chore(deps): bump the production group with 5 updates - #140
Closed
dependabot[bot] wants to merge 1 commit into
Closed
chore(deps): bump the production group with 5 updates#140dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the production group with 5 updates: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-identitystore](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-identitystore) | `3.1101.0` | `3.1106.0` | | [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.7.0` | | [@tanstack/react-table](https://github.com/TanStack/table/tree/HEAD/packages/react-table) | `8.21.3` | `9.1.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.30.0` | | [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.0` | Updates `@aws-sdk/client-identitystore` from 3.1101.0 to 3.1106.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-identitystore/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1106.0/clients/client-identitystore) Updates `@base-ui/react` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/mui/base-ui/releases) - [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/base-ui/commits/v1.7.0/packages/react) Updates `@tanstack/react-table` from 8.21.3 to 9.1.0 - [Release notes](https://github.com/TanStack/table/releases) - [Changelog](https://github.com/TanStack/table/blob/main/packages/react-table/CHANGELOG.md) - [Commits](https://github.com/TanStack/table/commits/@tanstack/react-table@9.1.0/packages/react-table) Updates `lucide-react` from 1.28.0 to 1.30.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react) Updates `next` from 16.2.12 to 16.3.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.0) --- updated-dependencies: - dependency-name: "@aws-sdk/client-identitystore" dependency-version: 3.1106.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@base-ui/react" dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@tanstack/react-table" dependency-version: 9.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production - dependency-name: lucide-react dependency-version: 1.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: next dependency-version: 16.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
Owner
|
Superseded by #142. This pull request targets The one bump left out is |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
WhiteMuush
added a commit
that referenced
this pull request
Aug 11, 2026
…142) * chore(deps): port the august bumps to develop and fix the audit gate Dependabot opened #139, #140 and #141 against main, which is 64 commits behind develop. Their lockfiles conflict with develop (next-auth removed, better-auth added), so the bumps are redone here against the develop tree. Ported: - github/codeql-action 4.37.4 to 4.37.6 - @aws-sdk/client-identitystore, @base-ui/react, lucide-react, next 16.3.0 - @types/node, @types/pg, eslint-config-next, tsx Left out: @tanstack/react-table 8 to 9. It is a breaking major that renames the row model factories (getCoreRowModel to createCoreRowModel) and needs a migration of EmployeeTable.tsx. Tracked separately. The Dependency audit job was already failing on develop before these PRs, on two high advisories reaching us through transitives: - js-yaml 4.3.0 via @eslint/eslintrc (GHSA-5p4m-2wfm-xmqj) - nanoid 3.3.16 via postcss (GHSA-2v37-7h3g-55p8) Both are pinned through overrides, so npm audit --audit-level=high is clean. * chore(next): opt out of the AGENTS.md rewrite added in next 16.3 Next 16.3 ships an `agentRules` option, on by default, that makes `next dev` append a Next-authored block to AGENTS.md on every run. Two problems here: the block contains a non-ASCII character, which the pre-push ASCII gate rejects, and the working tree goes dirty on each dev start. AGENTS.md is ours, so the option is turned off. * fix(test): stop the RBAC integration suite from sharing the seeded admin (#144) require-permission.itest.ts reassigned the shared admin account to Viewer, then restored Administrator at the end. That only holds if suites run one at a time. Vitest runs test files in parallel against the same database, so any suite reading the admin's role inside that window sees the read-only Viewer set instead. This is what broke Integration (DB) on the deps branch: roles/route.itest.ts reported the admin missing exactly the ten non-read permissions of the SOC Analyst preset, which is the Viewer set. Forcing the admin to Viewer and running that suite reproduces the CI output character for character. The suite now seeds its own company and asserts on that company's Viewer role. It never touched the admin user for its assertions anyway, the reassignment was dead weight that only created the race.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production group with 5 updates:
3.1101.03.1106.01.6.01.7.08.21.39.1.01.28.01.30.016.2.1216.3.0Updates
@aws-sdk/client-identitystorefrom 3.1101.0 to 3.1106.0Release notes
Sourced from @aws-sdk/client-identitystore's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/client-identitystore's changelog.
Commits
655d311Publish v3.1106.0d6c0ea3Publish v3.1105.0b3929bdPublish v3.1104.0672c90dPublish v3.1103.0c528531Publish v3.1102.0Updates
@base-ui/reactfrom 1.6.0 to 1.7.0Release notes
Sourced from @base-ui/react's releases.
... (truncated)
Changelog
Sourced from @base-ui/react's changelog.
... (truncated)
Commits
254f474[release] v1.7.0 (#5404)9222cda[meter] Format clamped values (#5409)becc19a[combobox][autocomplete][select] Fix listbox separator semantics (#5399)7cc0eef[drawer] Fix click-only outside dismissal after swipe (#5392)1a2ca3c[all components] Fix canceled exit unmount (#5401)166e8ac[popups] Fix quadratic dev-mode trigger registration check (#5400)071e892[all components] Avoid unused popup handle attachments (#5394)cbc87d1[select] Stabilize scroll arrow cleanup test (#5402)3b5715c[all components] Fix popup handle lifecycle regressions (#5387)54cfcc1[typescript] Preserve published internals types (#5386)Updates
@tanstack/react-tablefrom 8.21.3 to 9.1.0Release notes
Sourced from @tanstack/react-table's releases.
Changelog
Sourced from @tanstack/react-table's changelog.
Commits
3af6abcci: Version Packages (#6527)896e998ci: Version Packages (#6525)10accb2fix(react-table): accept built-in fn names in legacy column helper (#6521)7ec3b90ci: Version Packages (#6513)2327f80release v9 (#6512)d0f2ef7release: version packages (#6510)82c32e0docs: regen docs and fix some typos repo wide594aa78docs: use the dynamic README header endpoint (#6505)00bccc4release: version packages (#6504)4085eecrelease: version packages (#6502)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@tanstack/react-tablesince your current version.Updates
lucide-reactfrom 1.28.0 to 1.30.0Release notes
Sourced from lucide-react's releases.
Commits
0f8d48btest(packages): updates unit test snapshots with face-slightly-smiling (#4676)Updates
nextfrom 16.2.12 to 16.3.0Release notes
Sourced from next's releases.
... (truncated)
Commits
d73f562v16.3.02e0d4cbEdits to turbopackFileSystemCache (#96531)86df9c7docs: cover direct visits and client navigations in the instant() e2e example...47a52c0[turbopack / next.js] Add an end-to-end test for new root detection (#96544)8e878d4Remove implicit Partial Prefetching opt-in frominstant(#96539)e37ddd1Fix deploy test TypeScript exclusions (#96545)8a4920cdocs: clarify first-party Skills workflows (#96495)4344b83Flag newly disabled deploy tests (#96505)459617afix: double fragment on navigation (#93132)cbf0cefEnable TypeScript CLI by default (#96497)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions