chore(deps)(deps): bump the npm-minor-patch group across 1 directory with 16 updates by dependabot[bot] · Pull Request #30 · rsalmn/ExtremeRouter

dependabot · 2026-08-23T23:08:54Z

Bumps the npm-minor-patch group with 15 updates in the / directory:

Package	From	To
@next/third-parties	`16.2.12`	`16.3.1`
@xyflow/react	`12.11.1`	`12.11.3`
jose	`6.2.3`	`6.2.9`
marked	`18.0.5`	`18.0.10`
material-symbols	`0.44.12`	`0.46.0`
monaco-editor	`0.55.1`	`0.56.0`
next	`16.2.12`	`16.3.1`
open	`11.0.0`	`11.0.1`
react	`19.2.4`	`19.2.8`
react-dom	`19.2.4`	`19.2.8`
recharts	`3.9.1`	`3.10.1`
sql.js	`1.14.1`	`1.14.2`
zustand	`5.0.14`	`5.0.15`
@tailwindcss/postcss	`4.3.2`	`4.3.3`
eslint-config-next	`16.1.6`	`16.3.1`

Updates @next/third-parties from 16.2.12 to 16.3.1

Release notes

Sourced from @next/third-parties's releases.

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645

Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636

Turbopack: rename to use turbopack: no side effects: #94427

refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360

[PPF] unstable_navigation(): #96908

[PPF] Scaffold unstable_navigation(): #97236

docs: Explicit cache output description: #97548

Improve Cache Components sync IO migration guidance: #97572

[test] Use a non-native stub for the server externals list test: #97614

Avoid GitHub API rate limits for create-next-app examples: #97612

[test] Cover the prerender worker-thread backend with an addon we control: #97543

[test] Convert the prerender-native-module suite to local fixture packages: #97542

[test] Replace the turbopack-reports sqlite3 dependency with a local addon fixture: #97541

[test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540

[ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590

Remove HmrTarget: #97253

Keep HMR instructions typed until serialization: #96569

Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits

3d32eb8 v16.3.1
d73f562 v16.3.0
4fd843f v16.3.0-canary.107
9480f7f v16.3.0-canary.106
a8dcd25 v16.3.0-canary.105
38f0cde v16.3.0-canary.104
f3edea1 v16.3.0-canary.103
0d5ff0d v16.3.0-canary.102
cf1e001 v16.3.0-canary.101
267d6b1 v16.3.0-canary.100
Additional commits viewable in compare view

Updates @xyflow/react from 12.11.1 to 12.11.3

Release notes

Sourced from @xyflow/react's releases.

@xyflow/react@12.11.3

Patch Changes

#5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

#5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

#5943 d1def59 - Invoke an error if handle can not be found

#5947 2ba040f - Use correct nodeExtent for internal setNodes.

#5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

#5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

#5929 4c5d7d2 - Allow key combinations of three or more keys (e.g. 'Meta+Shift+s') for useKeyPress.

#5938 91a052f - Fix <Background /> pattern offset miscalculation.

Updated dependencies [393d951, ff126a0, e5d86bd, 392da00]:

@xyflow/system@0.0.80

@xyflow/react@12.11.2

Patch Changes

#5825 5072914 - Only create an XYDrag instance for draggable nodes.

#5847 742860c - Stop the MiniMap from re-rendering on every store update.

#5846 17c64a1 - Apply the viewport pan/zoom transform imperatively so the Viewport component only renders once.

Updated dependencies [c707267, 0c0cebc, 56cf3b0, a01bb6b, 9b3f390, cdfcbeb]:

@xyflow/system@0.0.79

Changelog

Sourced from @xyflow/react's changelog.

12.11.3

Patch Changes

#5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

#5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

#5943 d1def59 - Invoke an error if handle can not be found

#5947 2ba040f - Use correct nodeExtent for internal setNodes.

#5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

#5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

#5929 4c5d7d2 - Allow key combinations of three or more keys (e.g. 'Meta+Shift+s') for useKeyPress.

#5938 91a052f - Fix <Background /> pattern offset miscalculation.

Updated dependencies [393d951, ff126a0, e5d86bd, 392da00]:

@xyflow/system@0.0.80

12.11.2

Patch Changes

#5825 5072914 - Only create an XYDrag instance for draggable nodes.

#5847 742860c - Stop the MiniMap from re-rendering on every store update.

... (truncated)

Commits

359f70c chore(packages): bump
e90a1b6 Merge pull request #5938 from Feyyus/fix/background-offset-precedence
2ba040f fix(react): use the current nodeExtent in setNodes
42f367e Merge pull request #5922 from Skyline-23/fix/control-pan-activation
d7dbd57 Merge pull request #5929 from Jian-Zhang08/fix/usekeypress-multi-key-combination
bdcf89a fix(edge-wrapper): pass onError prop closes #5936, closes #5932
91a052f fix(react): correct offset math in Background pattern
4c5d7d2 fix(react): make useKeyPress work with combinations of three or more keys
392da00 fix(system): allow Control key to activate pane panning
c5d7442 fix(pane): prefer touch panning over drag selection
Additional commits viewable in compare view

Updates jose from 6.2.3 to 6.2.9

Release notes

Sourced from jose's releases.

v6.2.9

Fixes

reject a JWE whose generated Key Management Parameters collide (6ed19a6)

types: undeprecate PBES2 p2c parameter (33bf832)

v6.2.8

Fixes

enforce a single recipient when decrypting dir and ECDH-ES (505c383)

reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

index the JWS and JWE registries without a wrapper (925f3bb)

name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Fixes

require own JOSE properties for presence checks (90ab09c)

Refactor

reduce bundle size (767d7f1)

v6.2.6

Fixes

types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Fixes

compare claim values for falsy validation options (eb86956)

forward key management parameters for a single JWE recipient (2d4f801)

handle a zero-length JWE additional authenticated data (16ca398)

reject a generateKeyPair crv option the algorithm does not imply (76364e9)

reject an unencoded payload in the JWS Compact Serialization (01d053f)

reject characters outside the Base64URL alphabet (0ebb971), references #879

reject duplicate "crit" values when producing (31d60e1)

reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)

reject truncated ASN.1 key data (7a16c66)

surface non-ASCII token segments as JOSE errors (194fe11)

types: correct JWK and CryptoKey types (62a196d)

types: correct key resolver and JWT header types (e95f8c4)

validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.9 (2026-08-15)

Fixes

reject a JWE whose generated Key Management Parameters collide (6ed19a6)

types: undeprecate PBES2 p2c parameter (33bf832)

6.2.8 (2026-08-03)

Fixes

enforce a single recipient when decrypting dir and ECDH-ES (505c383)

reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

index the JWS and JWE registries without a wrapper (925f3bb)

name the "alg" source in unsupported algorithm failures (1500459)

6.2.7 (2026-08-01)

Fixes

require own JOSE properties for presence checks (90ab09c)

Refactor

reduce bundle size (767d7f1)

6.2.6 (2026-07-31)

Fixes

types: accept host CryptoKey declarations (b48a15b)

6.2.5 (2026-07-29)

Fixes

compare claim values for falsy validation options (eb86956)

forward key management parameters for a single JWE recipient (2d4f801)

handle a zero-length JWE additional authenticated data (16ca398)

reject a generateKeyPair crv option the algorithm does not imply (76364e9)

reject an unencoded payload in the JWS Compact Serialization (01d053f)

reject characters outside the Base64URL alphabet (0ebb971), references #879

reject duplicate "crit" values when producing (31d60e1)

reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)

reject truncated ASN.1 key data (7a16c66)

surface non-ASCII token segments as JOSE errors (194fe11)

types: correct JWK and CryptoKey types (62a196d)

... (truncated)

Commits

f3a3c78 chore(release): 6.2.9
33bf832 fix(types): undeprecate PBES2 p2c parameter
6ed19a6 fix: reject a JWE whose generated Key Management Parameters collide
944840d ci: use shared release workflows
05bccf2 chore: bump packages
f7392d1 test: account for workerd nodejs_compat flag default changes
4e944be ci: drop the wait-for-npm machinery
4285b6f chore(deps-dev): bump undici
cb114ec chore: cleanup after release
8b768eb chore(release): 6.2.8
Additional commits viewable in compare view

Updates marked from 18.0.5 to 18.0.10

Release notes

Sourced from marked's releases.

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

keep the em/strong mask the same length as the source (#4044) (681373c)

parse EOF backtick fences after paragraphs (#4039) (81bd750)

place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

v18.0.9

18.0.9 (2026-08-04)

Bug Fixes

an unmatched strong run before emphasis stays literal (#4008) (e8544e6)

Fix spurious deeper nesting in a blockquote continuation (#4030) (452f1ed)

pedantic foo: and "word" emphasis parsing (#3999) (823093f)

v18.0.8

18.0.8 (2026-08-04)

Bug Fixes

fall back to default checkbox renderer when extension returns false (#4023) (e1b6139)

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991

Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)

keep empty list after blockquote as a sibling block (#4004) (3f144a0)

preserve code spans adjacent to tildes (#4012) (0de7188)

Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1

treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

Avoid O(n^2) backtracking in inline link href regex (#4013) (a009808)

Fix ordered lists after blockquotes (#4003) (33928d0)

keep trailing text on HTML block close line for PI, declarations, and CDATA (#3991) (bbb84c8)

Commits

8698d35 chore(release): 18.0.10 [skip ci]
58367a5 chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 (#4055)
a426c4d chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#4056)
a5cf277 chore(deps-dev): bump highlight.js from 11.11.1 to 11.12.0 (#4057)
ca00e95 docs: replace nonexistent test:all script with npm test (#4054)
b8cf7dc fix: place task checkboxes after list loose is finalized (#4046)
9552b6b chore(deps-dev): bump semantic-release from 25.0.8 to 25.0.9 (#4049)
681373c fix: keep the em/strong mask the same length as the source (#4044)
81bd750 fix: parse EOF backtick fences after paragraphs (#4039)
2e21cd3 docs: move theme button to menu (#4043)
Additional commits viewable in compare view

Updates material-symbols from 0.44.12 to 0.46.0

Commits

96408c6 0.46.0
9cd66ec Auto Update
c3a268e 0.45.10
563f553 Auto Update
643d1af 0.45.9
cb02fb5 Auto Update
91caec4 0.45.8
6524b11 Auto Update
76f017c 0.45.7
f3f2d89 Auto Update
Additional commits viewable in compare view

Updates monaco-editor from 0.55.1 to 0.56.0

Release notes

Sourced from monaco-editor's releases.

v0.56.0

Changes:

#5392: Bump websocket-driver from 0.7.4 to 0.7.5 in /website

#5396: Release Monaco Editor 0.56.0

#5385: Bump websocket-driver from 0.7.4 to 0.7.5 in /samples

#5379: Removes leftover debugger statements.

#5376: fixes pipeline

#5374: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples

#5373: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website

#5371: Bump undici from 7.24.7 to 7.28.0

#5372: Fixes CI

#5363: Bump launch-editor from 2.10.0 to 2.14.1 in /samples

#5362: Bump @babel/core from 7.17.8 to 7.29.6 in /samples/browser-esm-webpack-typescript-react

#5361: Bump js-yaml from 4.1.1 to 4.2.0

#5360: Bump vite from 7.3.2 to 7.3.5

#5358: Bump shell-quote from 1.8.3 to 1.8.4 in /samples

#5359: Bump ws from 8.20.1 to 8.21.0 in /monaco-lsp-client

#5357: Bump esbuild and vite in /samples/browser-esm-vite-react

#5354: Bump shell-quote from 1.8.3 to 1.8.4 in /website

#5333: Bump dompurify from 3.2.7 to 3.4.5

#5347: Revert "Bump dompurify from 3.2.7 to 3.4.5"

#5337: Bump qs from 6.14.2 to 6.15.2

#5338: Bump qs and express in /samples

#5336: Bump qs and express in /website

#5335: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /website

#5331: Bump ws from 8.18.3 to 8.20.1 in /monaco-lsp-client

#5330: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /samples

#5326: Run npm audit fix and update lockfile

#5323: Bump postcss from 8.5.6 to 8.5.14 in /samples/browser-esm-vite-react

#5322: Bump postcss from 8.5.6 to 8.5.14 in /website

#5320: Bump @babel/plugin-transform-modules-systemjs from 7.17.8 to 7.29.4 in /samples/browser-esm-webpack-typescript-react

#5317: Bump fast-uri from 3.1.0 to 3.1.2 in /webpack-plugin

#5315: Bump fast-uri from 3.0.6 to 3.1.2 in /samples

#5316: Bump fast-uri from 3.1.0 to 3.1.2

#5318: Bump fast-uri from 3.1.0 to 3.1.2 in /website

#5319: Bump fast-uri from 3.1.0 to 3.1.2 in /samples/browser-esm-webpack-typescript-react

#5313: Bump postcss from 8.4.31 to 8.5.13 in /samples

#5308: Bump postcss from 8.5.6 to 8.5.12

#5306: Bump postcss from 8.4.31 to 8.5.10 in /webpack-plugin

#5301: Bump follow-redirects from 1.15.9 to 1.16.0 in /samples

#5300: Bump follow-redirects from 1.15.11 to 1.16.0 in /website

#5299: Bump follow-redirects from 1.15.6 to 1.16.0

#5295: Bump vite from 5.4.21 to 6.4.2 in /samples/browser-esm-vite-react

#5293: Bump lodash from 4.17.23 to 4.18.1 in /website

#5292: Bump lodash from 4.17.23 to 4.18.1 in /samples

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.56.0]

Breaking Changes

Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:

all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;

all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;

the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.

Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.

Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

Adds editor.doubleClickSelectsBlock.

Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.

Adds offWhenInlineCompletions to QuickSuggestionsValue.

Adds model and provider option support to inline completion providers.

Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.

Adds advanced-external and advanced-wasm diff algorithms.

Exposes typed native LSP client and transport APIs.

Fixes

Treats Markdown returned by language servers as untrusted (#5280).

Updates the editor core to the version used by 0.56.0-dev-20260625.

Commits

13f0c87 Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)
b5f23a3 Merge pull request #5396 from microsoft/hediet/b/release-0.56.0
9d053ab Improve Monaco Editor 0.56.0 changelog
0ba33d0 Release Monaco Editor 0.56.0
6d961b1 Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)
d8c9ff0 Removes leftover debugger statements. (#5379)
59285ab fixes pipeline (#5376)
aaf58db Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)
d8ac38e Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)
874af57 Bump undici from 7.24.7 to 7.28.0 (#5371)
Additional commits viewable in compare view

Updates next from 16.2.12 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645

Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636

Turbopack: rename to use turbopack: no side effects: #94427

refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360

[PPF] unstable_navigation(): #96908

[PPF] Scaffold unstable_navigation(): #97236

docs: Explicit cache output description: #97548

Improve Cache Components sync IO migration guidance: #97572

[test] Use a non-native stub for the server externals list test: #97614

Avoid GitHub API rate limits for create-next-app examples: #97612

[test] Cover the prerender worker-thread backend with an addon we control: #97543

[test] Convert the prerender-native-module suite to local fixture packages: #97542

[test] Replace the turbopack-reports sqlite3 dependency with a local addon fixture: #97541

[test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540

[ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590

Remove HmrTarget: #97253

Keep HMR instructions typed until serialization: #96569

Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits

3d32eb8 v16.3.1
2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)

…with 16 updates Bumps the npm-minor-patch group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties) | `16.2.12` | `16.3.1` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.1` | `12.11.3` | | [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.9` | | [marked](https://github.com/markedjs/marked) | `18.0.5` | `18.0.10` | | [material-symbols](https://github.com/marella/material-symbols/tree/HEAD/material-symbols) | `0.44.12` | `0.46.0` | | [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.56.0` | | [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.1` | | [open](https://github.com/sindresorhus/open) | `11.0.0` | `11.0.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.8` | | [recharts](https://github.com/recharts/recharts) | `3.9.1` | `3.10.1` | | [sql.js](https://github.com/sql-js/sql.js) | `1.14.1` | `1.14.2` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` | | [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.2` | `4.3.3` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.1.6` | `16.3.1` | Updates `@next/third-parties` from 16.2.12 to 16.3.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.1/packages/third-parties) Updates `@xyflow/react` from 12.11.1 to 12.11.3 - [Release notes](https://github.com/xyflow/xyflow/releases) - [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.3/packages/react) Updates `jose` from 6.2.3 to 6.2.9 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.3...v6.2.9) Updates `marked` from 18.0.5 to 18.0.10 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.0.5...v18.0.10) Updates `material-symbols` from 0.44.12 to 0.46.0 - [Release notes](https://github.com/marella/material-symbols/releases) - [Commits](https://github.com/marella/material-symbols/commits/v0.46.0/material-symbols) Updates `monaco-editor` from 0.55.1 to 0.56.0 - [Release notes](https://github.com/microsoft/monaco-editor/releases) - [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md) - [Commits](microsoft/monaco-editor@v0.55.1...v0.56.0) Updates `next` from 16.2.12 to 16.3.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.1) Updates `open` from 11.0.0 to 11.0.1 - [Release notes](https://github.com/sindresorhus/open/releases) - [Commits](sindresorhus/open@v11.0.0...v11.0.1) Updates `react` from 19.2.4 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.4 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `recharts` from 3.9.1 to 3.10.1 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.9.1...v3.10.1) Updates `sql.js` from 1.14.1 to 1.14.2 - [Release notes](https://github.com/sql-js/sql.js/releases) - [Commits](sql-js/sql.js@v1.14.1...v1.14.2) Updates `zustand` from 5.0.14 to 5.0.15 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.14...v5.0.15) Updates `@tailwindcss/postcss` from 4.3.2 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss) Updates `eslint-config-next` from 16.1.6 to 16.3.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.1/packages/eslint-config-next) Updates `tailwindcss` from 4.3.2 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) --- updated-dependencies: - dependency-name: "@next/third-parties" dependency-version: 16.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@xyflow/react" dependency-version: 12.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: jose dependency-version: 6.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: marked dependency-version: 18.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: material-symbols dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: monaco-editor dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: next dependency-version: 16.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: open dependency-version: 11.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: recharts dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: sql.js dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: zustand dependency-version: 5.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@tailwindcss/postcss" dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: eslint-config-next dependency-version: 16.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-23T23:08:55Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Uh oh!

chore(deps)(deps): bump the npm-minor-patch group across 1 directory with 16 updates - #30

chore(deps)(deps): bump the npm-minor-patch group across 1 directory with 16 updates#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-f3a61e23b4

dependabot Bot commented on behalf of github Aug 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 23, 2026

v16.3.1

What's Changed

v16.3.1-canary.26

Misc Changes

Credits

@​xyflow/react@​12.11.3

Patch Changes

@​xyflow/react@​12.11.2

Patch Changes

12.11.3

Patch Changes

12.11.2

Patch Changes

v6.2.9

Fixes

v6.2.8

Fixes

Refactor

v6.2.7

Fixes

Refactor

v6.2.6

Fixes

v6.2.5

Fixes

Documentation

6.2.9 (2026-08-15)

Fixes

6.2.8 (2026-08-03)

Fixes

Refactor

6.2.7 (2026-08-01)

Fixes

Refactor

6.2.6 (2026-07-31)

Fixes

6.2.5 (2026-07-29)

Fixes

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

v18.0.9

18.0.9 (2026-08-04)

Bug Fixes

v18.0.8

18.0.8 (2026-08-04)

Bug Fixes

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

v0.56.0

Changes:

[0.56.0]

Breaking Changes

New Features and APIs

Fixes

v16.3.1

What's Changed

v16.3.1-canary.26

Misc Changes

Credits

Uh oh!

dependabot Bot commented on behalf of github Aug 23, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@xyflow/react@12`.11.3

`@xyflow/react@12`.11.2