Skip to content

chore(deps)(deps): bump the runtime-deps group across 1 directory with 17 updates - #30241

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/runtime-deps-62323f42be
Open

chore(deps)(deps): bump the runtime-deps group across 1 directory with 17 updates#30241
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/runtime-deps-62323f42be

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the runtime-deps group with 17 updates in the / directory:

Package From To
uniku 0.5.0 0.6.0
wrap-ansi 10.0.0 10.0.1
@vercel/detect-agent 1.2.4 1.2.5
jose 6.2.8 6.2.11
bson 7.3.1 7.3.2
pg-cursor 2.21.0 2.22.0
vitest 4.1.10 4.1.11
next 16.3.0 16.3.4
@react-router/node 8.3.0 8.3.1
@react-router/serve 8.3.0 8.3.1
isbot 5.2.1 5.2.2
react-router 8.3.0 8.3.1
postcss 8.5.26 8.5.28
@prisma/dev 0.25.1 0.25.2
tsx 4.23.12 4.23.13
vscode-languageserver-textdocument 1.0.12 1.0.14
vscode-languageserver 10.1.0 10.1.1

Updates uniku from 0.5.0 to 0.6.0

Release notes

Sourced from uniku's releases.

uniku CLI v0.6.0

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/cli@0.5.2...uniku-cli-v0.6.0

uniku@0.6.0

Minor Changes

  • e5294d9: Publish the final pre-v1 migration release with the secs, seq, and Nanoid object-form size aliases explicitly deprecated. Use msecs, counter, and length instead; the aliases will be removed in 1.0.0-rc.1.

uniku CLI v0.5.2

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/cli@0.5.1...uniku-cli-v0.5.2

uniku CLI v0.5.1

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/cli@0.5.0...uniku-cli-v0.5.1

Changelog

Sourced from uniku's changelog.

0.6.0

Minor Changes

  • e5294d9: Publish the final pre-v1 migration release with the secs, seq, and Nanoid object-form size aliases explicitly deprecated. Use msecs, counter, and length instead; the aliases will be removed in 1.0.0-rc.1.
Commits
  • 9f171bb chore(release): version packages
  • e5294d9 docs(uniku): schedule deprecated alias removals
  • a26f226 docs: document generator public APIs
  • c4fd1c5 revert: restore main before v1 RC review
  • 641aeb4 chore(release): prepare uniku 1.0.0-rc.0
  • 13175e4 docs(uniku): finalize v1 migration contract
  • 9246e9f test(uniku): lock v1 package removals
  • 0172a2e refactor(uniku): remove pre-v1 option aliases
  • 4bc91f7 refactor(uniku): make CUID v2 canonical
  • See full diff in compare view

Updates wrap-ansi from 10.0.0 to 10.0.1

Release notes

Sourced from wrap-ansi's releases.

v10.0.1

  • Fix handling of hyperlinks 1f23be6

chalk/wrap-ansi@v10.0.0...v10.0.1

Commits

Updates @vercel/detect-agent from 1.2.4 to 1.2.5

Release notes

Sourced from @​vercel/detect-agent's releases.

@​vercel/h3@​0.1.116

Patch Changes

  • @​vercel/node@​5.9.3

@​vercel/h3@​0.1.115

Patch Changes

  • @​vercel/node@​5.9.2

@​vercel/h3@​0.1.114

Patch Changes

  • @​vercel/node@​5.9.1

@​vercel/h3@​0.1.113

Patch Changes

  • Updated dependencies [4502520]
    • @​vercel/node@​5.9.0

@​vercel/h3@​0.1.112

Patch Changes

  • @​vercel/node@​5.8.27
Changelog

Sourced from @​vercel/detect-agent's changelog.

