Skip to content

chore(deps): bump the prod-minor-and-patch group across 1 directory with 6 updates - #477

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/prod-minor-and-patch-c4ddce4394
Open

chore(deps): bump the prod-minor-and-patch group across 1 directory with 6 updates#477
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/prod-minor-and-patch-c4ddce4394

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the prod-minor-and-patch group with 6 updates in the / directory:

Package From To
@clerk/nextjs 7.7.5 7.8.2
@sentry/nextjs 10.70.0 10.71.0
@sentry/node 10.70.0 10.71.0
lucide-react 1.31.0 1.34.0
next 16.3.1 16.3.3
posthog-js 1.417.1 1.422.0

Updates @clerk/nextjs from 7.7.5 to 7.8.2

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.8.2

Patch Changes

  • Updated dependencies [dbaa95a]:
    • @​clerk/react@​6.14.7
    • @​clerk/shared@​4.30.1
    • @​clerk/backend@​3.16.12

@​clerk/nextjs@​7.8.1

Patch Changes

@​clerk/nextjs@​7.8.0

Minor Changes

  • In development, missing Clerk keys no longer activate keyless mode. When NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are not set, the SDK now throws an error directing you to run npx clerk@latest init, which provisions a Clerk application and writes the keys to .env.local. Keyless credentials stored in the development keyless cookie are no longer read. Existing apps with configured or claimed keys are unaffected. (#9493) by @​djgould

Patch Changes

@​clerk/nextjs@​7.7.9

Patch Changes

  • Updated dependencies [10615ea]:
    • @​clerk/backend@​3.16.9
    • @​clerk/react@​6.14.4

@​clerk/nextjs@​7.7.8

Patch Changes

  • Allow Clerk's abuse and fraud protection hosts on all ports in the generated connect-src directive. The contentSecurityPolicy option previously emitted https://*.protect.clerk.com, which matches port 443 only, so requests to those hosts on other ports were blocked by the resulting policy. (#9458) by @​mwickett

  • Updated dependencies [4ebcff3]:

    • @​clerk/backend@​3.16.8

@​clerk/nextjs@​7.7.7

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

7.8.2

Patch Changes

  • Updated dependencies [dbaa95a]:
    • @​clerk/react@​6.14.7
    • @​clerk/shared@​4.30.1
    • @​clerk/backend@​3.16.12

7.8.1

Patch Changes

7.8.0

Minor Changes

  • In development, missing Clerk keys no longer activate keyless mode. When NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are not set, the SDK now throws an error directing you to run npx clerk@latest init, which provisions a Clerk application and writes the keys to .env.local. Keyless credentials stored in the development keyless cookie are no longer read. Existing apps with configured or claimed keys are unaffected. (#9493) by @​djgould

Patch Changes

7.7.9

Patch Changes

  • Updated dependencies [10615ea]:
    • @​clerk/backend@​3.16.9
    • @​clerk/react@​6.14.4

7.7.8

Patch Changes

  • Allow Clerk's abuse and fraud protection hosts on all ports in the generated connect-src directive. The contentSecurityPolicy option previously emitted https://*.protect.clerk.com, which matches port 443 only, so requests to those hosts on other ports were blocked by the resulting policy. (#9458) by @​mwickett

  • Updated dependencies [4ebcff3]:

    • @​clerk/backend@​3.16.8

7.7.7

... (truncated)

Commits

Updates @sentry/nextjs from 10.70.0 to 10.71.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.71.0

Important Changes

  • feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

  • feat(v10/core): Deprecate scope.clear() method (#23231)
  • fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
  • fix(v10/react): Match TanStack Router pageload against the router location (#23494)
  • test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)

Bundle size 📦

Path Size
@​sentry/browser 27.1 KB
@​sentry/browser - with treeshaking flags 25.58 KB
@​sentry/browser (incl. Tracing) 45.51 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.25 KB
@​sentry/browser (incl. Tracing, Profiling) 50.15 KB
@​sentry/browser (incl. Tracing, Replay) 83.83 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.71 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.45 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.79 KB
@​sentry/browser (incl. Feedback) 43.87 KB
@​sentry/browser (incl. sendFeedback) 31.78 KB
@​sentry/browser (incl. FeedbackAsync) 36.79 KB
@​sentry/browser (incl. Metrics) 28.16 KB
@​sentry/browser (incl. Logs) 28.38 KB
@​sentry/browser (incl. Metrics & Logs) 29.06 KB
@​sentry/react 28.86 KB
@​sentry/react (incl. Tracing) 47.72 KB
@​sentry/vue 32.4 KB
@​sentry/vue (incl. Tracing) 47.43 KB
@​sentry/svelte 27.12 KB
CDN Bundle 29.43 KB
CDN Bundle (incl. Tracing) 47.43 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.71.0

Important Changes

  • feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

  • feat(v10/core): Deprecate scope.clear() method (#23231)
  • fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
  • fix(v10/react): Match TanStack Router pageload against the router location (#23494)
  • test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)
Commits
  • 9fcb063 release: 10.71.0
  • fbc14d8 meta(changelog): Update changelog for 10.71.0 (#23517)
  • 671f4b1 fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • 0211227 fix(v10/react): Match TanStack Router pageload against the router location (#...
  • bbea828 feat(v10/core)!: Enable logs by default (#23311)
  • 7ded310 fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • 245d807 fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundar...
  • 1d439a3 fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • 8f03efe test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)
  • c884ae1 fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • Additional commits viewable in compare view

Updates @sentry/node from 10.70.0 to 10.71.0

Release notes

Sourced from @​sentry/node's releases.

10.71.0

Important Changes

  • feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

  • feat(v10/core): Deprecate scope.clear() method (#23231)
  • fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
  • fix(v10/react): Match TanStack Router pageload against the router location (#23494)
  • test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)

Bundle size 📦

Path Size
@​sentry/browser 27.1 KB
@​sentry/browser - with treeshaking flags 25.58 KB
@​sentry/browser (incl. Tracing) 45.51 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.25 KB
@​sentry/browser (incl. Tracing, Profiling) 50.15 KB
@​sentry/browser (incl. Tracing, Replay) 83.83 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.71 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.45 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.79 KB
@​sentry/browser (incl. Feedback) 43.87 KB
@​sentry/browser (incl. sendFeedback) 31.78 KB
@​sentry/browser (incl. FeedbackAsync) 36.79 KB
@​sentry/browser (incl. Metrics) 28.16 KB
@​sentry/browser (incl. Logs) 28.38 KB
@​sentry/browser (incl. Metrics & Logs) 29.06 KB
@​sentry/react 28.86 KB
@​sentry/react (incl. Tracing) 47.72 KB
@​sentry/vue 32.4 KB
@​sentry/vue (incl. Tracing) 47.43 KB
@​sentry/svelte 27.12 KB
CDN Bundle 29.43 KB
CDN Bundle (incl. Tracing) 47.43 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.71.0

Important Changes

  • feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

  • feat(v10/core): Deprecate scope.clear() method (#23231)
  • fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
  • fix(v10/react): Match TanStack Router pageload against the router location (#23494)
  • test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)
Commits
  • 9fcb063 release: 10.71.0
  • fbc14d8 meta(changelog): Update changelog for 10.71.0 (#23517)
  • 671f4b1 fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
  • 0211227 fix(v10/react): Match TanStack Router pageload against the router location (#...
  • bbea828 feat(v10/core)!: Enable logs by default (#23311)
  • 7ded310 fix(v10/core): Bound child span tracking on long-lived spans (#23406)
  • 245d807 fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundar...
  • 1d439a3 fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
  • 8f03efe test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)
  • c884ae1 fix(v10/hono): Use captureException from scope, not from Client (#23280)
  • Additional commits viewable in compare view

Updates lucide-react from 1.31.0 to 1.34.0

Release notes

Sourced from lucide-react's releases.

Version 1.34.0

What's Changed

Full Changelog: lucide-icons/lucide@1.33.0...1.34.0

Version 1.33.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.32.0...1.33.0

Version 1.32.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Commits

Updates next from 16.3.1 to 16.3.3

Release notes

Sourced from next's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

Commits
  • a9a1cb7 v16.3.3
  • 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 3a15b4a [16.3.x] [next/image]: disable avif image optimization
  • 7378b51 Backport/docs fixes 16.3 (#97649)
  • 528c1cd [16.3.x] Stop generating error codes (#97780)
  • d0ac882 v16.3.2
  • 81deb92 [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
  • cd714d9 [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • 5ac2327 [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • 0ccb3e7 [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • Additional commits viewable in compare view

Updates posthog-js from 1.417.1 to 1.422.0

Release notes

Sourced from posthog-js's releases.

posthog-js@1.422.0

1.422.0

Minor Changes

  • #4658 db8687c Thanks @​posthog! - Report $sdk_debug_replay_throttled_mutations_dropped on captured events, counting the attribute changes the session recorder discarded during that session. The recorder throttles elements that change hundreds of times a second, and a discarded class or style change never reaches the player — so a recording can keep showing an element the live page had already hidden. Query this property to see whether your app is affected. (2026-08-27)

posthog-js@1.421.2

1.421.2

Patch Changes

  • #4653 712223a Thanks @​posthog! - Fix request timeouts never firing on pages where a browser extension makes Error.prototype.name non-writable (2026-08-27)

  • #4036 718beee Thanks @​emmayusufu! - Fix logs.captureConsoleLogs set in init() not enabling console autocapture, capture console calls made before the logs script loads, and drop captured console records when the user opts out (2026-08-27)

  • #4036 718beee Thanks @​emmayusufu! - Fix session replay and posthog-js leaving each other's console wrapper in the call path when either one stops (2026-08-27)

  • Updated dependencies [718beee, 712223a]:

    • @​posthog/core@​1.49.0

posthog-js@1.421.1

1.421.1

Patch Changes

  • #4657 9c09bd4 Thanks @​marandaneto! - Use the best available compression for browser feature flag requests, preferring gzip when supported. (2026-08-27)

  • #4520 362d081 Thanks @​veksa! - Drop sourcesContent from the source maps published to npm. The maps themselves still ship, so downstream source-map chaining and the //# sourceMappingURL references are unaffected — only the copy of our TypeScript sources embedded in each map is gone, taking the package from 40.8 MB to 17.4 MB unpacked. CDN artifacts are built separately and keep their inlined sources. (2026-08-27)

  • Updated dependencies [7902e44, e899b1c]:

    • @​posthog/core@​1.48.12

posthog-js@1.421.0

1.421.0

Minor Changes

  • #4655 4f80973 Thanks @​robbie-c! - Add the 2026-08-30 config defaults. These defaults enable sanitized JSON-LD replay events. (2026-08-26)

Patch Changes

  • Updated dependencies [4f80973]:
    • @​posthog/types@​1.407.0

... (truncated)

Commits
  • 881ad63 chore: update versions and lockfile [version bump]
  • db8687c feat(replay): count attribute mutations the throttler drops (#4658)
  • 1959a2e chore: update versions and lockfile [version bump]
  • b73d15e feat(react-native): add event release mode to the build tooling (#4617)
  • 5c1701f chore: update versions and lockfile [version bump]
  • 718beee feat(logs): capture console calls made before the logs script loads (#4036)
  • 712223a fix(core): guard error.name writes so timeout detection survives hardened pag...
  • db9c291 chore: update versions and lockfile [version bump]
  • 7902e44 fix(core): clamp uuidv7 RNG output to a valid uint32 so a nonconformant Math....
  • a47b232 feat(ai): add LangChain v1 agent middleware (#4556)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the prod-minor-and-patch group across 1 directory w…
910bf93 
…ith 6 updates

Bumps the prod-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.7.5` | `7.8.2` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.70.0` | `10.71.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.70.0` | `10.71.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.34.0` |
| [next](https://github.com/vercel/next.js) | `16.3.1` | `16.3.3` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.417.1` | `1.422.0` |



Updates `@clerk/nextjs` from 7.7.5 to 7.8.2
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.8.2/packages/nextjs)

Updates `@sentry/nextjs` from 10.70.0 to 10.71.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.71.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.70.0...10.71.0)

Updates `@sentry/node` from 10.70.0 to 10.71.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.71.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.70.0...10.71.0)

Updates `lucide-react` from 1.31.0 to 1.34.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.34.0/packages/lucide-react)

Updates `next` from 16.3.1 to 16.3.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.1...v16.3.3)

Updates `posthog-js` from 1.417.1 to 1.422.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.417.1...posthog-js@1.422.0)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-and-patch
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-and-patch
- dependency-name: "@sentry/node"
  dependency-version: 10.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-and-patch
- dependency-name: next
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-and-patch
- dependency-name: posthog-js
  dependency-version: 1.422.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm/pnpm ecosystem dependency updates labels Aug 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file npm npm/pnpm ecosystem dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants