.10.0 is released, a side-by-side installation can use:

npm install --save-dev prisma@8 @prisma/prisma7@7.10.0
npm install @prisma/client@7.10.0

Use prisma for the directly installed Prisma 8 CLI and prisma7 for Prisma 7:

npx prisma --version
npx prisma7 --version
npx prisma7 generate
npx prisma7 migrate dev
npx prisma7 db push

Prisma 7 now prefers version-specific configuration files, allowing its configuration to coexist with Prisma 8's prisma.config.* files:

// prisma7.config.ts
import { defineConfig } from '@prisma/prisma7/config'
export default defineConfig({
schema: 'prisma/schema.prisma',
migrations: {
path: 'prisma/migrations',
},
})

Without an explicit --config option, Prisma 7 searches for:

  1. Root-level prisma7.config.* files.
  2. .config/prisma7.* files.
  3. Existing prisma.config.* files as a backwards-compatible fallback.

The supported extensions are .js, .ts, .mjs, .cjs, .mts, and .cts. An explicit config path always takes precedence:

... (truncated)

Commits
  • 05c1b88 Teach Prisma 7 to prefer versioned config files (#30020)
  • cf2bc1f Rename prisma7 package to @​prisma/prisma7 (#30002)
  • ce5a34c Complete downstream actionable Prisma 7 guidance propagation (#29994)
  • 3f13ec6 Complete CLI-owned prisma7 distribution identity (#29969)
  • 179ba0c feat(prisma7): add side-by-side CLI wrapper (#29949)
  • 3fa65ac fix(p2002): correct modelName in nested create unique constraint errors #2959...
  • 6b6d9e9 chore(deps): update engines to 7.10.0-4.0edf323efd1d98336f3f0a68684b56f689b90...
  • b64e33c chore(deps): update engines to 7.10.0-3.9d90ce2c89d5c95a1148aef15e5561ab6c490...
  • 2046f9b feat(client): expose ModelName to compute function in Result extensions (#29782)
  • f2b3abd chore(deps): update engines to 7.10.0-1.6d040c802892de6d56c7e0061b7a10b3e6a0c...
  • Additional commits viewable in compare view

Updates adm-zip from 0.6.0 to 0.6.1

Release notes

Sourced from adm-zip's releases.

v0.6.1

Full Changelog: cthackers/adm-zip@v0.6.0...v0.6.1

  • Updated dev dependencies
  • Fixed uncaught crash in async decompression on malformed DEFLATE data
  • Fixed addLocalFolder following symlinks out of the archived folder
  • Stripped setuid/setgid/sticky bits from extracted file permissions
  • Enforced the decompression size cap on the async path and for size 0
  • Rejected archives with duplicate entry names
  • Blocked extraction from writing through symlinks inside the target
  • Routed malformed-header parse errors through the async callback
  • Rejected zip entries whose declared data extent runs past the buffer
  • Fixed addLocalFolderPromise hanging on empty folders and swallowing errors
  • Fixed addLocalFolderAsync2 mangling local paths on Windows
Commits
  • cb2cf9b Fixed addLocalFolderAsync2 mangling local paths on Windows
  • 54902b6 Fixed addLocalFolderPromise hanging on empty folders and swallowing errors
  • 73131bd Fixed CI
  • 758898d Rejected zip entries whose declared data extent runs past the buffer
  • 74b6e9f Routed malformed-header parse errors through the async callback
  • eaa35fa Blocked extraction from writing through symlinks inside the target
  • 1e015e3 Increment version
  • 05101d4 Rejected archives with duplicate entry names
  • 4916006 Enforced the decompression size cap on the async path and for size 0
  • 6a63c33 Stripped setuid/setgid/sticky bits from extracted file permissions
  • Additional commits viewable in compare view

Updates csv-parse from 7.0.1 to 7.0.2

Changelog

Sourced from csv-parse's changelog.

7.0.2 (2026-08-02)

Bug Fixes

  • csv-parse: prototype replacement reachable via columns (#497)

Performance Improvements

  • csv-parse: avoid unnecessary allocation in ResizeableBuffer.toString (#495)
Commits
  • 288c9c6 chore(release): publish
  • 2ad6c07 refactor(csv-parse): rename group_columns_by_name tests
  • eb4d148 fix(csv-parse): prototype replacement reachable via columns (#497)
  • 1d4ed3b perf(csv-parse): avoid unnecessary allocation in ResizeableBuffer.toString (#...
  • See full diff in compare view

Updates firebase from 12.16.0 to 12.19.0

Release notes

Sourced from firebase's releases.

firebase@12.19.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.16.0

Minor Changes

  • 6b17ef5 #10319 - Fixed the issue where the SDK hardcodes invalid 'function' role, causing 400 errors during function calling on gemini-3.6-flash

Patch Changes

  • 6f86596 #10320 - Fixed a client-side validation guardrail that incorrectly blocked text/x.enum when responseSchema or responseJsonSchema was provided. The SDK now correctly accepts both application/json and text/x.enum for structured outputs.

firebase@12.19.0

Minor Changes

  • 6b17ef5 #10319 - Fixed the issue where the SDK hardcodes invalid 'function' role, causing 400 errors during function calling on gemini-3.6-flash

Patch Changes

@​firebase/analytics@​0.10.25

Patch Changes

  • 50213a1 #10233 - Update api-extractor and documentation pipeline. Includes some fixes to documentation comments and links.

@​firebase/analytics-compat@​0.2.31

Patch Changes

  • Updated dependencies [50213a1]:
  • @​firebase/analytics@​0.10.25

@​firebase/app@​0.16.2

Patch Changes

  • Update SDK_VERSION.

... (truncated)

Commits

Updates firebase-admin from 14.2.0 to 14.4.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v14.4.0

New Features

  • feat(ml): deprecate Machine Learning APIs (#3245)

Miscellaneous

  • [chore] Release 14.4.0 (#3252)
  • build(deps-dev): bump @​types/lodash from 4.17.24 to 4.17.25 (#3256)
  • upgrade @​google-cloud/storage and @​google-cloud/firestore to the most recent version (#3253)
  • build(deps): bump fast-uri from 3.1.5 to 3.1.7 (#3249)
  • build(deps-dev): bump browserslist from 4.28.4 to 4.28.9 (#3250)
  • build(deps-dev): bump nock from 14.0.16 to 14.0.17 (#3248)
  • build(deps): bump @​fastify/busboy from 3.2.0 to 3.2.2 (#3246)
  • chore(docs): add custom @excludeFromDocs tag to filter generated docs (#3206)
  • build(deps): bump @​firebase/database-compat from 2.1.4 to 2.1.7 (#3242)
  • build(deps-dev): bump @​firebase/app-compat from 0.5.15 to 0.5.17 (#3243)
  • build(deps-dev): bump @​firebase/auth-types from 0.13.1 to 0.13.2 (#3244)
  • chore(ml): Skip flaky ML tests blocking nightly builds (#3241)
  • build(deps): bump brace-expansion (#3240)
  • build(deps-dev): bump @​firebase/auth-compat from 0.6.8 to 0.6.9 (#3238)

Firebase Admin Node.js SDK v14.3.0

New Features

  • feat(dataconnect): update "X-Client-Version" header value to match the Node/Admin/{version} convention (#3230)
  • feat(dataconnect): add "X-Firebase-Sqlconnect-Affinity" header for GSLB soft stickiness (#3227)
  • feat(dataconnect): add "X-Client-Version" header for cloud monitoring (#3222)

Miscellaneous

  • [chore] Release 14.3.0 (#3237)
  • chore(deps): upgrade @google-cloud and typescript-eslint dependencies (#3236)
  • build(deps-dev): bump @​types/node from 26.1.1 to 26.2.0 (#3231)
  • build(deps-dev): bump @​microsoft/api-extractor from 7.58.9 to 7.58.12 (#3224)
  • build(deps): bump fast-uri from 3.1.4 to 3.1.5 (#3228)
  • build(deps-dev): bump @​firebase/app-compat from 0.5.13 to 0.5.15 (#3216)
  • build(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 (#3220)
  • build(deps): bump fast-uri from 3.1.2 to 3.1.4 (#3219)
  • chore: fix race condition in auth tenant management tests (#3218)
Commits
  • 7cf116b [chore] Release 14.4.0 (#3252)
  • 72994c4 build(deps-dev): bump @​types/lodash from 4.17.24 to 4.17.25 (#3256)
  • c151174 upgrade @​google-cloud/storage and @​google-cloud/firestore to the most recent...
  • cda2de9 build(deps): bump fast-uri from 3.1.5 to 3.1.7 (#3249)
  • cb89261 build(deps-dev): bump browserslist from 4.28.4 to 4.28.9 (#3250)
  • fa8f28a build(deps-dev): bump nock from 14.0.16 to 14.0.17 (#3248)
  • 9fda27d build(deps): bump @​fastify/busboy from 3.2.0 to 3.2.2 (#3246)
  • 802daa0 feat(ml): deprecate Machine Learning APIs (#3245)
  • 441a4e0 chore(docs): add custom @excludeFromDocs tag to filter generated docs (#3206)
  • 5545be9 build(deps): bump @​firebase/database-compat from 2.1.4 to 2.1.7 (#3242)
  • Additional commits viewable in compare view

Updates lucide-react from 1.25.0 to 1.45.0

Release notes

Sourced from lucide-react's releases.

Version 1.45.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Version 1.44.0

What's Changed

New Contributors

... (truncated)

Commits
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates next from 16.2.10 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

... (truncated)

Commits
  • 299180d v16.3.4
  • 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
  • 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
  • d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
  • 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
  • a9a1cb7 v16.3.3
  • 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 3a15b4a [16.3.x] [next/image]: disable avif image optimization
  • 7378b51 Backport/docs fixes 16.3 (#97649)
  • Additional commits viewable in compare view

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Commits

Updates @types/pg from 8.20.0 to 8.23.1

Commits

Updates radix-ui from 1.6.4 to 1.6.7

Changelog

Sourced from radix-ui's changelog.

1.6.6, 1.6.7

  • Reverted breaking changes that caused compatibility issues with React Server Components.

1.6.5

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
Commits

Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to ...

      Description has been truncated

@dependabot
chore(deps): bump the app-minor-patch group across 1 directory with 2…
0029ed5 
…5 updates

Bumps the app-minor-patch group with 25 updates in the /app directory:

| Package | From | To |
| --- | --- | --- |
| [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.8.0` | `7.10.0` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.8.0` | `7.10.0` |
| [adm-zip](https://github.com/cthackers/adm-zip) | `0.6.0` | `0.6.1` |
| [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `7.0.1` | `7.0.2` |
| [firebase](https://github.com/firebase/firebase-js-sdk) | `12.16.0` | `12.19.0` |
| [firebase-admin](https://github.com/firebase/firebase-admin-node) | `14.2.0` | `14.4.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.45.0` |
| [next](https://github.com/vercel/next.js) | `16.2.10` | `16.3.4` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |
| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.20.0` | `8.23.1` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.4` | `1.6.7` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |
| [recharts](https://github.com/recharts/recharts) | `3.9.2` | `3.10.1` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` |
| [@firebase/rules-unit-testing](https://github.com/firebase/firebase-js-sdk/tree/HEAD/packages/rules-unit-testing) | `5.0.1` | `5.0.2` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.63.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.5.1` |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.10.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.10` | `16.3.4` |
| [prisma](https://github.com/prisma/prisma-cli/tree/HEAD/packages/prisma) | `7.8.0` | `7.10.0` |
| [spdx-license-list](https://github.com/sindresorhus/spdx-license-list) | `6.11.0` | `6.12.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.13` |



Updates `@prisma/adapter-pg` from 7.8.0 to 7.10.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.10.0/packages/adapter-pg)

Updates `@prisma/client` from 7.8.0 to 7.10.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.10.0/packages/client)

Updates `adm-zip` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.6.0...v0.6.1)

Updates `csv-parse` from 7.0.1 to 7.0.2
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.2/packages/csv-parse)

Updates `firebase` from 12.16.0 to 12.19.0
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@12.16.0...firebase@12.19.0)

Updates `firebase-admin` from 14.2.0 to 14.4.0
- [Release notes](https://github.com/firebase/firebase-admin-node/releases)
- [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-admin-node@v14.2.0...v14.4.0)

Updates `lucide-react` from 1.25.0 to 1.45.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.45.0/packages/lucide-react)

Updates `next` from 16.2.10 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.10...v16.3.4)

Updates `pg` from 8.22.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `@types/pg` from 8.20.0 to 8.23.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg)

Updates `radix-ui` from 1.6.4 to 1.6.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui)

Updates `react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.17 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `recharts` from 3.9.2 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.9.2...v3.10.1)

Updates `sonner` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](emilkowalski/sonner@v2.0.7...v2.0.8)

Updates `@firebase/rules-unit-testing` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/packages/rules-unit-testing/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/commits/@firebase/rules-unit-testing@5.0.2/packages/rules-unit-testing)

Updates `@playwright/test` from 1.61.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.63.0)

Updates `@types/node` from 26.1.1 to 26.5.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/pg` from 8.20.0 to 8.23.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg)

Updates `@types/react` from 19.2.17 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `eslint` from 10.7.0 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.10.0)

Updates `eslint-config-next` from 16.2.10 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.4/packages/eslint-config-next)

Updates `prisma` from 7.8.0 to 7.10.0
- [Release notes](https://github.com/prisma/prisma-cli/releases)
- [Commits](https://github.com/prisma/prisma-cli/commits/HEAD/packages/prisma)

Updates `spdx-license-list` from 6.11.0 to 6.12.0
- [Release notes](https://github.com/sindresorhus/spdx-license-list/releases)
- [Commits](sindresorhus/spdx-license-list@v6.11.0...v6.12.0)

Updates `tsx` from 4.23.1 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.13)

---
updated-dependencies:
- dependency-name: "@prisma/adapter-pg"
  dependency-version: 7.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: "@prisma/client"
  dependency-version: 7.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: adm-zip
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-minor-patch
- dependency-name: csv-parse
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-minor-patch
- dependency-name: firebase
  dependency-version: 12.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: firebase-admin
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: next
  dependency-version: 16.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: "@types/pg"
  dependency-version: 8.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: radix-ui
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-minor-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-minor-patch
- dependency-name: "@firebase/rules-unit-testing"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-minor-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: "@types/node"
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: "@types/pg"
  dependency-version: 8.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: eslint-config-next
  dependency-version: 16.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: prisma
  dependency-version: 7.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: spdx-license-list
  dependency-version: 6.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
roger-guifav
roger-guifav reviewed Sep 18, 2026
View reviewed changes

@roger-guifav roger-guifav left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TL;DR

Este PR atualiza 25 dependências do app, todas em versões minor ou patch, sem nenhuma major. O código compila, os 680 testes passam e o lint está limpo no head revisado. Falta regerar dois artefatos versionados — o inventário de licenças de terceiros e o cliente gerado do prisma — sem isso o gate de licenças do CI fica vermelho e o artefato commitado fica inconsistente com o lockfile.

Verdict: Ajustes necessários

(revisado no head SHA 0029ed5)

Parecer

Intenção: manter o app em dia com correções das cadeias de runtime, build e teste, num grupo único de bumps minor/patch. Fatos fora do diff que pesam: (1) o repo tem um gate de inventário de licenças no workflow de CI que compara os lockfiles com o markdown de licenças em docs/ e falha quando divergem; (2) o cliente gerado do prisma é versionado no repo, não é artefato só de build; (3) as três peças do prisma (cliente, adaptador e CLI) sobem juntas para a mesma versão, sem skew de par; (4) os jobs de CI nem iniciaram neste head por bloqueio de cobrança da conta, então o sinal vermelho atual é de infraestrutura, não de código — o gate de licenças, porém, foi reproduzido localmente e falharia assim que o CI voltar. Delta da rodada: primeira revisão deste head. Verdade de produção: o build de imagem roda a geração do cliente, então o runtime de produção fica coberto; o risco é dev local com cliente e runtime em versões diferentes. Pergunta de merge: eu mergearia depois de regerar os dois artefatos e ver o CI verde — hoje não.

Críticos (P0)

nenhum.

Bloqueadores de correção (P1)

  1. Inventário de licenças desatualizado. O gate do CI (script gerador em scripts/, âncora de símbolo fail-on-unknown) acusa que o markdown de licenças em docs/ está stale neste head, porque os lockfiles mudaram e o documento não foi regerado. Reproduzido localmente: no head o check sai com erro; no merge-base ele passa. Aplicar antes do merge: rodar o gerador a partir de app/ e commitar o markdown atualizado.

  2. Cliente gerado do prisma ficou para trás. O cliente é commitado sob app/src/generated (âncora de símbolo: clientVersion em class.ts) e continua marcado como 7.8.0, enquanto o pacote sobe para 7.10.0. Aplicar antes do merge: rodar a geração do cliente (script db:generate) e commitar o diretório gerado neste PR.

Endereçar no PR (P2)

nenhum.

Endereçar no PR (P3 / nits)

nenhum.

Acoes que somente o humano pode fazer (ainda...)

  • Destravar a conta para o CI voltar a rodar: neste head os quatro jobs falharam sem iniciar, por bloqueio de cobrança, e só o dono da conta resolve. Depois do fix dos artefatos, rerodar o workflow.

Verificado

  • diff contra origin/main fresco: 2 arquivos (manifest e lockfile do app), conferido com a API do PR; nenhum código de aplicação tocado.
  • classificação dos 25 bumps: nenhum major; prisma cliente/adaptador/CLI sobem juntos (sem skew de par); recharts, firebase, react, next e demais em minor/patch.
  • npm ci, geração do cliente prisma, tsc sem erros, eslint limpo, vitest: 680 testes passando, 8 pulados, nenhum falho (head revisado).
  • gate de licenças: falha no head, passa no merge-base; após rodar o gerador, o check passa (prova de fix).
  • CI neste head: quatro jobs marcados como falha por bloqueio de cobrança da conta, sem executar etapa alguma.
  • scan de segredos no diff: nenhum padrão comum de chave de git ou cloud encontrado.

Roger (Hermes KVM) - review v2 - 0029ed5

@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/app/app-minor-patch-c8eb4802a7 branch September 21, 2026 11:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@roger-guifav roger-guifav roger-guifav left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@roger-guifav