Skip to content

chore(deps)(deps): bump the production-minor-patch group across 1 directory with 12 updates#27

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-841c389688
Closed

chore(deps)(deps): bump the production-minor-patch group across 1 directory with 12 updates#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-841c389688

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 9, 2026 •
edited
Loading

Bumps the production-minor-patch group with 12 updates in the / directory:

Package From To
graphql 16.13.0 16.13.1
@graphql-tools/graphql-file-loader 8.1.10 8.1.12
jose 6.1.3 6.2.1
@nosecone/next 1.1.0 1.2.0
@sentry/nextjs 10.40.0 10.42.0
@tanstack/react-virtual 3.13.19 3.13.21
framer-motion 12.34.3 12.35.2
katex 0.16.33 0.16.38
lucide-react 0.575.0 0.577.0
nosecone 1.1.0 1.2.0
hono 4.12.3 4.12.5
modern-pdf-lib 0.15.1 0.26.0

Updates graphql from 16.13.0 to 16.13.1

Release notes

Sourced from graphql's releases.

v16.13.1 (2026-03-04)

First 16.x.x release with trusted publishing and provenance, see: https://docs.npmjs.com/trusted-publishers for additional information.

Docs 📝

Internal 🏠

Committers: 2

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for graphql since your current version.


Updates @graphql-tools/graphql-file-loader from 8.1.10 to 8.1.12

Changelog

Sourced from @​graphql-tools/graphql-file-loader's changelog.

8.1.12

Patch Changes

  • Updated dependencies [5d6bcc4]:
    • @​graphql-tools/import@​7.1.12

8.1.11

Patch Changes

Commits
  • 309c14a chore(release): update monorepo packages versions (#8020)
  • 66cee43 Ranged
  • 9410e77 chore(release): update monorepo packages versions (#7881)
  • 1b1b51f chore(release): update monorepo packages versions (#7841)
  • 7417ceb chore(release): update monorepo packages versions (#7754)
  • 7b17d1f chore(release): update monorepo packages versions (#7722)
  • 946c496 chore(release): update monorepo packages versions (#7699)
  • 8e2f481 chore(release): update monorepo packages versions (#7684)
  • 53fdba6 chore(release): update monorepo packages versions (#7680)
  • 5b26b6d chore(release): update monorepo packages versions (#7655)
  • Additional commits viewable in compare view

Updates jose from 6.1.3 to 6.2.1

Release notes

Sourced from jose's releases.

v6.2.1

Refactor

  • reorganize internals, less files, smaller footprint (d4231f9)

v6.2.0

Features

  • re-introduce JWE "zip" (Compression Algorithm) Header Parameter support (b13b446)

Documentation

  • clarify return of general jws and jwe (56682b4)
Changelog

Sourced from jose's changelog.

6.2.1 (2026-03-09)

Refactor

  • reorganize internals, less files, smaller footprint (d4231f9)

6.2.0 (2026-03-05)

Features

  • re-introduce JWE "zip" (Compression Algorithm) Header Parameter support (b13b446)

Documentation

  • clarify return of general jws and jwe (56682b4)
Commits
  • d491aa9 chore(release): 6.2.1
  • d4231f9 refactor: reorganize internals, less files, smaller footprint
  • 7b22ba8 test: use playwright instead of testcafe
  • 00965b4 chore: bump packages
  • b8f9f94 chore: cleanup after release
  • 970673e chore(release): 6.2.0
  • b13b446 feat: re-introduce JWE "zip" (Compression Algorithm) Header Parameter support
  • c2d1dd1 test: update deno expectations
  • edcaec9 chore(deps): bump actions/upload-artifact in the actions group
  • 037d212 chore(deps): bump minimatch
  • Additional commits viewable in compare view

Updates @nosecone/next from 1.1.0 to 1.2.0

Release notes

Sourced from @​nosecone/next's releases.

v1.2.0

1.2.0 (2026-03-06)

🚀 New Features

🪲 Bug Fixes

🧹 Miscellaneous Chores

📚 Tests

Changelog

Sourced from @​nosecone/next's changelog.

1.2.0 (2026-03-06)

🧹 Miscellaneous Chores

  • @​nosecone/next: Synchronize arcjet-js versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • nosecone bumped from 1.1.0 to 1.2.0
    • devDependencies
      • @​arcjet/eslint-config bumped from 1.1.0 to 1.2.0
      • @​arcjet/rollup-config bumped from 1.1.0 to 1.2.0
Commits
Maintainer changes

This version was pushed to npm by quinn-arcjet, a new releaser for @​nosecone/next since your current version.

Attestation changes

This version has no provenance attestation, while the previous version (1.1.0) was attested. Review the package versions before updating.


Updates @sentry/nextjs from 10.40.0 to 10.42.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.42.0

  • feat(consola): Enhance Consola integration to extract first-param object as searchable attributes (#19534)
  • fix(astro): Do not inject withSentry into Cloudflare Pages (#19558)
  • fix(core): Do not remove promiseBuffer entirely (#19592)
  • fix(deps): Bump fast-xml-parser to 4.5.4 for CVE-2026-25896 (#19588)
  • fix(react-router): Set correct transaction name when navigating with object argument (#19590)
  • ref(nuxt): Use addVitePlugin instead of deprecated vite:extendConfig (#19464)
  • chore(deps-dev): bump @​sveltejs/kit from 2.52.2 to 2.53.3 (#19571)
  • chore(deps): Bump @​sveltejs/kit to 2.53.3 in sveltekit-2-svelte-5 E2E test (#19594)
  • ci(deps): bump actions/checkout from 4 to 6 (#19570)

Bundle size 📦

Path Size
@​sentry/browser 25.02 KB
@​sentry/browser - with treeshaking flags 23.57 KB
@​sentry/browser (incl. Tracing) 41.44 KB
@​sentry/browser (incl. Tracing, Profiling) 45.99 KB
@​sentry/browser (incl. Tracing, Replay) 79.35 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 69.21 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 83.93 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 95.91 KB
@​sentry/browser (incl. Feedback) 41.44 KB
@​sentry/browser (incl. sendFeedback) 29.58 KB
@​sentry/browser (incl. FeedbackAsync) 34.52 KB
@​sentry/browser (incl. Metrics) 26.17 KB
@​sentry/browser (incl. Logs) 26.31 KB
@​sentry/browser (incl. Metrics & Logs) 26.96 KB
@​sentry/react 26.74 KB
@​sentry/react (incl. Tracing) 43.72 KB
@​sentry/vue 29.37 KB
@​sentry/vue (incl. Tracing) 43.26 KB
@​sentry/svelte 25.05 KB
CDN Bundle 27.51 KB
CDN Bundle (incl. Tracing) 42.25 KB
CDN Bundle (incl. Logs, Metrics) 28.33 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 43.07 KB
CDN Bundle (incl. Replay, Logs, Metrics) 66.49 KB
CDN Bundle (incl. Tracing, Replay) 78.26 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 79.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 83.65 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 84.5 KB
CDN Bundle - uncompressed 80.42 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.42.0

  • feat(consola): Enhance Consola integration to extract first-param object as searchable attributes (#19534)
  • fix(astro): Do not inject withSentry into Cloudflare Pages (#19558)
  • fix(core): Do not remove promiseBuffer entirely (#19592)
  • fix(deps): Bump fast-xml-parser to 4.5.4 for CVE-2026-25896 (#19588)
  • fix(react-router): Set correct transaction name when navigating with object argument (#19590)
  • ref(nuxt): Use addVitePlugin instead of deprecated vite:extendConfig (#19464)
  • chore(deps-dev): bump @​sveltejs/kit from 2.52.2 to 2.53.3 (#19571)
  • chore(deps): Bump @​sveltejs/kit to 2.53.3 in sveltekit-2-svelte-5 E2E test (#19594)
  • ci(deps): bump actions/checkout from 4 to 6 (#19570)

10.41.0

Important Changes

  • feat(core,cloudflare,deno): Add instrumentPostgresJsSql instrumentation (#19566)

    Added a new instrumentation helper for the postgres (postgres.js) library, designed for SDKs that are not based on OpenTelemetry (e.g. Cloudflare, Deno). This wraps a postgres.js sql tagged template instance so that all queries automatically create Sentry spans.

    import postgres from 'postgres';
import * as Sentry from '@sentry/cloudflare'; // or '@sentry/deno'
export default Sentry.withSentry(env => ({ dsn: 'DSN' }), {
async fetch(request, env, ctx) {
const sql = Sentry.instrumentPostgresJsSql(postgres(env.DATABASE_URL));
// All queries now create Sentry spans
const users = await sql`SELECT * FROM users WHERE id = ${userId}`;
return Response.json(users);

},
});

    The instrumentation is available in @sentry/core, @sentry/cloudflare, and @sentry/deno.

  • feat(nextjs): Add Turbopack support for thirdPartyErrorFilterIntegration (#19542)

    We added experimental support for the thirdPartyErrorFilterIntegration with Turbopack builds.

    This feature requires Next.js 16+ and is currently behind an experimental flag:

... (truncated)

Commits
  • 07c9190 release: 10.42.0
  • 193a78d Merge pull request #19601 from getsentry/prepare-release/10.42.0
  • 8738f9b meta(changelog): Update changelog for 10.42.0
  • f870073 fix(astro): Do not inject withSentry into Cloudflare Pages (#19558)
  • 552187d chore(deps): Bump @​sveltejs/kit to 2.53.3 in sveltekit-2-svelte-5 E2E test (#...
  • 1ffba2c fix(core): Do not remove promiseBuffer entirely (#19592)
  • 4a7c056 fix(react-router): Set correct transaction name when navigating with object a...
  • 003e894 ci(deps): bump actions/checkout from 4 to 6 (#19570)
  • 5d4c0eb chore(deps-dev): bump @​sveltejs/kit from 2.52.2 to 2.53.3 (#19571)
  • 116c3f3 fix(deps): Bump fast-xml-parser to 4.5.4 for CVE-2026-25896 (#19588)
  • Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.13.19 to 3.13.21

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.13.21

Patch Changes

  • Updated dependencies [be89e29]:
    • @​tanstack/virtual-core@​3.13.21

@​tanstack/react-virtual@​3.13.20

Patch Changes

  • Updated dependencies [ff83e94]:
    • @​tanstack/virtual-core@​3.13.20
Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.13.21

Patch Changes

  • Updated dependencies [be89e29]:
    • @​tanstack/virtual-core@​3.13.21

3.13.20

Patch Changes

  • Updated dependencies [ff83e94]:
    • @​tanstack/virtual-core@​3.13.20
Commits

Updates framer-motion from 12.34.3 to 12.35.2

Changelog

Sourced from framer-motion's changelog.

[12.35.2] 2026-03-09

Fixed

  • Reduced filesize of styleEffect.
  • Fix rounding from popLayout.
  • opacity animations in React Strict Mode in development.
  • Ensure useSpring is not affected by monitor framerate.
  • Updating animations sequence segment types to exclude lifecycle handlers.
  • Fix layout animations with parents offset by a %-based translation.
  • Fix autoplay: false with WAAPI animations.
  • Fix layout jump in React Strict Mode in development.
  • Detect divide-by-zero in CSS calc() values before making animatable templates.

[12.35.1] 2026-03-06

Fixed

  • Fixing combination of string keyframes, spring and delay.
  • Gracefully handle negative scroll values.
  • Fix one-frame visual gap when rapidly switching WAAPI animations.
  • animation.time = 0 on a finished animation sets the playhead in a paused state.

[12.35.0] 2026-03-03

Added

  • ViewTimeline support for scroll and useScroll.

[12.34.6] 2026-03-03

Fixed

  • Handle % translate values in layout animations.

[12.34.5] 2026-03-03

Fixed

  • Ensure final WAAPI styles are always committed synchronously to prevent flash of incorrect styles in Firefox.
  • Prevent Next.js from caching typeof window checks.
  • Improve projection node cleanup.
  • Variant propagation fixed for asynchronously-mounted children.

[12.34.4] 2026-03-02

Fixed

  • Ensure onComplete fires at the end of an animation sequence.
Commits
  • 2034efc v12.35.2
  • 9f080ca Updating changelog
  • 31dd9bd Latest
  • da23762 Merge pull request #3602 from motiondivision/worktree-fix-issue-3232
  • 80b321e Merge pull request #3599 from motiondivision/worktree-fix-issue-3244
  • 4e5e0ae Merge pull request #3600 from motiondivision/worktree-fix-issue-3236
  • 16b83b4 Merge branch 'main' into worktree-fix-issue-3236
  • f4adc2e Extract convertToZero to module level with documentation
  • b793fc0 Merge pull request #3598 from motiondivision/worktree-fix-issue-3254
  • e787956 Simplify transformBox and add comment for percentage re-measurement
  • Additional commits viewable in compare view

Updates katex from 0.16.33 to 0.16.38

Release notes

Sourced from katex's releases.

v0.16.38

0.16.38 (2026-03-08)

Bug Fixes

v0.16.37

0.16.37 (2026-03-06)

Bug Fixes

  • negative-width \hphantom and symmetric \smash (#4153) (d4799ca)

v0.16.36

0.16.36 (2026-03-06)

Bug Fixes

v0.16.35

0.16.35 (2026-03-05)

Bug Fixes

v0.16.34

0.16.34 (2026-03-05)

Bug Fixes

Changelog

Sourced from katex's changelog.

0.16.38 (2026-03-08)

Bug Fixes

0.16.37 (2026-03-06)

Bug Fixes

  • negative-width \hphantom and symmetric \smash (#4153) (d4799ca)

0.16.36 (2026-03-06)

Bug Fixes

0.16.35 (2026-03-05)

Bug Fixes

0.16.34 (2026-03-05)

Bug Fixes

Commits

Updates lucide-react from 0.575.0 to 0.577.0

Release notes

Sourced from lucide-react's releases.

Version 0.577.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.576.0...0.577.0

Version 0.576.0

What's Changed

Full Changelog: lucide-icons/lucide@0.575.0...0.576.0

Commits

Updates nosecone from 1.1.0 to 1.2.0

Release notes

Sourced from nosecone's releases.

v1.2.0

1.2.0 (2026-03-06)

🚀 New Features

🪲 Bug Fixes

🧹 Miscellaneous Chores

📚 Tests

Changelog

Sourced from nosecone's changelog.

1.2.0 (2026-03-06)

🧹 Miscellaneous Chores

  • nosecone: Synchronize arcjet-js versions

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​arcjet/eslint-config bumped from 1.1.0 to 1.2.0
      • @​arcjet/rollup-config bumped from 1.1.0 to 1.2.0
Commits
Maintainer changes

This version was pushed to npm by quinn-arcjet, a new releaser for nosecone since your current version.

Attestation changes

This version has no provenance attestation, while the previous version (1.1.0) was attested. Review the package versions before updating.


Updates hono from 4.12.3 to 4.12.5

Release notes

Sourced from hono's releases.

v4.12.5

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.4...v4.12.5

v4.12.4

Security fixes

This release includes fixes for the following security issues:

SSE Control Field Injection

Affects: streamSSE() in Streaming Helper. Fixes injection of unintended SSE fields by rejecting CR/LF characters in event, id, and retry. GHSA-p6xx-57qc-3wxr

Cookie Attribute Injection in setCookie()

Affects: setCookie() from hono/cookie. Fixes cookie attribute manipulation by rejecting ;, \r, and \n in domain and path options. GHSA-5pq2-9x2x-5p6w

Middleware Bypass in Serve Static

Affects: Serve Static middleware. Fixes inconsistent URL decoding that could allow protected static resources to be accessed without triggering route-based middleware. GHSA-q5qw-h33p-qvwr

Users who uses Strreaming Helper, Cookie utility, and Serve Static are strongly encouraged to upgrade to this version.

Other changes

New Contributors

Full Changelog: honojs/hono@v4.12.3...v4.12.4

Commits
  • 18cc595 4.12.5
  • 5d59ac7 chore(eslint): upgrade @hono/eslint-config (#4781)
  • b8cff18 fix(jsx): Fix "Invalid state: Controller is already closed" (#4770)
  • 8c4d7f3 fix(jwt): validate token format in decode and decodeHeader functions (#4752)
  • 0f49915 fix(request): return string | undefined from param() when path type is any ...
  • 19d20d2 4.12.4
  • 44ae0c8 Merge commit from fork
  • f4123ed Merge commit from fork
  • 80a9837 fix(utils/url): specify the return type of tryDecodeURI (#4779)
  • 6a0607a Merge commit from fork
  • Additional commits viewable in compare view

Updates modern-pdf-lib from 0.15.1 to 0.26.0

Release notes

Sourced from modern-pdf-lib's releases.

v0.26.0

Added

  • PDF form flattening (src/form/formFlatten.ts):

    • flattenForm() — burn all form fields into page content, remove AcroForm
    • flattenField() / flattenFields() — flatten specific fields by name
    • FlattenOptions with preserveReadOnly support

  • Bookmarks / Outlines API (src/core/outlines.ts):

    • addBookmark() — add nested bookmarks with bold/italic/color/position
    • getBookmarks() — return the full bookmark tree
    • removeBookmark() / removeAllBookmarks() — bookmark management

  • Page labels (src/core/pageLabels.ts):

    • setPageLabels() — set label ranges (decimal, roman, alpha, custom prefix)
    • getPageLabels() / removePageLabels() — label management
    • Catalog integration with /PageLabels number tree

  • AES-256 encryption (PDF 2.0, V=5 R=6):

    • Full writer integration — doc.encrypt({ algorithm: 'aes-256' }) now works end-to-end
    • Algorithm 2.B key derivation (ISO 32000-2), SASLprep password normalization
    • %PDF-2.0 header for AES-256 encrypted documents
    • Trailer /Encrypt and /ID dictionary generation

  • SVG-to-PDF vector conversion (enhanced):

    • Text rendering with standard font resolution (Helvetica/Times/Courier families)
    • Fill-rule support (nonzero/evenodd → f/f*/B/B*)
    • Stroke properties: linecap, linejoin, miterlimit, dasharray, dashoffset
    • 60 new SVG conversion tests

  • Redaction application (src/annotation/applyRedactions.ts):

    • applyRedactions() — apply all redaction annotations (fill area, overlay text, remove annotation)
    • applyRedaction() — apply a single redaction by page/annotation index

  • Batch processing (src/batch/batchProcessor.ts):

    • processBatch() — process multiple PDFs with bounded concurrency
    • batchMerge() / batchFlatten() — parallel merge and flatten operations
    • Progress callbacks, error isolation, runtime-aware concurrency

  • PDF linearization (fast web view) — complete rewrite:

    • linearizePdf() — full page classification, hint tables, xref streams
    • delinearizePdf() — convert linearized PDF back to normal
    • getLinearizationInfo() — extract linearization parameters
    • Page offset and shared object hint tables per PDF spec §F

  • PDF/UA accessibility validation (src/accessibility/pdfUaValidator.ts):

    • validatePdfUa() — 12 checks: structure tree, language, title, headings, alt text, tables, lists, reading order, fonts, contrast, bookmarks, tab order
    • enforcePdfUa() — auto-fix language, title, structure tree, tab order
    • Page tab order API (setTabOrder())

... (truncated)

Changelog

Sourced from modern-pdf-lib's changelog.

[0.26.0] - 2026-03-08

Added

  • PDF form flattening (src/form/formFlatten.ts):

    • flattenForm() — burn all form fields into page content, remove AcroForm
    • flattenField() / flattenFields() — flatten specific fields by name
    • FlattenOptions with preserveReadOnly support

  • Bookmarks / Outlines API (src/core/outlines.ts):

    • addBookmark() — add nested bookmarks with bold/italic/color/position
    • getBookmarks() — return the full bookmark tree
    • removeBookmark() / removeAllBookmarks() — bookmark management

  • Page labels (src/core/pageLabels.ts):

    • setPageLabels() — set label ranges (decimal, roman, alpha, custom prefix)
    • getPageLabels() / removePageLabels() — label management
    • Catalog integration with /PageLabels number tree

  • AES-256 encryption (PDF 2.0, V=5 R=6):

    • Full writer integration — doc.encrypt({ algorithm: 'aes-256' }) now works end-to-end
    • Algorithm 2.B key derivation (ISO 32000-2), SASLprep password normalization
    • %PDF-2.0 header for AES-256 encrypted documents
    • Trailer /Encrypt and /ID dictionary generation

  • SVG-to-PDF vector conversion (enhanced):

    • Text rendering with standard font resolution (Helvetica/Times/Courier families)
    • Fill-rule support (nonzero/evenodd → f/f*/B/B*)
    • Stroke properties: linecap, linejoin, miterlimit, dasharray, dashoffset
    • 60 new SVG conversion tests

  • Redaction application (src/annotation/applyRedactions.ts):

    • applyRedactions() — apply all redaction annotations (fill area, overlay text, remove annotation)
    • applyRedaction() — apply a single redaction by page/annotation index

  • Batch processing (src/batch/batchProcessor.ts):

    • processBatch() — process multiple PDFs with bounded concurrency
    • batchMerge() / batchFlatten() — parallel merge and flatten operations
    • Progress callbacks, error isolation, runtime-aware concurrency

  • PDF linearization (fast web view) — complete rewrite:

    • linearizePdf() — full page classification, hint tables, xref streams
    • delinearizePdf() — convert linearized PDF back to normal
    • getLinearizationInfo() — extract linearization parameters
    • Page offset and shared object hint tables per PDF spec §F

  • PDF/UA accessibility validation (src/accessibility/pdfUaValidator.ts):

    • validatePdfUa() — 12 checks: structure tree, language, title, headings, alt text, tables, lists, reading order, fonts, contrast, bookmarks, tab order
    • enforcePdfUa() — auto-fix language, title, structure tree, tab order
    • Page tab order API (setTabOrder())

... (truncated)

Commits
  • 12a22a8 release: v0.26.0 — 9 new features, 586 new tests, comprehensive modernization
  • 2514f23 release: v0.25.0 — 267 new tests, complete exports, CI/build pipeline fixes
  • 24d0458 docs: regenerate TypeDoc API reference for v0.24.10
  • c9a6cf2 chore: v0.24.10 — documentation update for incremental save + WebP/TIFF features
  • 2ca30bb feat: v0.23.0–0.24.10 — incremental save with signature preservation, WebP + ...
  • 5382fc4 fix: resolve all 4 TypeDoc warnings — export missing types, remove unused @​param
  • ca8606e docs: regenerate TypeDoc API reference for v0.22.9
    • ...

    Description has been truncated

@dependabot
chore(deps)(deps): bump the production-minor-patch group across 1 dir…
afaec4a 
…ectory with 12 updates

Bumps the production-minor-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [graphql](https://github.com/graphql/graphql-js) | `16.13.0` | `16.13.1` |
| [@graphql-tools/graphql-file-loader](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/loaders/graphql-file) | `8.1.10` | `8.1.12` |
| [jose](https://github.com/panva/jose) | `6.1.3` | `6.2.1` |
| [@nosecone/next](https://github.com/arcjet/arcjet-js/tree/HEAD/nosecone-next) | `1.1.0` | `1.2.0` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.40.0` | `10.42.0` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.13.19` | `3.13.21` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.34.3` | `12.35.2` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.33` | `0.16.38` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.575.0` | `0.577.0` |
| [nosecone](https://github.com/arcjet/arcjet-js/tree/HEAD/nosecone) | `1.1.0` | `1.2.0` |
| [hono](https://github.com/honojs/hono) | `4.12.3` | `4.12.5` |
| [modern-pdf-lib](https://github.com/ABCrimson/modern-pdf-lib) | `0.15.1` | `0.26.0` |



Updates `graphql` from 16.13.0 to 16.13.1
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.13.0...v16.13.1)

Updates `@graphql-tools/graphql-file-loader` from 8.1.10 to 8.1.12
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/loaders/graphql-file/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/graphql-file-loader@8.1.12/packages/loaders/graphql-file)

Updates `jose` from 6.1.3 to 6.2.1
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.1.3...v6.2.1)

Updates `@nosecone/next` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/arcjet/arcjet-js/releases)
- [Changelog](https://github.com/arcjet/arcjet-js/blob/main/nosecone-next/CHANGELOG.md)
- [Commits](https://github.com/arcjet/arcjet-js/commits/v1.2.0/nosecone-next)

Updates `@sentry/nextjs` from 10.40.0 to 10.42.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.40.0...10.42.0)

Updates `@tanstack/react-virtual` from 3.13.19 to 3.13.21
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.13.21/packages/react-virtual)

Updates `framer-motion` from 12.34.3 to 12.35.2
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.34.3...v12.35.2)

Updates `katex` from 0.16.33 to 0.16.38
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.33...v0.16.38)

Updates `lucide-react` from 0.575.0 to 0.577.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react)

Updates `nosecone` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/arcjet/arcjet-js/releases)
- [Changelog](https://github.com/arcjet/arcjet-js/blob/main/nosecone/CHANGELOG.md)
- [Commits](https://github.com/arcjet/arcjet-js/commits/v1.2.0/nosecone)

Updates `hono` from 4.12.3 to 4.12.5
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.3...v4.12.5)

Updates `modern-pdf-lib` from 0.15.1 to 0.26.0
- [Release notes](https://github.com/ABCrimson/modern-pdf-lib/releases)
- [Changelog](https://github.com/ABCrimson/modern-pdf-lib/blob/master/CHANGELOG.md)
- [Commits](ABCrimson/modern-pdf-lib@v0.15.1...v0.26.0)

---
updated-dependencies:
- dependency-name: graphql
  dependency-version: 16.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@graphql-tools/graphql-file-loader"
  dependency-version: 8.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: jose
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@nosecone/next"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.13.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: framer-motion
  dependency-version: 12.35.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: katex
  dependency-version: 0.16.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: lucide-react
  dependency-version: 0.577.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: nosecone
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: hono
  dependency-version: 4.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: modern-pdf-lib
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 9, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel
Copy link
Copy Markdown

vercel Bot commented Mar 9, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nextcalc-pro Ready Ready Preview, Comment Mar 9, 2026 2:21pm

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 16, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 16, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/production-minor-patch-841c389688 branch March 16, 2026 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants