chore(deps): bump the production-dependencies group with 6 updates by dependabot[bot] · Pull Request #504 · ckb-devrel/ccc

dependabot · 2026-09-02T14:32:46Z

Bumps the production-dependencies group with 6 updates:

Package	From	To
@scure/bip32	`2.3.0`	`2.4.0`
@scure/bip39	`2.3.0`	`2.4.0`
lucide-react	`1.34.0`	`1.39.0`
next	`16.3.3`	`16.3.4`
@next/third-parties	`16.3.3`	`16.3.4`
zod	`4.4.3`	`4.5.4`

Updates @scure/bip32 from 2.3.0 to 2.4.0

Release notes

Sourced from @scure/bip32's releases.

2.4.0

Hardening:

The privateKey, publicKey, chainCode, identifier, pubKeyHash now return copies instead of live buffers

deriveChild no longer blindly try-catches. Use proper filtered-by-kind error handling. Retries will stop at last valid index instead of overflowing with error

fromExtendedKey now rejects checksum-valid payloads that are not exactly 78 bytes

Stricter HDKey constructor validation: depth must be an integer in 0..255 (throws RangeError), index and parentFingerprint must be valid uint32 values, and chainCode must be exactly 32 bytes

derive(path) now rejects paths up front that would exceed the maximum serializable depth of 255

Added toPrivateJSON() for explicit private (xpriv + xpub) export; toJSON() currently still includes xpriv for backwards compatibility (planned to become public-only in v3, so migrate to toPrivateJSON() for private round-trips)

fromJSON now also accepts { xpub } to restore a public-only key

Upgrade deps: noble-hashes, noble-curves and scure-base to 2.4.0.

Full Changelog: paulmillr/scure-bip32@2.3.0...2.4.0

Changelog

Sourced from @scure/bip32's changelog.

2.4.0 (2026-08-28)

Hardening:

The privateKey, publicKey, chainCode, identifier, pubKeyHash now return copies instead of live buffers

deriveChild no longer blindly try-catches. Use proper filtered-by-kind error handling. Retries will stop at last valid index instead of overflowing with error

fromExtendedKey now rejects checksum-valid payloads that are not exactly 78 bytes

Stricter HDKey constructor validation: depth must be an integer in 0..255 (throws RangeError), index and parentFingerprint must be valid uint32 values, and chainCode must be exactly 32 bytes

derive(path) now rejects paths up front that would exceed the maximum serializable depth of 255

Added toPrivateJSON() for explicit private (xpriv + xpub) export; toJSON() currently still includes xpriv for backwards compatibility (planned to become public-only in v3, so migrate to toPrivateJSON() for private round-trips)

fromJSON now also accepts { xpub } to restore a public-only key

Upgrade deps: noble-hashes, noble-curves and scure-base to 2.4.0.

Commits

ab00d7f Release 2.4.0.
d76c8e7 Upgrade deps, add changelog
06aeff3 Bump jsbt
facbdf2 Harden: use nullish check; and prohibit second internal arg in deriveChild
ba6e898 Use getters to ensure outputs cannot be mutated
09a0a15 Bump devdeps
23a2339 Harden. Improve deriveChild logic: do not blindly try-catch.
See full diff in compare view

Updates @scure/bip39 from 2.3.0 to 2.4.0

Release notes

Sourced from @scure/bip39's releases.

2.4.0

Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected

Upgrade noble-hashes to 2.4.0

Improve tests

Full Changelog: paulmillr/scure-bip39@2.3.0...2.4.0

Changelog

Sourced from @scure/bip39's changelog.

2.4.0 (2026-08-28)

Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected

Upgrade noble-hashes to 2.4.0

Improve tests

Commits

2c8cf46 Release 2.4.0.
af5414c Update devdeps, add changelog
f80dd87 wordlists: reject ill-formed words
8073136 Bump jsbt
4ccd7e5 Reject ill-formed Unicode from inputs
44ab886 Update devdeps / lockfile
dfcb773 Add more tests, update fetch-wordlist
db04e10 Bump devdeps
See full diff in compare view

Updates lucide-react from 1.34.0 to 1.39.0

Release notes

Sourced from lucide-react's releases.

Version 1.39.0

What's Changed

fix(icons): added RWD metadata to monitor, tablet & smartphone icons by @karsa-mistmere in lucide-icons/lucide#4775

feat(icons): add whistle icon by @timmy471 in lucide-icons/lucide#3006

feat(icons): Add mail-pen icon by @jennieboops in lucide-icons/lucide#4399

Full Changelog: lucide-icons/lucide@1.38.0...1.39.0

Version 1.38.0

What's Changed

feat(icons): Add polygon icon by @timmy471 in lucide-icons/lucide#3007

Full Changelog: lucide-icons/lucide@1.36.0...1.38.0

Version 1.37.0

What's Changed

feat(icons): added 'robot-vacuum' icon by @benhaube in lucide-icons/lucide#4599

feat(icons): made face-angry even more angry by @karsa-mistmere in lucide-icons/lucide#4708

fix(icons): changed swords icon by @jguddas in lucide-icons/lucide#4707

fix(icons): changed shopping-cart icon by @jguddas in lucide-icons/lucide#2909

docs(icon-description): added old and empty tags/use case for ghost by @TFJ5183 in lucide-icons/lucide#4762

feat(icons): add playing-card, playing-cards, and playing-cards-fan by @Barakudum in lucide-icons/lucide#4258

fix(icons): changed beef icon by @jguddas in lucide-icons/lucide#3457

chore(tags): added music disc related tags to circle-dot by @jguddas in lucide-icons/lucide#3909

fix(icons): changed panda icon by @jguddas in lucide-icons/lucide#3187

fix(icons): rotate blend icon by @jguddas in lucide-icons/lucide#3105

fix(icons): rotate key icon by @jguddas in lucide-icons/lucide#3111

fix(icons): changed square-split-vertical icon by @jguddas in lucide-icons/lucide#3939

fix(icons): changed asterisk icon by @jguddas in lucide-icons/lucide#3906

fix(icons): unify check, cross and plus sizes across icons by @karsa-mistmere in lucide-icons/lucide#3875

feat(icons): added message-circle-dashed-check icon by @aliyasirnac in lucide-icons/lucide#3678

fix(icons): changed piano icon by @karsa-mistmere in lucide-icons/lucide#4766

feat(icons): added credit-card-x & credit-card-check icon by @karsa-mistmere in lucide-icons/lucide#4763

feat(icons): added credit-card-minus icon by @ameniti-mx in lucide-icons/lucide#4440

feat(icons): added credit-card-plus icon by @ameniti-mx in lucide-icons/lucide#4441

New Contributors

@benhaube made their first contribution in lucide-icons/lucide#4599

@TFJ5183 made their first contribution in lucide-icons/lucide#4762

@aliyasirnac made their first contribution in lucide-icons/lucide#3678

@ameniti-mx made their first contribution in lucide-icons/lucide#4440

Full Changelog: lucide-icons/lucide@1.35.0...1.37.0

Version 1.36.0

What's Changed

feat(icons): added 'robot-vacuum' icon by @benhaube in lucide-icons/lucide#4599

feat(icons): made face-angry even more angry by @karsa-mistmere in lucide-icons/lucide#4708

... (truncated)

Commits

See full diff in compare view

Updates next from 16.3.3 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

Commits

299180d v16.3.4
12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
d8f4560 [16.3.x] Fix build error when aliasing typescript to @typescript/typescript6 ...
656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
See full diff in compare view

Updates @next/third-parties from 16.3.3 to 16.3.4

Release notes

Sourced from @next/third-parties's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

Commits

299180d v16.3.4
See full diff in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)

d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)

212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)

e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)

fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator

6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)

6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution

019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates

652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller

571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card

9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm

8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.
npm install zod@latest
At a glance:

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the flagship feature of Zod 4.5

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — 12–19 digits plus Luhn checksum

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the multi-property counterpart to z.property()

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD/https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD

... (truncated)

Commits

e8e206f 4.5.4
84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
1a16102 4.5.3
eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
e3a695b docs(v4): record the email regex and container output-shape findings under Open
99fce39 bench(v4): z.compile() against zod-compiler (#6499)
87d6464 fix(docs): drop the OG description when the title wraps past two lines
e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
9a193aa 4.5.2
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [@scure/bip32](https://github.com/paulmillr/scure-bip32) | `2.3.0` | `2.4.0` | | [@scure/bip39](https://github.com/paulmillr/scure-bip39) | `2.3.0` | `2.4.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.34.0` | `1.39.0` | | [next](https://github.com/vercel/next.js) | `16.3.3` | `16.3.4` | | [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties) | `16.3.3` | `16.3.4` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | Updates `@scure/bip32` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/paulmillr/scure-bip32/releases) - [Changelog](https://github.com/paulmillr/scure-bip32/blob/main/CHANGELOG.md) - [Commits](paulmillr/scure-bip32@2.3.0...2.4.0) Updates `@scure/bip39` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/paulmillr/scure-bip39/releases) - [Changelog](https://github.com/paulmillr/scure-bip39/blob/main/CHANGELOG.md) - [Commits](paulmillr/scure-bip39@2.3.0...2.4.0) Updates `lucide-react` from 1.34.0 to 1.39.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.39.0/packages/lucide-react) Updates `next` from 16.3.3 to 16.3.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.3...v16.3.4) Updates `@next/third-parties` from 16.3.3 to 16.3.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.4/packages/third-parties) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) --- updated-dependencies: - dependency-name: "@scure/bip32" dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@scure/bip39" dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: next dependency-version: 16.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@next/third-parties" dependency-version: 16.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-09-02T14:32:52Z

⚠️ No Changeset found

Latest commit: 33cf06b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

netlify · 2026-09-02T14:32:56Z

✅ Deploy Preview for liveccc ready!

Name	Link
🔨 Latest commit	`33cf06b`
🔍 Latest deploy log	https://app.netlify.com/projects/liveccc/deploys/6a983393b4e1030008c3866d
😎 Deploy Preview	https://deploy-preview-504--liveccc.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 10 (🔴 down 31 from production) Accessibility: 88 (no change from production) Best Practices: 92 (🔴 down 8 from production) SEO: 100 (no change from production) PWA: - View the detailed breakdown and full score reports
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify · 2026-09-02T14:32:56Z

✅ Deploy Preview for apiccc ready!

Name	Link
🔨 Latest commit	`33cf06b`
🔍 Latest deploy log	https://app.netlify.com/projects/apiccc/deploys/6a9833938756750009faf056
😎 Deploy Preview	https://deploy-preview-504--apiccc.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 83 (🔴 down 8 from production) Accessibility: 100 (no change from production) Best Practices: 100 (no change from production) SEO: 95 (no change from production) PWA: - View the detailed breakdown and full score reports
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify · 2026-09-02T14:33:00Z

✅ Deploy Preview for docsccc ready!

Name	Link
🔨 Latest commit	`33cf06b`
🔍 Latest deploy log	https://app.netlify.com/projects/docsccc/deploys/6a983393a890000008adfe01
😎 Deploy Preview	https://deploy-preview-504--docsccc.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 77 (🔴 down 11 from production) Accessibility: 95 (no change from production) Best Practices: 92 (🔴 down 8 from production) SEO: 75 (no change from production) PWA: - View the detailed breakdown and full score reports
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify · 2026-09-02T14:34:11Z

✅ Deploy Preview for appccc ready!

Name	Link
🔨 Latest commit	`33cf06b`
🔍 Latest deploy log	https://app.netlify.com/projects/appccc/deploys/6a983393fc267a00082fc047
😎 Deploy Preview	https://deploy-preview-504--appccc.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 43 (🔴 down 41 from production) Accessibility: 97 (no change from production) Best Practices: 92 (🔴 down 8 from production) SEO: 97 (🟢 up 9 from production) PWA: - View the detailed breakdown and full score reports
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

dependabot · 2026-09-03T13:27:33Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026

dependabot Bot closed this Sep 3, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dev/production-dependencies-e3493e2c09 branch September 3, 2026 13:27

Navigation Menu

Uh oh!

chore(deps): bump the production-dependencies group with 6 updates - #504

chore(deps): bump the production-dependencies group with 6 updates#504
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/production-dependencies-e3493e2c09

dependabot Bot commented on behalf of github Sep 2, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Sep 2, 2026

Uh oh!

netlify Bot commented Sep 2, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Sep 2, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Sep 2, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Sep 2, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.4.0

2.4.0 (2026-08-28)

2.4.0

2.4.0 (2026-08-28)

Version 1.39.0

What's Changed

Version 1.38.0

What's Changed

Version 1.37.0

What's Changed

New Contributors

Version 1.36.0

What's Changed

v16.3.4

Credits

v16.3.4

Credits

v4.5.4

Commits:

v4.5.3

Commits:

v4.5.2

Commits:

v4.5.1

Commits:

v4.5.0

Uh oh!

changeset-bot Bot commented Sep 2, 2026

⚠️ No Changeset found

Uh oh!

netlify Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for liveccc ready!

Uh oh!

netlify Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for apiccc ready!

Uh oh!

netlify Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for docsccc ready!

Uh oh!

netlify Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for appccc ready!

Uh oh!

dependabot Bot commented on behalf of github Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 2, 2026 •

edited

Loading

netlify Bot commented Sep 2, 2026 •

edited

Loading

netlify Bot commented Sep 2, 2026 •

edited

Loading

netlify Bot commented Sep 2, 2026 •

edited

Loading

netlify Bot commented Sep 2, 2026 •

edited

Loading