chore(deps): bump the npm-dependencies group across 1 directory with 29 updates by dependabot[bot] · Pull Request #145 · Anyesh/wardrowbe

dependabot · 2026-07-21T08:17:22Z

Bumps the npm-dependencies group with 29 updates in the /frontend directory:

Package	From	To
@hookform/resolvers	`3.10.0`	`5.4.0`
date-fns	`3.6.0`	`4.4.0`
lucide-react	`0.316.0`	`1.25.0`
next	`14.2.35`	`16.2.10`
next-auth	`4.24.14`	`4.24.15`
next-themes	`0.2.1`	`0.4.6`
react	`18.2.0`	`19.2.7`
@types/react	`18.2.52`	`19.2.17`
react-dom	`18.2.0`	`19.2.7`
@types/react-dom	`18.2.18`	`19.2.3`
react-dropzone	`14.4.1`	`19.1.1`
react-hook-form	`7.80.0`	`7.82.0`
sharp	`0.33.5`	`0.35.3`
sonner	`1.7.4`	`2.0.7`
tailwind-merge	`2.6.1`	`3.6.0`
tailwindcss	`3.4.19`	`4.3.3`
yet-another-react-lightbox	`3.32.0`	`3.32.1`
zod	`3.25.76`	`4.4.3`
zustand	`4.5.7`	`5.0.14`
@testing-library/jest-dom	`6.9.1`	`7.0.0`
@types/node	`20.19.43`	`26.1.1`
@vitejs/plugin-react	`5.2.0`	`6.0.3`
autoprefixer	`10.5.2`	`10.5.4`
eslint	`8.56.0`	`10.7.0`
eslint-config-next	`14.2.35`	`16.2.10`
jsdom	`27.4.0`	`29.1.1`
postcss	`8.5.15`	`8.5.20`
typescript	`5.9.3`	`7.0.2`
vitest	`4.1.9`	`4.1.10`

Updates @hookform/resolvers from 3.10.0 to 5.4.0

Release notes

Sourced from @hookform/resolvers's releases.

v5.4.0

5.4.0 (2026-05-21)

Features

feat: add ata-validator resolver (#845)

Fixes

fix issue with toNestErrors.ts (#848)

add guidance on passing context to yupResolver (useForm context) (#835) (3d29924)

v5.2.2

5.2.2 (2025-09-14)

Bug Fixes

zod: fix output type for Zod 4 resolver (#803) (e95721d)

v5.2.1

5.2.1 (2025-07-29)

Bug Fixes

discriminated union for zod v4 mini (#784) (49a0d7b)

zod v4 peer deps (#798) (2d28e6a)

zod: fix output type for Zod 4 resolver (#801) (bc09647)

v5.2.0

5.2.0 (2025-07-25)

Features

ajv: add ajv-formats for ajvResolver (#797) (f040039)

v5.1.1

5.1.1 (2025-06-09)

Bug Fixes

zod peer dep issue (#780) (79cd8b2)

v5.1.0

5.1.0 (2025-06-07)

... (truncated)

Commits

3d29924 feat: add guidance on passing context to yupResolver (useForm context) (#835)
56b68f3 feat: 5.3.0
cf8562d update readme on ata-validator
5e5b610 fix issue with toNestErrors.ts (#848)
72aacf8 Revise supported versions in SECURITY.md
ad89a20 feat: add ata-validator resolver (#845)
02286db ci: updated publish workflow to use node 24 (#838)
2e9bc7c Fix(zodResolver): error paths in complex unions #787 (#819)
e95721d fix(zod): fix output type for Zod 4 resolver (#803)
49a0d7b fix: discriminated union for zod v4 mini (#784)
Additional commits viewable in compare view

Updates date-fns from 3.6.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @ImRodry and @puneetdixit200 for their contributions.

Fixed

Fixed missing modularized optimization fallback (for Next.js and others). See #4193.

Fixed pt locale first day of week to be Sunday. See #4195 by @ImRodry.

Fixed zh-CN, zh-HK, and zh-TW locale month parsing for October, November, and December. See #4194 by @puneetdixit200.

v4.2.1

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

v4.1.0

This release adds time zone support to format functions (that I somehow missed when working on the feature) and fixes a few bugs.

Make sure also upgrade TZDate to v1.0.2 as it includes a bunch of critical bug fixes.

Fixed

Fixed internal constructFrom throwing an exception on null arguments. While null isn't allowed, the functions should rather return Invalid Date or NaN in such cases. See #3885.

Added

... (truncated)

Commits

cd53d25 Promote to v4.4.0
d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
ee65753 Add root mise :format task
9f5bdf5 Add positional argument to test/smoke.sh script
651ead6 Split CDN bundles into separate @date-fns/cdn package
224c1a2 Deprecate type tests as attw hangs on date-fns package
7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
b6ad5ac Add flags to control package build script
424a783 Fix docs release after moving to monorepo setup
f95bcf1 (docs): Add missing tsx dependency
Additional commits viewable in compare view

Updates lucide-react from 0.316.0 to 1.25.0

Release notes

Sourced from lucide-react's releases.

Version 1.25.0

What's Changed

fix(icons): Rename to circle-euro to match other euro icons by @ericfennis in lucide-icons/lucide#4531

chore(deps-dev): bump astro from 6.1.10 to 6.4.6 by @dependabot[bot] in lucide-icons/lucide#4487

fix(site): empty search results on first load for tag-only matches by @taimar in lucide-icons/lucide#4413

chore(deps-dev): bump @babel/core from 7.28.5 to 7.29.6 by @dependabot[bot] in lucide-icons/lucide#4476

fix(ci): broken link in brand logo comment by @jguddas in lucide-icons/lucide#4533

chore(depedencies): Update dependencies by @ericfennis in lucide-icons/lucide#4553

feat(docs): add studio link by @jguddas in lucide-icons/lucide#4534

fix(icons): changed hdmi-port icon by @karsa-mistmere in lucide-icons/lucide#4554

fix(icons): changed ethernet-port icon by @karsa-mistmere in lucide-icons/lucide#4555

fix(icons): changed file-box icon by @karsa-mistmere in lucide-icons/lucide#4552

feat(icons): added scan-box icon by @karsa-mistmere in lucide-icons/lucide#4551

Full Changelog: lucide-icons/lucide@1.24.0...1.25.0

Version 1.24.0

What's Changed

fix(scripts): fix typo in renameIcon.function.mts by @karsa-mistmere in lucide-icons/lucide#4514

chore(icons): remove toBeRemovedInVersion metadata and make it optional in schema by @ericfennis with @Copilot in lucide-icons/lucide#4513

feat(site): Add merch link by @ericfennis in lucide-icons/lucide#4524

fix(packages/angular): move child rendering logic to template from effect by @karsa-mistmere in lucide-icons/lucide#4519

docs(site): list @gyeonghokim/lucide-lit as third-party package by @GyeongHoKim in lucide-icons/lucide#4421

fix(icons): changed option icon by @jamiemlaw in lucide-icons/lucide#4326

fix(lucide-react-native): restore the icons entry point in the JS bundles by @pvinis in lucide-icons/lucide#4528

fix(vue): support kebab-case icon-node prop on Icon component by @Sagargupta16 in lucide-icons/lucide#4512

fix(lucide-react-native): Add icon exports property to the package.json file by @ericfennis in lucide-icons/lucide#4522

fix(icons): centered the dot icon by @cnlancehu in lucide-icons/lucide#4492

feat(icons): added circle-euro-sign icon by @Guido3000 in lucide-icons/lucide#4353

feat(icons): added server-plus icon by @Turboman3000 in lucide-icons/lucide#4232

New Contributors

@ericfennis with @Copilot made their first contribution in lucide-icons/lucide#4513

@GyeongHoKim made their first contribution in lucide-icons/lucide#4421

@pvinis made their first contribution in lucide-icons/lucide#4528

@Sagargupta16 made their first contribution in lucide-icons/lucide#4512

@Guido3000 made their first contribution in lucide-icons/lucide#4353

@Turboman3000 made their first contribution in lucide-icons/lucide#4232

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Version 1.23.0

What's Changed

fix(docs): prevent scrollbar layout shift on icons page by @g30r93g in lucide-icons/lucide#4500

chore(docs): Remove certificates banner by @ericfennis in lucide-icons/lucide#4504

ci(repo-journal.yml): GH copilot repo summary by @ericfennis in lucide-icons/lucide#4505

ci(repo-journal.yml): Small fix in the workflow by @ericfennis in lucide-icons/lucide#4508

ci(repo-journal.yml): Switch to token by @ericfennis in lucide-icons/lucide#4509

feat(icons): added paper-bag icon by @dkast in lucide-icons/lucide#4023

... (truncated)

Commits

f229f83 chore(depedencies): Update dependencies (#4553)
5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
07c885e fix(docs): fix zephyr-cloud URL in readmes
50d8af5 docs(readme): Update readme files (#4320)
653e44b feat(packages): use .mjs for ESM bundles (#4285)
7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
dada0a8 fix(lucide-react): Fix dynamic imports (#4210)
a6e648a fix(lucide-react): correct client directives in RSC files (#4189)
1f010a3 fix(lucide-react): Fixes provider export and RSC render issues (#4175)
484f2c9 docs(version-1): Version 1 website (#4142)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lucide-react since your current version.

Updates next from 14.2.35 to 16.2.10

Release notes

Sourced from next's releases.

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

GHSA-8h8q-6873-q5fj: Denial of Service with Server Components

GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components

GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection

GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades

GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

... (truncated)

Commits

9dadfd6 v16.2.10
534d9c1 [16.2.x] Release pipeline updates (#95160)
98941fc backport: docs fixes 16.2.x (#94935)
6e1a94d [16.2.x][ci]: fix release script to not strip newlines (#94640)
f37fad9 v16.2.9
d9aaaed [cd] Allow tagging semver-lower releases as @latest if @latest po… (#94627)
6f16804 v16.2.8
0dbc1d5 [16.2.x][cd] Ensure release can be triggered on old branches (#94598)
90e3c81 [16.2.x] Align Actions dependencies with Canary (#94339)
83f402c [16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates next-auth from 4.24.14 to 4.24.15

Release notes

Sourced from next-auth's releases.

next-auth@4.24.15

Security patch release for the 4.x line.

getToken() now returns null instead of throwing when the Authorization header contains a malformed Bearer value.

OAuth state, nonce, and PKCE check cookies are now bound to the provider that created them and are rejected when a different provider handles the callback. Sign-ins in flight across the upgrade fail once and succeed on retry.

Email addresses are Unicode-normalized (NFKC) before validation in the email sign-in flow, closing a homoglyph @ bypass.

An explicitly configured NEXTAUTH_URL now takes precedence over the auto-detected forwarded host in trusted-host mode.

Restores CommonJS compatibility by pinning uuid to ^11.1.1; the 14.x line is ESM-only and broke require() on Node versions below 20.19.

Commits

d857eec chore(release): next-auth@4.24.15 [skip ci]
5bca239 fix(next-auth): harden getToken parsing and bind OAuth check cookies to provi...
db7e27d chore(deps): use uuid ^11.1.1 to keep CommonJS support (#13466)
32d874c fix(next-auth): repair red v4 CI (lint + pre-existing test drift) (#13447)
fa85858 chore: update uuid to v14, remove deprecated types (#13422)
2a39465 Merge commit from fork
19d2feb Merge commit from fork
See full diff in compare view

Updates next-themes from 0.2.1 to 0.4.6

Release notes

Sourced from next-themes's releases.

v0.4.6

What's Changed

fix: add null check for value in updateDOM function to prevent runtime errors and flashing by @groveom in pacocoursey/next-themes#344

New Contributors

@groveom made their first contribution in pacocoursey/next-themes#344

Full Changelog: pacocoursey/next-themes@v0.4.5...v0.4.6

v0.4.5

What's Changed

fix: map theme to class using ValueObject in injected script by @danielgavrilov in pacocoursey/next-themes#330

Reduce number of renders by pre-setting resolvedTheme by @wahba-openai in pacocoursey/next-themes#338

Bump next from 14.2.10 to 14.2.15 in the npm_and_yarn group across 1 directory by @dependabot in pacocoursey/next-themes#331

Bump the npm_and_yarn group across 1 directory with 7 updates by @dependabot in pacocoursey/next-themes#341

chore: Fix corepack errors in CI by @pacocoursey in pacocoursey/next-themes#342

New Contributors

@danielgavrilov made their first contribution in pacocoursey/next-themes#330

@wahba-openai made their first contribution in pacocoursey/next-themes#338

Full Changelog: pacocoursey/next-themes@v0.4.4...v0.4.5

v0.4.4

What's Changed

fix: infinite loop theme flicker by @arturbien in pacocoursey/next-themes#329

New Contributors

@o1Suleyman made their first contribution in pacocoursey/next-themes#328

@arturbien made their first contribution in pacocoursey/next-themes#329

Full Changelog: pacocoursey/next-themes@v0.4.3...v0.4.4

v0.4.3

What's Changed

Pass nonce to inline style tag when using disableTransitionOnChange

Full Changelog: pacocoursey/next-themes@v0.4.2...v0.4.3

v0.4.2

What's Changed

Re-export types from next-themes by @cschroeter in pacocoursey/next-themes#321

New Contributors

@cschroeter made their first contribution in pacocoursey/next-themes#321

Full Changelog: pacocoursey/next-themes@v0.4.1...v0.4.2

... (truncated)

Commits

See full diff in compare view

Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.

Updates react from 18.2.0 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

... (truncated)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (@gnoff, @lubieowoce, @sebmarkbage, @unstubbable #35632)

19.2.3 (Dec 11, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (Dec 11, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon #35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits

6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
23f4f9f 19.2.5
90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
5667a41 Bump next prerelease version numbers (#34639)
8bb7241 Bump useEffectEvent to Canary (#34610)
e3c9656 Ensure Performance Track are Clamped and Don't overlap (#34509)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 18.2.52 to 19.2.17

Commits

See full diff in compare view

Updates react-dom from 18.2.0 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (@gnoff, @lubieowoce, @sebmarkbage, @unstubbable #35632)

19.2.3 (Dec 11, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (Dec 11, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon #35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits

6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
23f4f9f 19.2.5
90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
8618113 Bump scheduler version (#34671)
1bd1f01 Ship partial-prerendering APIs to Canary (#34633)
2f0649a [Fizz] Remove nonce option from resume-and-prerender APIs (#34664)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates @types/react-dom from 18.2.18 to 19.2.3

Commits

See full diff in compare view

Updates react-dropzone from 14.4.1 to 19.1.1

Release notes

Sourced from react-dropzone's releases.

v19.1.1

19.1.1 (2026-07-19)

Bug Fixes

ignore drops on the dropzone while the file dialog is open (closes #1455) (4599a84)

v19.1.0

19.1.0 (2026-07-19)

Features

support async validator (ec2af85)

v19.0.2

19.0.2 (2026-07-18)

Bug Fixes

detect dragged files via items kind when types omit Files (#1409) (c678d38)

v19.0.1

19.0.1 (2026-07-18)

Bug Fixes

hide file input in-flow to prevent scroll jump (fixes #1413) (d1d290c)

v19.0.0

19.0.0 (2026-07-18)

fix!: accept files up to the limit instead of rejecting the batch (696d47c), closes #1355 #1358

BREAKING CHANGES

acceptedFiles/onDropAccepted now returns the in-limit files that were previously rejected wholesale.

v18.3.0

18.3.0 (2026-07-18)

Features

... (truncated)

CommitsDescription has been truncated

…29 updates Bumps the npm-dependencies group with 29 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `3.10.0` | `5.4.0` | | [date-fns](https://github.com/date-fns/date-fns) | `3.6.0` | `4.4.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.316.0` | `1.25.0` | | [next](https://github.com/vercel/next.js) | `14.2.35` | `16.2.10` | | [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.14` | `4.24.15` | | [next-themes](https://github.com/pacocoursey/next-themes) | `0.2.1` | `0.4.6` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.2.0` | `19.2.7` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.2.52` | `19.2.17` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.2.0` | `19.2.7` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.2.18` | `19.2.3` | | [react-dropzone](https://github.com/react-dropzone/react-dropzone) | `14.4.1` | `19.1.1` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.80.0` | `7.82.0` | | [sharp](https://github.com/lovell/sharp) | `0.33.5` | `0.35.3` | | [sonner](https://github.com/emilkowalski/sonner) | `1.7.4` | `2.0.7` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `2.6.1` | `3.6.0` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `3.4.19` | `4.3.3` | | [yet-another-react-lightbox](https://github.com/igordanchenko/yet-another-react-lightbox) | `3.32.0` | `3.32.1` | | [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` | | [zustand](https://github.com/pmndrs/zustand) | `4.5.7` | `5.0.14` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.43` | `26.1.1` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.2.0` | `6.0.3` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.5.4` | | [eslint](https://github.com/eslint/eslint) | `8.56.0` | `10.7.0` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `14.2.35` | `16.2.10` | | [jsdom](https://github.com/jsdom/jsdom) | `27.4.0` | `29.1.1` | | [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.20` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` | Updates `@hookform/resolvers` from 3.10.0 to 5.4.0 - [Release notes](https://github.com/react-hook-form/resolvers/releases) - [Commits](react-hook-form/resolvers@v3.10.0...v5.4.0) Updates `date-fns` from 3.6.0 to 4.4.0 - [Release notes](https://github.com/date-fns/date-fns/releases) - [Commits](date-fns/date-fns@v3.6.0...v4.4.0) Updates `lucide-react` from 0.316.0 to 1.25.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/lucide-react) Updates `next` from 14.2.35 to 16.2.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v14.2.35...v16.2.10) Updates `next-auth` from 4.24.14 to 4.24.15 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.14...next-auth@4.24.15) Updates `next-themes` from 0.2.1 to 0.4.6 - [Release notes](https://github.com/pacocoursey/next-themes/releases) - [Commits](https://github.com/pacocoursey/next-themes/commits/v0.4.6) Updates `react` from 18.2.0 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `@types/react` from 18.2.52 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 18.2.0 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `@types/react-dom` from 18.2.18 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-dropzone` from 14.4.1 to 19.1.1 - [Release notes](https://github.com/react-dropzone/react-dropzone/releases) - [Commits](react-dropzone/react-dropzone@v14.4.1...v19.1.1) Updates `react-hook-form` from 7.80.0 to 7.82.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.80.0...v7.82.0) Updates `sharp` from 0.33.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.33.5...v0.35.3) Updates `sonner` from 1.7.4 to 2.0.7 - [Release notes](https://github.com/emilkowalski/sonner/releases) - [Commits](https://github.com/emilkowalski/sonner/commits/v2.0.7) Updates `tailwind-merge` from 2.6.1 to 3.6.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v2.6.1...v3.6.0) Updates `tailwindcss` from 3.4.19 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) Updates `yet-another-react-lightbox` from 3.32.0 to 3.32.1 - [Release notes](https://github.com/igordanchenko/yet-another-react-lightbox/releases) - [Changelog](https://github.com/igordanchenko/yet-another-react-lightbox/blob/main/CHANGELOG.md) - [Commits](igordanchenko/yet-another-react-lightbox@v3.32.0...v3.32.1) Updates `zod` from 3.25.76 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.4.3) Updates `zustand` from 4.5.7 to 5.0.14 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@4.5.7...v5.0.14) Updates `@testing-library/jest-dom` from 6.9.1 to 7.0.0 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.9.1...v7.0.0) Updates `@types/node` from 20.19.43 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 18.2.52 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 18.2.18 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 5.2.0 to 6.0.3 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react) Updates `autoprefixer` from 10.5.2 to 10.5.4 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.2...10.5.4) Updates `eslint` from 8.56.0 to 10.7.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.56.0...v10.7.0) Updates `eslint-config-next` from 14.2.35 to 16.2.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.2.10/packages/eslint-config-next) Updates `jsdom` from 27.4.0 to 29.1.1 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v27.4.0...v29.1.1) Updates `postcss` from 8.5.15 to 8.5.20 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.15...8.5.20) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: "@hookform/resolvers" dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: date-fns dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: lucide-react dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: next dependency-version: 16.2.10 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: next-auth dependency-version: 4.24.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: next-themes dependency-version: 0.4.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: react-dropzone dependency-version: 19.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: react-hook-form dependency-version: 7.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: sharp dependency-version: 0.35.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: sonner dependency-version: 2.0.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: yet-another-react-lightbox dependency-version: 3.32.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: zustand dependency-version: 5.0.14 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@testing-library/jest-dom" dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: autoprefixer dependency-version: 10.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint-config-next dependency-version: 16.2.10 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: jsdom dependency-version: 29.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: postcss dependency-version: 8.5.20 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm-dependencies group across 1 directory with 29 updates#145

chore(deps): bump the npm-dependencies group across 1 directory with 29 updates#145
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-dependencies-db7cbb08a5

dependabot Bot commented on behalf of github Jul 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 21, 2026

v5.4.0

5.4.0 (2026-05-21)

Features

Fixes

v5.2.2

5.2.2 (2025-09-14)

Bug Fixes

v5.2.1

5.2.1 (2025-07-29)

Bug Fixes

v5.2.0

5.2.0 (2025-07-25)

Features

v5.1.1

5.1.1 (2025-06-09)

Bug Fixes

v5.1.0

5.1.0 (2025-06-07)

v4.4.0

Changed

v4.3.0

Fixed

v4.2.1

Fixed

v4.2.0

Changed

v4.1.0

Fixed

Added

Version 1.25.0

What's Changed

Version 1.24.0

What's Changed

New Contributors

Version 1.23.0

What's Changed

v16.2.10

v16.2.9

v16.2.8

v16.2.7

Core Changes

Credits

v16.2.6

Security Fixes

next-auth@4.24.15

v0.4.6

What's Changed

New Contributors

v0.4.5

What's Changed

New Contributors

v0.4.4

What's Changed

New Contributors

v0.4.3

What's Changed

v0.4.2

What's Changed

New Contributors

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

New React Features

New React DOM Features

19.2.7 (June 1, 2026)