dependabot[bot]
0eadcdc326
build(deps): bump the production-weekly group across 1 directory with 7 updates ( #1354 )
...
Bumps the production-weekly group with 7 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@parse/node-apn](https://github.com/parse-community/node-apn ) | `8.1.1` | `8.2.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ) | `5.105.1` | `5.105.3` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual ) | `3.14.25` | `3.14.26` |
| [jose](https://github.com/panva/jose ) | `6.2.14` | `6.2.15` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react ) | `1.66.0` | `1.67.0` |
| [mmdb-lib](https://github.com/runk/mmdb-lib ) | `3.0.3` | `3.0.4` |
| [otpauth](https://github.com/hectorm/otpauth ) | `9.5.2` | `9.6.0` |
Updates `@parse/node-apn` from 8.1.1 to 8.2.0
- [Release notes](https://github.com/parse-community/node-apn/releases )
- [Changelog](https://github.com/parse-community/node-apn/blob/master/CHANGELOG.md )
- [Commits](https://github.com/parse-community/node-apn/compare/8.1.1...8.2.0 )
Updates `@tanstack/react-query` from 5.105.1 to 5.105.3
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.105.3/packages/react-query )
Updates `@tanstack/react-virtual` from 3.14.25 to 3.14.26
- [Release notes](https://github.com/TanStack/virtual/releases )
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md )
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.26/packages/react-virtual )
Updates `jose` from 6.2.14 to 6.2.15
- [Release notes](https://github.com/panva/jose/releases )
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/panva/jose/compare/v6.2.14...v6.2.15 )
Updates `lucide-react` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.67.0/packages/lucide-react )
Updates `mmdb-lib` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/runk/mmdb-lib/releases )
- [Commits](https://github.com/runk/mmdb-lib/compare/v3.0.3...v3.0.4 )
Updates `otpauth` from 9.5.2 to 9.6.0
- [Release notes](https://github.com/hectorm/otpauth/releases )
- [Commits](https://github.com/hectorm/otpauth/compare/v9.5.2...v9.6.0 )
---
updated-dependencies:
- dependency-name: "@parse/node-apn"
dependency-version: 8.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: "@tanstack/react-query"
dependency-version: 5.105.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
- dependency-name: "@tanstack/react-virtual"
dependency-version: 3.14.26
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
- dependency-name: jose
dependency-version: 6.2.15
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
- dependency-name: lucide-react
dependency-version: 1.67.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: mmdb-lib
dependency-version: 3.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
- dependency-name: otpauth
dependency-version: 9.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-07 03:46:18 +00:00
Marc-André Bombeck
bee4ac4f73
build(deps): move Next.js to 16.4.5
...
16.4.5 is a security release with seven moderate advisories. Most are about 'use cache' and Cache Components, which the app does not use; one covers self-hosted apps that forward fetched responses.
2026-11-07 02:22:28 +01:00
Marc-André Bombeck
84dace4f89
chore(release): v1.47.1
2026-11-07 01:44:29 +01:00
dependabot[bot]
25770912ce
build(deps): bump @tanstack/react-query ( #1336 )
...
Bumps the production-weekly group with 1 update: [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ).
Updates `@tanstack/react-query` from 5.105.0 to 5.105.1
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.105.1/packages/react-query )
---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
dependency-version: 5.105.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 14:39:22 +00:00
Marc-André Bombeck
bc4b9f4350
chore(release): v1.47.0
2026-11-04 14:13:49 +01:00
dependabot[bot]
540f4ff84f
build(deps): bump the production-weekly group across 1 directory with 3 updates ( #1329 )
...
Bumps the production-weekly group with 3 updates in the / directory: [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3 ), [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage ) and [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas ).
Updates `@aws-sdk/client-s3` from 3.1159.0 to 3.1161.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1161.0/clients/client-s3 )
Updates `@aws-sdk/lib-storage` from 3.1159.0 to 3.1161.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1161.0/lib/lib-storage )
Updates `@napi-rs/canvas` from 1.0.13 to 1.1.0
- [Release notes](https://github.com/Brooooooklyn/canvas/releases )
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md )
- [Commits](https://github.com/Brooooooklyn/canvas/compare/v1.0.13...v1.1.0 )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
dependency-version: 3.1161.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: "@aws-sdk/lib-storage"
dependency-version: 3.1161.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: "@napi-rs/canvas"
dependency-version: 1.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-02 21:12:37 +00:00
Marc-André Bombeck
165120e845
chore(release): v1.46.6
2026-11-02 20:52:22 +01:00
Marc-André Bombeck
e7c625cab7
chore(deps): next 16.4.3 and the weekly dependency updates
...
Folds the open dependency updates into one change: next,
@next/bundle-analyzer and eslint-config-next 16.4.3, the production
group (aws-sdk, MCP SDK, node-apn, TanStack Query and Virtual, dotenv,
jose, lucide-react, nodemailer) and the development group (Stryker,
@types/node, knip, shadcn). The runtime prisma install in the Dockerfile
pins dotenv in step with the app.
2026-11-02 20:10:38 +01:00
Marc-André Bombeck
2676f2fce0
chore(release): v1.46.5
2026-10-30 17:09:01 +01:00
Marc-André Bombeck
29b5bc78a0
chore(release): v1.46.4
2026-10-30 13:18:16 +01:00
Marc-André Bombeck
0e57247b29
chore(release): v1.46.3
2026-10-29 22:18:59 +01:00
Marc-André Bombeck
20585f3b3d
chore(release): v1.46.2
2026-10-29 11:28:49 +01:00
Marc-André Bombeck
f4cb15d823
chore(release): v1.46.1
2026-10-26 07:47:25 +01:00
Marc-André Bombeck
f6c62f6f39
chore(release): v1.46.0
2026-10-25 21:10:00 +01:00
Marc-André Bombeck
8783182b1e
build(deps): keep @aws-sdk/client-s3 on the same release as lib-storage
2026-10-25 17:06:17 +01:00
Marc-André Bombeck
328268d894
build(deps): bump the production-weekly group and codeql-action
...
@aws-sdk/client-s3 and lib-storage 3.1155.0, @napi-rs/canvas 1.0.13,
@tanstack/react-virtual 3.14.22, jose 6.2.13, lucide-react 1.61.0,
nodemailer 10.2.1, and github/codeql-action 4.39.1.
2026-10-25 17:05:54 +01:00
Marc-André Bombeck
30c96ff591
chore(deps): drop pdf-parse and the second pdfjs-dist it carried
...
Nothing imports pdf-parse any more, so its pdfjs-dist 5.4.296 and the
older @napi-rs/canvas that came with it leave the lockfile. The override
that kept that transitive copy past a renderer advisory has nothing left
to move and goes too. The standalone tracing stops naming pdf-parse; its
pdfjs-dist glob now matches the one copy the app pins. The Dockerfile and
canvas guard comments describe the second copy as history.
Refs #1277
2026-10-24 19:32:20 +02:00
Marc-André Bombeck
6555acefe1
Merge branch 'release/v1.46.0' into feat/v146-ui
2026-10-23 14:33:21 +02:00
Marc-André Bombeck
a60111cc9d
Merge branch 'feat/v146-ui-browser' into feat/v146-ui
...
# Conflicts:
# src/__tests__/baselines/test-source-reads.json
# src/__tests__/baselines/version-stamp-comments.json
2026-10-23 14:20:08 +02:00
Marc-André Bombeck
b826642853
test(e2e): tag the unmocked release journeys @critical and hold them to the real API
...
Backup and restore, the adherence journey, delegated writes and the offline
page already run against the real server. They carry the @critical tag now,
and a structural guard refuses any /api interception in a file that carries
it, directly or through an imported helper, with a floor on the tagged count.
Global setup seeds one account per critical journey and per project, so the
journeys still to come can run at both widths without writing into each
other or into the shared fixture account. pnpm e2e:critical runs the set.
2026-10-23 12:52:12 +02:00
Marc-André Bombeck
3d1692204b
test: add a browser Vitest project for interactive components
...
Run *.browser.test.tsx in headless Chromium through the Playwright
provider. The shared helper in tests/browser/ mounts the app's own
providers, stubs only the fetch boundary, and shims next/navigation
onto the page's real location and history.
2026-10-23 12:50:42 +02:00
Marc-André Bombeck
9beaa8f640
build(deps): bump the AWS SDK S3 packages to 3.1153.0 and react-query to 5.104.5
2026-10-23 10:37:41 +02:00
Marc-André Bombeck
a787cad7f9
chore(deps): take @tanstack/react-query 5.104.4, knip 6.42 and shadcn 4.22.1
...
The three updates the newest dependency pull requests carry, pinned the way each already was: exact for the query client, a caret floor for the two tools (knip ^6.42.0 resolves to 6.42.1). The dead-code gate is clean under the new knip.
2026-10-22 21:48:27 +02:00
Marc-André Bombeck
9da0e0c405
chore(release): v1.45.0
2026-10-22 20:51:30 +02:00
Marc-André Bombeck
9c8972bc96
Merge origin/main (v1.44.2) into fix/v145-sheet-motion
...
next stays on main's 16.4.2 (the RCE and Server Actions advisories) with its two companions; release's newer dev tools and its own additions are kept. The lockfile is release's, re-resolved. pt-BR, which main does not have, takes the one key main added.
2026-10-22 16:43:28 +02:00
Marc-André Bombeck
ed04103eb6
chore(release): v1.44.2
2026-10-22 12:05:28 +02:00
Marc-André Bombeck
5902401ab8
chore(release): v1.44.1
2026-10-22 08:25:49 +02:00
Marc-André Bombeck
44c2973a64
fix(deps): update next to 16.4.2 and nodemailer to 10.1.7
...
Next 16.4.2 carries the fixes for GHSA-673q-mjm6-r5xr and
GHSA-2464-fhr4-w9xw (unauthenticated remote code execution) and
GHSA-p3m5-59mp-jv5r (denial of service through Server Actions).
eslint-config-next and @next/bundle-analyzer move with it, both pinned
exactly. nodemailer 10.1.7 fixes the address-parser advisories.
The 16.4.0 ignore in the Dependabot config is gone: the history journeys
it was guarding pass on 16.4.2 with the day-step fix, and the note says
what was measured.
2026-10-22 08:25:48 +02:00
Marc-André Bombeck
01c935261b
chore(deps): take nodemailer 10.1.7 for the address parser advisories
...
GHSA-8c8m-p3m8-cjg8 and two sibling advisories against the address
parser are fixed in 10.1.4; 10.1.5 to 10.1.7 are linear-time and
encoding fixes on the same line. The email channel hands the parser a
recipient address each account sets for itself.
2026-10-22 06:53:16 +02:00
Marc-André Bombeck
73362dc0ae
chore(deps): take the weekly production and development updates
...
Production: the AWS SDK S3 client and lib-storage 3.1152.0, Prisma
(client, adapter-pg, CLI) 7.10.1, TanStack Query 5.104.3 and Virtual
3.14.21, dotenv 18.0.8, jspdf-autotable 5.0.9, lucide-react 1.59.0,
nodemailer 10.1.2, pg-boss 12.38.0, React and React DOM 19.3.1 (still
exact) and undici 8.12.
React 19.3.1 and undici 8.12.2 are security releases. Prisma 7.10.1
stops a nested interactive transaction from leaking its id into a
later top-level one.
pg-boss moves its schema from 45 to 46; the worker applies the
migration on start and the index builds continue in the background.
Its list and delete helpers now page and batch, which touches only the
queue retirement at boot, and that is idempotent. The retention test
pins the installed version, so it moves to 12.38.0 after re-checking
every source line it asserts.
Development: @axe-core/playwright 4.14.0, Playwright 1.64.1, Vitest and
its coverage provider 5.0.5, shadcn 4.22.0. The Stryker runner patch
still applies; it touches the runner's own name join, and 5.0.5 changes
nothing in how Vitest builds a test's full name. axe-core 4.14 turns on
label-content-name-mismatch for the WCAG 2.1 A tag the a11y specs run.
The S3 client is held on the same release as lib-storage rather than
the newest one its range allows, so the two share one SDK core.
Vite gets a floor at 8.1.6 for GHSA-587h-7wmj-h5pm and four sibling
advisories against its dev server and bundled launch-editor. It arrives
only under Vitest and never reaches the image.
The image's separate Prisma CLI install moves with the app tree to
7.10.1, and its dotenv to 18.0.8, which it had trailed by a patch.
2026-10-22 06:53:04 +02:00
Marc-André Bombeck
8b89b65f25
build(deps): add fast-check and Stryker as development dependencies
...
fast-check 4.10.2 for property tests; @stryker-mutator/core and the Vitest
runner 10.0.0 for mutation testing of the core libraries. Exact versions,
each published more than two weeks ago; the audit reports nothing new.
2026-10-22 05:32:37 +02:00
Marc-André Bombeck
455e92c5a5
chore(release): v1.44.0
2026-10-22 00:46:34 +02:00
Marc-André Bombeck
d24b24473a
chore(release): v1.43.11
2026-10-21 16:26:43 +02:00
Marc-André Bombeck
3c4e07df94
chore(release): v1.43.10
2026-10-21 09:33:05 +02:00
Marc-André Bombeck
bba33f1387
chore(release): v1.43.9
2026-10-21 01:23:43 +02:00
Marc-André Bombeck
b0e67a8831
chore(release): v1.43.8
2026-10-20 17:19:51 +02:00
Marc-André Bombeck
1e3eed23ab
chore(release): v1.43.7
2026-10-20 11:14:20 +02:00
Marc-André Bombeck
b50b5fcd21
chore(deps): drop four dependencies nothing imports
...
react-hook-form, @hookform/resolvers, next-themes and @vitejs/plugin-react
have no import anywhere in src/, scripts/, tests/, e2e/ or the build and
test configs; knip only stayed quiet because each sat on its ignore list.
Forms keep a controlled draft and validate with the shared Zod schemas,
and the theme bootstrap is hand-written. The ignore entries, the comments
that still named the form library, and the guideline text go with them.
2026-10-20 08:39:06 +02:00
Marc-André Bombeck
3a9f619001
chore(release): v1.43.6
2026-10-19 18:18:12 +02:00
Marc-André Bombeck
ade7a252f0
chore(release): v1.43.5
2026-10-18 13:11:47 +02:00
Marc-André Bombeck
5afa22b382
chore(release): v1.43.4
2026-10-17 11:37:20 +02:00
Marc-André Bombeck
271e8d6ea8
Merge pull request #1236
...
Release v1.43.3
2026-10-17 11:09:58 +02:00
dependabot[bot]
048ef0020e
build(deps-dev): bump the development-weekly group across 1 directory with 8 updates ( #1235 )
...
Bumps the development-weekly group with 8 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@testcontainers/postgresql](https://github.com/testcontainers/testcontainers-node ) | `12.2.0` | `12.2.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) | `26.6.4` | `26.6.5` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ) | `5.0.3` | `5.0.4` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip ) | `6.40.0` | `6.41.0` |
| [lefthook](https://github.com/evilmartians/lefthook ) | `2.2.1` | `2.2.2` |
| [prettier](https://github.com/prettier/prettier ) | `3.9.9` | `3.9.10` |
| [testcontainers](https://github.com/testcontainers/testcontainers-node ) | `12.2.0` | `12.2.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ) | `5.0.3` | `5.0.4` |
Updates `@testcontainers/postgresql` from 12.2.0 to 12.2.1
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases )
- [Commits](https://github.com/testcontainers/testcontainers-node/compare/v12.2.0...v12.2.1 )
Updates `@types/node` from 26.6.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md )
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-v8 )
Updates `knip` from 6.40.0 to 6.41.0
- [Release notes](https://github.com/webpro-nl/knip/releases )
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.41.0/packages/knip )
Updates `lefthook` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/evilmartians/lefthook/releases )
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md )
- [Commits](https://github.com/evilmartians/lefthook/compare/v2.2.1...v2.2.2 )
Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.9...3.9.10 )
Updates `testcontainers` from 12.2.0 to 12.2.1
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases )
- [Commits](https://github.com/testcontainers/testcontainers-node/compare/v12.2.0...v12.2.1 )
Updates `vitest` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md )
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest )
---
updated-dependencies:
- dependency-name: "@testcontainers/postgresql"
dependency-version: 12.2.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-weekly
- dependency-name: "@types/node"
dependency-version: 26.6.5
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-weekly
- dependency-name: "@vitest/coverage-v8"
dependency-version: 5.0.4
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-weekly
- dependency-name: knip
dependency-version: 6.41.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: development-weekly
- dependency-name: lefthook
dependency-version: 2.2.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-weekly
- dependency-name: prettier
dependency-version: 3.9.10
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-weekly
- dependency-name: testcontainers
dependency-version: 12.2.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-weekly
- dependency-name: vitest
dependency-version: 5.0.4
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-weekly
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-17 07:28:11 +00:00
Marc-André Bombeck
bb53c7484f
chore(release): v1.43.3
2026-10-17 09:17:59 +02:00
Marc-André Bombeck
1a2853395b
chore(release): v1.43.2
2026-10-16 17:11:58 +02:00
Marc-André Bombeck
d2fe55bc9d
chore(release): v1.43.1
2026-10-16 11:01:44 +02:00
dependabot[bot]
abc8ebd5c4
build(deps): bump the production-weekly group with 10 updates ( #1231 )
...
Bumps the production-weekly group with 10 updates:
| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3 ) | `3.1147.0` | `3.1150.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage ) | `3.1147.0` | `3.1150.0` |
| [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas ) | `1.0.10` | `1.0.11` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ) | `5.104.1` | `5.104.2` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual ) | `3.14.13` | `3.14.17` |
| [dotenv](https://github.com/motdotla/dotenv ) | `18.0.6` | `18.0.7` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react ) | `1.53.0` | `1.56.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer ) | `10.0.16` | `10.1.0` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui ) | `1.7.0` | `1.8.1` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form ) | `7.89.0` | `7.90.0` |
Updates `@aws-sdk/client-s3` from 3.1147.0 to 3.1150.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1150.0/clients/client-s3 )
Updates `@aws-sdk/lib-storage` from 3.1147.0 to 3.1150.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1150.0/lib/lib-storage )
Updates `@napi-rs/canvas` from 1.0.10 to 1.0.11
- [Release notes](https://github.com/Brooooooklyn/canvas/releases )
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md )
- [Commits](https://github.com/Brooooooklyn/canvas/compare/v1.0.10...v1.0.11 )
Updates `@tanstack/react-query` from 5.104.1 to 5.104.2
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.2/packages/react-query )
Updates `@tanstack/react-virtual` from 3.14.13 to 3.14.17
- [Release notes](https://github.com/TanStack/virtual/releases )
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md )
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.17/packages/react-virtual )
Updates `dotenv` from 18.0.6 to 18.0.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md )
- [Commits](https://github.com/motdotla/dotenv/compare/v18.0.6...v18.0.7 )
Updates `lucide-react` from 1.53.0 to 1.56.0
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.56.0/packages/lucide-react )
Updates `nodemailer` from 10.0.16 to 10.1.0
- [Release notes](https://github.com/nodemailer/nodemailer/releases )
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodemailer/nodemailer/compare/v10.0.16...v10.1.0 )
Updates `radix-ui` from 1.7.0 to 1.8.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui )
Updates `react-hook-form` from 7.89.0 to 7.90.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases )
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md )
- [Commits](https://github.com/react-hook-form/react-hook-form/compare/v7.89.0...v7.90.0 )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
dependency-version: 3.1150.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: "@aws-sdk/lib-storage"
dependency-version: 3.1150.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: "@napi-rs/canvas"
dependency-version: 1.0.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
- dependency-name: "@tanstack/react-query"
dependency-version: 5.104.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
- dependency-name: "@tanstack/react-virtual"
dependency-version: 3.14.17
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
- dependency-name: dotenv
dependency-version: 18.0.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-weekly
- dependency-name: lucide-react
dependency-version: 1.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: nodemailer
dependency-version: 10.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: radix-ui
dependency-version: 1.8.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
- dependency-name: react-hook-form
dependency-version: 7.90.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-weekly
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-16 08:37:24 +00:00
Marc-André Bombeck
d06ce36049
chore(release): v1.43.0
2026-10-16 08:46:13 +02:00
Marc-André Bombeck
b1c19dcfa4
build(deps): move zod to 4.6.7 and lift the 4.5 hold
2026-10-16 03:44:55 +02:00
Marc-André Bombeck
b1c59b908c
chore(release): v1.42.4
2026-10-15 16:43:39 +02:00