chore(deps): Bump the minor-and-patch group with 17 updates by dependabot[bot] · Pull Request #537 · tedious-code/foxSchema

dependabot · 2026-10-19T14:10:54Z

Bumps the minor-and-patch group with 17 updates:

Package	From	To
jsdom	`30.1.2`	`30.1.3`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
turbo	`2.11.7`	`2.11.8`
typescript-eslint	`8.71.1`	`8.71.2`
vitest	`5.0.3`	`5.0.5`
fastify	`5.12.5`	`5.12.7`
isomorphic-git	`1.43.3`	`1.44.2`
mysql2	`3.24.5`	`3.24.6`
zod	`4.6.5`	`4.6.7`
playwright	`1.64.0`	`1.64.1`
cronstrue	`3.31.0`	`3.32.0`
lucide-react	`1.55.0`	`1.58.0`
mssql	`12.7.4`	`12.7.9`
@aws-sdk/client-secrets-manager	`3.1149.0`	`3.1152.0`
@azure/identity	`4.13.3`	`4.14.0`
@google-cloud/secret-manager	`7.1.1`	`7.2.0`

Updates jsdom from 30.1.2 to 30.1.3

Release notes

Sourced from jsdom's releases.

v30.1.3

Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@scttcper, @asamuzaK)

Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@scttcper)

Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.

Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.

Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@rnavarro)

Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.

Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.

Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.

Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.

Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.

Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.

Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.

Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.

Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@asamuzaK)

Commits

058c0f5 30.1.3
fcd1fd1 Cascade parsed longhands independently
a3ee786 Cascade computed style properties on demand
f42dc15 Resolve colors before caching or using currentcolor
074b1fb Compute background-position lengths against the final font size
d19598c Apply style rules nested in multiple @media rules
45d626c Rule out attribute selector subjects before matching
3ff0a5b Upgrade Undici and remove abort workarounds
8813bb1 Ignore CSS declarations with unparseable math functions
63712d8 Fix XHR credentials across redirects
Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates turbo from 2.11.7 to 2.11.8

Release notes

Sourced from turbo's releases.

Turborepo v2.11.8

What's Changed

Changelog

chore: Release Turborepo 2.11.7 by @github-actions[bot] in vercel/turborepo#14357

chore: Update with-vitest example by @vercel-gh-bot-3[bot] in vercel/turborepo#14355

feat: Add experimental setup future flag by @anthonyshew in vercel/turborepo#14361

fix: Remove Bash dependency from strict environment tests by @vercel-gh-bot-3[bot] in vercel/turborepo#14362

fix: Use repository package manager for automatic Turbo downloads by @vercel-gh-bot-3[bot] in vercel/turborepo#14360

chore: Improve Factory chat and model controls by @vercel-gh-bot-3[bot] in vercel/turborepo#14368

chore: Add Linear connector to Factory by @vercel-gh-bot-3[bot] in vercel/turborepo#14369

chore: Remove HarnessAgent from Factory by @vercel-gh-bot-3[bot] in vercel/turborepo#14370

chore: Remove Factory UI clutter by @vercel-gh-bot-2[bot] in vercel/turborepo#14371

feat: Add shared platform primitives for setup and shim by @anthonyshew in vercel/turborepo#14363

fix: Populate task graphs for affected and filtered listings by @sahyl in vercel/turborepo#14366

feat: Add bounded checksum-verifying downloads by @anthonyshew in vercel/turborepo#14374

feat: Validate setup npm version requests by @anthonyshew in vercel/turborepo#14375

fix: Prune unused pnpm catalog snapshots by @vercel-gh-bot-3[bot] in vercel/turborepo#14376

feat: Resolve Node versions from native declarations by @anthonyshew in vercel/turborepo#14378

feat: Honor tool-download proxy and certificate settings by @anthonyshew in vercel/turborepo#14379

feat: Check bounded setup version-request overlap by @anthonyshew in vercel/turborepo#14381

feat: Discover setup JavaScript package-manager declarations by @anthonyshew in vercel/turborepo#14382

feat: Verify local artifact bytes without HTTP by @anthonyshew in vercel/turborepo#14383

fix: Deflake concurrent agent guidance updates by @anthonyshew in vercel/turborepo#14388

chore: Remove Linear from factory by @anthonyshew in vercel/turborepo#14389

feat: Extract verified TAR archives into private staging by @anthonyshew in vercel/turborepo#14384

feat: Add experimental setup command surface by @anthonyshew in vercel/turborepo#14385

chore: Remove Factory branch naming restrictions by @vercel-gh-bot-4[bot] in vercel/turborepo#14391

chore: Consolidate CI into one required summary by @anthonyshew in vercel/turborepo#14390

docs: Clarify task graph filter traversal by @vercel-gh-bot-2[bot] in vercel/turborepo#14392

feat: Extract safe Node TAR symlinks by @anthonyshew in vercel/turborepo#14393

feat: Infer setup roots without package managers by @anthonyshew in vercel/turborepo#14395

feat: Add atomic managed tool installation inventory by @anthonyshew in vercel/turborepo#14398

fix: Invalidate managed repositories when turbo.lock changes by @anthonyshew in vercel/turborepo#14396

feat: Safely extract verified ZIP archives by @anthonyshew in vercel/turborepo#14394

test: Add installed-wrapper process launcher by @anthonyshew in vercel/turborepo#14401

fix: Avoid duplicate code CI on pull request reviews by @anthonyshew in vercel/turborepo#14414

chore(deps): Update dependency @vercel/geistdocs to v1.28.1 by @vercel-gh-bot-4[bot] in vercel/turborepo#14416

docs: Remove premature setup guidance by @anthonyshew in vercel/turborepo#14409

feat: Validate portable setup tool resolutions by @anthonyshew in vercel/turborepo#14400

fix: Preserve scoped tool paths and owner-executable exports by @anthonyshew in vercel/turborepo#14403

fix: Preserve Node runtime failure policy provenance by @anthonyshew in vercel/turborepo#14406

feat: Add an internal managed-run capability query by @anthonyshew in vercel/turborepo#14408

feat: Verify bounded SHA-512 tool artifacts by @anthonyshew in vercel/turborepo#14411

test: Stabilize lockfile closure parity coverage by @anthonyshew in vercel/turborepo#14420

fix: Repair missing install generations and share tool readiness by @anthonyshew in vercel/turborepo#14404

feat: Add secure ignored setup writer storage by @anthonyshew in vercel/turborepo#14407

feat: Parse bounded Node release metadata by @anthonyshew in vercel/turborepo#14410

feat: Write setup locks atomically by @anthonyshew in vercel/turborepo#14399

... (truncated)

Commits

7663d6b publish 2.11.8 to registry
ad820cb fix: Disable agent guidance by default (#14490)
6e9c65b fix: Prevent Git index refresh during dirty hash collection (#14489)
b5fe180 feat: Validate sealed native setup baselines (#14482)
cb615c3 chore: Add copyable Factory snapshot command (#14481)
71d0766 fix: Upgrade turbo-gen Handlebars to 4.7.10 (#14471)
2935202 docs: Explain declaring Cargo sources read from outside the crate (#14480)
215637c fix: Report inferred framework env vars for deferred tasks in dry runs (#14478)
d6d63bd fix: Carry uv tool configuration into pruned workspaces (#14449)
768d5ba fix: Hash Clippy configuration for Cargo lint tasks (#14448)
Additional commits viewable in compare view

Updates typescript-eslint from 8.71.1 to 8.71.2

Release notes

Sourced from typescript-eslint's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)

eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)

eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)

eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)

type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

Abraham Guo

Brad Zacher @bradzacher

Evyatar Daud @StyleShit

Josh Goldberg

Vinccool96

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

7488d68 chore(release): publish 8.71.2
See full diff in compare view

Updates vitest from 5.0.3 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

Keep vite default fs.deny with api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11578 (28dc1)

Handle quoted file names in --changed - by @sheremet-va in vitest-dev/vitest#11583 (14921)

Add data to the import.meta.hot stub - by @sheremet-va in vitest-dev/vitest#11590 (3a828)

Set skip in skipIf, ignore undefined options - by @sheremet-va in vitest-dev/vitest#11591 (d523a)

Skip builtin loading in async leak detector - by @sheremet-va in vitest-dev/vitest#11598 (fe86a)

Keep the import frame in native loader errors - by @sheremet-va in vitest-dev/vitest#11599 (9697b)

Run hook cleanups when a later hook fails - by @sheremet-va in vitest-dev/vitest#11605 (6c5a4)

Release mocks of finished test files - by @sheremet-va in vitest-dev/vitest#11607 (e9c3d)

Abort all running tests on cancel - by @sheremet-va in vitest-dev/vitest#11606 (6621a)

browser:

Ignore synthetic pagehide events - by @sheremet-va in vitest-dev/vitest#11582 (ca081)

Run plugin buildStart on server creation - by @sheremet-va in vitest-dev/vitest#11593 (ea611)

Drop late connections of closed sessions - by @sheremet-va in vitest-dev/vitest#11600 (f161e)

Wait 30s for the browser to close - by @sheremet-va in vitest-dev/vitest#11601 (6498b)

Run global setup once with instances - by @sheremet-va in vitest-dev/vitest#11596 (8dd67)

reporter:

End reason &[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39); on worker crash - by @AriPerkkio in vitest-dev/vitest#11568 (6ae8e)

    View changes on GitHub

v5.0.4

   🚀 Features

experimental:

Tag cache directories with CACHEDIR.TAG - by @lifeiscontent in vitest-dev/vitest#11461 (a8ea3)

Support test.ui.theme option - by @sheremet-va in vitest-dev/vitest#11499 (1da66)

Highlight selector multiple matches in trace view - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11489 (5abba)

Print how many tests were affected and a total when running --changed - by @sheremet-va in vitest-dev/vitest#11424 (a2336)

Add an option to cache dependencies instead of statically parsing them - by @sheremet-va in vitest-dev/vitest#11515 (c0601)

Add fit and zoom controls to trace viewer - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11490 (f5dd9)

   🐞 Bug Fixes

Fail the run on git and location filter errors - by @sheremet-va in vitest-dev/vitest#11430 (30d03)

Enable fsModuleCache by default - by @sheremet-va in vitest-dev/vitest#11435 (ad208)

Track project files and mocks with --changed - by @sheremet-va in vitest-dev/vitest#11432 (b0f2b)

Refactor caching, fix : in project and change the shape of results cache - by @sheremet-va in vitest-dev/vitest#11453 (9673c)

Keep full $ string values when taskTitleValueFormatTruncate is 0 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11485 (4f7e1)

Resolve node builtins in client environments - by @sheremet-va in vitest-dev/vitest#11417 (56b31)

Fix module graph builtin externals after #11421 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11491 and vitest-dev/vitest#11421 (008e1)

Wrap module mocks during in-source testing - by @sheremet-va in vitest-dev/vitest#11505 (36d19)

Handle line endings in snapshot - by @sheremet-va in vitest-dev/vitest#11522 (4c468)

Respect root in projects - by @sheremet-va in vitest-dev/vitest#11521 (26642)

Resolve mocks in directories with spaces - by @sheremet-va in vitest-dev/vitest#11539 (caaef)

api:

Publish the api token atomically - by @umairnawaz333 in vitest-dev/vitest#11323 (6f990)

browser:

... (truncated)

Commits

7a825db chore: release v5.0.5 (#11609)
6621a72 fix: abort all running tests on cancel (#11606)
e9c3d72 fix: release mocks of finished test files (#11607)
8dd67c2 fix(browser): run global setup once with instances (#11596)
6c5a447 fix: run hook cleanups when a later hook fails (#11605)
9697b38 fix: keep the import frame in native loader errors (#11599)
6498b66 fix(browser): wait 30s for the browser to close (#11601)
f161e6d fix(browser): drop late connections of closed sessions (#11600)
fe86a64 fix: skip builtin loading in async leak detector (#11598)
6ae8e89 fix(reporter): end reason 'failed' on worker crash (#11568)
Additional commits viewable in compare view

Updates fastify from 5.12.5 to 5.12.7

Release notes

Sourced from fastify's releases.

v5.12.7

Full Changelog: fastify/fastify@v5.12.6...v5.12.7

v5.12.6

⚠️ Security Release

Fix for GHSA-389g-gv7q-r4x8

What's Changed

[Backport 5.x] types: restrict route lookup methods by @github-actions[bot] in fastify/fastify#7048

[Backport 5.x] perf: decode string bodies once instead of per chunk by @github-actions[bot] in fastify/fastify#7053

[Backport 5.x] perf: avoid resetting the level of request child loggers by @github-actions[bot] in fastify/fastify#7058

[Backport 5.x] fix: resolve reply.mediaType from raw response headers by @github-actions[bot] in fastify/fastify#7067

[Backport 5.x] perf: use a FIFO cache for parsed content-types by @github-actions[bot] in fastify/fastify#7072

[Backport 5.x] fix(validation): lowercase header names in propertyNames enum/const by @mcollina in fastify/fastify#7104

[Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of storing it by @github-actions[bot] in fastify/fastify#7087

[Backport 5.x] fix: remove error when HTTP QUERY request has empty body by @github-actions[bot] in fastify/fastify#7060

[Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 by @github-actions[bot] in fastify/fastify#7094

Full Changelog: fastify/fastify@v5.12.5...v5.12.6

Commits

9f40003 Bumped v5.12.7
16469b9 Bumped v5.12.6
63496de [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)
20b55d4 [Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)
38d2b63 [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...
3241fbd [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...
1a46b1b [Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)
7e06676 [Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)
1b0eb32 [Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)
a636a10 [Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)
Additional commits viewable in compare view

Updates isomorphic-git from 1.43.3 to 1.44.2

Release notes

Sourced from isomorphic-git's releases.

v1.44.2

1.44.2 (2026-10-12)

Bug Fixes

preserve Pako decompression errors when reading objects (#2451) (b75230a)

v1.44.1

1.44.1 (2026-10-12)

Bug Fixes

return absent from status for case-mismatched paths on case-insensitive filesystems (#2454) (c8f4687)

v1.44.0

1.44.0 (2026-10-12)

Features

log: add author filter (#2456) (c5916f4)

Commits

b75230a fix: preserve Pako decompression errors when reading objects (#2451)
c8f4687 fix: return absent from status for case-mismatched paths on case-insensitive ...
c5916f4 feat(log): add author filter (#2456)
See full diff in compare view

Updates mysql2 from 3.24.5 to 3.24.6

Release notes

Sourced from mysql2's releases.

v3.24.6

3.24.6 (2026-10-13)

Bug Fixes

allocate a new LOCAL INFILE terminator packet per write (#4580) (8c068ef), closes #4568

Changelog

Sourced from mysql2's changelog.

3.24.6 (2026-10-13)

Bug Fixes

allocate a new LOCAL INFILE terminator packet per write (#4580) (8c068ef), closes #4568

Commits

7f65d9a chore(master): release 3.24.6 (#4592)
ded9be2 build(deps-dev): bump rollup from 4.64.0 to 4.64.4 in the rollup group (#4605)
30201a2 build(deps-dev): bump @types/node from 26.6.4 to 26.6.5 (#4606)
5eb21f4 build(deps-dev): bump prettier (#4604)
477ca97 build(deps): bump lucide-react from 1.52.0 to 1.55.0 in /website (#4609)
9ea9345 build(deps-dev): bump prettier from 3.9.9 to 3.9.10 in /website (#4608)
c52e961 build(deps-dev): bump @types/node from 26.6.4 to 26.6.5 in /website (#4607)
1cdba3c build(deps-dev): bump @biomejs/biome from 2.5.14 to 2.5.15 (#4585)
a270608 build(deps-dev): bump @types/node from 26.6.3 to 26.6.4 (#4584)
51e02b3 build(deps-dev): bump brace-expansion from 5.0.9 to 5.0.12 (#4601)
Additional commits viewable in compare view

Updates zod from 4.6.5 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini

9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales

34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note

74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)

b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors

8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze

bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles

c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)

a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)

a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)

529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6

9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why

Commits

b500a2e 4.6.7
9c21983 ci: stage at verbose so a failed OIDC token exchange says why
529f78d 4.6.6
a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
c42596b release: hold the run on the release-approval environment until the staged ve...
bacad51 docs: square the Code for Japan logo to match the other bronze tiles
8fb2faf docs: crop the Code for Japan logo and list it first in bronze
b2ef983 docs: add Code for Japan to bronze sponsors
74304ce release: stage npm versions instead of publishing them (#6622)
Additional commits viewable in compare view

Updates playwright from 1.64.0 to 1.64.1

Release notes

Sourced from playwright's releases.

v1.64.1

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0

#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

Commits

cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
866cbb8 chore: mark v1.64.1 (#43354)
1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
See full diff in compare view

Updates cronstrue from 3.31.0 to 3.32.0

Release notes

Sourced from cronstrue's releases.

v3.32.0

What's Changed

Bump handlebars from 4.7.9 to 4.7.10 by @dependabot[bot] in bradymholt/cRonstrue#424

Full Changelog: bradymholt/cRonstrue@v3.31.0...v3.32.0

Commits

f16e309 Version 3.32.0
a47c31c Bump handlebars from 4.7.9 to 4.7.10 (#424)
See full diff in compare view

Updates lucide-react from 1.55.0 to 1.58.0

Release notes

Sourced from lucide-react's releases.

Version 1.58.0

What's Changed

feat(docs): add third-party package lucide-jte by @sgruendel in lucide-icons/lucide#5000

chore(integration-tests): Add Svelte integration tests for @ucide/svelte by @ericfennis in lucide-icons/lucide#5005

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#5004

fix(site): Fix homepage animation by @ericfennis in lucide-icons/lucide#5015

feat(ci): auto-generate PR titles from added file paths by @ericfennis with @Copilot in lucide-icons/lucide#4790

fix(icons): changed barrel icon by @karsa-mistmere in lucide-icons/lucide#4639

ci(dev): fix "Generate PR Title" job by using REST API for changed files by @ericfennis with @Copilot in lucide-icons/lucide#5017

feat(icons): added certificate icon by @rrod497 in lucide-icons/lucide#4327

fix(icons): update music icons by @jamiemlaw in lucide-icons/lucide#4072

New Contributors

@sgruendel made their first contribution in lucide-icons/lucide#5000

Full Changelog: https://github.com/lucide-icons/lu...
Description has been truncated

Bumps the minor-and-patch group with 17 updates: | Package | From | To | | --- | --- | --- | | [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [turbo](https://github.com/vercel/turborepo) | `2.11.7` | `2.11.8` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.1` | `8.71.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` | | [fastify](https://github.com/fastify/fastify) | `5.12.5` | `5.12.7` | | [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.43.3` | `1.44.2` | | [mysql2](https://github.com/sidorares/node-mysql2) | `3.24.5` | `3.24.6` | | [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` | | [playwright](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` | | [cronstrue](https://github.com/bradymholt/cRonstrue) | `3.31.0` | `3.32.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.58.0` | | [mssql](https://github.com/tediousjs/node-mssql) | `12.7.4` | `12.7.9` | | [@aws-sdk/client-secrets-manager](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-secrets-manager) | `3.1149.0` | `3.1152.0` | | [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) | `4.13.3` | `4.14.0` | | [@google-cloud/secret-manager](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-secretmanager) | `7.1.1` | `7.2.0` | Updates `jsdom` from 30.1.2 to 30.1.3 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.1.2...v30.1.3) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `turbo` from 2.11.7 to 2.11.8 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.11.7...v2.11.8) Updates `typescript-eslint` from 8.71.1 to 8.71.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint) Updates `vitest` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) Updates `fastify` from 5.12.5 to 5.12.7 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.5...v5.12.7) Updates `isomorphic-git` from 1.43.3 to 1.44.2 - [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases) - [Commits](isomorphic-git/isomorphic-git@v1.43.3...v1.44.2) Updates `mysql2` from 3.24.5 to 3.24.6 - [Release notes](https://github.com/sidorares/node-mysql2/releases) - [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md) - [Commits](sidorares/node-mysql2@v3.24.5...v3.24.6) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) Updates `playwright` from 1.64.0 to 1.64.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.64.0...v1.64.1) Updates `cronstrue` from 3.31.0 to 3.32.0 - [Release notes](https://github.com/bradymholt/cRonstrue/releases) - [Changelog](https://github.com/bradymholt/cRonstrue/blob/main/CHANGELOG.md) - [Commits](bradymholt/cRonstrue@v3.31.0...v3.32.0) Updates `lucide-react` from 1.55.0 to 1.58.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.58.0/packages/lucide-react) Updates `mssql` from 12.7.4 to 12.7.9 - [Release notes](https://github.com/tediousjs/node-mssql/releases) - [Changelog](https://github.com/tediousjs/node-mssql/blob/master/CHANGELOG.txt) - [Commits](tediousjs/node-mssql@v12.7.4...v12.7.9) Updates `@aws-sdk/client-secrets-manager` from 3.1149.0 to 3.1152.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-secrets-manager/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1152.0/clients/client-secrets-manager) Updates `@azure/identity` from 4.13.3 to 4.14.0 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.14.0/sdk/identity/identity) Updates `@google-cloud/secret-manager` from 7.1.1 to 7.2.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-secretmanager/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/dlp-v7.2.0/packages/google-cloud-secretmanager) --- updated-dependencies: - dependency-name: jsdom dependency-version: 30.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: turbo dependency-version: 2.11.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.71.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: fastify dependency-version: 5.12.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: isomorphic-git dependency-version: 1.44.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: mysql2 dependency-version: 3.24.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: playwright dependency-version: 1.64.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: cronstrue dependency-version: 3.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: mssql dependency-version: 12.7.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@aws-sdk/client-secrets-manager" dependency-version: 3.1152.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@azure/identity" dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@google-cloud/secret-manager" dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-19T14:10:58Z

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Repository navigation

chore(deps): Bump the minor-and-patch group with 17 updates - #537

chore(deps): Bump the minor-and-patch group with 17 updates#537
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-0d150a70eb

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

v30.1.3

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

Turborepo v2.11.8

What's Changed

Changelog

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

❤️ Thank You

8.71.2 (2026-10-12)

v5.0.5

🐞 Bug Fixes

View changes on GitHub

v5.0.4

🚀 Features

🐞 Bug Fixes

v5.12.7

v5.12.6

⚠️ Security Release

What's Changed

v1.44.2

1.44.2 (2026-10-12)

Bug Fixes

v1.44.1

1.44.1 (2026-10-12)

Bug Fixes

v1.44.0

1.44.0 (2026-10-12)

Features

v3.24.6

3.24.6 (2026-10-13)

Bug Fixes

3.24.6 (2026-10-13)

Bug Fixes

v4.6.7

Commits:

v4.6.6

Commits:

v1.64.1

Bug Fixes

v3.32.0

What's Changed

Version 1.58.0

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants