Skip to content

Bump the production group across 1 directory with 5 updates - #183

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-4608f4aa86
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-4608f4aa86

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the production group with 5 updates in the / directory:

Package From To
framer-motion 14.3.0 14.7.1
jose 6.2.12 6.2.13
lucide-react 1.58.0 1.63.0
next 16.4.2 16.4.3
zustand 5.0.15 5.0.16

Updates framer-motion from 14.3.0 to 14.7.1

Changelog

Sourced from framer-motion's changelog.

[14.7.1] 2026-10-27

Fixed

  • Demote transforms to CPU when interrupted by layout animations.

[14.7.0] 2026-10-27

Added

  • animate: Mutable timeline sequences.
  • animate: Relative label offsets for timeline sequences.
  • useScroll: Returns scrollXLength and scrollYLength.
  • Reorder: Add LazyMotion-compatible import.
  • motion: transition.out prop for transitions when exiting a state.

Fixed

  • Fix one flash when changing playback speed of accelerated independent transform.
  • AnimatePresence: Improved positioning of popped elements.
  • spring: Fix overdamped springs snapping to target.
  • drag: Ref-constraints kept up-to-date after scroll.
  • motion: Animate layoutId elements relative to layoutRoot container.
  • motion: Bundle size reductions.
  • Moving background-color animations back to main thread for improved interpolation.
  • drag: Fix drag inertia stopping dead after a fast flick from a standstill.
  • layout: layoutId elements now animate relative to their closest layoutRoot ancestor, if any.
  • layout: layoutId may be changed after mount.
  • useScroll: Fix tracking in horizontal containers.
  • useSpring: Reduced bundle size by 30%.

[14.6.0] 2026-10-22

Added

  • Reorder: Grab-and-move keyboard reordering.
  • processFrame: Manually process the frameloop at t.
  • stepFrames: For tests, synchronously advance frameloop time by duration.

Fixed

  • Improved tree-shaking.
  • motion: Fix layoutId elements jumping in some situations.
  • Reorder: Make auto-scroll speed independent of refresh rate.
  • drag: Fix animations when disabling drag from within onDrag.
  • Fix shared layout animations applying an element's own scale/x/y twice.
  • Fix replaying mount animation when an element takes over a layoutId.
  • motion: Fix updating SVG styles.
  • useTransform: Improving value resolution.

... (truncated)

Commits
  • 9ba8846 v14.7.1
  • ed82763 Updating changelog
  • da6d6d3 Merge pull request #4023 from motiondivision/claude/project-thread-silaya
  • 4e72d8d Say what demote() returning true means
  • 075a6a7 Test a child measured inside an ancestor rotating on the compositor (#4022)
  • 6c6edff Reset rotations again after moving them off the compositor for measuring (#4022)
  • 11f01c5 Test that layout measurements don't distort a rotation on the compositor (#4022)
  • 734d2f6 Merge pull request #4021 from motiondivision/claude/project-thread-2690wu
  • 320342f Say why holding with pause() leaves WebKit a ready time
  • dc23e95 Hold transform WAAPI animations by clearing startTime, not pause()
  • Additional commits viewable in compare view

Updates jose from 6.2.12 to 6.2.13

Release notes

Sourced from jose's releases.

v6.2.13

Refactor

  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #908
Changelog

Sourced from jose's changelog.

6.2.13 (2026-10-20)

Refactor

  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #908
Commits
  • 316b7f2 chore(release): 6.2.13
  • 8106395 chore: bump packages
  • 724ba24 refactor: preserve underlying error causes
  • b112a5e chore: bump packages
  • 2a3a525 chore(deps-dev): bump workerd in /tap/workerd
  • 8f540d8 chore(deps): bump the actions group with 3 updates
  • 8d6c02b chore(deps-dev): bump electron from 44.0.0 to 44.4.5 in /tap/electron
  • 55c959f ci: use gh run rerun for retries
  • 5b00c64 ci: address zizmor findings and bump shared workflows
  • 1761d7f chore: bump packages
  • Additional commits viewable in compare view

Updates lucide-react from 1.58.0 to 1.63.0

Release notes

Sourced from lucide-react's releases.

Version 1.63.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.62.0...1.63.0

Version 1.62.0

What's Changed

New Contributors

... (truncated)

Commits
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • See full diff in compare view

Updates next from 16.4.2 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits
  • 29bbeab v16.4.3
  • 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
  • 37d603b [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #1...
  • cf9d27d [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (...
  • 3f6a632 [lts-active] test: Pin react-virtualized (#100545)
  • f715bba [lts-active][cd] Gate release bot credentials behind GitHub environments (#10...
  • c864c78 [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • f3ff943 [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • f697cf5 [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • See full diff in compare view

Updates zustand from 5.0.15 to 5.0.16

Release notes

Sourced from zustand's releases.

v5.0.16

This version has some improvements thanks to contributors: @​MarshallOfSound @​koreahghg @​chungyo @​Godsdar

What's Changed

Full Changelog: pmndrs/zustand@v5.0.15...v5.0.16

Commits
  • 382d29c v5.0.16
  • b488323 chore(deps): update dev dependencies (#3593)
  • da2706c fix(persist): preserve external devtools action arguments (#3592)
  • a1fea2e fix(devtools): preserve shared connections during store cleanup (#3580)
  • d867e6f fix(devtools): apply serialize.reviver when parsing devtools messages (#3568)
  • dac22e1 perf(react): don't memoize getServerSnapshot in useStore (#3563)
  • d7a5583 Clarify maintainer-guided contribution workflow (#3587)
  • b57db4f docs(create): document that state cannot be read during initialization (#3569)
  • f094eeb ci: build the docs with pmndrs/docs@v4 (#3570)
  • ea612a5 docs: fix broken migrating-to-v5 link in README (#3567)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-26T16:18:03.164017Z c7678fe PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Bumps the production group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [framer-motion](https://github.com/motiondivision/motion) | `14.3.0` | `14.7.1` |
| [jose](https://github.com/panva/jose) | `6.2.12` | `6.2.13` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.58.0` | `1.63.0` |
| [next](https://github.com/vercel/next.js) | `16.4.2` | `16.4.3` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.15` | `5.0.16` |



Updates `framer-motion` from 14.3.0 to 14.7.1
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.3.0...v14.7.1)

Updates `jose` from 6.2.12 to 6.2.13
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.12...v6.2.13)

Updates `lucide-react` from 1.58.0 to 1.63.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.63.0/packages/lucide-react)

Updates `next` from 16.4.2 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.2...v16.4.3)

Updates `zustand` from 5.0.15 to 5.0.16
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.15...v5.0.16)

---
updated-dependencies:
- dependency-name: framer-motion
  dependency-version: 14.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: jose
  dependency-version: 6.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: lucide-react
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: zustand
  dependency-version: 5.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the production group with 5 updates Bump the production group across 1 directory with 5 updates Nov 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-4608f4aa86 branch from c7678fe to d32eb62 Compare November 1, 2026 01:36
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 2, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-4608f4aa86 branch November 2, 2026 11:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants