Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates#205

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-82ac2a0e08
Open

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates#205
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-82ac2a0e08

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 13 updates in the / directory:

Package From To
@ai-sdk/anthropic 3.0.77 3.0.83
@ai-sdk/react 3.0.184 3.0.204
date-fns 4.1.0 4.4.0
jotai 2.20.0 2.20.1
lucide-react 1.16.0 1.17.0
mapbox-gl 3.23.1 3.24.0
next 16.2.6 16.2.9
react 19.2.6 19.2.7
@types/react 19.2.14 19.2.17
react-dom 19.2.6 19.2.7
@types/node 25.8.0 25.9.3
eslint-config-next 16.2.6 16.2.9
vitest 4.1.6 4.1.8

Updates @ai-sdk/anthropic from 3.0.77 to 3.0.83

Commits

Updates @ai-sdk/react from 3.0.184 to 3.0.204

Release notes

Sourced from @​ai-sdk/react's releases.

@​ai-sdk/react@​3.0.203

Patch Changes

  • Updated dependencies [0c8c0ed]
    • ai@6.0.201
Commits

Updates ai from 6.0.182 to 6.0.202

Release notes

Sourced from ai's releases.

ai@6.0.202

Patch Changes

  • 942f2f8: fix(security): re-validate tool approvals from client message history before execution

    The approval-replay path in generateText/streamText reconstructed approved tool calls from the client-supplied messages array and executed them without re-validating input against the tool's schema or re-checking that the tool actually requires approval. A client could forge an assistant message with a pre-approved tool-call part and have the server execute a tool with attacker-chosen arguments.

    The replay path now verifies the HMAC signature (when experimental_toolApprovalSecret is configured), re-validates tool-call input against the tool's input schema, and re-resolves whether the tool requires approval before execution.

  • Updated dependencies [942f2f8]

    • @​ai-sdk/provider-utils@​4.0.28
    • @​ai-sdk/gateway@​3.0.128

ai@6.0.201

Patch Changes

  • 0c8c0ed: fix(ai): return schema-transformed elements in array output mode

    Previously final array output validation checked each element against the schema but returned the raw model output. Array output now returns the validated values so Zod transforms, coercions, defaults, and pipes are applied consistently with object output.

Changelog

Sourced from ai's changelog.

6.0.202

Patch Changes

  • 942f2f8: fix(security): re-validate tool approvals from client message history before execution

    The approval-replay path in generateText/streamText reconstructed approved tool calls from the client-supplied messages array and executed them without re-validating input against the tool's schema or re-checking that the tool actually requires approval. A client could forge an assistant message with a pre-approved tool-call part and have the server execute a tool with attacker-chosen arguments.

    The replay path now verifies the HMAC signature (when experimental_toolApprovalSecret is configured), re-validates tool-call input against the tool's input schema, and re-resolves whether the tool requires approval before execution.

  • Updated dependencies [942f2f8]

    • @​ai-sdk/provider-utils@​4.0.28
    • @​ai-sdk/gateway@​3.0.128

6.0.201

Patch Changes

  • 0c8c0ed: fix(ai): return schema-transformed elements in array output mode

    Previously final array output validation checked each element against the schema but returned the raw model output. Array output now returns the validated values so Zod transforms, coercions, defaults, and pipes are applied consistently with object output.

6.0.200

Patch Changes

  • 14098e7: fix(ai): reject streamText result promises with NoOutputGeneratedError when the model stream ends without producing any output. Previously such streams resolved with an empty step. Incomplete streams with partial output still resolve with the partial result.
  • 2cabe9c: Harden UI message stream processing against prototype pollution from chunk IDs.

6.0.199

Patch Changes

  • 49d9364: fix(ai): add approval guard for denied tool outputs
  • Updated dependencies [3851e29]
  • Updated dependencies [2a91a17]
    • @​ai-sdk/gateway@​3.0.127

6.0.198

Patch Changes

  • Updated dependencies [ff16d3b]
    • @​ai-sdk/gateway@​3.0.126

6.0.197

Patch Changes

  • Updated dependencies [fef3b24]

... (truncated)

Commits
  • 9ef2c3c Version Packages (#15998)
  • 942f2f8 Backport: fix(security): harden tool approval replay path against client-forg...
  • dca8c38 Version Packages (#15992)
  • 0c8c0ed Backport: fix(ai): return schema-transformed elements in array output mode (#...
  • a340536 Version Packages (#15965)
  • 14098e7 Backport: fix(ai): reject incomplete model streams (#15971)
  • 2cabe9c Backport: fix(ai): Harden UI message stream processing against prototype poll...
  • f6e5881 Version Packages (#15902)
  • 49d9364 Backport: fix(ai): add approval guard for denied tool outputs (#15914)
  • 8ad68fe Version Packages (#15898)
  • Additional commits viewable in compare view

Updates date-fns from 4.1.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

  • DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

  • Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @​ImRodry and @​puneetdixit200 for their contributions.

Fixed

v4.2.1

Fixed

  • Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

  • Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.
Commits
  • cd53d25 Promote to v4.4.0
  • d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
  • ee65753 Add root mise :format task
  • 9f5bdf5 Add positional argument to test/smoke.sh script
  • 651ead6 Split CDN bundles into separate @​date-fns/cdn package
  • 224c1a2 Deprecate type tests as attw hangs on date-fns package
  • 7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
  • b6ad5ac Add flags to control package build script
  • 424a783 Fix docs release after moving to monorepo setup
  • f95bcf1 (docs): Add missing tsx dependency
  • Additional commits viewable in compare view

Updates jotai from 2.20.0 to 2.20.1

Release notes

Sourced from jotai's releases.

v2.20.1

This release includes a few small fixes.

What's Changed

New Contributors

Full Changelog: pmndrs/jotai@v2.20.0...v2.20.1

Commits
  • ddd3600 v2.20.1
  • 241225c chore(deps): update dev dependencies (#3335)
  • 2f233f9 chore(docs): note about stack overflow (#3332)
  • 32708c8 fix(internals): throw stackoverflow errors synchronously (#3330)
  • 563f059 fix(vanilla/utils/atomWithStorage): apply reviver when parsing subscription u...
  • 22ae563 docs(storage): fix unbalanced parenthesis in RESET example (#3331)
  • 024ec4f chore(test): add onMount test with sibling deps (#3329)
  • 48284a3 feat(website): add jotai-rolldown (#3328)
  • 802c27e feat(website): update Vite guide for Vite 8 (#3327)
  • d20c2fe docs: update "derive" docs to match the new eager APIs (#3325)
  • Additional commits viewable in compare view

Updates lucide-react from 1.16.0 to 1.17.0

Release notes

Sourced from lucide-react's releases.

Version 1.17.0

What's Changed

Full Changelog: lucide-icons/lucide@1.16.0...1.17.0

Commits

Updates mapbox-gl from 3.23.1 to 3.24.0

Release notes

Sourced from mapbox-gl's releases.

v3.24.0

Features and improvements ✨

  • Introduce Level of Detail (LOD) support for landmark models, enabling automatic switching between model versions based on camera distance.
  • Support additive blend mode with clamped density by setting the line-blend-additive-clamp property.
  • Improve rendering performance by reducing per-frame matrix allocations.
  • Improve rendering performance via parallel shader compilation on supported devices.
  • Improve rendering performance by advancing shader precompilation.
  • Improve shadow rendering performance.
  • Improve vector icon loading performance.
  • Improve initial load by skipping redundant config-related style layers updates in Web Workers.
  • Improve initial load by rescheduling shader precompilation to occur during browser idle time after the map's idle event.
  • Improve model processing performance.
  • Improve performance and memory footprint by streamlining communication between the main thread and Web Workers.
  • Reduce first-interaction jank by optimizing shader compilation pipeline behavior.
  • Optimize expression parsing performance.
  • Improve an error messaging for the line-trim-offset property without lineMetrics.

Bug fixes 🐞

  • Fix LUT to properly work with premultiplied color.
  • Fix a potential memory leak and crash occurring when a map was destroyed.
  • Fix an issue where cross-fragments config values were not correctly updated.

v3.24.0-rc.1

Features and improvements ✨

  • Introduce Level of Detail (LOD) support for landmark models, enabling automatic switching between model versions based on camera distance.
  • Support additive blend mode with clamped density by setting the line-blend-additive-clamp property.
  • Improve rendering performance by reducing per-frame matrix allocations.
  • Improve rendering performance via parallel shader compilation on supported devices.
  • Improve rendering performance by advancing shader precompilation.
  • Improve shadow rendering performance.
  • Improve vector icon loading performance.
  • Improve initial load by skipping redundant config-related style layers updates in Web Workers.
  • Improve initial load by rescheduling shader precompilation to occur during browser idle time after the map's idle event.
  • Improve model processing performance.
  • Improve performance and memory footprint by streamlining communication between the main thread and Web Workers.
  • Reduce first-interaction jank by optimizing shader compilation pipeline behavior.
  • Optimize expression parsing performance.
  • Improve an error messaging for the line-trim-offset property without lineMetrics.

Bug fixes 🐞

  • Fix LUT to properly work with premultiplied color.
  • Fix a potential memory leak and crash occurring when a map was destroyed.
Changelog

Sourced from mapbox-gl's changelog.

3.24.0

Features and improvements ✨

  • Introduce Level of Detail (LOD) support for landmark models, enabling automatic switching between model versions based on camera distance.
  • Support additive blend mode with clamped density by setting the line-blend-additive-clamp property.
  • Improve rendering performance by reducing per-frame matrix allocations.
  • Improve rendering performance via parallel shader compilation on supported devices.
  • Improve rendering performance by advancing shader precompilation.
  • Improve shadow rendering performance.
  • Improve vector icon loading performance.
  • Improve initial load by skipping redundant config-related style layers updates in Web Workers.
  • Improve initial load by rescheduling shader precompilation to occur during browser idle time after the map's idle event.
  • Improve model processing performance.
  • Improve performance and memory footprint by streamlining communication between the main thread and Web Workers.
  • Reduce first-interaction jank by optimizing shader compilation pipeline behavior.
  • Optimize expression parsing performance.
  • Improve an error messaging for the line-trim-offset property without lineMetrics.

Bug fixes 🐞

  • Fix LUT to properly work with premultiplied color.
  • Fix a potential memory leak and crash occurring when a map was destroyed.
  • Fix an issue where cross-fragments config values were not correctly updated.
Commits
  • b59f912 Bump version to v3.24.0 and update changelog
  • 7270561 [Backport release/v0.24] Defer fragment setLayers to root on initial load (...
  • 54097dc v3.24.0-rc.1
  • 993e00b Added support for rendering landmark models with LOD when available.
  • 049a64b Enforce @ts-expect-error ban
  • 7e6a28b Bump @​babel/preset-env from 7.29.2 to 7.29.3 (internal-13071)
  • ac9b131 Bump postcss from 8.5.12 to 8.5.13 (internal-13068)
  • 161a9a3 Improve shader precompilation scheduling
  • 8066a67 Consolidate two grid index implementations into one
  • fde91aa Fix getting elevation for tile points
  • Additional commits viewable in compare view

Updates next from 16.2.6 to 16.2.9

Release notes

Sourced from next's releases.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Backport documentation fixes for v16.2 (#93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
  • [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
  • [backport] Propagate adapter preferred regions (#94200)
  • [16.2.x] Don't drop FormData entries (#94240)
  • [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

Commits
  • f37fad9 v16.2.9
  • d9aaaed [cd] Allow tagging semver-lower releases as @latest if @latest po… (#94627)
  • 6f16804 v16.2.8
  • 0dbc1d5 [16.2.x][cd] Ensure release can be triggered on old branches (#94598)
  • 90e3c81 [16.2.x] Align Actions dependencies with Canary (#94339)
  • 83f402c [16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)
  • 411c455 v16.2.7
  • c63224f [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...
  • 63115c7 [16.2.x] Don't drop FormData entries (#94240)
  • aef22fd [backport] Propagate adapter preferred regions (#94200)
  • Additional commits viewable in compare view

Updates react from 19.2.6 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 19.2.14 to 19.2.17

Commits

Updates react-dom from 19.2.6 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates @types/node from 25.8.0 to 25.9.3

Commits

Updates @types/react from 19.2.14 to 19.2.17

Commits

Updates eslint-config-next from 16.2.6 to 16.2.9

Release notes

Sourced from eslint-config-next's releases.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Backport documentation fixes for v16.2 (#93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
  • [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
  • [backport] Propagate adapter preferred regions (#94200)
  • [16.2.x] Don't drop FormData entries (#94240)
  • [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

Commits

Updates vitest from 4.1.6 to 4.1.8

Release notes

Sourced from vitest's releases.

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • a09d472 chore: release v4.1.7
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 1…
b195756 
…4 updates

Bumps the minor-and-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `3.0.77` | `3.0.83` |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `3.0.184` | `3.0.204` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |
| [jotai](https://github.com/pmndrs/jotai) | `2.20.0` | `2.20.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.16.0` | `1.17.0` |
| [mapbox-gl](https://github.com/mapbox/mapbox-gl-js) | `3.23.1` | `3.24.0` |
| [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.9` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.8.0` | `25.9.3` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.6` | `16.2.9` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.6` | `4.1.8` |



Updates `@ai-sdk/anthropic` from 3.0.77 to 3.0.83
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/vue@3.0.83/packages/anthropic)

Updates `@ai-sdk/react` from 3.0.184 to 3.0.204
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/HEAD/packages/react)

Updates `ai` from 6.0.182 to 6.0.202
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@6.0.202/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@6.0.202/packages/ai)

Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.1.0...v4.4.0)

Updates `jotai` from 2.20.0 to 2.20.1
- [Release notes](https://github.com/pmndrs/jotai/releases)
- [Commits](pmndrs/jotai@v2.20.0...v2.20.1)

Updates `lucide-react` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.17.0/packages/lucide-react)

Updates `mapbox-gl` from 3.23.1 to 3.24.0
- [Release notes](https://github.com/mapbox/mapbox-gl-js/releases)
- [Changelog](https://github.com/mapbox/mapbox-gl-js/blob/main/CHANGELOG.md)
- [Commits](mapbox/mapbox-gl-js@v3.23.1...v3.24.0)

Updates `next` from 16.2.6 to 16.2.9
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.2.6...v16.2.9)

Updates `react` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@types/node` from 25.8.0 to 25.9.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `eslint-config-next` from 16.2.6 to 16.2.9
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.2.9/packages/eslint-config-next)

Updates `vitest` from 4.1.6 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 3.0.83
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/react"
  dependency-version: 3.0.204
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ai
  dependency-version: 6.0.202
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jotai
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mapbox-gl
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.2.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 12, 2026
@vercel

vercel Bot commented Jun 12, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
springa Ready Ready Preview, Comment Jun 12, 2026 1:58am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants