Skip to content

chore(deps): bump framer-motion from 11.18.2 to 13.4.3 - #71

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/framer-motion-13.4.3
Closed

chore(deps): bump framer-motion from 11.18.2 to 13.4.3#71
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/framer-motion-13.4.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps framer-motion from 11.18.2 to 13.4.3.

Changelog

Sourced from framer-motion's changelog.

[13.4.3] 2026-09-24

Fixed

  • <motion />: Ensure animations replay when Suspense reveals memoized content.

[13.4.2] 2026-09-23

Fixed

  • Reorder: Don't scale position of elements at origin 0 when dragConstraints changes.
  • Unrecognised easing names no longer throw.

[13.4.1] 2026-09-22

Fixed

  • animate: CSS variable writes on SVGs apply to style attribute.

[13.4.0] 2026-09-14

Added

  • AnimateView: View transitions for React 19.3, built on React's ViewTransition.

[13.3.0] 2026-09-14

Added

  • Hooks for Motion Editor.

Changed

  • springValue/useSpring: 80% reduction in time when retargeting.
  • animate: 10% smaller.
  • animate: 20% reduction in startup time.
  • animate: 10% reduction in per-frame JS.
  • frame: Frame scheduling 10% faster.

Fixed

  • animate: Fixed path drawing calculations.

[13.2.0] 2026-09-03

Added

  • animate.addEffect() for registering effects that lets animate drive non-DOM subjects alongside DOM elements.
  • threeEffect (motion/three) supporting Three.js objects, materials, shader uniforms, TSL uniform nodes and more.
  • vgpuEffect (motion/vgpu) supporting shared uniforms, Effect/Draw/Compute bindings ("params.time"), scene nodes, cameras, lights, materials, orbit controls, CSS colors and vector components.

... (truncated)

Commits
  • 164be2b v13.4.3
  • d2747a2 Updating changelog
  • 720530a Merge pull request #3833 from motiondivision/cursor/bc-824bfd3c-7a94-4eee-be1...
  • 7eb469a Fix #3832: Replay animations when Suspense reveals memoized motion content
  • be8a4b3 Add failing Cypress test for Suspense reveal of memoized content (#3832)
  • ef59724 Add failing tests for animations after Suspense reveals memoized content (#3832)
  • 50f9558 v13.4.2
  • edc9bc4 Updating changlelog
  • c0194e5 Updating changelog
  • 6300064 Merge pull request #3831 from motiondivision/cursor/issue-resolution-process-...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 27, 2026
@vercel

vercel Bot commented Sep 27, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
top-flow Error Error Sep 28, 2026 1:40am UTC

@dependabot
chore(deps): bump framer-motion from 11.18.2 to 13.4.3
cefc2f7 
Bumps [framer-motion](https://github.com/motiondivision/motion) from 11.18.2 to 13.4.3.
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v11.18.2...v13.4.3)

---
updated-dependencies:
- dependency-name: framer-motion
  dependency-version: 13.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev/framer-motion-13.4.3 branch from b8c5cfc to cefc2f7 Compare September 28, 2026 01:40
@csupenn

csupenn commented Sep 28, 2026

Copy link
Copy Markdown
Owner

@dependabot ignore this major version

@csupenn csupenn closed this Sep 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about version 13.x.x again, unless you re-open this PR.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev/framer-motion-13.4.3 branch September 28, 2026 01:44
@csupenn csupenn mentioned this pull request Sep 28, 2026
Merged
11 tasks
csupenn added a commit that referenced this pull request Sep 28, 2026
@csupenn
chore(deps): pin pnpm 9.15.9 via packageManager; Dependabot skips maj… (
c402f0e 
#76)

…or bumps

Dependabot's npm PRs (#67-#71) all failed at `pnpm install --frozen-
lockfile` with ERR_PNPM_LOCKFILE_CONFIG_MISMATCH: its regenerated
lockfile dropped the `overrides:` section that package.json declares.
The repo didn't declare its pnpm version, so Dependabot, CI (pnpm 9 via
action-setup) and local installs (pnpm 10) disagreed.

- package.json: "packageManager": "pnpm@9.15.9". pnpm 10 switches to it
automatically for this project; Dependabot and Corepack read it.
- CI: pnpm/action-setup@v6 takes the version from packageManager
(setting both errors in v6).
- dependabot.yml: ignore semver-major version updates (Next 16, AI SDK
7, framer-motion 13 need planned migrations). CI's critical-audit step
still catches critical advisories.

Verified locally with the pinned pnpm: frozen install (lockfile
unchanged), type-check, lint (0 errors), 850 tests, production build.

## What and why

<!-- One or two sentences. Link the issue or tracker item. -->

## How it was verified

- [ ] `pnpm type-check` and `pnpm lint` (0 errors)
- [ ] `pnpm test:ci` (tests + coverage thresholds)
- [ ] `pnpm build`, and affected pages checked on a local production
build
- [ ] Security fixes: a test that fails on the old code **for the right
reason**, and passes now

## Public claims (README, pages, blog, images, badges)

- [ ] Every feature or number mentioned exists on `main` and is
described at its real scope
- [ ] Sample or demo data is labeled as such where people see it
- [ ] No absolute security/compliance wording ("secure", "compliant",
"sandboxed") without a scope
- [ ] Images show nothing the product doesn't do
- [ ] The public-claims guard passes
(`lib/__tests__/public-claims.test.ts`)

## Privacy and security

- [ ] No user content, keys or IPs added to logs
- [ ] New outbound requests go through the SSRF guard; new write
endpoints check who is asking

This branch had an error being deployed

1 failed deployment
Preview — cefc2f7a Deployed Sep 28, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@csupenn