Skip to content

Bump the dependencies group with 11 updates - #172

Merged
amrabed merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-109932cd49
Nov 8, 2026
Merged

Bump the dependencies group with 11 updates#172
amrabed merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-109932cd49

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 11 updates:

Package From To
@heroui/react 3.2.6 3.2.7
@heroui/styles 3.2.6 3.2.7
framer-motion 14.6.0 14.9.0
lucide-react 1.61.0 1.65.0
postcss 8.5.31 8.5.32
@types/node 26.6.5 26.6.6
@typescript-eslint/eslint-plugin 8.72.0 8.72.1
@typescript-eslint/parser 8.72.0 8.72.1
eslint 10.13.0 10.14.0
firebase-tools 15.34.1 15.34.2
vercel 65.2.0 65.8.0

Updates @heroui/react from 3.2.6 to 3.2.7

Commits
  • a92f962 test(sheet): assert settled close state instead of transient exit flag
  • e72d309 chore: release v3.2.7
  • 92c046b Merge branch 'v3' into v3.2.7
  • 70a1153 docs(forms): replace deprecated FormEvent examples (#6989)
  • 8bad74e fix(tabs): prevent indicator drift on hydration (#6988)
  • 2520b6b Merge branch 'v3' into v3.2.7
  • 31a6261 chore(storybook): bump Storybook to 10.6.3 (#6982)
  • 15d0599 fix(switch): animate thumb with translate to stop jitter (#6970)
  • 2f28000 chore(deps): upgrade dependencies and adapt integrations (#6979)
  • fba503c fix(sheet): keep detached snap points in bounds
  • Additional commits viewable in compare view

Updates @heroui/styles from 3.2.6 to 3.2.7

Release notes

Sourced from @​heroui/styles's releases.

v3.2.7

What's Inside

✓ Sheet → swipeable overlays with four placements, snap points & nested sheets ✓ Slider → composable step indicators & mark labels, with vertical and RTL support ✓ Performance → less rendering overhead across components & faster overlays on mobile ✓ Accessibility → better dialog labels, decorative separators & corrected semantics ✓ Fixes → overlay reopening, Switch thumb jitter, Tabs indicator drift & Drawer drag recovery ✓ Forms & Toast → autofill styling, narrow-screen menus & iOS Safari toast positioning ✓ React Aria → upgraded to 1.22.1

What's Changed

... (truncated)

Commits
  • e72d309 chore: release v3.2.7
  • 95e8815 fix(slider): fade mark labels as they enter or leave the range
  • 3e4840d fix(slider): soften step dots to match design
  • 8bad74e fix(tabs): prevent indicator drift on hydration (#6988)
  • 15d0599 fix(switch): animate thumb with translate to stop jitter (#6970)
  • fba503c fix(sheet): keep detached snap points in bounds
  • 9a89cf5 feat(react): sheet component (#6974)
  • 1d43c08 fix: package license (#6973)
  • 13741e2 fix(drawer): recover from a cancelled drag without dropping touch-action (#6968)
  • 18b9a17 feat(slider): add visual step indicators and marks (#6965)
  • Additional commits viewable in compare view

Updates framer-motion from 14.6.0 to 14.9.0

Changelog

Sourced from framer-motion's changelog.

[14.9.0] 2026-10-30

Added

  • PresenceContext: Added internal keepValuesOnRemount option for internal use.
  • dragConstraints: Accepts function for internal use.
  • Reorder: Keyboard accessibility now focuses just the first item, arrows move focus, arrow keys work in relation to how items are presented on-screen.

[14.8.0] 2026-10-29

Added

  • transition: Added mixer option for passing custom mixer functions.

Fixed

  • Only counts projection stats while recordStats() is running.
  • Fix accelerated animations stuck at initial after remount.
  • drag: 20% smaller.
  • m component: 6% smaller.
  • Keep timeline adjustments within timeline scope.
  • Reorder

[14.7.1] 2026-10-27

Fixed

  • Demote transforms to CPU when interrupted by layout animations.

[14.7.0] 2026-10-27

Added

  • animate: Mutable timeline sequences.
  • animate: Relative label offsets for timeline sequences.
  • useScroll: Returns scrollXLength and scrollYLength.
  • Reorder: Add LazyMotion-compatible import.
  • motion: transition.out prop for transitions when exiting a state.

Fixed

  • Fix one flash when changing playback speed of accelerated independent transform.
  • AnimatePresence: Improved positioning of popped elements.
  • spring: Fix overdamped springs snapping to target.
  • drag: Ref-constraints kept up-to-date after scroll.
  • motion: Animate layoutId elements relative to layoutRoot container.
  • motion: Bundle size reductions.
  • Moving background-color animations back to main thread for improved interpolation.
  • drag: Fix drag inertia stopping dead after a fast flick from a standstill.
  • layout: layoutId elements now animate relative to their closest layoutRoot ancestor, if any.

... (truncated)

Commits
  • 7415b6c v14.9.0
  • dd22962 Updating changelog
  • 5166565 Merge pull request #4033 from motiondivision/claude/project-thread-v31xwu
  • 3450444 Raise Reorder and remix size budgets for roving focus
  • 8e33ea6 Reorder: keep a rendered tab stop, and focus only rendered items
  • f15ac99 Test Reorder's tab stop with items unrendered or outside values
  • df0308a Merge pull request #4026 from motiondivision/claude/project-thread-bj5tih
  • f98ee43 Reorder: arrow keys move focus between items, with one tab stop
  • e2cd96d Test arrow keys moving focus between Reorder items
  • 4e8dc81 Raise vanilla-all budget by the hook's 85 B
  • Additional commits viewable in compare view

Updates lucide-react from 1.61.0 to 1.65.0

Release notes

Sourced from lucide-react's releases.

Version 1.65.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.64.0...1.65.0

Version 1.64.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Version 1.63.0

What's Changed

... (truncated)

Commits
  • 1668a0c chore(deps): bump rollup to 4.65.1 and keep typescript on v6 (#5110)
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • See full diff in compare view

Updates postcss from 8.5.31 to 8.5.32

Release notes

Sourced from postcss's releases.

8.5.32

  • Fixed Input#origin() without opts.from (by @​wleeaf).
  • Fixed final-word lookup without source offsets (by @​Don-Yin).
  • Fixed explicit start in Warning#toString() (by @​Don-Yin).
  • Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).
Changelog

Sourced from postcss's changelog.

8.5.32

  • Fixed Input#origin() without opts.from (by @​wleeaf).
  • Fixed final-word lookup without source offsets (by @​Don-Yin).
  • Fixed explicit start in Warning#toString() (by @​Don-Yin).
  • Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).
Commits

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates @typescript-eslint/eslint-plugin from 8.72.0 to 8.72.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 4ad6b75 chore(release): publish 8.72.1
  • 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
  • 1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
  • 2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
  • c49d287 chore: [ci] test on oldest supported TS version (#13024)
  • 594fe28 fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.72.0 to 8.72.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
  • 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
  • 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
  • cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
  • 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
Commits
  • 12cbff4 10.14.0
  • 6b696e7 Build: changelog update for 10.14.0
  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
  • dab466e docs: Update README
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419)
  • Additional commits viewable in compare view

Updates firebase-tools from 15.34.1 to 15.34.2

Release notes

Sourced from firebase-tools's releases.

v15.34.2

  • Updated chokidar dependency to ^4.0.3 to remove vulnerable braces dependency (#11308).
  • Fixed an issue where the Firebase MCP server referred to update_firebase_environment instead of firebase_update_environment.
  • Updated the Firebase SQL Connect local toolkit to v3.4.25, which includes the following changes:
    • Internal improvements and bug fixes.
  • Fixed CVE-2026-111181 by updating body-parser dependency.
  • Fixed the Firestore emulator exiting when it could not watch the rules file for changes. It now logs a warning instead. (#4298)
Commits
  • c3cdfc5 15.34.2
  • 87a0829 Update FDC emulator to v3.4.25 (#11380)
  • 8d61a49 fix(storage): await rules watcher readiness on startup and deflake reload int...
  • cd54930 fix(deps): resolve body-parser CVE-2026-111181 vulnerability (#11373)
  • 83ffba0 fix(emulator): warn instead of crashing when the Firestore rules watcher fail...
  • a33ca10 fix(crashlytics): remove crashlyticsWeb experiment (#11372)
  • 050d819 removing logging bucket and sink provisioning as it is covered by the telemet...
  • 855f140 feat(crashlytics): allowlist clienttelemetry.googleapis.com in API key restri...
  • 926b3fe [AI Improvement] [Task] Autofix no-unnecessary-type-assertion and no-extra-no...
  • 311412f fix/refactor: [Task] Remove dead schemaToText/connectorToText/sourceToText fr...
  • Additional commits viewable in compare view

Updates vercel from 65.2.0 to 65.8.0

Changelog

Sourced from vercel's changelog.

vercel

65.4.0

Minor Changes

  • 0210984: vercel budgets with no subcommand now runs vercel budgets list instead of vercel budgets inspect.
  • cae8a44: Give options their standard names: --query for search, --type for the routes filter, --amount for money, --force to replace, --limit for result size, --meta, --billing-plan, --installation, --authorization, --store, --execution, --content, --maintainer, --trace, --span, --routes-version, --redirects-version, and --output. The old names keep working, are hidden from help, and warn on stderr; commands with --json put the warning in the result's warnings instead. On ai-gateway api-keys create, ai-gateway budgets set, and ai-gateway budgets defaults set, the money option is now --amount, so --limit there also warns. link no longer lists --team; use the global --scope.
  • 73ef17e: vercel flags evaluations can now group by --group-by datafile-revision to show which flag revision each client evaluates.
  • bcdc735: Run the one package each platform maps to: the native binary on macOS and Linux x64/arm64, and @vercel/cli-support on Windows and every other platform. The native binary is now the default; for this release VERCEL_CLI_USE_NATIVE_BINARY=0 or a persisted useNativeBinary: false still opts out. nativeBinaryAutoOptIn and vercel upgrade --enable-binary/--disable-binary are removed. vercel falls back to its own JS CLI only when that package is missing, the binary cannot start, or the user opted out, and records the launcher, launcher_target, and launcher_fallback telemetry events when it does. @vercel/cli-support now installs on every OS except macOS and Linux, and the architecture deprecation warning is limited to Linux.
  • d0629bd: Remove the deprecated array format for schedules. schedules in vercel.json, in Build Output config.json, and from getDevManifest must be an object keyed by schedule name. @vercel/config no longer exports Schedule (use ScheduleDefinition), and @vercel/client no longer exports VercelConfigSchedule.
  • 7ee1244: Add --environment and --git-branch to vercel schedules commands to manage the schedules of a custom environment or a Git branch instead of production.

Patch Changes

  • 5038d29: vercel budgets list and vercel budgets set no longer show spend, so they return without waiting on it. vercel budgets inspect still shows spend and percent used.
  • 5952196: Make --help text match what commands accept and do: storage no longer claims it creates or deletes Marketplace and first-party resources, help teaches the renamed verbs and flags instead of deprecated ones (--meta, --policy, --category, --environment, integration resource), pagination examples describe --next cursors, and stated values, defaults, and limits match the code (metrics --granularity, flags list --state, drains update --encoding, vcr permissions ls --limit, tokens list --limit, traces search --limit). storage delete on a Marketplace resource now points to vercel integration resource delete instead of vercel integration-resource delete, in both the message and the JSON next[].command.
  • 5f55ccc: Add an experimental Buildah image store cache, enabled with VERCEL_BUILDAH_STORE_CACHE=1, so builds reuse images and layers from earlier deployments. Concurrent service builds share one --source-date-epoch per deployment so their layers stay reusable. @vercel/build-utils now exports resolveBuildConcurrency().
  • 2788841: --version at any depth prints only the version ({"version"} with --json) instead of running the command, and --help wins over it; an unknown command points to help instead of listing every command; domains add help moves its prose into Notes.
  • 3407063: vercel build now reads a Next.js custom deploymentId from routes-manifest.json in the configured Output Directory, not only <root>/.next, so monorepo and custom distDir layouts register it.
  • eb335f9: Send a command span (duration, exit code, and outcome) with usage events in one request through the existing background telemetry worker.
  • f4c2dbb: Hand telemetry to the background worker over stdin instead of a command-line argument, so the payload is no longer visible in process listings or limited by argument size. The worker also uses the parent's global config directory and exits if a send stalls. vercel telemetry disable also no longer sends telemetry for its own run.
  • ad181fc: Logged-in single-file deployments of static files now skip the build, like directory deployments do.
  • 4835094: Prevent a delayed Testserver stale-lock remover from deleting a live run's pool lock by serializing reclamation and verifying the original file identity.
  • Updated dependencies [5f55ccc]
  • Updated dependencies [2a5ebec]
  • Updated dependencies [bcdc735]
  • Updated dependencies [d0629bd]
  • Updated dependencies [41c8d95]
  • Updated dependencies [2a0a79a]
  • Updated dependencies [b2a9eb5]

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026
@vercel

vercel Bot commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
typescript Ready Ready Preview Nov 8, 2026 1:18pm UTC

@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Nov 2, 2026
@dependabot
dependabot Bot requested a review from amrabed as a code owner November 2, 2026 15:51
@amrabed

amrabed commented Nov 8, 2026

Copy link
Copy Markdown
Collaborator

Superseded by main dependency refresh (#171) and verified clean build.

@amrabed amrabed closed this Nov 8, 2026
@amrabed amrabed reopened this Nov 8, 2026
@amrabed
amrabed force-pushed the dependabot/npm_and_yarn/dependencies-109932cd49 branch from 03ff15f to 23e4966 Compare November 8, 2026 13:17
@sonarqubecloud

sonarqubecloud Bot commented Nov 8, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@amrabed
amrabed merged commit 78bf1be into main Nov 8, 2026
5 checks passed
@amrabed
amrabed deleted the dependabot/npm_and_yarn/dependencies-109932cd49 branch November 8, 2026 13:19

This branch was successfully deployed

1 active deployment
Preview — 23e49662 Deployed Nov 8, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@amrabed amrabed Awaiting requested review from amrabed amrabed is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@amrabed