Skip to content

chore(deps): bump the patch-and-minor group with 34 updates - #419

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/patch-and-minor-669340dc6c
Closed

chore(deps): bump the patch-and-minor group with 34 updates#419
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/patch-and-minor-669340dc6c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group with 34 updates:

Package From To
lefthook 2.2.1 2.2.2
turbo 2.11.7 2.11.8
@better-auth/api-key 1.7.7 1.7.10
nodemailer 10.0.15 10.1.1
@base-ui/react 1.8.0 1.9.0
motion 14.0.0 14.3.0
@better-auth/drizzle-adapter 1.7.7 1.7.10
@logtape/logtape 2.4.0 2.4.1
@sentry/bun 11.5.0 11.8.0
drizzle-orm 0.45.2 0.45.4
@logtape/pretty 2.4.0 2.4.1
@sentry/react 11.5.0 11.8.0
@tanstack/react-start 1.168.60 1.169.2
i18next 26.4.2 26.4.6
i18next-http-backend 4.0.2 4.0.3
react-i18next 17.0.16 17.0.18
@tanstack/router-plugin 1.168.42 1.168.46
@orpc/client 1.15.4 1.15.7
@orpc/contract 1.15.4 1.15.7
@orpc/experimental-ratelimit 1.15.4 1.15.7
@orpc/openapi 1.15.4 1.15.7
@orpc/server 1.15.4 1.15.7
@orpc/tanstack-query 1.15.4 1.15.7
@orpc/zod 1.15.4 1.15.7
@tanstack/react-query 5.104.1 5.104.3
@tanstack/react-router 1.170.41 1.170.44
@types/bun 1.4.2 1.4.3
better-auth 1.7.7 1.7.10
lucide-react 1.52.0 1.57.0
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
shadcn 4.21.4 4.21.5
vite 8.3.3 8.3.4
zod 4.6.5 4.6.7

Updates lefthook from 2.2.1 to 2.2.2

Release notes

Sourced from lefthook's releases.

v2.2.2

Changelog

  • 4aeffd72a6e3ea846c2054cffd6294c943fd7fbb fix: cleanup only current stash hash (#1597)
  • db62412c82ddac71cf536e60e50edb2826624870 packaging: add support for android (#1591)
  • e3fa81b1f01881829ef95e37211da7923a4fd6df refactor(filter): simplify mimetype matching (#1596)
Changelog

Sourced from lefthook's changelog.

2.2.2

Commits
  • eb4e504 2.2.2: keep backups for worktree flows and release android NPM package
  • 4aeffd7 fix: cleanup only current stash hash (#1597)
  • e3fa81b refactor(filter): simplify mimetype matching (#1596)
  • db62412 packaging: add support for android (#1591)
  • See full diff in compare view

Updates turbo from 2.11.7 to 2.11.8

Release notes

Sourced from turbo's releases.

Turborepo v2.11.8

What's Changed

Changelog

... (truncated)

Commits
  • 7663d6b publish 2.11.8 to registry
  • ad820cb fix: Disable agent guidance by default (#14490)
  • 6e9c65b fix: Prevent Git index refresh during dirty hash collection (#14489)
  • b5fe180 feat: Validate sealed native setup baselines (#14482)
  • cb615c3 chore: Add copyable Factory snapshot command (#14481)
  • 71d0766 fix: Upgrade turbo-gen Handlebars to 4.7.10 (#14471)
  • 2935202 docs: Explain declaring Cargo sources read from outside the crate (#14480)
  • 215637c fix: Report inferred framework env vars for deferred tasks in dry runs (#14478)
  • d6d63bd fix: Carry uv tool configuration into pruned workspaces (#14449)
  • 768d5ba fix: Hash Clippy configuration for Cargo lint tasks (#14448)
  • Additional commits viewable in compare view

Updates @better-auth/api-key from 1.7.7 to 1.7.10

Release notes

Sourced from @​better-auth/api-key's releases.

v1.7.10

better-auth

Bug Fixes

  • Fixed Captcha and OpenAPI plugin subpath imports and type resolution for better-auth/plugins/multi-session and better-auth/test. (#11822)
  • Fixed Google One Tap sign-ins not recording google as the last login method. (#11393)
  • Fixed imports from better-auth/plugins/one-tap failing with a not-exported error. (#11696)
  • Fixed Google One Tap ignoring plugin-level autoSelect and cancelOnTapOutside settings. (#11820)
  • Fixed Google One Tap sign-ins ignoring configured Google profile mapping and user info updates. (#11819)
  • Fixed Google One Tap calling a prompt method unsupported by FedCM and retrying skipped prompts. (#11821)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

  • Added optional self-service signing key rotation for private_key_jwt clients. (#11695)

Bug Fixes

  • Fixed valid DPoP proofs being rejected for parameterized routes and URLs with trailing slashes. (#11786)
  • Fixed native clients with HTTP loopback callbacks being rejected when application type inference is enabled. (#11798)
  • Fixed device-code clients being unable to refresh access for approved resources omitted from a token poll. (#11815)
  • Fixed OAuth consent without a reference overwriting or reusing consent for a different reference. (#11801)
  • Fixed dynamic client registration rejecting requests that include both supported and unsupported grants. (#11797)
  • Fixed attempts to change cached trusted clients returning HTTP 500 instead of HTTP 400. (#11781)
  • Improved errors for unknown OAuth client_id values to say client not found. (#11799)
  • Fixed PKCE verifier errors to return the specified HTTP 400 response and error code. (#11724)
  • Fixed unknown OAuth clients receiving invalid_grant instead of invalid_client at the token endpoint. (#11176)
  • Fixed unverifiable JWT access tokens causing server errors at /oauth2/userinfo, /oauth2/introspect, and /oauth2/revoke. (#11596)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Limited JWKS refetches for unknown key IDs to protect servers from repeated requests. (#11805)
  • Fixed unreachable JWKS endpoints being reported as invalid tokens instead of server errors. (#11612)

For detailed changes, see CHANGELOG

@better-auth/mongo-adapter

Bug Fixes

  • Fixed MongoDB findMany ignoring ID sorting and potentially repeating or skipping paginated results. (#11801)

... (truncated)

Changelog

Sourced from @​better-auth/api-key's changelog.

1.7.10

1.7.9

1.7.8

Patch Changes

  • #11512 4175b34 Thanks @​bytaesu! - Align the installed @better-auth/utils version with better-call while accepting ^0.4.2 || ^0.5.0 across official package peers.
Commits

Updates nodemailer from 10.0.15 to 10.1.1

Release notes

Sourced from nodemailer's releases.

v10.1.1

10.1.1 (2026-10-14)

Bug Fixes

  • fetch: strip credentials on any cross-origin redirect (a15360c)

v10.1.0

10.1.0 (2026-10-10)

Behaviour changes

  • Pooled connections are closed after 4 minutes without a message (new idleTimeout pool option, set it to 0 to keep them open). A message whose recipients are rejected no longer closes the pooled connection, it is reset with RSET and reused, and a message is requeued when the server dropped a reused connection before any of it was sent.
  • connectionTimeout covers setting the session up as a whole: the DNS lookup, a proxy handshake, the TCP connection, TLS, the greeting and a STARTTLS upgrade. greetingTimeout still bounds the greeting and the STARTTLS handshake within it.
  • Any 421 reply ends the SMTP session. When the server closes an idle connection, SMTPConnection emits only end, not an ECONNECTION error.
  • A content stream that was already read or destroyed fails the message with ESTREAM instead of producing an empty attachment. Content streams of a message that fails are destroyed.
  • With opportunisticTLS, authentication is skipped on the unencrypted connection after a failed STARTTLS, unless forceAuth is set.
  • The envelope is pipelined (MAIL FROM, RCPT TO and DATA in one batch) when the server announces PIPELINING.
  • Errors carry originalCode (the system error code Nodemailer replaced, such as ECONNREFUSED) and, for ETIMEDOUT, timeoutType.

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)

v10.0.16

10.0.16 (2026-10-07)

Bug Fixes

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.1.1 (2026-10-14)

Bug Fixes

  • fetch: strip credentials on any cross-origin redirect (a15360c)

10.1.0 (2026-10-10)

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)

10.0.16 (2026-10-07)

Bug Fixes

  • addressparser: keep an escaped parenthesis inside a comment (c4ae20d)
  • fetch: keep the case of cookie names (#1888) (9f16eed)
  • fetch: read the cookie name-value pair by position (645e97c)
Commits
  • 9396cca chore(master): release 10.1.1 (#1893)
  • 65d7498 chore(deps): bump dev dependencies
  • 647ee44 test(smtp-connection): pin connectionTimeout across all resolved addresses
  • a15360c fix(fetch): strip credentials on any cross-origin redirect
  • c8671c4 Updated SECURITY.md formatting
  • be6fe72 testing VUlnerability firm
  • 7bdaa77 chore: Updated Security Policy
  • 0780032 chore(master): release 10.1.0 (#1890)
  • 42b91d9 fix(qp): encode a lone CR or LF in binary quoted-printable parts
  • b9b8c84 test(smtp-pool): fail the clear event test with the pool state instead of han...
  • Additional commits viewable in compare view

Updates @base-ui/react from 1.8.0 to 1.9.0

Release notes

Sourced from @​base-ui/react's releases.

v1.9.0

General changes

Accordion

  • Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
  • Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
  • Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

  • Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

Collapsible

Combobox

Dialog

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.9.0

Oct 9, 2026

General changes

Accordion

  • Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
  • Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
  • Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

  • Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

Collapsible

Combobox

  • Fix stale chip focus after returning to the input (#5879) by @​mdm317
  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak
  • Fix label focus in Shadow DOM (#5871) by @​lyzno1
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Reset typeahead state when closing without moving focus (#5816) by @​mdm317
  • Accept readonly arrays for multiple values (#5710) by @​MonstraG

... (truncated)

Commits
  • ad7ecda [release] v1.9.0 (#5906)
  • 3296de3 [drawer] Avoid retaining unmounted drawers in DrawerProvider (#5921)
  • 69c33b4 [drawer] Fix deferred touch swipes leaving the popup (#5922)
  • 51b70db [menu] Strip internal filter components from public types (#5923)
  • 8d8b98c [menu] Ignore filter input edits while the menu animates out (#5911)
  • aeba3eb [combobox][menu][select] Revert highlightItem imperative action (#5910)
  • ec6bf32 [field][select][combobox][slider] Fall back to the owner document when lookin...
  • 1f112a5 [popups] Avoid re-rendering inactive triggers on open and close (#5865)
  • bc53db6 [fieldset] Await render in Legend disabled-state test (#5909)
  • 147092e [test] Strengthen tests, add test lint rules and share copied suites (#5892)
  • Additional commits viewable in compare view

Updates motion from 14.0.0 to 14.3.0

Changelog

Sourced from motion's changelog.

[14.3.0] 2026-10-15

Added

  • stagger: New grid, from: "edges" | "random" options.
  • Support for scaleZ.

Fixed

  • Fix matrix3d and other digit-named transform functions being tokenised as numbers.
  • useSpring: Ensure when switching targets we animate to the new target on switch.
  • Fix SVG MotionValue children being written as a children attribute.
  • AnimatePresence: Fire onExitComplete after exiting children unmount.
  • AnimatePresence: popLayout children that don't accept ref are now popped when root component is <motion> element.
  • Fix interpolation of axis rotate and skew transforms during shared layout animation.
  • Fix layout animations when layout is enabled after mount.
  • Fix drag jumping to 0 after animate x/y to CSS variable.
  • arc: Fix path animations with animate.
  • Ensure shared elements are freed from memory when unmounted.
  • Fix accelerated independent transform animations vanishing when they start from a float residue.

[14.2.0] 2026-10-13

Added

  • Hardware accelerated independent transforms like x, y, scaleX etc.

[14.1.1] 2026-10-13

Fixed

  • Fix velocity hand-off for hardware-accelerated springs.
  • cubicBezier: More accurate, 2x faster.
  • Reorder: Fix click events on reoredered items.
  • useTransform: Fix desync when source is set in an effect under Strict Mode.

[14.1.0] 2026-10-09

Added

  • animateLayout: Layout animations for vanilla JS.

Fixed

  • Delay animation start when main thread held to prevent visual jumps.
  • Fix whileHover/whileTap getting stuck after Fast Refresh reorders siblings.
  • scroll/useScroll: Fix reporting of elastic overscroll.
  • AnimatePresence: Fix popLayout when rendering into another window or iframe.
  • animate: Fix JS animations jumping ahead when played after a pause at non-1 speed.
  • Allow layout animations inside dragged elements.
Commits
  • 0403bee v14.3.0
  • 33a7ae0 Latest
  • a1fdaa7 Merge pull request #3927 from motiondivision/claude/project-thread-q79mtn-iss...
  • a81eb89 Merge pull request #3924 from motiondivision/claude/project-thread-q79mtn-iss...
  • 81738d3 Fix scaleZ not being applied to the transform
  • a26b026 Fix SVG MotionValue children being written as a children attribute
  • 0caa412 Add failing test for #2609: scaleZ is not applied to the transform
  • 81d8aae Add failing test for #2578: motion.text writes MotionValue child as attribute
  • 2b68ca9 latest
  • 5b53571 Updating changelog
  • Additional commits viewable in compare view

Updates @better-auth/drizzle-adapter from 1.7.7 to 1.7.10

Release notes

Sourced from @​better-auth/drizzle-adapter's releases.

v1.7.10

better-auth

Bug Fixes

  • Fixed Captcha and OpenAPI plugin subpath imports and type resolution for better-auth/plugins/multi-session and better-auth/test. (#11822)
  • Fixed Google One Tap sign-ins not recording google as the last login method. (#11393)
  • Fixed imports from better-auth/plugins/one-tap failing with a not-exported error. (#11696)
  • Fixed Google One Tap ignoring plugin-level autoSelect and cancelOnTapOutside settings. (#11820)
  • Fixed Google One Tap sign-ins ignoring configured Google profile mapping and user info updates. (#11819)
  • Fixed Google One Tap calling a prompt method unsupported by FedCM and retrying skipped prompts. (#11821)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

  • Added optional self-service signing key rotation for private_key_jwt clients. (#11695)

Bug Fixes

  • Fixed valid DPoP proofs being rejected for parameterized routes and URLs with trailing slashes. (#11786)
  • Fixed native clients with HTTP loopback callbacks being rejected when application type inference is enabled. (#11798)
  • Fixed device-code clients being unable to refresh access for approved resources omitted from a token poll. (#11815)
  • Fixed OAuth consent without a reference overwriting or reusing consent for a different reference. (#11801)
  • Fixed dynamic client registration rejecting requests that include both supported and unsupported grants. (#11797)
  • Fixed attempts to change cached trusted clients returning HTTP 500 instead of HTTP 400. (#11781)
  • Improved errors for unknown OAuth client_id values to say client not found. (#11799)
  • Fixed PKCE verifier errors to return the specified HTTP 400 response and error code. (#11724)
  • Fixed unknown OAuth clients receiving invalid_grant instead of invalid_client at the token endpoint. (#11176)
  • Fixed unverifiable JWT access tokens causing server errors at /oauth2/userinfo, /oauth2/introspect, and /oauth2/revoke. (#11596)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Limited JWKS refetches for unknown key IDs to protect servers from repeated requests. (#11805)
  • Fixed unreachable JWKS endpoints being reported as invalid tokens instead of server errors. (#11612)

For detailed changes, see CHANGELOG

Description has been truncated

@dependabot
chore(deps): bump the patch-and-minor group with 34 updates
ab28517 
Bumps the patch-and-minor group with 34 updates:

| Package | From | To |
| --- | --- | --- |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.2.1` | `2.2.2` |
| [turbo](https://github.com/vercel/turborepo) | `2.11.7` | `2.11.8` |
| [@better-auth/api-key](https://github.com/better-auth/better-auth/tree/HEAD/packages/api-key) | `1.7.7` | `1.7.10` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.15` | `10.1.1` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.8.0` | `1.9.0` |
| [motion](https://github.com/motiondivision/motion) | `14.0.0` | `14.3.0` |
| [@better-auth/drizzle-adapter](https://github.com/better-auth/better-auth/tree/HEAD/packages/drizzle-adapter) | `1.7.7` | `1.7.10` |
| [@logtape/logtape](https://github.com/dahlia/logtape/tree/HEAD/packages/logtape) | `2.4.0` | `2.4.1` |
| [@sentry/bun](https://github.com/getsentry/sentry-javascript) | `11.5.0` | `11.8.0` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.4` |
| [@logtape/pretty](https://github.com/dahlia/logtape/tree/HEAD/packages/pretty) | `2.4.0` | `2.4.1` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `11.5.0` | `11.8.0` |
| [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start) | `1.168.60` | `1.169.2` |
| [i18next](https://github.com/i18next/i18next) | `26.4.2` | `26.4.6` |
| [i18next-http-backend](https://github.com/i18next/i18next-http-backend) | `4.0.2` | `4.0.3` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.16` | `17.0.18` |
| [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin) | `1.168.42` | `1.168.46` |
| [@orpc/client](https://github.com/middleapi/orpc/tree/HEAD/packages/client) | `1.15.4` | `1.15.7` |
| [@orpc/contract](https://github.com/middleapi/orpc/tree/HEAD/packages/contract) | `1.15.4` | `1.15.7` |
| [@orpc/experimental-ratelimit](https://github.com/middleapi/orpc/tree/HEAD/packages/ratelimit) | `1.15.4` | `1.15.7` |
| [@orpc/openapi](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi) | `1.15.4` | `1.15.7` |
| [@orpc/server](https://github.com/middleapi/orpc/tree/HEAD/packages/server) | `1.15.4` | `1.15.7` |
| [@orpc/tanstack-query](https://github.com/middleapi/orpc/tree/HEAD/packages/tanstack-query) | `1.15.4` | `1.15.7` |
| [@orpc/zod](https://github.com/middleapi/orpc/tree/HEAD/packages/zod) | `1.15.4` | `1.15.7` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.1` | `5.104.3` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.41` | `1.170.44` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.2` | `1.4.3` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.7` | `1.7.10` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.52.0` | `1.57.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.4` | `4.21.5` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.3` | `8.3.4` |
| [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` |


Updates `lefthook` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.2.1...v2.2.2)

Updates `turbo` from 2.11.7 to 2.11.8
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.11.7...v2.11.8)

Updates `@better-auth/api-key` from 1.7.7 to 1.7.10
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/api-key/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.10/packages/api-key)

Updates `nodemailer` from 10.0.15 to 10.1.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.15...v10.1.1)

Updates `@base-ui/react` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.9.0/packages/react)

Updates `motion` from 14.0.0 to 14.3.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.0.0...v14.3.0)

Updates `@better-auth/drizzle-adapter` from 1.7.7 to 1.7.10
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/drizzle-adapter/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.10/packages/drizzle-adapter)

Updates `@logtape/logtape` from 2.4.0 to 2.4.1
- [Changelog](https://github.com/dahlia/logtape/blob/main/CHANGES.md)
- [Commits](https://github.com/dahlia/logtape/commits/2.4.1/packages/logtape)

Updates `@sentry/bun` from 11.5.0 to 11.8.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@11.5.0...11.8.0)

Updates `drizzle-orm` from 0.45.2 to 0.45.4
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.45.2...0.45.4)

Updates `@logtape/pretty` from 2.4.0 to 2.4.1
- [Changelog](https://github.com/dahlia/logtape/blob/main/CHANGES.md)
- [Commits](https://github.com/dahlia/logtape/commits/2.4.1/packages/pretty)

Updates `@sentry/react` from 11.5.0 to 11.8.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@11.5.0...11.8.0)

Updates `@tanstack/react-start` from 1.168.60 to 1.169.2
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-start@1.169.2/packages/react-start)

Updates `i18next` from 26.4.2 to 26.4.6
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.4.2...v26.4.6)

Updates `i18next-http-backend` from 4.0.2 to 4.0.3
- [Changelog](https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next-http-backend@v4.0.2...v4.0.3)

Updates `react-i18next` from 17.0.16 to 17.0.18
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.0.16...v17.0.18)

Updates `@tanstack/router-plugin` from 1.168.42 to 1.168.46
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/router-plugin@1.168.46/packages/router-plugin)

Updates `@orpc/client` from 1.15.4 to 1.15.7
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.7/packages/client)

Updates `@orpc/contract` from 1.15.4 to 1.15.7
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.7/packages/contract)

Updates `@orpc/experimental-ratelimit` from 1.15.4 to 1.15.7
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.7/packages/ratelimit)

Updates `@orpc/openapi` from 1.15.4 to 1.15.7
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.7/packages/openapi)

Updates `@orpc/server` from 1.15.4 to 1.15.7
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.7/packages/server)

Updates `@orpc/tanstack-query` from 1.15.4 to 1.15.7
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.7/packages/tanstack-query)

Updates `@orpc/zod` from 1.15.4 to 1.15.7
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.7/packages/zod)

Updates `@tanstack/react-query` from 5.104.1 to 5.104.3
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.3/packages/react-query)

Updates `@tanstack/react-router` from 1.170.41 to 1.170.44
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.44/packages/react-router)

Updates `@types/bun` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `better-auth` from 1.7.7 to 1.7.10
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.10/packages/better-auth)

Updates `lucide-react` from 1.52.0 to 1.57.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.57.0/packages/lucide-react)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `shadcn` from 4.21.4 to 4.21.5
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.21.5/packages/shadcn)

Updates `vite` from 8.3.3 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

Updates `zod` from 4.6.5 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.5...v4.6.7)

---
updated-dependencies:
- dependency-name: lefthook
  dependency-version: 2.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: turbo
  dependency-version: 2.11.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@better-auth/api-key"
  dependency-version: 1.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: nodemailer
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@base-ui/react"
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: motion
  dependency-version: 14.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@better-auth/drizzle-adapter"
  dependency-version: 1.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@logtape/logtape"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@sentry/bun"
  dependency-version: 11.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: drizzle-orm
  dependency-version: 0.45.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@logtape/pretty"
  dependency-version: 2.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@sentry/react"
  dependency-version: 11.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@tanstack/react-start"
  dependency-version: 1.169.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: i18next
  dependency-version: 26.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: i18next-http-backend
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-i18next
  dependency-version: 17.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tanstack/router-plugin"
  dependency-version: 1.168.46
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@orpc/client"
  dependency-version: 1.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@orpc/contract"
  dependency-version: 1.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@orpc/experimental-ratelimit"
  dependency-version: 1.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@orpc/openapi"
  dependency-version: 1.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@orpc/server"
  dependency-version: 1.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@orpc/tanstack-query"
  dependency-version: 1.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@orpc/zod"
  dependency-version: 1.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@types/bun"
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: better-auth
  dependency-version: 1.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: lucide-react
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: shadcn
  dependency-version: 4.21.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
@filc-preview-vm

filc-preview-vm Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown

🗑️ Preview removed
Environment pr-419.preview.filc.petrik.hu
Commit ab28517
URL https://pr-419.preview.filc.petrik.hu
Edge check —

Posted by filc-deployer. The preview database is its own container and is
destroyed when this pull request closes.

@filc-preview-vm
filc-preview-vm Bot temporarily deployed to preview-pr-419 October 19, 2026 05:23 Destroyed
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@github-project-automation github-project-automation Bot moved this from Backlog to Done in Filc Issue Tracker Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/patch-and-minor-669340dc6c branch October 19, 2026 18:18

This branch was successfully deployed

No deployments
preview-pr-419 — ab285170 Deployed Oct 19, 2026 by filc-preview-vm[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Filc Issue Tracker
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants