chore: bump the minor-and-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #94 · Jiseoup/showmycode

dependabot · 2026-10-05T01:46:24Z

Bumps the minor-and-patch group with 6 updates in the / directory:

Package	From	To
lucide-react	`1.47.0`	`1.49.0`
next	`16.3.5`	`16.3.8`
shiki	`4.4.3`	`4.5.0`
@types/node	`26.6.1`	`26.6.4`
eslint-config-next	`16.3.5`	`16.3.8`
prettier	`3.9.8`	`3.9.9`

Updates lucide-react from 1.47.0 to 1.49.0

Release notes

Sourced from lucide-react's releases.

Version 1.49.0

What's Changed

feat(icons): added letters icon by @karsa-mistmere in lucide-icons/lucide#4779

fix(packages): declare @types/react as an optional peer dependency by @unrevised6419 in lucide-icons/lucide#4892

feat(icons): added bangladeshi-taka icon by @TanvirMahin24 in lucide-icons/lucide#4869

feat(icons): added printer-3d icon by @Azuzula in lucide-icons/lucide#4414

New Contributors

@unrevised6419 made their first contribution in lucide-icons/lucide#4892

@TanvirMahin24 made their first contribution in lucide-icons/lucide#4869

@Azuzula made their first contribution in lucide-icons/lucide#4414

Full Changelog: lucide-icons/lucide@1.48.0...1.49.0

Version 1.48.0

What's Changed

feat(icons): added briefcase-plus icon by @tylerkade in lucide-icons/lucide#4757

feat(icons): added square-sparkles icon by @nananecy in lucide-icons/lucide#3610

feat(icons): added line-dot-left-horizontal icon by @nathan-de-pachtere in lucide-icons/lucide#3855

fix(packages/svelte,solid): fix shared type imports in Solid and Svelte by @karsa-mistmere in lucide-icons/lucide#4846

chore(deps-dev): bump react-native from 0.76.9 to 0.87.1 in the react-native-deps group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4673

feat(packages): export __iconNode data across framework packages by @lx3133584 in lucide-icons/lucide#4761

fix(icons): Tweak card-sim chip by @danielbayley in lucide-icons/lucide#3649

feat(icons): added line-dot-top-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3856

feat(icons): added line-dot-bottom-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3857

fix(packages/react-native): pass testID to the rendered Svg element by @OlegBezr in lucide-icons/lucide#4881

chore(@lucide/vue): Fix types @lucide/vue package and added workflow for it. by @ericfennis in lucide-icons/lucide#4883

test(packages/shared): cover buildLucideIconForReact by @vugarbbakhishov-hub in lucide-icons/lucide#4872

feat(site): Better icon detail page and add unreleased flag by @ericfennis in lucide-icons/lucide#4877

fix(icons): changed map-pinned icon by @jguddas in lucide-icons/lucide#4880

fix(icons): changed mail-pen by @karsa-mistmere in lucide-icons/lucide#4899

chore(deps-dev): bump the angular-deps group across 1 directory with 14 updates by @dependabot[bot] in lucide-icons/lucide#4895

chore(deps): bump the vue-deps group with 3 updates by @dependabot[bot] in lucide-icons/lucide#4893

chore(typchecking): More typecheck jobs for all packages by @ericfennis in lucide-icons/lucide#4885

feat(icons): add house-cog icon by @ajaxjiang96 in lucide-icons/lucide#4904

New Contributors

@nananecy made their first contribution in lucide-icons/lucide#3610

@OlegBezr made their first contribution in lucide-icons/lucide#4881

@vugarbbakhishov-hub made their first contribution in lucide-icons/lucide#4872

@ajaxjiang96 made their first contribution in lucide-icons/lucide#4904

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Commits

e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
See full diff in compare view

Updates next from 16.3.5 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Server-Side Request Forgery in Image Optimization

Medium:

Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Pending use cache fill can leak Draft Mode content into regular responses and persisted pages

Cache leak across root param values in nested 'use cache' functions

Low:

Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @lukesandberg for helping!

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

Commits

b0fad0d v16.3.8
719e4c6 [lts-active] Scope response cache keys to their source route (#218)
e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
4c20699 v16.3.7
2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
Additional commits viewable in compare view

Updates shiki from 4.4.3 to 4.5.0

Release notes

Sourced from shiki's releases.

v4.5.0

   🚀 Features

Emit an explicit color level from codeToANSI - by @EvanProgramming in shikijs/shiki#1320 (b968e)

transformers:

Add classActiveCode option to transformerNotationWordHighlight - by @curiouscoder-cmd in shikijs/shiki#1201 (1e968)

Add transformerRenderLineNumber - by @Divyapahuja31 and DIVYA PAHUJA in shikijs/shiki#1238 (02f05)

   🐞 Bug Fixes

cli:

Fall back to 'text' when file/URL has no extension and no -… - by @VeerShah41 in shikijs/shiki#1248 (c00e5)

Fall back to plaintext for unknown languages - by @Jinjiang and @antfubot in shikijs/shiki#1319 (4eb7c)

primitive:

Dispose wasm memory for lazily embedded langs - by @rgodha24 in shikijs/shiki#1322 (b5423)

Dedupe grammar injections on repeated language loads - by @antlio and @antfubot in shikijs/shiki#1318 (33678)

stream:

Compile Solid renderer with babel-preset-solid - by @BetterAndBetterII and @antfu in shikijs/shiki#1309 (8724e)

transformers:

Keep notations on content comment lines - by @tianrking in shikijs/shiki#1308 (d25ab)

Handle split # and -- comments in rose-pine theme - by @anandghegde in shikijs/shiki#1317 (63e6d)

twoslash:

Avoid crash when @errors nodes land past EOF - by @Yahiro025, @cursoragent and @antfubot in shikijs/shiki#1316 (5c919)

   🏎 Performance

engine-js: Reuse each regex's last search while tokenizing a line - by @issacgerges and @antfu in shikijs/shiki#1314 (2ef5e)

stream: Group tokens by line in the React renderer - by @CNSeniorious000 in shikijs/shiki#1311 (81200)

vitepress-twoslash: Replace lz-string with lz-string-es - by @antfubot in shikijs/shiki#1324 (2e170)

    View changes on GitHub

Commits

f7d0167 chore: release v4.5.0
See full diff in compare view

Updates @types/node from 26.6.1 to 26.6.4

Commits

See full diff in compare view

Updates eslint-config-next from 16.3.5 to 16.3.8

Release notes

Sourced from eslint-config-next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Server-Side Request Forgery in Image Optimization

Medium:

Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Pending use cache fill can leak Draft Mode content into regular responses and persisted pages

Cache leak across root param values in nested 'use cache' functions

Low:

Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @lukesandberg for helping!

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

Commits

b0fad0d v16.3.8
4c20699 v16.3.7
a758ffc v16.3.6
See full diff in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.47.0` | `1.49.0` | | [next](https://github.com/vercel/next.js) | `16.3.5` | `16.3.8` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.4.3` | `4.5.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.1` | `26.6.4` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.5` | `16.3.8` | | [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` | Updates `lucide-react` from 1.47.0 to 1.49.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react) Updates `next` from 16.3.5 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.5...v16.3.8) Updates `shiki` from 4.4.3 to 4.5.0 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.5.0/packages/shiki) Updates `@types/node` from 26.6.1 to 26.6.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-config-next` from 16.3.5 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.8/packages/eslint-config-next) Updates `prettier` from 3.9.8 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.8...3.9.9) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: shiki dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint-config-next dependency-version: 16.3.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-12T04:40:27Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Dependency version updates (Dependabot) label Oct 5, 2026

dependabot Bot requested a review from Jiseoup as a code owner October 5, 2026 01:46

dependabot Bot added the dependencies Dependency version updates (Dependabot) label Oct 5, 2026

github-actions Bot added the chore Maintenance, config, CI label Oct 5, 2026

vercel Bot deployed to Preview October 5, 2026 01:47

View deployment

dependabot Bot closed this Oct 12, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-9d18a58ce4 branch October 12, 2026 04:40

Navigation Menu

Repository navigation

chore: bump the minor-and-patch group across 1 directory with 6 updates - #94

chore: bump the minor-and-patch group across 1 directory with 6 updates#94
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-9d18a58ce4

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 1.49.0

What's Changed

New Contributors

Version 1.48.0

What's Changed

New Contributors

v16.3.8

v16.3.7

Core Changes

Credits

v16.3.6

v4.5.0

🚀 Features

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v16.3.8

v16.3.7

Core Changes

Credits

v16.3.6

3.9.9

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)