chore(deps): bump the production-dependencies group across 1 directory with 29 updates by dependabot[bot] · Pull Request #74 · pacphi/mimir

dependabot · 2026-07-20T09:49:33Z

Bumps the production-dependencies group with 29 updates in the / directory:

Package	From	To
@aws-sdk/client-pricing	`3.1053.0`	`3.1090.0`
@hono/node-server	`2.0.4`	`2.0.10`
better-auth	`1.6.11`	`1.6.23`
hono	`4.12.23`	`4.12.31`
ioredis	`5.11.0`	`5.11.1`
pg	`8.21.0`	`8.22.0`
resend	`6.12.4`	`6.17.2`
uuid	`14.0.0`	`14.0.1`
ws	`8.21.0`	`8.21.1`
@radix-ui/react-avatar	`1.1.11`	`1.2.3`
@radix-ui/react-dialog	`1.1.15`	`1.1.20`
@radix-ui/react-dropdown-menu	`2.1.16`	`2.1.21`
@radix-ui/react-label	`2.1.8`	`2.1.12`
@radix-ui/react-scroll-area	`1.2.10`	`1.2.15`
@radix-ui/react-select	`2.2.6`	`2.3.4`
@radix-ui/react-separator	`1.1.8`	`1.1.12`
@radix-ui/react-slot	`1.2.4`	`1.3.0`
@radix-ui/react-tabs	`1.1.13`	`1.1.18`
@radix-ui/react-toast	`1.2.15`	`1.2.20`
@radix-ui/react-tooltip	`1.2.8`	`1.2.13`
@tanstack/react-query	`5.100.14`	`5.101.2`
@tanstack/react-router	`1.170.8`	`1.170.18`
lucide-react	`1.16.0`	`1.25.0`
react	`19.2.6`	`19.2.7`
react-dom	`19.2.6`	`19.2.7`
react-resizable-panels	`4.11.2`	`4.12.2`
recharts	`3.8.1`	`3.9.2`
vscode-languageserver-protocol	`3.17.5`	`3.18.2`
zustand	`5.0.13`	`5.0.14`

Updates @aws-sdk/client-pricing from 3.1053.0 to 3.1090.0

Release notes

Sourced from @aws-sdk/client-pricing's releases.

v3.1090.0

3.1090.0(2026-07-17)

New Features

clients: update client endpoints as of 2026-07-17 (857153f3)

client-kinesis-analytics-v2: Support for Flink 2.3 in Managed Service for Apache Flink (1ad0421f)

client-gameliftstreams: Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables. (cf945cdb)

client-rds: Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward. (48b74a43)

client-odb: Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService. (d5619c8b)

client-cognito-identity-provider: Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option. (600cf8d5)

For list of updated packages, view updated-packages.md in assets-3.1090.0.zip

v3.1089.0

3.1089.0(2026-07-16)

Chores

enable pkg json sorting (#8200) (926898ee)

remove redundant type assertions (#8193) (b41fbb0e)

Documentation Changes

client-s3: Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes (91723d24)

client-redshift: Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations. (50989cf0)

New Features

clients: update client endpoints as of 2026-07-16 (c9150fe6)

client-chime-sdk-voice: Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated. (d706c456)

client-emr: Amazon EMR updates the Session object returned by GetSession API (863234ad)

client-omics: Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses (bafd66dd)

client-sagemaker: Release support for g7 instance type for SageMaker inference endpoints. (668f46cb)

client-sustainability: Adds support for retrieving estimated water allocation data. (432031b6)

Bug Fixes

package.json: run make lint format without file args (#8201) (33ac9c0b)

Tests

extend TypeScript compatibility check to 3.4-4.4 (#8197) (59f7fc67)

... (truncated)

Changelog

Sourced from @aws-sdk/client-pricing's changelog.

3.1090.0 (2026-07-17)

Note: Version bump only for package @aws-sdk/client-pricing

3.1089.0 (2026-07-16)

Note: Version bump only for package @aws-sdk/client-pricing

3.1088.0 (2026-07-15)

Note: Version bump only for package @aws-sdk/client-pricing

3.1087.0 (2026-07-14)

Note: Version bump only for package @aws-sdk/client-pricing

3.1086.0 (2026-07-13)

Note: Version bump only for package @aws-sdk/client-pricing

3.1085.0 (2026-07-10)

Note: Version bump only for package @aws-sdk/client-pricing

3.1084.0 (2026-07-09)

... (truncated)

Commits

eb268ed Publish v3.1090.0
60e8b54 Publish v3.1089.0
73de389 Publish v3.1088.0
d43e5bf chore(codegen): sync to use typesVersions entries for submodules (#8195)
ec24bb4 Publish v3.1087.0
a20c28d chore(codegen): sync for codegen and include OAuthIAM operation for signin li...
64c3e50 Publish v3.1086.0
8d0b498 Publish v3.1085.0
c34ce8a Publish v3.1084.0
ceb9aee Publish v3.1083.0
Additional commits viewable in compare view

Updates @hono/node-server from 2.0.4 to 2.0.10

Release notes

Sourced from @hono/node-server's releases.

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg

Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

fix(websocket): polyfill missing ErrorEvent global by @otnc in honojs/node-server#371

fix(serve-static): correct Range header parsing edge cases by @otnc in honojs/node-server#372

fix: recover complete request bodies after client disconnect by @usualoma in honojs/node-server#375

New Contributors

@otnc made their first contribution in honojs/node-server#371

Full Changelog: honojs/node-server@v2.0.8...v2.0.9

v2.0.8

What's Changed

ci(release): add --no-git-checks option for pnpm stage publish by @yusukebe in honojs/node-server#369

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

chore: migrate to pnpm by @BlankParticle in honojs/node-server#367

fix(serve-static): serve precompressed files for application/octet-stream by @yusukebe in honojs/node-server#366

chore: bump supertest by @yusukebe in honojs/node-server#368

Full Changelog: honojs/node-server@v2.0.6...v2.0.7

v2.0.6

What's Changed

ci: publish to npm from CI with OIDC trusted publishing and bump np by @yusukebe in honojs/node-server#361

ci: use npm Staged publishing by @yusukebe in honojs/node-server#364

fix: preserve status and statusText when cloning a Response with liveheaders by @usualoma in honojs/node-server#363

Full Changelog: honojs/node-server@v2.0.5...v2.0.6

v2.0.5

... (truncated)

Commits

7c1457e 2.0.10
3a21938 Merge commit from fork
9842021 2.0.9
51f3bf5 fix: recover complete request bodies after client disconnect (#375)
fdb87ba fix(serve-static): correct Range header parsing edge cases (#372)
912e3fd fix(websocket): polyfill missing ErrorEvent global (#371)
114c15e 2.0.8
5db2d5d ci(release): add --no-git-checks option for pnpm stage publish (#369)
a528a77 2.0.7
b2d610c chore: bump supertest (#368)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hono/node-server since your current version.

Updates better-auth from 1.6.11 to 1.6.23

Release notes

Sourced from better-auth's releases.

v1.6.23

better-auth

Features

Added Yandex as a social OAuth provider (#9138)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

Fixed affected row counting for D1 and postgres-js adapters (#10257)

For detailed changes, see CHANGELOG

@better-auth/stripe

Bug Fixes

Fixed organization subscription actions (cancel, upgrade, restore, and the billing portal) that could act on the wrong organization.

For detailed changes, see CHANGELOG

auth

Bug Fixes

Fixed string default values not being properly escaped in the generated Drizzle schema (#10259)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@bytaesu, @vladflotsky

Full changelog: v1.6.22...v1.6.23

v1.6.22

better-auth

Bug Fixes

Fixed unproven credentials not being revoked during magic link and email OTP sign-in (#10239)

Fixed server-side OAuth requests to refuse redirect responses instead of following them (#10241)

For detailed changes, see CHANGELOG

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.6.23

Patch Changes

#9138 8581f97 Thanks @vladflotsky! - Add a pre-configured Yandex provider helper for the generic OAuth plugin.

Updated dependencies [930b260]:

@better-auth/drizzle-adapter@1.6.23

@better-auth/core@1.6.23

@better-auth/kysely-adapter@1.6.23

@better-auth/memory-adapter@1.6.23

@better-auth/mongo-adapter@1.6.23

@better-auth/prisma-adapter@1.6.23

@better-auth/telemetry@1.6.23

1.6.22

Patch Changes

#10239 c06a56d Thanks @gustavovalverde! - Magic-link and email-OTP sign-in now reset the credentials on an account whose email had never been confirmed. When verification resolves to such an account, any existing password on it is removed and its sessions are revoked before the user is signed in, so proven control of the mailbox is the source of truth for the account.

If you signed up with email and password but first signed in through a magic link or email OTP rather than confirming the verification email, your password is cleared and you will need to set a new one through password reset.

#10240 3a035e9 Thanks @gustavovalverde! - Add account-level lockout for two-factor verification. The attempt limit applies per account across sign-in challenges and across factors: TOTP, email-OTP, and backup codes share one counter, and a successful verification resets it.

Enabled by default: an account locks for 15 minutes after 10 consecutive failed verifications, and locked attempts return 429 with the ACCOUNT_TEMPORARILY_LOCKED error code. Configure it with twoFactor({ accountLockout: { enabled, maxFailedAttempts, durationSeconds } }).

Run a database migration after upgrading: this adds failedVerificationCount and lockedUntil columns to the twoFactor table.

Updated dependencies [8bd43d9]:

@better-auth/core@1.6.22

@better-auth/drizzle-adapter@1.6.22

@better-auth/kysely-adapter@1.6.22

@better-auth/memory-adapter@1.6.22

@better-auth/mongo-adapter@1.6.22

@better-auth/prisma-adapter@1.6.22

@better-auth/telemetry@1.6.22

1.6.21

Patch Changes

#10212 e0762a1 Thanks @bytaesu! - In root-mounted deployments, requests whose path does not start with the configured basePath now return 404 instead of resolving to an endpoint.

#10187 882cf9e Thanks @ping-maxwell! - Admin permission changes and bans now take effect immediately for admin APIs, even when session cookie cache is enabled. Sensitive session checks also continue to work in stateless apps where signed cookies are the session record.

#9939 f52e1ab Thanks @benpsnyder! - fixes a bug causing deviceAuthorization() throwing a ZodError at construction when called without a schema option

#10196 b5bec19 Thanks @Paola3stefania! - OAuth sign-up and account-link profile sync now ignore provider profile values for user fields marked input: false. Input-allowed additional fields still persist from mapProfileToUser, and schema defaults still apply when OAuth creates a user. Apps that used mapProfileToUser to fill input: false fields should set those fields in server-side provisioning code instead.

... (truncated)

Commits

9dfceee chore: release v1.6.23 (#10260)
8581f97 feat(oauth): add Yandex social provider (#9138)
a90d061 chore: release v1.6.22 (#10245)
3a035e9 fix(two-factor): add account-level verification lockout (#10240)
c06a56d fix: revoke unproven credentials on magic-link/email-OTP sign-in (#10239)
414169d chore: release v1.6.21 (#10184)
f52e1ab fix(device-authorization): make schema option optional under Zod v4 (#9939)
882cf9e fix(admin): use authoritative session reads for authorization (#10187)
b5bec19 fix(oauth): apply user input rules to provider profiles (#10196)
471f81c refactor: centralize request IP resolver in core (#10216)
Additional commits viewable in compare view

Updates hono from 4.12.23 to 4.12.31

Release notes

Sourced from hono's releases.

v4.12.31

What's Changed

test(context): assert case-insensitive header names in response helpers by @yusukebe in honojs/hono#5116

chore(benchmark): add app.fetch() overhead benchmark by @yusukebe in honojs/hono#5117

refactor(aws-lambada): remove FIXME in @ts-expect-error by @yusukebe in honojs/hono#5130

fix(utils/body): reuse cached formData in parseBody() by @yusukebe in honojs/hono#5131

fix(request): fix multipart boundary mismatch in cloneRawRequest by @yusukebe in honojs/hono#5133

fix(sse): emit retry feild when retry is 0 by @yusukebe in honojs/hono#5135

test(validator): fix misspelled identifier in transform type test by @yusukebe in honojs/hono#5136

Full Changelog: honojs/hono@v4.12.30...v4.12.31

v4.12.30

What's Changed

chore(benchmark/routers): bump deps in honojs/hono#5107

chore(benchmark): remove not used benchmarks in honojs/hono#5108

chore: update to ts6 in prep for ts7 in honojs/hono#5104

fix(cache): deduplicate Cache-Control directives case-insensitively in honojs/hono#5025

fix(compress): do not compress 206 Partial Content responses in honojs/hono#5020

fix(client): replaceUrlParam should not match a param that prefixes another in honojs/hono#5096

fix(method-override): set duplex when forwarding a stream body in query mode in honojs/hono#5110

Full Changelog: honojs/hono@v4.12.29...v4.12.30

v4.12.29

What's Changed

fix(client): merge function headers with per-request headers by @yusukebe in honojs/hono#5092

chore: fix no-op tsc in test script by @yusukebe in honojs/hono#5093

fix(lambda-edge): resolve the handler with the value passed to the callback by @yusukebe in honojs/hono#5094

docs(language): add JSDoc @example to languageDetector by @codebybilal18 in honojs/hono#5081

test(workerd): add compatibilityDate by @yusukebe in honojs/hono#5100

fix(lambda-edge): base64 encode content-encoded response bodies by @yusukebe in honojs/hono#5099

fix(aws-lambda): treat any non-identity content-encoding as binary by @yusukebe in honojs/hono#5101

fix(types): strip extra properties from array types in JSONParsed by @Arman-Luthra in honojs/hono#5103

fix(trie-router): match empty wildcard remainder after regexp param by @usualoma in honojs/hono#5102

fix(etag): treat If-None-Match: * as a match by @yusukebe in honojs/hono#5084

New Contributors

@codebybilal18 made their first contribution in honojs/hono#5081

@Arman-Luthra made their first contribution in honojs/hono#5103

Full Changelog: honojs/hono@v4.12.28...v4.12.29

v4.12.28

What's Changed

fix(serve-static): treat empty string content as found by @yusukebe in honojs/hono#5062

docs(MIGRATION): fix req.raw.headers reference (property, not method) by @EduardF1 in honojs/hono#5047

chore: don't publish *.tsbuildinfo by @yusukebe in honojs/hono#5066

fix(utils/body,validator): normalize Content-Type media type for case-insensitive matching by @yusukebe in honojs/hono#5067

fix: avoid circular dependency between body.ts and request.ts by @usualoma in honojs/hono#5071

... (truncated)

Commits

cadff88 4.12.31
64c613a test(validator): fix misspelled identifier in transform type test (#5136)
aeba9ec fix(sse): emit retry feild when retry is 0 (#5135)
d796450 fix(request): fix multipart boundary mismatch in cloneRawRequest (#5133)
80959d4 fix(utils/body): reuse cached formData in parseBody() (#5131)
21b44b6 refactor(aws-lambada): remove FIXME in @ts-expect-error (#5130)
5f73897 docs(combine): close quote in combine JSDoc example (#5126)
c285f9a chore(benchmark): add app.fetch() overhead benchmark (#5117)
fb9d7bf test(context): assert case-insensitive header names in response helpers (#5116)
b2ae3a2 4.12.30
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hono since your current version.

Updates ioredis from 5.11.0 to 5.11.1

Release notes

Sourced from ioredis's releases.

v5.11.1

5.11.1 (2026-06-04)

Bug Fixes

cluster: reconnect to nodes that restart without slot changes (#2096) (c84b2ee)

parse protocol-relative Redis URLs as TCP connections (#2125) (131ee24)

Changelog

Sourced from ioredis's changelog.

5.11.1 (2026-06-04)

Bug Fixes

cluster: reconnect to nodes that restart without slot changes (#2096) (c84b2ee)

parse protocol-relative Redis URLs as TCP connections (#2125) (131ee24)

Commits

fb224a7 chore(release): 5.11.1 [skip ci]
131ee24 fix: parse protocol-relative Redis URLs as TCP connections (#2125)
c84b2ee fix(cluster): reconnect to nodes that restart without slot changes (#2096)
See full diff in compare view

Updates pg from 8.21.0 to 8.22.0

Changelog

Sourced from pg's changelog.

pg@8.22.0

Add support for sslnegotiation=direct for PostgreSQL 17+.

Commits

b617619 Publish
d80b261 Update docs & changelog
835fb83 Fix error handling for exceptions on values parsing. (#3574)
f49ab4a fix: correct spelling mistakes across codebase (#3692)
d7175a4 Expand CI matrix of PG versions and add direct SSL test (#3693)
882fc30 Add support for sslnegotiation=direct (PostgreSQL 17) (#3688)
See full diff in compare view

Updates resend from 6.12.4 to 6.17.2

Release notes

Sourced from resend's releases.

v6.17.2

fix response types for removing contacts out of segments and removing api keys (90d18da)

#1003 fix: response types for removing an api key, and removing a contact from a segment by @gabrielmfern

v6.17.1

remove resource field, it was a dead field (0572834)

#1000 chore(oauth-grants): drop dead resource field by @gabrielmfern

v6.17.0

What's Changed

chore: update sync_prs_to_linear sha by @dielduarte in resend/resend-node#996

feat: add idempotencyKey support to emails.receiving.forward() by @felipefreitag in resend/resend-node#997

feat: oauth grant management by @gabrielmfern in resend/resend-node#998

Full Changelog: resend/resend-node@v6.16.0...v6.17.0

v6.16.0

What's Changed

feat: add received_for to inbound email and received webhook types by @lucasfcosta in resend/resend-node#993

chore: release 6.16.0 by @lucasfcosta in resend/resend-node#994

Full Changelog: resend/resend-node@v6.15.0...v6.16.0

v6.15.0

What's Changed

feat: expose message_id on get and list responses by @vcapretz in resend/resend-node#988

feat: release new canary with message_id by @vcapretz in resend/resend-node#990

feat: release v6.15.0 by @vcapretz in resend/resend-node#992

Full Changelog: resend/resend-node@v6.14.0...v6.15.0

v6.14.0

What's Changed

feat(domains): add Domain Claim API methods by @joaopcm in resend/resend-node#985

feat: release 6.14.0-canary.0 by @joaopcm in resend/resend-node#986

... (truncated)

Changelog

Sourced from resend's changelog.

resend@6.17.2

fix response types for removing contacts out of segments and removing api keys

resend@6.17.1

remove resource field, it was a dead field

Commits

5c4d912 chore: release 6.17.2 (#1004)
90d18da fix: response types for removing an api key, and removing a contact from a se...
c1626d7 chore(ci): ensure that the tags don't have a resend@ prefix (#1002)
0eb3f79 chore: release 6.17.1 (#1001)
0572834 chore(oauth-grants): drop dead resource field (#1000)
4a6c56e feat: tegami release process (#999)
bd42f6e feat: oauth grant management (#998)
0f14dc8 feat: add idempotencyKey support to emails.receiving.forward() (#997)
9d6e690 chore: update sync_prs_to_linear sha (#996)
56736c0 chore: release 6.16.0 (#994)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for resend since your current version.

Updates uuid from 14.0.0 to 14.0.1

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

add types condition to node export for moduleResolution bundler (#961) (27ffae5)

Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

add types condition to node export for moduleResolution bundler (#961) (27ffae5)

Commits

7017780 chore(main): release 14.0.1 (#964)
f2c3e4b chore: fix release-please workflow (#963)
27ffae5 fix: add types condition to node export for moduleResolution bundler (#961)
664cb31 Remove outdated security contact information (#959)
d729016 fix(ci): checkout PR head commit in browser workflow (#957)
89a5ebc Workflows (#948)
196e208 chore: fix workflow (#947)
95af448 chore: update workflows (#946)
3b57f95 chore: add workflow_dispatch (#944)
a433096 chore: add 12.x and 13.x maintenance release branches (#941)
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

Empty fragments are now counted toward the limit (a2f4e7c0).

The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).

Commits

ae1de54 [dist] 8.21.1
8e9511b [ci] Trust Coveralls Homebrew tap
f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
8df8265 [ci] Update actions/checkout action to v7
a2f4e7c [fix] Count empty fragments toward the limit (#2329)
e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
4ea355d [doc] Document 32-bit signed integer coercion for option values
2120f4c [example] Remove uuid dependency
4c534a6 [security] Add latest vulnerability to SECURITY.md
See full diff in compare view

Updates @radix-ui/react-avatar from 1.1.11 to 1.2.3

Changelog

Sourced from @radix-ui/react-avatar's changelog.

1.2.3

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Fix dev-only checks with conditional exports to drop dev-warnings from production builds.

Updated dependencies: @radix-ui/primitive@1.1.6, @radix-ui/react-context@1.2.0, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2

1.2.2

Updated dependencies: @radix-ui/react-context@1.2.0

1.2.1

Updated dependencies: @radix-ui/react-primitive@2.1.7

1.2.0

Fixed several edge cases with Avatar's loading state

An avatar's fallback would not be displayed again if its image component unmounted. This is now fixed.

Rendering multiple Avatar.Image components per Avatar.Root was never supported and results in buggy, unpredictable behavior. We now warn about this in development.

Zero-sized images were treated as loading, meaning that onLoadingStatusChange is never called once loaded. A zero-sized image now triggers an error status on load.

Other updates

Fixed console warnings to show in test environments.

Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.12

Added repository.directory to all package.json files

Updated dependencies: @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-is-hydrated@0.1.1, @radix-ui/react-use-layout-effect@1.1.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @radix-ui/react-avatar since your current version.

Updates @radix-ui/react-dialog from 1.1.15 to 1.1.20

Changelog

Sourced from @radix-ui/react-dialog's changelog.

1.1.20

Fixed broken ARIA references in Dialogs where a title or description elements are not rendered.

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

1.1.19

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7

1.1.18

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dis... Description has been truncated

…y with 29 updates Bumps the production-dependencies group with 29 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-pricing](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-pricing) | `3.1053.0` | `3.1090.0` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.4` | `2.0.10` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.6.11` | `1.6.23` | | [hono](https://github.com/honojs/hono) | `4.12.23` | `4.12.31` | | [ioredis](https://github.com/luin/ioredis) | `5.11.0` | `5.11.1` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.21.0` | `8.22.0` | | [resend](https://github.com/resend/resend-node) | `6.12.4` | `6.17.2` | | [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.1` | | [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.1` | | [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar) | `1.1.11` | `1.2.3` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.20` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.16` | `2.1.21` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.8` | `2.1.12` | | [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.10` | `1.2.15` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.2.6` | `2.3.4` | | [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.8` | `1.1.12` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.4` | `1.3.0` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.13` | `1.1.18` | | [@radix-ui/react-toast](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toast) | `1.2.15` | `1.2.20` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.8` | `1.2.13` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.100.14` | `5.101.2` | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.8` | `1.170.18` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.16.0` | `1.25.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.11.2` | `4.12.2` | | [recharts](https://github.com/recharts/recharts) | `3.8.1` | `3.9.2` | | [vscode-languageserver-protocol](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/protocol) | `3.17.5` | `3.18.2` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.13` | `5.0.14` | Updates `@aws-sdk/client-pricing` from 3.1053.0 to 3.1090.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-pricing/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1090.0/clients/client-pricing) Updates `@hono/node-server` from 2.0.4 to 2.0.10 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.4...v2.0.10) Updates `better-auth` from 1.6.11 to 1.6.23 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.6.23/packages/better-auth) Updates `hono` from 4.12.23 to 4.12.31 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.23...v4.12.31) Updates `ioredis` from 5.11.0 to 5.11.1 - [Release notes](https://github.com/luin/ioredis/releases) - [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md) - [Commits](redis/ioredis@v5.11.0...v5.11.1) Updates `pg` from 8.21.0 to 8.22.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg) Updates `resend` from 6.12.4 to 6.17.2 - [Release notes](https://github.com/resend/resend-node/releases) - [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md) - [Commits](resend/resend-node@v6.12.4...v6.17.2) Updates `uuid` from 14.0.0 to 14.0.1 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v14.0.0...v14.0.1) Updates `ws` from 8.21.0 to 8.21.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.0...8.21.1) Updates `@radix-ui/react-avatar` from 1.1.11 to 1.2.3 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar) Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.20 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.16 to 2.1.21 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-label` from 2.1.8 to 2.1.12 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-scroll-area` from 1.2.10 to 1.2.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area) Updates `@radix-ui/react-select` from 2.2.6 to 2.3.4 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-separator` from 1.1.8 to 1.1.12 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator) Updates `@radix-ui/react-slot` from 1.2.4 to 1.3.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `@radix-ui/react-tabs` from 1.1.13 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-toast` from 1.2.15 to 1.2.20 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/toast/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toast) Updates `@radix-ui/react-tooltip` from 1.2.8 to 1.2.13 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `@tanstack/react-query` from 5.100.14 to 5.101.2 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.2/packages/react-query) Updates `@tanstack/react-router` from 1.170.8 to 1.170.18 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.18/packages/react-router) Updates `lucide-react` from 1.16.0 to 1.25.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/lucide-react) Updates `react` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `react-resizable-panels` from 4.11.2 to 4.12.2 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.11.2...4.12.2) Updates `recharts` from 3.8.1 to 3.9.2 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.8.1...v3.9.2) Updates `vscode-languageserver-protocol` from 3.17.5 to 3.18.2 - [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases) - [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/protocol/3.18.2/protocol) Updates `zustand` from 5.0.13 to 5.0.14 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.13...v5.0.14) --- updated-dependencies: - dependency-name: "@aws-sdk/client-pricing" dependency-version: 3.1090.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@hono/node-server" dependency-version: 2.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: better-auth dependency-version: 1.6.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.12.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: ioredis dependency-version: 5.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: pg dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: resend dependency-version: 6.17.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: uuid dependency-version: 14.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: ws dependency-version: 8.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@radix-ui/react-avatar" dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.1.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@radix-ui/react-scroll-area" dependency-version: 1.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@radix-ui/react-select" dependency-version: 2.3.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@radix-ui/react-separator" dependency-version: 1.1.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@radix-ui/react-slot" dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.1.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@radix-ui/react-toast" dependency-version: 1.2.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tanstack/react-query" dependency-version: 5.101.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/react-router" dependency-version: 1.170.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-resizable-panels dependency-version: 4.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: recharts dependency-version: 3.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: vscode-languageserver-protocol dependency-version: 3.18.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zustand dependency-version: 5.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

pacphi · 2026-07-20T09:49:48Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the production-dependencies group across 1 directory with 29 updates#74

chore(deps): bump the production-dependencies group across 1 directory with 29 updates#74
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-820382bdf1

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

pacphi commented Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026

v3.1090.0

3.1090.0(2026-07-17)

New Features

v3.1089.0

3.1089.0(2026-07-16)

Chores

Documentation Changes

New Features

Bug Fixes

Tests

3.1090.0 (2026-07-17)

3.1089.0 (2026-07-16)

3.1088.0 (2026-07-15)

3.1087.0 (2026-07-14)

3.1086.0 (2026-07-13)

3.1085.0 (2026-07-10)

3.1084.0 (2026-07-09)

v2.0.10

Security fixes

Unauthenticated memory-leak DoS via aborted WebSocket handshake

v2.0.9

What's Changed

New Contributors

v2.0.8

What's Changed

v2.0.7

What's Changed

v2.0.6

What's Changed

v2.0.5

v1.6.23

better-auth

Features

@better-auth/drizzle-adapter

Bug Fixes

@better-auth/stripe

Bug Fixes

auth

Bug Fixes

Contributors

v1.6.22

better-auth

Bug Fixes

1.6.23

Patch Changes

1.6.22

Patch Changes

1.6.21

Patch Changes

v4.12.31

What's Changed

v4.12.30

What's Changed

v4.12.29

What's Changed

New Contributors

v4.12.28

What's Changed

v5.11.1

5.11.1 (2026-06-04)

Bug Fixes

5.11.1 (2026-06-04)

Bug Fixes

pg@8.22.0

v6.17.2

fix response types for removing contacts out of segments and removing api keys (90d18da)

v6.17.1

remove resource field, it was a dead field (0572834)

v6.17.0

What's Changed

v6.16.0

What's Changed

v6.15.0

What's Changed

v6.14.0

What's Changed

resend@6.17.2

fix response types for removing contacts out of segments and removing api keys

`better-auth`

`@better-auth/drizzle-adapter`

`@better-auth/stripe`

`auth`

`better-auth`