1.2.5

Patch Changes

  • 2da7809: Remove redundant and ineffective package tests.
Commits

Updates jose from 6.2.8 to 6.2.11

Release notes

Sourced from jose's releases.

v6.2.11

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)
  • jwt: validate unsecured protected headers (230c14e)
  • key: validate generation and import options (15d880e)
  • reject mixed b64 modes for empty General JWS payloads (61a2ef7)
  • x509: reject DER truncated past its outer length (d8db9f6)

Documentation

  • jwks: correct cache timestamp units (01a44d9)

Refactor

  • jose: share binary input validation (eedb124)
  • jose: share compact token processing internals (85e30ed)
  • jwe: consolidate CBC decryption failures (1ee6f61)
  • jwe: specialize compact processing (a998927)
  • jwe: streamline single-recipient encryption (290aaa6)
  • jwks: compact JWK Set shape validation (930c7df), references Array#every
  • jwks: compact local key selection (4cb5ae5)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.11 (2026-09-04)

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)
  • jwt: validate unsecured protected headers (230c14e)
  • key: validate generation and import options (15d880e)
  • reject mixed b64 modes for empty General JWS payloads (61a2ef7)
  • x509: reject DER truncated past its outer length (d8db9f6)

Documentation

  • jwks: correct cache timestamp units (01a44d9)

Refactor

  • jose: share binary input validation (eedb124)
  • jose: share compact token processing internals (85e30ed)
  • jwe: consolidate CBC decryption failures (1ee6f61)
  • jwe: specialize compact processing (a998927)
  • jwe: streamline single-recipient encryption (290aaa6)

... (truncated)

Commits
  • f5e5606 chore(release): 6.2.11
  • d60f1b4 chore: bump packages
  • 55b970f refactor(types): reduce declaration repetition
  • 681482f docs: shorten API index descriptions
  • 33c8817 build: verify published subpath contract
  • 542829d build: compact emitted ESM syntax
  • 94589ee docs: render subpath indexes as tables
  • a778a0b test: cover root exports and algorithm facades
  • e01dda6 refactor: model JWE key management modes
  • 920bc40 ci: test trigger-ci pushes
  • Additional commits viewable in compare view

Updates bson from 7.3.1 to 7.3.2

Release notes

Sourced from bson's releases.

v7.3.2

7.3.2 (2026-07-31)

The MongoDB Node.js team is pleased to announce version 7.3.2 of the bson package!

Release Notes

calculateObjectSize() now returns accurate byte counts for Int32 and BSONSymbol

Previously, each Int32 or BSONSymbol value caused a 12-byte overcount.

calculateObjectSize() now yields proper size calculations on ES Map's

This release of js-bson fixes an issue where we were incorrectly considering ES Map objects inside calculateObjectSize. This issue did not impact serialization, just size calculation.

Fixed incorrect date boundary in relaxed EJSON

This release of js-bson fixes an issue where the date boundary for relaxed EJSON was incorrectly set to a date 5 hours after the maximum limit of 10,000 AD.

Fixed an issue with ObjectId initialization in Cloudflare Workers

This release of js-bson fixes an issue where we were making crypto calls during module initialization, which is forbidden by Cloudflare Workers and other environments.

Memory optimization via smaller ObjectIds

ObjectId now stores its 12 bytes as four inline integers instead of a Uint8Array, cutting per-ObjectId memory by about 63% (and roughly 45 to 47% across large result sets) with no serialization slowdown. Deep equality and cloning are preserved (assert.deepStrictEqual, and lodash isEqual / cloneDeep).

Thanks to @​spokodev for contributing their fixes! (NODE-7631 (#901), NODE-7645 (#917), NODE-7646 (#910))

Bug Fixes

  • NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)
  • NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)
  • NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)
  • NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

  • NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

Changelog

Sourced from bson's changelog.

7.3.2 (2026-07-31)

Bug Fixes

  • NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)
  • NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)
  • NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)
  • NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

  • NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)
Commits
  • 9cd2e68 chore(main): release 7.3.2 (#902)
  • 9272c9a fix(NODE-7645): use the first instant of year 10000 as the relaxed EJSON date...
  • 8d28b12 fix(NODE-7646): count ES Map entries in calculateObjectSize (#910)
  • 665286f fix(NODE-7667): remove early initialization from ObjectId (#916)
  • 1fc57e4 chore(NODE-7681): allow git fetch for npm12 (#914)
  • 57b5bf0 chore: use bundled version of NPM (#913)
  • a84229c perf(NODE-6246): store ObjectId bytes as four packed integers (#893)
  • 7f948a6 fix(NODE-7631): count Int32 and BSONSymbol in calculateObjectSize (#901)
  • See full diff in compare view

Updates pg-cursor from 2.21.0 to 2.22.0

Commits

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Updates next from 16.3.0 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

... (truncated)

Commits
  • 299180d v16.3.4
  • 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
  • 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
  • d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
  • 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
  • a9a1cb7 v16.3.3
  • 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 3a15b4a [16.3.x] [next/image]: disable avif image optimization
  • 7378b51 Backport/docs fixes 16.3 (#97649)
  • Additional commits viewable in compare view

Updates @react-router/node from 8.3.0 to 8.3.1

Release notes

Sourced from @​react-router/node's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from @​react-router/node's changelog.

v8.3.1

Patch Changes

  • Bump @remix-run/node-fetch-server dependency (#15447)
  • fix: Prevent client disconnects during streaming from crashing the Node process (#15324)
  • Updated dependencies:
Commits

Updates @react-router/serve from 8.3.0 to 8.3.1

Release notes

Sourced from @​react-router/serve's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from @​react-router/serve's changelog.

v8.3.1

Patch Changes

  • Bump @remix-run/node-fetch-server dependency (#15447)
  • Serve /.well-known/* files from the client build directory. Express 5's static middleware ignores every dot-segment path by default, so RFC 8615 well-known URIs — ACME challenges, Android's assetlinks.json, Apple's apple-app-site-association — fell through to the request handler and came back as app-rendered HTML instead of the static file. Other dotfiles remain hidden. (#15340)
  • Updated dependencies:
Commits

Updates isbot from 5.2.1 to 5.2.2

Changelog

Sourced from isbot's changelog.

5.2.2

  • Pattern update: reduce size
Commits
  • eff2b5a Pattern update: reduce size
  • 09506ca adjust procedure for zsh, too
  • 06e1827 Does anyone read this? I'll be at the coffee shop accross the street.
  • 344052d nothing really
  • See full diff in compare view

Updates react-router from 8.3.0 to 8.3.1

Release notes

Sourced from react-router's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from react-router's changelog.

v8.3.1

Patch Changes

  • Fix Expected fetcher: <key> error thrown on navigation when a fetcher is aborted during its post-action revalidation (#15365)
  • Fix lazy route discovery caching a path as discovered when the triggering navigation was aborted after the manifest response settled but before the route tree was patched, which permanently (for the session) shadowed the real route behind a catch-all or produced 404s on every subsequent visit (#15399)
  • Improve route matching performance for long paths (#15417)
  • Improve validation of action request origins (#15419)
  • Fix <ScrollRestoration> leaving history.scrollRestoration set to "auto" after a bfcache restore, which let the browser restore scroll on subsequent history traversals before the destination route had rendered (#15397)
  • Properly respect the relative option in useSubmit/fetcher.submit when resolivng the action path (#15400)
  • Add additional URL validation on client side navigations/redirects (#15445)
Commits
  • da2a0f0 Release v8.3.1 (#15368)
  • 917e6fd fix(fog-of-war): don't cache aborted lazy route discoveries as discovered (#1...
  • 2e0bf72 Validate client-side navigation targets (#15445)
  • f45d4ca Revert "fix: normalize control characters in relative URLs (#15416)" (#15442)
  • c091832 fix: validate schemeful action origins (#15419)
  • 308d206 fix: improve matching perf (#15417)
  • 36bdbeb fix: normalize control characters in relative URLs (#15416)
  • 801e2ae fix(react-router): re-enable manual scroll restoration after a bfcache restor...
  • 5e98140 fix: honor the relative option in useSubmit and fetcher.submit (#15400)
  • 5843d38 refactor(router): use definite assignment assertions in createDeferred (#15396)
  • Additional commits viewable in compare view

Updates postcss from 8.5.26 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

  • Fixes types regression.

8.5.27

Changelog

Sourced from postcss's changelog.

8.5.28

  • Fixes types regression.

8.5.27

Commits

Updates @prisma/dev from 0.25.1 to 0.25.2

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits

Updates vscode-languageserver-textdocument from 1.0.12 to 1.0.14

Release notes

Sourced from vscode-languageserver-textdocument's releases.

release/textDocument/1.0.13

Changes:

Bugs:

  • #752: Edits are applied twice

Others:

  • #1775: Update dependencies and improve compatibility
  • #1774: Bump qs from 6.15.0 to 6.15.2
  • #1773: Implement TextDocumentSnapshot for delay open notifications
  • #1772: Prevent pulling diagnostics on untitled documents
  • #1770: Update documentation and fix lint errors
  • #1767: Inline value documentation improvements
  • #1769: Fix glob pattern documentation
  • #1768: Make document color requests consistent with the specification
  • #1766: Add optional MarkupContent support to diagnostics
  • #1751: forgetDocument is crashing the extension host
  • #1765: Fixes #1751: Prevent crash in forgetDocument when disposed
  • #1752: fix: random pipe path length extends limit on macos
  • #1764: Fixes double application of edits during renaming
  • #1762: Bump brace-expansion from 5.0.3 to 5.0.6 in /client
  • #1763: Bump brace-expansion from 5.0.5 to 5.0.6 in /client-node-tests
  • #1761: Inline Linux/macOS process-tree termination in client dispose path
  • #1760: Remove uuid dependency and use crypto's randomUUID
  • #1759: Bump fast-uri from 3.1.0 to 3.1.2
  • #1753: Bump follow-...

    Description has been truncated

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 9, 2026 17:23
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 9, 2026
@pkg-pr-new

pkg-pr-new Bot commented Sep 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

@prisma/orm-extension-arktype-json

npm i https://pkg.pr.new/@prisma/orm-extension-arktype-json@30241

@prisma/orm-extension-middleware-cache

npm i https://pkg.pr.new/@prisma/orm-extension-middleware-cache@30241

@prisma/orm-extension-paradedb

npm i https://pkg.pr.new/@prisma/orm-extension-paradedb@30241

@prisma/orm-extension-pgvector

npm i https://pkg.pr.new/@prisma/orm-extension-pgvector@30241

@prisma/orm-extension-postgis

npm i https://pkg.pr.new/@prisma/orm-extension-postgis@30241

@prisma/orm-extension-supabase

npm i https://pkg.pr.new/@prisma/orm-extension-supabase@30241

@prisma/orm-family-mongo

npm i https://pkg.pr.new/@prisma/orm-family-mongo@30241

@prisma/orm-family-sql

npm i https://pkg.pr.new/@prisma/orm-family-sql@30241

@prisma/orm-framework

npm i https://pkg.pr.new/@prisma/orm-framework@30241

@prisma/orm-mongo

npm i https://pkg.pr.new/@prisma/orm-mongo@30241

@prisma/orm-postgres

npm i https://pkg.pr.new/@prisma/orm-postgres@30241

@prisma/orm-sqlite

npm i https://pkg.pr.new/@prisma/orm-sqlite@30241

@prisma/orm-target-mongo

npm i https://pkg.pr.new/@prisma/orm-target-mongo@30241

@prisma/orm-target-postgres

npm i https://pkg.pr.new/@prisma/orm-target-postgres@30241

@prisma/orm-target-sqlite

npm i https://pkg.pr.new/@prisma/orm-target-sqlite@30241

@prisma/orm-toolchain

npm i https://pkg.pr.new/@prisma/orm-toolchain@30241

commit: 38646a7

@github-actions

github-actions Bot commented Sep 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size
postgres / no-emit 181.74 KB (+0.19% 🔺)
postgres / emit 154.93 KB (+0.24% 🔺)
mongo / no-emit 107.81 KB (+0.51% 🔺)
mongo / emit 92.34 KB (+0.59% 🔺)
cf-worker / no-emit 206.15 KB (+0.15% 🔺)
cf-worker / emit 176.41 KB (+0.19% 🔺)

@dependabot
chore(deps)(deps): bump the runtime-deps group across 1 directory wit…
38646a7 
…h 17 updates

Bumps the runtime-deps group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [uniku](https://github.com/jkomyno/uniku/tree/HEAD/packages/uniku) | `0.5.0` | `0.6.0` |
| [wrap-ansi](https://github.com/chalk/wrap-ansi) | `10.0.0` | `10.0.1` |
| [@vercel/detect-agent](https://github.com/vercel/vercel/tree/HEAD/packages/detect-agent) | `1.2.4` | `1.2.5` |
| [jose](https://github.com/panva/jose) | `6.2.8` | `6.2.11` |
| [bson](https://github.com/mongodb/js-bson) | `7.3.1` | `7.3.2` |
| [pg-cursor](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg-cursor) | `2.21.0` | `2.22.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [next](https://github.com/vercel/next.js) | `16.3.0` | `16.3.4` |
| [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) | `8.3.0` | `8.3.1` |
| [@react-router/serve](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve) | `8.3.0` | `8.3.1` |
| [isbot](https://github.com/omrilotan/isbot) | `5.2.1` | `5.2.2` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `8.3.0` | `8.3.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| @prisma/dev | `0.25.1` | `0.25.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [vscode-languageserver-textdocument](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/textDocument) | `1.0.12` | `1.0.14` |
| [vscode-languageserver](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/server) | `10.1.0` | `10.1.1` |



Updates `uniku` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/jkomyno/uniku/releases)
- [Changelog](https://github.com/jkomyno/uniku/blob/main/packages/uniku/CHANGELOG.md)
- [Commits](https://github.com/jkomyno/uniku/commits/uniku@0.6.0/packages/uniku)

Updates `wrap-ansi` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/chalk/wrap-ansi/releases)
- [Commits](chalk/wrap-ansi@v10.0.0...v10.0.1)

Updates `@vercel/detect-agent` from 1.2.4 to 1.2.5
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/detect-agent/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/ruby@1.2.5/packages/detect-agent)

Updates `jose` from 6.2.8 to 6.2.11
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.8...v6.2.11)

Updates `bson` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v7.3.1...v7.3.2)

Updates `pg-cursor` from 2.21.0 to 2.22.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg-cursor@2.22.0/packages/pg-cursor)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `next` from 16.3.0 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.0...v16.3.4)

Updates `@react-router/node` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@8.3.1/packages/react-router-node)

Updates `@react-router/serve` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-serve/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/serve@8.3.1/packages/react-router-serve)

Updates `isbot` from 5.2.1 to 5.2.2
- [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md)
- [Commits](omrilotan/isbot@v5.2.1...v5.2.2)

Updates `react-router` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@8.3.1/packages/react-router)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `@prisma/dev` from 0.25.1 to 0.25.2

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `vscode-languageserver-textdocument` from 1.0.12 to 1.0.14
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/HEAD/textDocument)

Updates `vscode-languageserver` from 10.1.0 to 10.1.1
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.1.1/server)

---
updated-dependencies:
- dependency-name: "@prisma/dev"
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@react-router/node"
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@react-router/serve"
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@vercel/detect-agent"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: bson
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: isbot
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: jose
  dependency-version: 6.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: next
  dependency-version: 16.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: pg-cursor
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-deps
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: react-router
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: uniku
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-deps
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: vscode-languageserver
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: vscode-languageserver-textdocument
  dependency-version: 1.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: wrap-ansi
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/runtime-deps-62323f42be branch from 685598d to 38646a7 Compare September 10, 2026 15:19
@coderabbitai

coderabbitai Bot commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Advanced

Run ID: 9d2ea68a-e2cc-423f-807c-2a559638eb1d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants