Skip to content

fix(deps)(deps): bump the dependencies group with 9 updates - #1929

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-8c8125575b
Nov 9, 2026
Merged

fix(deps)(deps): bump the dependencies group with 9 updates#1929
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-8c8125575b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 9 updates:

Package From To
@react-native-community/datetimepicker 9.2.2 9.3.0
graphql 17.0.2 17.1.0
i18next 26.7.1 26.7.2
react-i18next 17.1.12 17.1.13
react-native-gesture-handler 3.4.0 3.5.0
react-native-qrcode-svg 6.3.52 6.3.54
react-native-svg 15.16.0 15.16.1
zustand 5.0.16 5.1.0
twilio 6.2.0 6.3.0

Updates @react-native-community/datetimepicker from 9.2.2 to 9.3.0

Release notes

Sourced from @​react-native-community/datetimepicker's releases.

v9.3.0

9.3.0 (2026-11-04)

Features

Changelog

Sourced from @​react-native-community/datetimepicker's changelog.

9.3.0 (2026-11-04)

Features

Commits

Updates graphql from 17.0.2 to 17.1.0

Release notes

Sourced from graphql's releases.

v17.1.0 (2026-11-04)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

... (truncated)

Commits
  • a58e1fb chore(release): v17.1.0
  • a6db52e docs: list v17 first in the API sidebar (#4989)
  • f670de7 docs: generate API reference during website builds (#4988)
  • 31d582e docs: render constructor examples in the API reference (#4987)
  • 8c03058 docs: refresh the v16 and v17 API references (#4986)
  • adc2abd fix: avoid inherited variable getters in nested literal values (#4983)
  • 4edebe7 revert: remove maxListDepth from #4950 for now (#4982)
  • cec14c9 internal: further improve example test runner (#4981)
  • 6177dee fix: identify ESM modules in source map metadata (#4980)
  • b3ba58b fix: reference ESM source maps from every emitted module (#4979)
  • Additional commits viewable in compare view

Updates i18next from 26.7.1 to 26.7.2

Release notes

Sourced from i18next's releases.

v26.7.2

  • fix: the debug-mode deprecation warning for a language code without a region no longer says that v27 replaces aliases. 26.7.0 and 26.7.1 warned that v27 turns 'iw' into 'he' or 'tl' into 'fil' and asked you to rename them. v27 only gives such codes their canonical casing ('EN' becomes 'en', 'IW' becomes 'iw'), so iw, tl, eng and similar codes stay as they are. If you renamed them because of that warning, you can keep or restore the old codes. The warning now only appears when the casing changes.
Changelog

Sourced from i18next's changelog.

26.7.2

  • fix: the debug-mode deprecation warning for a language code without a region no longer says that v27 replaces aliases. 26.7.0 and 26.7.1 warned that v27 turns 'iw' into 'he' or 'tl' into 'fil' and asked you to rename them. v27 only gives such codes their canonical casing ('EN' becomes 'en', 'IW' becomes 'iw'), so iw, tl, eng and similar codes stay as they are. If you renamed them because of that warning, you can keep or restore the old codes. The warning now only appears when the casing changes.
Commits
  • 912869c 26.7.2
  • d71706a changelog for 26.7.2
  • 4375f9d fix: the bare language code warning only announces v27's casing change, not a...
  • 3cc5774 chore: update dependencies, close the minimatch and deepmerge alerts
  • 14faff4 README: drop the Locize ad image; the sponsor banner and the text saying who ...
  • See full diff in compare view

Updates react-i18next from 17.1.12 to 17.1.13

Changelog

Sourced from react-i18next's changelog.

17.1.13

  • fix(types): the react init options keep their types with i18next 27. i18next 27 declares ReactOptions (the type of i18next.init({ react })) as an empty interface and leaves its shape to react-i18next, so with react-i18next 17 the react options were no longer checked and getDefaults().useSuspense did not compile. react-i18next now declares them itself, with exactly the types i18next 26 has: TypeScript accepts the repeated declaration on i18next 26, and on i18next 27 it fills in the empty interface. Nothing changes with i18next 26.
Commits
  • 76c1842 17.1.13
  • 4dd03fe changelog for 17.1.13
  • 2d792a4 fix(types): the react init options keep their types with i18next 27
  • a6b635d chore: update dependencies and examples, close the dependabot alerts
  • cbac86f README: drop the Locize ad image; the sponsor banner and the text saying who ...
  • See full diff in compare view

Updates react-native-gesture-handler from 3.4.0 to 3.5.0

Release notes

Sourced from react-native-gesture-handler's releases.

v3.5.0

❗ Important changes

🐛 Bug fixes

📖 Docs

🔢 Miscellaneous

🤖 Dependabot

... (truncated)

Commits
  • bbff421 Release v3.5.0
  • 29270cb [Web] Check only the handlers recorded for the same pointer (#4672)
  • bf26929 [iOS] Don't delay touch-up delivery under a Manual gesture (#4671)
  • f219ea0 Add Begin, Deactivate and Finalize event types for v3 gestures (#4668)
  • 754229c [iOS] Skip accessibilityElementsHidden children when inferring button label...
  • c3c8c15 Remove unused enabled listener from useJSResponderHandler (#4663)
  • e268bc7 Mark JS responder events for Virtual and Intercepting detectors (#4530)
  • a248aaf Bump follow-redirects from 1.16.1 to 1.16.2 in /packages/docs-gesture-handler...
  • b644ca8 Bump joi from 17.13.8 to 17.13.9 in /packages/docs-gesture-handler (#4661)
  • 51cf3d3 [Jest] Add opt-out for the GestureHandlerRootView check (#4660)
  • Additional commits viewable in compare view

Updates react-native-qrcode-svg from 6.3.52 to 6.3.54

Commits
  • 6f940c6 Update package.json version to 6.3.54
  • 82147f2 Update package-lock.json version to 6.3.54
  • 45f7390 Merge pull request #287 from Expensify/claude-bumpCrossSpawn
  • 423eef6 Update package.json version to 6.3.53
  • 9809088 Update package-lock.json version to 6.3.53
  • bd022f1 Merge pull request #289 from Expensify/claude-fastXmlParserUpgrade
  • 5fd58c1 merge main and regenerate lockfiles
  • See full diff in compare view

Updates react-native-svg from 15.16.0 to 15.16.1

Release notes

Sourced from react-native-svg's releases.

v15.16.1

Added support for SwiftPM and react-native 0.89.0-rc.0

What's Changed

New Contributors

Full Changelog: software-mansion/react-native-svg@v15.16.0...v15.16.1

Commits
  • 4fd7551 Release 15.16.1 (#3113)
  • 26f3b7f chore: bump tests-example to React Native 0.89.0-rc.0 (#3111)
  • b6043ba fix(android): support React Native 0.89 JNI calls (#3110)
  • aea0496 feat(ios): ship Metal filter kernels as SwiftPM resources (#3099)
  • b6152ad feat(ios): add Swift Package Manager support for React Native's SwiftPM mode ...
  • See full diff in compare view

Updates zustand from 5.0.16 to 5.1.0

Release notes

Sourced from zustand's releases.

v5.1.0

The persist and devtools middleware are improved thanks to @​Tnalxmsk and @​dgesteves!

Release note

  • The persist middleware now supports PromiseLike results from storage reads, migrations, and migration writes. persist.rehydrate() now returns a native Promise<void>, which you can await to ensure hydration is complete.
  • The devtools middleware now supports dispatching store actions directly from Redux DevTools using the new actionCreators option. It also supports nested actions and arguments.

What's Changed

Full Changelog: pmndrs/zustand@v5.0.16...v5.1.0

Commits

Updates twilio from 6.2.0 to 6.3.0

Release notes

Sourced from twilio's releases.

6.3.0

Release Notes

Library - Chore

Library - Fix

Twiml

  • Add ElevenLabs voices to <Say> verb.
  • Add partialPromptOnHangup, eagerEotThreshold, asrSmartFormat, ttsTextNormalization, ttsLanguageTextNormalization, elevenlabsLanguageTextNormalization, includeInPrompt, customerName, applicationReconnect, echoPromptFiltering, turnDetection attributes to <ConversationRelay>, and hints, asrSmartFormat, ttsTextNormalization, ttsLanguageTextNormalization attributes to <Language>

Api

  • API Changes

  • 2026-09-22

  • Simplified the criteria field description.

  • 2026-09-18

  • Moved readOnly on the snapshot count fields (profileCount, partitionCount) from the shared schema to the response usage sites, so the counts stay read-only in responses (no change for API consumers).

  • 2026-09-17

  • Renamed 3 Get* operations to Fetch* to match the operationId standard: FetchCohort, FetchSnapshot, FetchOperation.
  • Removed the unused ExpressionId schema and made the operation error example cohort-native, so no aud_ identifiers remain in the spec.
  • Kept libraryVisibility: hidden across the whole surface (info, path items, and operations).

  • 2026-09-08

  • Removed the deprecated header-based-versioning unified specs, consolidating audiences onto the path-based api.twilio.com/v1 surface.

  • 2026-08-31

  • Published the unified audiences spec at api.twilio.com/v1.

  • 2026-08-26

  • Fixed the Cohort operation response mapping in the unified audiences API.

  • 2026-08-19

  • Migrated the unified audiences spec to the Cohort surface (Audiences renamed to Cohorts).
  • Switched downstreamServiceName to audiences-domain.

  • 2026-08-05

  • Added the api.unified.version.preview beta feature.
  • Made the unified APIs available in prod us1.

  • 2026-07-30

  • Fixed example values.

  • 2026-07-29

  • Added the initial version of the audiences API to the unified APIs.

  • 2026-07-20

  • Deployed the audiences-domain OAS to the dev edge.

  • 2026-07-06

  • Added the prod-us1 realm to the audiences public API.

  • 2026-06-23

  • Changed the storeType enum from MEMORA to TWILIO.

  • 2026-05-04

  • Added the stage-us1 realm and x-rate-limit to the audiences API.

  • 2026-04-08

  • Added the initial audiences endpoints.

  • API Changes

... (truncated)

Changelog

Sourced from twilio's changelog.

[2026-11-05] Version 6.3.0

Library - Chore

Library - Fix

Twiml

  • Add ElevenLabs voices to <Say> verb.
  • Add partialPromptOnHangup, eagerEotThreshold, asrSmartFormat, ttsTextNormalization, ttsLanguageTextNormalization, elevenlabsLanguageTextNormalization, includeInPrompt, customerName, applicationReconnect, echoPromptFiltering, turnDetection attributes to <ConversationRelay>, and hints, asrSmartFormat, ttsTextNormalization, ttsLanguageTextNormalization attributes to <Language>

Api

  • API Changes

  • 2026-09-22

  • Simplified the criteria field description.

  • 2026-09-18

  • Moved readOnly on the snapshot count fields (profileCount, partitionCount) from the shared schema to the response usage sites, so the counts stay read-only in responses (no change for API consumers).

  • 2026-09-17

  • Renamed 3 Get* operations to Fetch* to match the operationId standard: FetchCohort, FetchSnapshot, FetchOperation.
  • Removed the unused ExpressionId schema and made the operation error example cohort-native, so no aud_ identifiers remain in the spec.
  • Kept libraryVisibility: hidden across the whole surface (info, path items, and operations).

  • 2026-09-08

  • Removed the deprecated header-based-versioning unified specs, consolidating audiences onto the path-based api.twilio.com/v1 surface.

  • 2026-08-31

  • Published the unified audiences spec at api.twilio.com/v1.

  • 2026-08-26

  • Fixed the Cohort operation response mapping in the unified audiences API.

  • 2026-08-19

  • Migrated the unified audiences spec to the Cohort surface (Audiences renamed to Cohorts).
  • Switched downstreamServiceName to audiences-domain.

  • 2026-08-05

  • Added the api.unified.version.preview beta feature.
  • Made the unified APIs available in prod us1.

  • 2026-07-30

  • Fixed example values.

  • 2026-07-29

  • Added the initial version of the audiences API to the unified APIs.

  • 2026-07-20

  • Deployed the audiences-domain OAS to the dev edge.

  • 2026-07-06

  • Added the prod-us1 realm to the audiences public API.

  • 2026-06-23

  • Changed the storeType enum from MEMORA to TWILIO.

  • 2026-05-04

  • Added the stage-us1 realm and x-rate-limit to the audiences API.

  • 2026-04-08

  • Added the initial audiences endpoints.

  • API Changes

  • 2026-10-28

... (truncated)

Commits
  • 8cae578 [Librarian] Release librarian/release-20261105-065257 (#1229)
  • 17e899f chore: support HMAC-SHA256 webhook signatures in validateRequest (#1226)
  • 15f683b fix: replace mock-fs with jest fs mock in RequestClient spec (#1228)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
fix(deps)(deps): bump the dependencies group with 9 updates
097c953 
Bumps the dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@react-native-community/datetimepicker](https://github.com/react-native-datetimepicker/datetimepicker) | `9.2.2` | `9.3.0` |
| [graphql](https://github.com/graphql/graphql-js) | `17.0.2` | `17.1.0` |
| [i18next](https://github.com/i18next/i18next) | `26.7.1` | `26.7.2` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.1.12` | `17.1.13` |
| [react-native-gesture-handler](https://github.com/software-mansion/react-native-gesture-handler) | `3.4.0` | `3.5.0` |
| [react-native-qrcode-svg](https://github.com/Expensify/react-native-qrcode-svg) | `6.3.52` | `6.3.54` |
| [react-native-svg](https://github.com/software-mansion/react-native-svg) | `15.16.0` | `15.16.1` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.16` | `5.1.0` |
| [twilio](https://github.com/twilio/twilio-node) | `6.2.0` | `6.3.0` |


Updates `@react-native-community/datetimepicker` from 9.2.2 to 9.3.0
- [Release notes](https://github.com/react-native-datetimepicker/datetimepicker/releases)
- [Changelog](https://github.com/react-native-datetimepicker/datetimepicker/blob/master/CHANGELOG.md)
- [Commits](react-native-datetimepicker/datetimepicker@v9.2.2...v9.3.0)

Updates `graphql` from 17.0.2 to 17.1.0
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v17.0.2...v17.1.0)

Updates `i18next` from 26.7.1 to 26.7.2
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.7.1...v26.7.2)

Updates `react-i18next` from 17.1.12 to 17.1.13
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.1.12...v17.1.13)

Updates `react-native-gesture-handler` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/software-mansion/react-native-gesture-handler/releases)
- [Commits](software-mansion/react-native-gesture-handler@v3.4.0...v3.5.0)

Updates `react-native-qrcode-svg` from 6.3.52 to 6.3.54
- [Release notes](https://github.com/Expensify/react-native-qrcode-svg/releases)
- [Commits](Expensify/react-native-qrcode-svg@6.3.52...6.3.54)

Updates `react-native-svg` from 15.16.0 to 15.16.1
- [Release notes](https://github.com/software-mansion/react-native-svg/releases)
- [Commits](software-mansion/react-native-svg@v15.16.0...v15.16.1)

Updates `zustand` from 5.0.16 to 5.1.0
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.16...v5.1.0)

Updates `twilio` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/twilio/twilio-node/releases)
- [Changelog](https://github.com/twilio/twilio-node/blob/main/CHANGES.md)
- [Commits](twilio/twilio-node@6.2.0...6.3.0)

---
updated-dependencies:
- dependency-name: "@react-native-community/datetimepicker"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: graphql
  dependency-version: 17.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: i18next
  dependency-version: 26.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-i18next
  dependency-version: 17.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-native-gesture-handler
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: react-native-qrcode-svg
  dependency-version: 6.3.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-native-svg
  dependency-version: 15.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: zustand
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: twilio
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file security Security related issue labels Nov 9, 2026
@github-actions
github-actions Bot merged commit c12d190 into main Nov 9, 2026
11 of 25 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-8c8125575b branch November 9, 2026 21:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file security Security related issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants