Skip to content

chore(deps): bump the production group across 1 directory with 12 updates#713

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-c30c7fdc9d
Closed

chore(deps): bump the production group across 1 directory with 12 updates#713
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-c30c7fdc9d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the production group with 12 updates in the / directory:

Package From To
@iconify-json/lucide 1.2.115 1.2.116
@iconify-json/simple-icons 1.2.88 1.2.89
@shikijs/rehype 4.3.0 4.3.1
@wagmi/core 3.5.4 3.6.1
accounts 0.14.11 0.15.1
hono 4.12.27 4.12.28
posthog-js 1.396.4 1.399.1
posthog-node 5.39.2 5.40.0
prool 0.2.4 0.2.6
shiki 4.3.0 4.3.1
viem 2.54.6 2.55.0
wagmi 3.6.20 3.7.1

Updates @iconify-json/lucide from 1.2.115 to 1.2.116

Commits

Updates @iconify-json/simple-icons from 1.2.88 to 1.2.89

Commits

Updates @shikijs/rehype from 4.3.0 to 4.3.1

Release notes

Sourced from @​shikijs/rehype's releases.

v4.3.1

   🚀 Features

    View changes on GitHub
Commits

Updates @wagmi/core from 3.5.4 to 3.6.1

Release notes

Sourced from @​wagmi/core's releases.

@​wagmi/core@​3.6.1

Patch Changes

  • Fixed waitForTransactionReceipt staying pending for reverted transactions when revert-reason lookup hangs behind a fallback transport. (#5190)

@​wagmi/core@​3.6.0

Minor Changes

  • Breaking (@​wagmi/core/tempo): Updated Tempo APIs for viem 2.54.0: token balance and allowance reads now return Amount objects. (#5188)

@​wagmi/core@​3.5.5

Patch Changes

  • Fixed Tempo types so transaction override parameters are optional. (#5171)
Changelog

Sourced from @​wagmi/core's changelog.

3.6.1

Patch Changes

  • Fixed waitForTransactionReceipt staying pending for reverted transactions when revert-reason lookup hangs behind a fallback transport. (#5190)

3.6.0

Minor Changes

  • Breaking (@​wagmi/core/tempo): Updated Tempo APIs for viem 2.54.0: token balance and allowance reads now return Amount objects. (#5188)

3.5.5

Patch Changes

  • Fixed Tempo types so transaction override parameters are optional. (#5171)
Commits

Updates accounts from 0.14.11 to 0.15.1

Release notes

Sourced from accounts's releases.

accounts@0.15.1

Patch Changes

  • 03c1161: Added string and { address } forms to the wallet_connect identity.email capability for requiring a specific email.

accounts@0.15.0

Minor Changes

  • 2cfca91: Updated viem (>=2.54.0) and ox (~0.14.30) for the config-id-free TIP-1061 multisig format, removing genesisConfigId from the multisig relay ResolveConfig, Operation, and Status shapes.

accounts@0.14.12

Patch Changes

  • 186b1f7: Added provider MPP account resolution parameters for locally managed access keys.
  • 2e092e9: Added exact access-key selection for provider-backed mppx parameters.
  • d5c0d66: Changed Mount.auto to allow trusted hosts to use iframe mounts without IntersectionObserver v2 support.
  • 98a8138: Added identity to Provider.create, minting verified-email id tokens from a configured OIDC issuer when local adapters fulfill wallet_connect.
  • 4aa479d: Add SIWE resources to wallet_connect auth challenges, support server-provided SIWE statements in Handler.auth, and preserve extra auth verify JSON fields.
Changelog

Sourced from accounts's changelog.

0.15.1

Patch Changes

  • 03c1161: Added string and { address } forms to the wallet_connect identity.email capability for requiring a specific email.

0.15.0

Minor Changes

  • 2cfca91: Updated viem (>=2.54.0) and ox (~0.14.30) for the config-id-free TIP-1061 multisig format, removing genesisConfigId from the multisig relay ResolveConfig, Operation, and Status shapes.

0.14.12

Patch Changes

  • 186b1f7: Added provider MPP account resolution parameters for locally managed access keys.
  • 2e092e9: Added exact access-key selection for provider-backed mppx parameters.
  • d5c0d66: Changed Mount.auto to allow trusted hosts to use iframe mounts without IntersectionObserver v2 support.
  • 98a8138: Added identity to Provider.create, minting verified-email id tokens from a configured OIDC issuer when local adapters fulfill wallet_connect.
  • 4aa479d: Add SIWE resources to wallet_connect auth challenges, support server-provided SIWE statements in Handler.auth, and preserve extra auth verify JSON fields.
Commits

Updates hono from 4.12.27 to 4.12.28

Release notes

Sourced from hono's releases.

v4.12.28

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.27...v4.12.28

Commits
  • 626b185 4.12.28
  • d6b1d32 docs(context-storage): fix JSDoc (#5086)
  • 45b081b fix(aws-lambda): detect V2 events by request context, not rawPath alone (#5033)
  • a05813c chore: bump devDependencies (#5085)
  • 872997d fix(bun): report the requested subprotocol on WSContext.protocol (#5059)
  • 82b321b fix: avoid circular dependency between body.ts and request.ts (#5071)
  • b20d422 fix(utils/body,validator): normalize Content-Type media type for case-insensi...
  • 9728702 chore: don't publish *.tsbuildinfo (#5066)
  • ed8795e docs(MIGRATION): fix req.raw.headers reference (property, not method) (#5047)
  • 03a9416 fix(serve-static): treat empty string content as found (#5062)
  • See full diff in compare view

Updates posthog-js from 1.396.4 to 1.399.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.399.1

1.399.1

Patch Changes

  • #4122 c915581 Thanks @​github-actions! - Fix TypeError: handlePageUnload is not a function thrown on page unload when a version-skewed lazy-loaded surveys chunk produces a survey manager whose prototype lacks handlePageUnload. The delegated call in PostHogSurveys.handlePageUnload() now guards the method as well as the receiver. (2026-07-09)

  • #4124 562ceeb Thanks @​posthog! - Session recording no longer crashes on startup when a CDN-loaded recorder chunk runs against an older bundled core. Calls into SessionIdManager.on/onSessionId are now guarded so a core without those methods degrades gracefully instead of throwing a TypeError during start(). (2026-07-09)

posthog-js@1.399.0

1.399.0

Minor Changes

  • #4115 86bb3a5 Thanks @​DanielVisca! - add the posthog.metrics API (count, gauge, histogram) — alpha

    A statsd-style pre-aggregating metrics client for the PostHog Metrics product (alpha). Samples are folded into per-series aggregates in memory (counts sum, gauges keep the last value, histograms accumulate buckets) and flushed periodically as OTLP/JSON to /i/v1/metrics — one data point per series per flush window, no matter how many calls. No OpenTelemetry SDK setup required:

    posthog.metrics.count('orders_created', 1)
    posthog.metrics.gauge('active_connections', 42)
    posthog.metrics.histogram('api_latency', 187, { unit: 'ms' })

    Configure via metrics: { serviceName, environment, flushIntervalMs, maxSeriesPerFlush, beforeSend, ... }. (2026-07-08)

Patch Changes

  • Updated dependencies [86bb3a5]:
    • @​posthog/core@​1.40.0
    • @​posthog/types@​1.393.0

posthog-js@1.398.7

1.398.7

Patch Changes

  • #4113 45f17ee Thanks @​TueHaulund! - fix session replay leaking a shadow-root observer when a same-origin iframe is removed

    Follow-up to the shadow-observer iframe-teardown fix: takeFullSnapshot's onSerialize registers every shadow root with the top-level document, so a root nested in a same-origin iframe was keyed to the wrong document and its observer/buffer were not disconnected when that iframe was removed (they lingered until the next full snapshot). addShadowRoot now derives the owning document from the host element, so per-document teardown matches iframe-nested roots too. (2026-07-08)

posthog-js@1.398.6

1.398.6

Patch Changes

  • #4114 c75c0ba Thanks @​hpouillot! - fix: avoid throwing when rrweb recorder cleanup cannot remove a listener (2026-07-08)

... (truncated)

Commits
  • 710fff6 chore: update versions and lockfile [version bump]
  • 562ceeb fix(recording): guard SessionIdManager listeners against core version skew (#...
  • c915581 fix: Error "TypeError: t2.handlePageUnload is not a function" after page refr...
  • 1770e6a chore: update versions and lockfile [version bump]
  • e6b5ab2 fix(core): prevent shutdown flush drain loop (#4121)
  • d0e531a fix(core): coalesce concurrent flushes (#4120)
  • 3336dbf feat(next): add createPostHog with server-side identity resolution (#4091)
  • ddf1b18 chore: update versions and lockfile [version bump]
  • 759b66f feat: add official PostHog OpenFeature server provider (Node) (#3994)
  • 39098b2 chore: update versions and lockfile [version bump]
  • Additional commits viewable in compare view

Updates posthog-node from 5.39.2 to 5.40.0

Release notes

Sourced from posthog-node's releases.

posthog-node@5.40.0

5.40.0

Minor Changes

  • #4060 0b49a4c Thanks @​turnipdabeets! - Add secretKey config as the canonical alias for the deprecated personalApiKey (accepts a Personal API Key or Project Secret API Key). (2026-07-07)

posthog-node@5.39.4

5.39.4

Patch Changes

posthog-node@5.39.3

5.39.3

Patch Changes

  • #4055 64e04ba Thanks @​marandaneto! - Retry /flags requests that receive HTTP 502 or 504 responses across SDKs that use the shared core flags client. (2026-07-02)
  • Updated dependencies [64e04ba]:
    • @​posthog/core@​1.39.4
Changelog

Sourced from posthog-node's changelog.

5.40.0

Minor Changes

  • #4060 0b49a4c Thanks @​turnipdabeets! - Add secretKey config as the canonical alias for the deprecated personalApiKey (accepts a Personal API Key or Project Secret API Key). (2026-07-07)

5.39.4

Patch Changes

5.39.3

Patch Changes

  • #4055 64e04ba Thanks @​marandaneto! - Retry /flags requests that receive HTTP 502 or 504 responses across SDKs that use the shared core flags client. (2026-07-02)
  • Updated dependencies [64e04ba]:
    • @​posthog/core@​1.39.4
Commits
  • 954919d chore: update versions and lockfile [version bump]
  • 0b49a4c feat(node): add secretKey config, deprecate personalApiKey (#4060)
  • 859fd44 chore(deps): weekly safe npm updates · 10 packages (#4087)
  • 0ba87cb chore: update versions and lockfile [version bump]
  • 0c11747 fix: stop duplicating distinct_id in flags person properties (#4047)
  • 4eb8b21 chore: update versions and lockfile [version bump]
  • dd90e55 test(node): make local polling tests deterministic (#4043)
  • See full diff in compare view

Updates prool from 0.2.4 to 0.2.6

Changelog

Sourced from prool's changelog.

0.2.6

Patch Changes

  • #85 83233b0 Thanks @​jxom! - Added tempoZone instance for running a Tempo Zone node (tempo-zone dev) as a host process or testcontainer.

0.2.5

Patch Changes

  • #83 a9070ff Thanks @​jxom! - Fixed process stop() hanging when the process had already exited.

  • #83 a9070ff Thanks @​jxom! - Fixed Tempo faucet submitting funding transactions to the node default http://localhost:8545 instead of the resolved --http.port.

Commits

Updates shiki from 4.3.0 to 4.3.1

Release notes

Sourced from shiki's releases.

v4.3.1

   🚀 Features

    View changes on GitHub
Commits

Updates viem from 2.54.6 to 2.55.0

Release notes

Sourced from viem's releases.

viem@2.55.0

Minor Changes

Patch Changes

Commits
  • dc6150d chore: version package (#4812)
  • 2825f37 feat(op-stack): add deposit receipt fields to OpStackTransactionReceipt (#4...
  • 48324f7 feat: add Robinhood Chain and Robinhood Chain Testnet (#4818)
  • 0ef1b5d feat(utils): filterChains API (#4822)
  • 349eb2e chore(site): bump vocs for search index twoslash-cache fix (#4821)
  • 4f0c9b8 chore(site): bump vocs prerelease for vectorize delete batch fix (#4820)
  • f19de73 chore(site): use cloudflare vectorize store for ai search (#4819)
  • 9a802d4 chore(site): bump vocs & waku, fix token JSDoc link (#4795)
  • 1f157c4 chore: format
  • 2e4083b fix(ci): re-enable wagmi verification (#4811)
  • Additional commits viewable in compare view

Updates wagmi from 3.6.20 to 3.7.1

Release notes

Sourced from wagmi's releases.

wagmi@3.7.1

Patch Changes

  • Updated dependencies [18e9421]:
    • @​wagmi/core@​3.6.1
    • @​wagmi/connectors@​8.0.22

wagmi@3.7.0

Minor Changes

  • Breaking (wagmi/tempo): Updated Tempo APIs for viem 2.54.0: token balance and allowance reads now return Amount objects. (#5188)

Patch Changes

  • Updated dependencies [a45049e]:
    • @​wagmi/core@​3.6.0
    • @​wagmi/connectors@​8.0.21

wagmi@3.6.21

Patch Changes

  • Fixed Tempo types so transaction override parameters are optional. (#5171)

  • Updated dependencies [1d6989e]:

    • @​wagmi/core@​3.5.5
    • @​wagmi/connectors@​8.0.20
Changelog

Sourced from wagmi's changelog.

3.7.1

Patch Changes

  • Updated dependencies [18e9421]:
    • @​wagmi/core@​3.6.1
    • @​wagmi/connectors@​8.0.22

3.7.0

Minor Changes

  • Breaking (wagmi/tempo): Updated Tempo APIs for viem 2.54.0: token balance and allowance reads now return Amount objects. (#5188)

Patch Changes

  • Updated dependencies [a45049e]:
    • @​wagmi/core@​3.6.0
    • @​wagmi/connectors@​8.0.21

3.6.21

Patch Changes

  • Fixed Tempo types so transaction override parameters are optional. (#5171)

  • Updated dependencies [1d6989e]:

    • @​wagmi/core@​3.5.5
    • @​wagmi/connectors@​8.0.20
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the production group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@iconify-json/lucide](https://github.com/iconify/icon-sets) | `1.2.115` | `1.2.116` |
| [@iconify-json/simple-icons](https://github.com/iconify/icon-sets) | `1.2.88` | `1.2.89` |
| [@shikijs/rehype](https://github.com/shikijs/shiki/tree/HEAD/packages/rehype) | `4.3.0` | `4.3.1` |
| [@wagmi/core](https://github.com/wevm/wagmi/tree/HEAD/packages/core) | `3.5.4` | `3.6.1` |
| [accounts](https://github.com/tempoxyz/accounts) | `0.14.11` | `0.15.1` |
| [hono](https://github.com/honojs/hono) | `4.12.27` | `4.12.28` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.396.4` | `1.399.1` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.39.2` | `5.40.0` |
| [prool](https://github.com/wevm/prool) | `0.2.4` | `0.2.6` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.3.0` | `4.3.1` |
| [viem](https://github.com/wevm/viem) | `2.54.6` | `2.55.0` |
| [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react) | `3.6.20` | `3.7.1` |



Updates `@iconify-json/lucide` from 1.2.115 to 1.2.116
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@iconify-json/simple-icons` from 1.2.88 to 1.2.89
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@shikijs/rehype` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.3.1/packages/rehype)

Updates `@wagmi/core` from 3.5.4 to 3.6.1
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/@wagmi/core@3.6.1/packages/core)

Updates `accounts` from 0.14.11 to 0.15.1
- [Release notes](https://github.com/tempoxyz/accounts/releases)
- [Changelog](https://github.com/tempoxyz/accounts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tempoxyz/accounts/compare/accounts@0.14.11...accounts@0.15.1)

Updates `hono` from 4.12.27 to 4.12.28
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.27...v4.12.28)

Updates `posthog-js` from 1.396.4 to 1.399.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.396.4...posthog-js@1.399.1)

Updates `posthog-node` from 5.39.2 to 5.40.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.40.0/packages/node)

Updates `prool` from 0.2.4 to 0.2.6
- [Release notes](https://github.com/wevm/prool/releases)
- [Changelog](https://github.com/wevm/prool/blob/main/CHANGELOG.md)
- [Commits](wevm/prool@v0.2.4...v0.2.6)

Updates `shiki` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.3.1/packages/shiki)

Updates `viem` from 2.54.6 to 2.55.0
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.54.6...viem@2.55.0)

Updates `wagmi` from 3.6.20 to 3.7.1
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/wagmi@3.7.1/packages/react)

---
updated-dependencies:
- dependency-name: "@iconify-json/lucide"
  dependency-version: 1.2.116
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@iconify-json/simple-icons"
  dependency-version: 1.2.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@shikijs/rehype"
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@wagmi/core"
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: accounts
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: hono
  dependency-version: 4.12.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: posthog-js
  dependency-version: 1.399.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: posthog-node
  dependency-version: 5.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: prool
  dependency-version: 0.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: shiki
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: viem
  dependency-version: 2.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: wagmi
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026
@vercel

vercel Bot commented Jul 17, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
tempo-docs Ready Ready Preview, Comment Jul 17, 2026 3:59am

Request Review

@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 20, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-c30c7fdc9d branch July 20, 2026 11:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants