Skip to content

chore(deps): Bump the production-minor-patch group across 1 directory with 33 updates - #139

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-ef5e13a594
Open

chore(deps): Bump the production-minor-patch group across 1 directory with 33 updates#139
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-ef5e13a594

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 33 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.1149.0 3.1156.0
@aws-sdk/s3-request-presigner 3.1149.0 3.1156.0
@better-auth/core 1.7.7 1.7.12
@napi-rs/canvas 1.0.11 1.0.13
@radix-ui/react-accordion 1.2.21 1.3.1
@radix-ui/react-alert-dialog 1.1.24 1.2.1
@radix-ui/react-avatar 1.2.7 1.3.1
@radix-ui/react-dialog 1.2.0 1.3.1
@radix-ui/react-dropdown-menu 2.1.25 2.2.1
@radix-ui/react-label 2.1.16 2.1.17
@radix-ui/react-popover 1.2.0 1.3.1
@radix-ui/react-select 2.3.8 2.4.1
@radix-ui/react-separator 1.1.16 1.2.0
@radix-ui/react-slider 1.5.0 1.6.1
@radix-ui/react-slot 1.4.0 1.5.0
@radix-ui/react-switch 1.3.8 1.4.1
@radix-ui/react-tabs 1.1.22 1.2.1
@radix-ui/react-tooltip 1.3.0 1.4.1
@react-email/render 2.1.0 2.1.1
@sentry/nextjs 11.6.0 11.9.0
@vercel/blob 2.8.1 2.8.2
better-auth 1.7.7 1.7.12
dompurify 3.4.16 3.4.17
gpt-tokenizer 4.0.0 4.1.0
lucide-react 1.55.0 1.61.0
openai 7.32.0 7.43.0
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
react-email 6.11.1 6.11.3
react-hook-form 7.89.0 7.91.0
react-window 2.3.4 2.5.0
resend 6.32.1 6.34.1
zod 4.6.5 4.6.7

Updates @aws-sdk/client-s3 from 3.1149.0 to 3.1156.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1156.0

3.1156.0(2026-10-22)

Documentation Changes
  • client-lambda: AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details. (cdd6c609)
New Features
  • clients: update client endpoints as of 2026-10-22 (e5cd1562)
  • client-opensearchserverless: Adds APIs to create, get, list, and cancel ingestion jobs, and to create, get, list, and delete ingestion streams, for ingesting data from Amazon S3 into OpenSearch Serverless collections. (7712bce0)
  • client-continuum: Releasing Continuum for Code Vulnerabilities APIs for SDKs (0cbbd64c)
  • client-connect: Adds support for customer queryable replication errors. (4507ef01)
  • client-ec2: AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them. (68bea2ce)
  • client-bedrock-agentcore: Adds the dimension name to evaluation results and batch evaluation summaries. For multi-dimensional LLM-as-a-Judge evaluators, each result and summary now identifies which dimension it corresponds to. (185f264b)
  • client-networkmanager: AWS Cloud WAN now provides managed one-to-one NAT directly on it's core network attachments, through integration with Regional Private NAT Gateway. Use UpdateAttachmentNatConfiguration to enable NAT and configure NAT rules, and ListAttachmentNatConfigurations to view them. (944335d4)
  • client-bedrock-agentcore-control: Adds model-based routing and fallback to AgentCore Gateway rules. Rules can match the requested model, route to a specific model, and fall back across inference targets with an optional circuit breaker. Adds multi-dimensional rating scales for AgentCore Evaluations LLM-as-a-Judge evaluators. (9c2b09c2)
  • client-elementalinference: Elemental Inference now supports feed scheduling, letting you apply feed configuration changes at a time you choose instead of building your own automation. (b4108829)
  • client-glue: Add support for large worker types in AWS Glue (89ac4073)
  • client-kafkaconnect: Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation. (f5a4343a)
  • client-ivs-realtime: Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming. (7c85a26a)

For list of updated packages, view updated-packages.md in assets-3.1156.0.zip

v3.1155.0

3.1155.0(2026-10-21)

Chores
  • temporarily disconnect from eclipse for Java formatting (#8375) (6d14aac7)
  • codegen: sync for JSON string serializer buffer fix and retryMode docs link (#8373) (5f53137d)
  • finspace: Remove finspace and finspace-data clients following the service shutdown (#8369) (48e34c48)
  • tnb: Remove tnb clients following shutdown (#8370) (e37bf8c2)
New Features
  • client-quicksight: Adds support for SharePoint and OneDrive two-legged OAuth certificate credentials and Google Workspace service account credentials when creating data sources (d0d47ac9)
  • client-sfn: Release minor updates to API model (6bb8593f)
  • client-network-firewall: Adds support for Network Firewall Resolved IP validation. (6a634360)
  • client-datazone: Added custom designations support with new CRUD APIs. The designation field in project membership and policy grant APIs supports a new enum for custom designations. These APIs also support a new field for custom designation id. (10021565)
  • client-ec2: Adds new response fields to DescribeInstanceStatus and Network Insights analysis results. (8e379695)
  • client-lightsail: This release adds support for metrics related to system-disk performance. (d21dd9d9)
  • client-healthlake: Update the UpdateProfileWithAgent API to return a streaming response to provide more frequent updates on what the agent is doing. (c2730b30)
  • client-polly: Added support for the new voices - Kenneth (en-US), Nate (en-US), Tina (de-DE), Carlos (es-US), Carolina (pt-BR), Leo (pt-BR), Curtis (en-AU), Kiara (en-IN), Arjun (en-IN) and Hyunduk (ko-KR). They are available as a Generative voices only. (4494f473)
  • client-connect: Added support for AWS-managed security profiles. (04f0c0b5)
  • client-auto-scaling: EC2 Auto Scaling now supports account settings, letting you manage account-level configuration for Auto Scaling. (d0cdb396)
  • client-lex-models-v2: Adds support for Assisted NLU - Dialog Manager mode allowing usage of LLMs as the default NLU system and dialog management (671f2125)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1156.0 (2026-10-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1155.0 (2026-10-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1154.0 (2026-10-20)

Note: Version bump only for package @​aws-sdk/client-s3

3.1153.0 (2026-10-19)

Note: Version bump only for package @​aws-sdk/client-s3

3.1152.0 (2026-10-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1151.0 (2026-10-13)

Note: Version bump only for package @​aws-sdk/client-s3

3.1150.0 (2026-10-12)

... (truncated)

Commits

Updates @aws-sdk/s3-request-presigner from 3.1149.0 to 3.1156.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1156.0

3.1156.0(2026-10-22)

Documentation Changes
  • client-lambda: AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details. (cdd6c609)
New Features
  • clients: update client endpoints as of 2026-10-22 (e5cd1562)
  • client-opensearchserverless: Adds APIs to create, get, list, and cancel ingestion jobs, and to create, get, list, and delete ingestion streams, for ingesting data from Amazon S3 into OpenSearch Serverless collections. (7712bce0)
  • client-continuum: Releasing Continuum for Code Vulnerabilities APIs for SDKs (0cbbd64c)
  • client-connect: Adds support for customer queryable replication errors. (4507ef01)
  • client-ec2: AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them. (68bea2ce)
  • client-bedrock-agentcore: Adds the dimension name to evaluation results and batch evaluation summaries. For multi-dimensional LLM-as-a-Judge evaluators, each result and summary now identifies which dimension it corresponds to. (185f264b)
  • client-networkmanager: AWS Cloud WAN now provides managed one-to-one NAT directly on it's core network attachments, through integration with Regional Private NAT Gateway. Use UpdateAttachmentNatConfiguration to enable NAT and configure NAT rules, and ListAttachmentNatConfigurations to view them. (944335d4)
  • client-bedrock-agentcore-control: Adds model-based routing and fallback to AgentCore Gateway rules. Rules can match the requested model, route to a specific model, and fall back across inference targets with an optional circuit breaker. Adds multi-dimensional rating scales for AgentCore Evaluations LLM-as-a-Judge evaluators. (9c2b09c2)
  • client-elementalinference: Elemental Inference now supports feed scheduling, letting you apply feed configuration changes at a time you choose instead of building your own automation. (b4108829)
  • client-glue: Add support for large worker types in AWS Glue (89ac4073)
  • client-kafkaconnect: Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation. (f5a4343a)
  • client-ivs-realtime: Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming. (7c85a26a)

For list of updated packages, view updated-packages.md in assets-3.1156.0.zip

v3.1155.0

3.1155.0(2026-10-21)

Chores
  • temporarily disconnect from eclipse for Java formatting (#8375) (6d14aac7)
  • codegen: sync for JSON string serializer buffer fix and retryMode docs link (#8373) (5f53137d)
  • finspace: Remove finspace and finspace-data clients following the service shutdown (#8369) (48e34c48)
  • tnb: Remove tnb clients following shutdown (#8370) (e37bf8c2)
New Features
  • client-quicksight: Adds support for SharePoint and OneDrive two-legged OAuth certificate credentials and Google Workspace service account credentials when creating data sources (d0d47ac9)
  • client-sfn: Release minor updates to API model (6bb8593f)
  • client-network-firewall: Adds support for Network Firewall Resolved IP validation. (6a634360)
  • client-datazone: Added custom designations support with new CRUD APIs. The designation field in project membership and policy grant APIs supports a new enum for custom designations. These APIs also support a new field for custom designation id. (10021565)
  • client-ec2: Adds new response fields to DescribeInstanceStatus and Network Insights analysis results. (8e379695)
  • client-lightsail: This release adds support for metrics related to system-disk performance. (d21dd9d9)
  • client-healthlake: Update the UpdateProfileWithAgent API to return a streaming response to provide more frequent updates on what the agent is doing. (c2730b30)
  • client-polly: Added support for the new voices - Kenneth (en-US), Nate (en-US), Tina (de-DE), Carlos (es-US), Carolina (pt-BR), Leo (pt-BR), Curtis (en-AU), Kiara (en-IN), Arjun (en-IN) and Hyunduk (ko-KR). They are available as a Generative voices only. (4494f473)
  • client-connect: Added support for AWS-managed security profiles. (04f0c0b5)
  • client-auto-scaling: EC2 Auto Scaling now supports account settings, letting you manage account-level configuration for Auto Scaling. (d0cdb396)
  • client-lex-models-v2: Adds support for Assisted NLU - Dialog Manager mode allowing usage of LLMs as the default NLU system and dialog management (671f2125)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1156.0 (2026-10-22)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1155.0 (2026-10-21)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1154.0 (2026-10-20)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1153.0 (2026-10-19)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1152.0 (2026-10-14)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1151.0 (2026-10-13)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1150.0 (2026-10-12)

... (truncated)

Commits

Updates @better-auth/core from 1.7.7 to 1.7.12

Release notes

Sourced from @​better-auth/core's releases.

v1.7.12

[!IMPORTANT] Action required

  • If you use ID token sign-in with a provider that has no clientId, set clientId to every client ID your apps sign in with. (#11931)

better-auth

Bug Fixes

  • Fixed the JWT plugin to verify JWTs and session cookie-cache JWTs with the stored key's algorithm instead of the token header's, and to warn when signing or verifying a JWT without an issuer or audience (#11925)
  • Fixed OAuth callbacks completed through the OAuth proxy to run the same checks as the standard OAuth callback, including issuer and ID token nonce validation (#11930)
  • Fixed auth.api.getSession() to keep the original database error as error.cause when the session lookup fails (#11924)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed mapProfileToUser failing to typecheck under exactOptionalPropertyTypes when it returns undefined for name, email, or image (#11918)
  • Fixed ID token sign-in to reject tokens when the provider has no client ID, since their audience cannot be checked (#11931)
  • Fixed a custom Facebook getUserInfo to no longer receive client-submitted access tokens issued to another Facebook app, and ID tokens missing exp or iat are now rejected (#11919)
  • Restored the Twitch and Paybin ID token handling from before 1.7.11, which made account info fail once the ID token stored at sign-in expired (#11920)
  • Added a cause option as a third argument to APIError.from() to keep the underlying error for server-side callers without exposing it in the response (#11924)

For detailed changes, see CHANGELOG

@better-auth/mcp

Bug Fixes

  • Fixed requireMcpAuth to accept only OAuth access tokens and reject session JWTs from the JWT plugin, even when they share the issuer and audience (#11934)

For detailed changes, see CHANGELOG

@better-auth/sso

Bug Fixes

  • Fixed OIDC SSO sign-in to reject ID tokens missing exp or iat and providers with an empty client ID, matching social sign-in (#11935)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​alpcanaydin, @​bytaesu

... (truncated)

Changelog

Sourced from @​better-auth/core's changelog.

1.7.12

Patch Changes

  • #11924 681aa5c Thanks @​bytaesu! - APIError.from() accepts { cause } as a third argument to keep the underlying error for server-side callers without exposing it in the response.

  • #11931 4bc78ba Thanks @​bytaesu! - ID token sign-in now rejects tokens when the provider has no client ID, because their audience cannot be checked and a token issued to another app would otherwise be accepted. Set clientId on the provider to every client ID your apps sign in with.

  • #11919 876608d Thanks @​bytaesu! - A custom Facebook getUserInfo no longer receives client-submitted access tokens issued to another Facebook app, and ID tokens missing exp or iat are now rejected.

  • #11918 083a743 Thanks @​alpcanaydin! - Fix mapProfileToUser failing to typecheck under exactOptionalPropertyTypes when it returns undefined for name, email or image, for example to drop the provider's profile picture.

  • #11920 492134a Thanks @​bytaesu! - Restore the Twitch and Paybin ID token handling from before 1.7.11, which made account info fail once the ID token stored at sign-in expired.

1.7.11

Patch Changes

  • #11623 ce96569 Thanks @​cpojer! - Reduce installation size by removing the semantic conventions production dependency while preserving all instrumentation attribute keys.

  • #11907 2f6ca3f Thanks @​bytaesu! - Fix plugins whose init returns options: undefined, such as testUtils(), failing to typecheck when exactOptionalPropertyTypes is enabled.

  • #11884 dfd8dd2 Thanks @​bytaesu! - Twitch and Paybin sign-in now verify ID token signatures and identity claims before mapping profiles, with 30 seconds of clock tolerance. Custom Paybin issuers must expose RS256 signing keys at <issuer>/.well-known/jwks.json.

1.7.10

Patch Changes

  • #11612 fedd055 Thanks @​vhinayindia! - If your resource server verifies access tokens with verifyAccessTokenRequest or verifyBearerToken and a jwksUrl, including through the MCP plugin, a key set that cannot be reached at all, for example a refused connection, now throws an error. Before, the token was rejected as invalid with 401 "no token payload", which hid the outage. A key set that answers with an HTTP error already threw.

    With remoteVerify configured, such a failure no longer falls back to remote introspection.

    The OAuth provider's /oauth2/introspect, /oauth2/userinfo and /oauth2/revoke behave the same way with the JWT plugin's jwks.remoteUrl: they return 500 instead of reporting the token as invalid.

  • #11805 bbd0a19 Thanks @​gustavovalverde! - Servers that verify JWTs against a key set now refetch that key set at most once every 30 seconds per server process when a token names a key ID (kid) the cached set does not contain. This covers the OAuth provider plugin's introspection, revocation, UserInfo, and logout endpoints, and resource servers that call verifyAccessTokenRequest or verifyBearerToken with jwksUrl. Previously every such token caused a new fetch: a remote request with jwksUrl or jwks.remoteUrl, or otherwise a read of the jwks table. Anyone could send tokens with made-up kid values to force one fetch per request, and the UserInfo endpoint needs no client credentials.

    Concurrent verifications now share one fetch, and a key set fetch that takes longer than 5 seconds fails with a JWKSTimeout error instead of waiting indefinitely.

    A token signed with a newly published key still verifies without waiting for the 5-minute cache to expire. It can be rejected for up to 30 seconds if the key set was already refetched for another unknown kid in that time. No configuration change is needed.

1.7.9

1.7.8

Patch Changes

  • #11512 4175b34 Thanks @​bytaesu! - Align the installed @better-auth/utils version with better-call while accepting ^0.4.2 || ^0.5.0 across official package peers.

  • #11592 435645e Thanks @​drewsephski! - Fix Atlassian user info errors being logged as coming from Figma.

... (truncated)

Commits
  • f4260a9 chore: release v1.7.12 (#11922)
  • f5ea731 fix(sso): verify OIDC ID tokens with the shared step (#11935)
  • 4bc78ba fix(core): reject ID tokens when the provider has no client ID (#11931)
  • 681aa5c fix(session): keep the cause of session lookup failures (#11924)
  • 083a743 fix(core): accept undefined fields from mapProfileToUser under exactOptionalP...
  • 876608d fix(core): verify id_tokens with one shared policy (#11919)
  • 492134a fix(oauth): restore Twitch and Paybin ID token handling (#11920)
  • 52ab801 chore: release v1.7.11 (#11827)
  • 2f6ca3f fix(core): accept undefined plugin init options under exactOptionalPropertyTy...
  • dfd8dd2 fix(oauth): verify Twitch and Paybin ID tokens (#11884)
  • Additional commits viewable in compare view

Updates @napi-rs/canvas from 1.0.11 to 1.0.13

Release notes

Sourced from @​napi-rs/canvas's releases.

v1.0.13

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.12...v1.0.13

v1.0.12

What's Changed

New Contributors

Full Changelog: Brooooooklyn/canvas@v1.0.11...v1.0.12

Changelog

Sourced from @​napi-rs/canvas's changelog.

1.0.13 (2026-10-21)

Bug Fixes

  • canvas: wrap native methods, not previous wrappers, on re-evaluation (#1395) (6997e1d)

1.0.12 (2026-10-20)

Bug Fixes

  • canvas: compositing, shadows, drawCanvas and filters like Chrome (#1379) (c6f06a6)
  • canvas: draw Image sources from Chrome's decode-cache levels (#1367) (7c3d0c2)
  • canvas: enable dithering for gradient fill and stroke paints (#1358) (5f95bd4)
  • canvas: gradients and SVG conic export work like Chrome (#1377) (4059399)
  • canvas: ImageData patterns and SvgCanvas reads like Chrome (#1363) (e2f6a83)
  • canvas: match Chrome for alpha:false, clearRect and 'copy' (#1365) (d82b79c)
  • canvas: match Chrome for hsl() colors and gradient edge cases (#1362) (17a4b3b)
  • canvas: parse fonts, lay out and measure text like Blink (#1381) (a43bb16)
  • canvas: paths, clips, roundRect and setTransform work like Chrome (#1375) (1299146)
  • canvas: preserve fractional global alpha through native paints (#1355) (2eb68bc)
  • canvas: preserve pattern snapshots and honor current image sampling quality (#1357) (65f4e7c)
  • canvas: style getters, shadowColor and canvas sizes like Chrome (#1376) (9bf7aef)
  • canvas: WebIDL conversion for ImageData, getContext, createPattern (#1361) (583b7e2)
  • canvas: WebIDL conversion, arity checks and exceptions like Chrome (#1373) (676047d)
  • codecs: Chrome's encoders, AVIF decode, data: URLs and SVG images (#1380) (b5b38a9)
  • crash-safe non-finite args, ImageData sizes, DOMMatrixInit (#1372) (004444b)
  • deps: pin font-types back to Skia's 0.12.0 (#1388) (57cd52b)
  • deps: update rust crate font-types to v0.12.7 (#1386) (61d89eb)
  • imagedata: ImageData and get/put/createImageData work like Chrome (#1374) (82eeacc)
  • reset style getters on resize, tag AVIF color, exact PDF alpha (#1364) (09b86b4)
  • retain display-p3 backing surfaces through context acquisition and resize (#1359) (0b502f6)

Features

  • canvas: float16 canvas storage and float ImageData formats (#1383) (5f841db)
  • canvas: rasterize text like Chrome with CoreText and Fontations (#1382) (4c9902a)
  • canvas: write DPI and text metadata in toBuffer, encode and encodeSync (#1390) (60f2df2)
  • chrome/m157 (#1391) (2c52f61)
  • color: CSS Color 4/5 at every canvas color site, like Chrome (#1378) (3be7099)
  • skia: build Skia with Chrome's CPU raster defines and blitters (#1366) (9eeb454)
  • svg: draw SVG images like Chrome: CSS, var(), , (#1384) (b04d0bc)
Commits
  • 00a115d 1.0.13
  • 6997e1d fix(canvas): wrap native methods, not previous wrappers, on re-evaluation (#1...
  • a89b3c9 1.0.12
  • b0e53ea chore: remove the benchmark (#1393)
  • 2c52f61 feat: chrome/m157 (#1391)
  • 60f2df2 feat(canvas): write DPI and text metadata in toBuffer, encode and encodeSync ...
  • 57cd52b fix(deps): pin font-types back to Skia's 0.12.0 (#1388)
  • 61d89eb fix(deps): update rust crate font-types to v0.12.7 (#1386)
  • b04d0bc feat(svg): draw SVG images like Chrome: CSS, var(), <use>, <image> (#1384)
  • 5f841db feat(canvas): float16 canvas storage and float ImageData formats (#1383)
  • Additional commits viewable in compare view

Updates @radix-ui/react-accordion from 1.2.21 to 1.3.1

Changelog

Sourced from @​radix-ui/react-accordion's changelog.

1.3.1

  • Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.
  • Updated dependencies: @radix-ui/react-collapsible@1.2.1

1.3.0

  • Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.
  • Migrated Accordion to an updated collection implementation. This is an implementation detail and does not affect the public API.
  • Updated dependencies: @radix-ui/react-collection@1.2.0, @radix-ui/primitive@1.2.0, @radix-ui/react-collapsible@1.2.0, @radix-ui/react-context@1.3.0, @radix-ui/react-direction@1.2.0, @radix-ui/react-primitive@2.2.0, @radix-ui/react-use-controllable-state@1.3.0
Commits

Updates @radix-ui/react-alert-dialog from 1.1.24 to 1.2.1

Changelog

Sourced from @​radix-ui/react-alert-dialo...

Description has been truncated

@dependabot
chore(deps): Bump the production-minor-patch group across 1 directory…
7e59963 
… with 33 updates

Bumps the production-minor-patch group with 33 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1149.0` | `3.1156.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1149.0` | `3.1156.0` |
| [@better-auth/core](https://github.com/better-auth/better-auth/tree/HEAD/packages/core) | `1.7.7` | `1.7.12` |
| [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas) | `1.0.11` | `1.0.13` |
| [@radix-ui/react-accordion](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/accordion) | `1.2.21` | `1.3.1` |
| [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.24` | `1.2.1` |
| [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar) | `1.2.7` | `1.3.1` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.2.0` | `1.3.1` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.25` | `2.2.1` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.16` | `2.1.17` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.2.0` | `1.3.1` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.8` | `2.4.1` |
| [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.16` | `1.2.0` |
| [@radix-ui/react-slider](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slider) | `1.5.0` | `1.6.1` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.4.0` | `1.5.0` |
| [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.8` | `1.4.1` |
| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.22` | `1.2.1` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.3.0` | `1.4.1` |
| [@react-email/render](https://github.com/resend/react-email/tree/HEAD/packages/render) | `2.1.0` | `2.1.1` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `11.6.0` | `11.9.0` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.8.1` | `2.8.2` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.7` | `1.7.12` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.16` | `3.4.17` |
| [gpt-tokenizer](https://github.com/niieani/gpt-tokenizer) | `4.0.0` | `4.1.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.61.0` |
| [openai](https://github.com/openai/openai-node) | `7.32.0` | `7.43.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [react-email](https://github.com/resend/react-email/tree/HEAD/packages/react-email) | `6.11.1` | `6.11.3` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.89.0` | `7.91.0` |
| [react-window](https://github.com/bvaughn/react-window) | `2.3.4` | `2.5.0` |
| [resend](https://github.com/resend/resend-node) | `6.32.1` | `6.34.1` |
| [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` |



Updates `@aws-sdk/client-s3` from 3.1149.0 to 3.1156.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1156.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1149.0 to 3.1156.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1156.0/packages/s3-request-presigner)

Updates `@better-auth/core` from 1.7.7 to 1.7.12
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.12/packages/core)

Updates `@napi-rs/canvas` from 1.0.11 to 1.0.13
- [Release notes](https://github.com/Brooooooklyn/canvas/releases)
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md)
- [Commits](Brooooooklyn/canvas@v1.0.11...v1.0.13)

Updates `@radix-ui/react-accordion` from 1.2.21 to 1.3.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/accordion/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/accordion)

Updates `@radix-ui/react-alert-dialog` from 1.1.24 to 1.2.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog)

Updates `@radix-ui/react-avatar` from 1.2.7 to 1.3.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar)

Updates `@radix-ui/react-dialog` from 1.2.0 to 1.3.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-dropdown-menu` from 2.1.25 to 2.2.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu)

Updates `@radix-ui/react-label` from 2.1.16 to 2.1.17
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label)

Updates `@radix-ui/react-popover` from 1.2.0 to 1.3.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@radix-ui/react-select` from 2.3.8 to 2.4.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select)

Updates `@radix-ui/react-separator` from 1.1.16 to 1.2.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator)

Updates `@radix-ui/react-slider` from 1.5.0 to 1.6.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slider/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slider)

Updates `@radix-ui/react-slot` from 1.4.0 to 1.5.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@radix-ui/react-switch` from 1.3.8 to 1.4.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch)

Updates `@radix-ui/react-tabs` from 1.1.22 to 1.2.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs)

Updates `@radix-ui/react-tooltip` from 1.3.0 to 1.4.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip)

Updates `@react-email/render` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/resend/react-email/releases)
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/render/CHANGELOG.md)
- [Commits](https://github.com/resend/react-email/commits/@react-email/render@2.1.1/packages/render)

Updates `@sentry/nextjs` from 11.6.0 to 11.9.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@11.6.0...11.9.0)

Updates `@vercel/blob` from 2.8.1 to 2.8.2
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.8.2/packages/blob)

Updates `better-auth` from 1.7.7 to 1.7.12
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.12/packages/better-auth)

Updates `dompurify` from 3.4.16 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.16...3.4.17)

Updates `gpt-tokenizer` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/niieani/gpt-tokenizer/releases)
- [Commits](niieani/gpt-tokenizer@4.0.0...4.1.0)

Updates `lucide-react` from 1.55.0 to 1.61.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/lucide-react)

Updates `openai` from 7.32.0 to 7.43.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.32.0...v7.43.0)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `react-email` from 6.11.1 to 6.11.3
- [Release notes](https://github.com/resend/react-email/releases)
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/react-email/CHANGELOG.md)
- [Commits](https://github.com/resend/react-email/commits/react-email@6.11.3/packages/react-email)

Updates `react-hook-form` from 7.89.0 to 7.91.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.89.0...v7.91.0)

Updates `react-window` from 2.3.4 to 2.5.0
- [Release notes](https://github.com/bvaughn/react-window/releases)
- [Changelog](https://github.com/bvaughn/react-window/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-window@2.3.4...2.5.0)

Updates `resend` from 6.32.1 to 6.34.1
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.32.1...v6.34.1)

Updates `zod` from 4.6.5 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.5...v4.6.7)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1156.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1156.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@better-auth/core"
  dependency-version: 1.7.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@napi-rs/canvas"
  dependency-version: 1.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-accordion"
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-alert-dialog"
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-avatar"
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-dropdown-menu"
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-label"
  dependency-version: 2.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-select"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-separator"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-slider"
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-switch"
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-tabs"
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@radix-ui/react-tooltip"
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@react-email/render"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@sentry/nextjs"
  dependency-version: 11.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@vercel/blob"
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: better-auth
  dependency-version: 1.7.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: gpt-tokenizer
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: openai
  dependency-version: 7.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: react-email
  dependency-version: 6.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: react-hook-form
  dependency-version: 7.91.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: react-window
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: resend
  dependency-version: 6.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

This was referenced Oct 28, 2026
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants