Skip to content

build(deps): bump the npm-dependencies group with 10 updates - #29

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-8296d02b4d
Open

build(deps): bump the npm-dependencies group with 10 updates#29
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-8296d02b4d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 10 updates:

Package From To
@astrojs/cloudflare 14.1.7 14.2.0
@supabase/supabase-js 2.111.0 2.112.2
astro 7.1.6 7.2.0
lucide-react 1.28.0 1.31.0
viem 2.55.10 2.55.11
wagmi 2.19.5 3.7.6
@cloudflare/workers-types 5.20260801.1 5.20260809.1
@types/node 26.1.2 26.2.0
typescript 6.0.3 7.0.2
vite-plus 0.2.8 0.2.9

Updates @astrojs/cloudflare from 14.1.7 to 14.2.0

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​14.2.0

Minor Changes

  • #16194 2a59663 Thanks @​Daedalus-Icarus! - Adds opt-in build-time image optimization for the cloudflare-binding image service.

    When enabled, the Cloudflare IMAGES binding transforms static images in the workerd prerender environment, and the optimized bytes are written directly to the output directory. If the binding fails, it falls back to Sharp.

    To opt in, use the compound configuration form:

    export default defineConfig({
  adapter: cloudflare({
    imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' },
  }),
});

    The string shorthand imageService: 'cloudflare-binding' preserves the current runtime-only behavior and is unaffected.

  • #16871 90c98ae Thanks @​adamchal! - When session: false is set in astro.config, the adapter no longer auto-wires the Cloudflare KV session driver. Combined with the matching astro change, this lets the session runtime tree-shake out of the Worker bundle.

  • #17084 961bbe5 Thanks @​matthewp! - Supports Astro's experimental incremental static builds. When experimental.incrementalBuild is enabled, the adapter skips unchanged pages between builds.

Patch Changes

  • #17576 0a79753 Thanks @​alexanderniebuhr! - Fixes /_image returning 500 in dev mode when using imageService: 'custom'. Astro's default dev image endpoint imports vite and node:fs, which cannot be loaded inside workerd. The custom and fallback cases now use the generic fetch-based endpoint in dev, matching the other image service modes. A user-configured image.endpoint is left untouched.

    Additionally, a dev-time warning is now logged when imageService: 'custom' resolves to the Sharp service (including when no image.service is configured), since Sharp's native binding cannot run inside workerd in dev or production.

  • #17481 0c32649 Thanks @​ondraulehla! - Fixes a crash on /_image cache hits when the Cloudflare cache provider is enabled. Responses served from the Workers Cache API have immutable headers, and the request handler crashed with "Can't modify immutable headers" when applying its default Cloudflare-CDN-Cache-Control: no-store header to them. The handler now rebuilds the response with mutable headers when needed.

  • #17347 ce83c39 Thanks @​astrobot-houston! - Fixes imageService: 'compile' producing unoptimized images when prerenderEnvironment is set to 'node'

  • #17594 2b8915a Thanks @​astrobot-houston! - Fixes a type-checking error when using app.use(cf()) from @astrojs/cloudflare/hono in projects with wrangler types-generated ExecutionContext declarations

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3
Changelog

Sourced from @​astrojs/cloudflare's changelog.

14.2.0

Minor Changes

  • #16194 2a59663 Thanks @​Daedalus-Icarus! - Adds opt-in build-time image optimization for the cloudflare-binding image service.

    When enabled, the Cloudflare IMAGES binding transforms static images in the workerd prerender environment, and the optimized bytes are written directly to the output directory. If the binding fails, it falls back to Sharp.

    To opt in, use the compound configuration form:

    export default defineConfig({
  adapter: cloudflare({
    imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' },
  }),
});

    The string shorthand imageService: 'cloudflare-binding' preserves the current runtime-only behavior and is unaffected.

  • #16871 90c98ae Thanks @​adamchal! - When session: false is set in astro.config, the adapter no longer auto-wires the Cloudflare KV session driver. Combined with the matching astro change, this lets the session runtime tree-shake out of the Worker bundle.

  • #17084 961bbe5 Thanks @​matthewp! - Supports Astro's experimental incremental static builds. When experimental.incrementalBuild is enabled, the adapter skips unchanged pages between builds.

Patch Changes

  • #17576 0a79753 Thanks @​alexanderniebuhr! - Fixes /_image returning 500 in dev mode when using imageService: 'custom'. Astro's default dev image endpoint imports vite and node:fs, which cannot be loaded inside workerd. The custom and fallback cases now use the generic fetch-based endpoint in dev, matching the other image service modes. A user-configured image.endpoint is left untouched.

    Additionally, a dev-time warning is now logged when imageService: 'custom' resolves to the Sharp service (including when no image.service is configured), since Sharp's native binding cannot run inside workerd in dev or production.

  • #17481 0c32649 Thanks @​ondraulehla! - Fixes a crash on /_image cache hits when the Cloudflare cache provider is enabled. Responses served from the Workers Cache API have immutable headers, and the request handler crashed with "Can't modify immutable headers" when applying its default Cloudflare-CDN-Cache-Control: no-store header to them. The handler now rebuilds the response with mutable headers when needed.

  • #17347 ce83c39 Thanks @​astrobot-houston! - Fixes imageService: 'compile' producing unoptimized images when prerenderEnvironment is set to 'node'

  • #17594 2b8915a Thanks @​astrobot-houston! - Fixes a type-checking error when using app.use(cf()) from @astrojs/cloudflare/hono in projects with wrangler types-generated ExecutionContext declarations

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3
Commits
  • 60e9432 [ci] release (#17558)
  • a2240c4 fix(test): provide experimental config in Cloudflare session-false test (#17606)
  • 961bbe5 Experimental incremental static builds (#17084)
  • 90c98ae feat(session): add session: false to opt out of session support (#16871)
  • 2b8915a fix(cloudflare): inline executionCtx type in HonoCloudflareContextLike to avo...
  • 0a79753 fix(cloudflare): use workerd-safe dev image endpoint for custom image service...
  • 2a59663 Add opt-in Cloudflare binding image optimization during build (#16194)
  • 0c32649 fix(cloudflare): don't mutate immutable headers on cached responses (#17481)
  • ce83c39 fix(@​astrojs/cloudflare): fix imageService: 'compile' silent noop with `pre...
  • See full diff in compare view

Updates @supabase/supabase-js from 2.111.0 to 2.112.2

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)
  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)

❤️ Thank You

v2.112.1

2.112.1 (2026-08-05)

🩹 Fixes

  • auth: preserve 5xx error message (#2587)
  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

v2.112.1-canary.1

2.112.1-canary.1 (2026-08-05)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • supabase: forward db retry option (#2571)

❤️ Thank You

Commits
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
  • a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
  • e6c975c fix(supabase): forward db retry option (#2571)
  • a262492 chore(release): version 2.111.0 changelogs (#2572)
  • See full diff in compare view

Updates astro from 7.1.6 to 7.2.0

Release notes

Sourced from astro's releases.

astro@7.2.0

Minor Changes

  • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

    This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

    astro preview --background

    When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:

    astro preview status
astro preview logs
astro preview logs --follow
astro preview stop

    If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

    To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.

  • #17532 7f94895 Thanks @​florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

    Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
logger: {

entrypoint: new URL('./src/logger.js', import.meta.url),


entrypoint: './src/logger.js',
},
});

Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.

  • #17084 961bbe5 Thanks @​matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

    A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.

    import type { AstroPrerenderer, PrerenderResult } from 'astro';
const prerenderer: AstroPrerenderer = {

    • ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.2.0

    Minor Changes

    • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

      This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

      astro preview --background

      When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:

      astro preview status
astro preview logs
astro preview logs --follow
astro preview stop

      If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

      To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.

    • #17532 7f94895 Thanks @​florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

      Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:

      // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
logger: {

entrypoint: new URL('./src/logger.js', import.meta.url),


entrypoint: './src/logger.js',
},
});

    Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.

  • #17084 961bbe5 Thanks @​matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

    A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.

    import type { AstroPrerenderer, PrerenderResult } from 'astro';

    • ... (truncated)

    Commits

    Updates lucide-react from 1.28.0 to 1.31.0

    Release notes

    Sourced from lucide-react's releases.

    Version 1.31.0

    What's Changed

    New Contributors

    Full Changelog: lucide-icons/lucide@1.30.0...1.31.0

    Version 1.30.0

    What's Changed

    New Contributors

    Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

    Version 1.29.0

    What's Changed

    Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

    Commits

    Updates viem from 2.55.10 to 2.55.11

    Release notes

    Sourced from viem's releases.

    viem@2.55.11

    Patch Changes

    Commits

    Updates wagmi from 2.19.5 to 3.7.6

    Release notes

    Sourced from wagmi's releases.

    wagmi@3.7.6

    Patch Changes

    • Updated dependencies [77e4566]:
      • @​wagmi/connectors@​8.1.0

    wagmi@3.7.5

    Patch Changes

    • Updated dependencies [a3c5483]:
      • @​wagmi/connectors@​8.0.26

    wagmi@3.7.4

    Patch Changes

    • Breaking (wagmi/tempo): Removed Hooks.zone.useDepositStatus to align with the current Tempo Zone API. Use Hooks.zone.useWaitForTempoBlock to wait for a block import, or use Hooks.zone.useZoneInfo and inspect tempoBlockNumber for a one-shot read. (#5204)

    • Updated dependencies [0a8eb51, bfa70e3]:

      • @​wagmi/core@​3.6.4
      • @​wagmi/connectors@​8.0.25

    wagmi@3.7.3

    Patch Changes

    • Updated dependencies [57ac9b0]:
      • @​wagmi/core@​3.6.3
      • @​wagmi/connectors@​8.0.24

    wagmi@3.7.2

    Patch Changes

    • Fixed Tempo Zone hook compatibility with Viem 2.55.2. (#5198)

    • Updated dependencies [54497eb]:

      • @​wagmi/core@​3.6.2
      • @​wagmi/connectors@​8.0.23

    wagmi@3.7.1

    Patch Changes

    • Updated dependencies [18e9421]:
      • @​wagmi/core@​3.6.1
      • @​wagmi/connectors@​8.0.22

    wagmi@3.7.0

    Minor Changes

    • Breaking (wagmi/tempo): Updated Tempo APIs for viem 2.54.0: token balance and allowance reads now return Amount objects. (#5188)

    Patch Changes

    ... (truncated)

    Changelog

    Sourced from wagmi's changelog.

    3.7.6

    Patch Changes

    • Updated dependencies [77e4566]:
      • @​wagmi/connectors@​8.1.0

    3.7.5

    Patch Changes

    • Updated dependencies [a3c5483]:
      • @​wagmi/connectors@​8.0.26

    3.7.4

    Patch Changes

    • Breaking (wagmi/tempo): Removed Hooks.zone.useDepositStatus to align with the current Tempo Zone API. Use Hooks.zone.useWaitForTempoBlock to wait for a block import, or use Hooks.zone.useZoneInfo and inspect tempoBlockNumber for a one-shot read. (#5204)

    • Updated dependencies [0a8eb51, bfa70e3]:

      • @​wagmi/core@​3.6.4
      • @​wagmi/connectors@​8.0.25

    3.7.3

    Patch Changes

    • Updated dependencies [57ac9b0]:
      • @​wagmi/core@​3.6.3
      • @​wagmi/connectors@​8.0.24

    3.7.2

    Patch Changes

    • Fixed Tempo Zone hook compatibility with Viem 2.55.2. (#5198)

    • Updated dependencies [54497eb]:

      • @​wagmi/core@​3.6.2
      • @​wagmi/connectors@​8.0.23

    3.7.1

    Patch Changes

    • Updated dependencies [18e9421]:
      • @​wagmi/core@​3.6.1
      • @​wagmi/connectors@​8.0.22

    ... (truncated)

    Commits

    Updates @cloudflare/workers-types from 5.20260801.1 to 5.20260809.1

    Commits

    Updates @types/node from 26.1.2 to 26.2.0

    Commits

    Updates typescript from 6.0.3 to 7.0.2

    Commits
    Maintainer changes

    This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


    Updates vite-plus from 0.2.8 to 0.2.9

    Release notes

    Sourced from vite-plus's releases.

    vite-plus v0.2.9: add vp toolchain and vp hooks, and fix vp run inside Codex and Claude Code sandboxes

    vp toolchain prints the tools, versions, and bundling relationships in the active release. vp hooks manages the Vite+ dispatcher for Git hooks, and removes the manual setup steps. vp run no longer fails in the default Codex CLI and Claude Code sandboxes. Those sandboxes deny Unix sockets and shared memory, which task IPC and file-access tracking used. The rest of the release makes the install path more reliable. It fixes npm 12 blocked install scripts, Yarn 2+ integrity pins, and baseline Bun builds for older CPUs. It also fixes downloads that stopped on slow connections.

    Highlights

    • New vp toolchain command. It prints the tools, versions, and bundling relationships in the active Vite+ release as a tree. The tree shows vite-plus, core, vite, rolldown, oxc, oxc-resolver, and the compiled Vite Task with its build time and revision. Give a tool name to select part of the tree. Use --json for machine-readable output. Use --global for the global release (#2111), by @​fengmk2
    • New vp hooks command. It manages the Vite+ dispatcher for Git hooks. enable installs or refreshes the dispatcher and sets core.hooksPath. disable removes the dispatcher and keeps that preference, so prepare and vp config do not install it again. status shows the current state. Use --hooks-dir to set a custom directory. Vite+ keeps that directory for later commands. Vite+ does not change project-owned hooks, staged config, or package.json lifecycle scripts (#2341), by @​dennybiasiolli
    • vp run now works in the default Codex CLI and Claude Code sandboxes. Before this release, a cached task failed with Failed to set up task communication: Operation not permitted. The task code never started. Automatic file-access tracking also failed. Task caching and input tracking now work in both default profiles. You do not need extra sandbox permissions (vite-task#569, vite-task#576), by @​wan9chi

    Features

    • vp create now shows the dependencies whose install scripts npm 12 blocked. Before this release, Vite+ left those dependencies unbuilt and gave no message. To approve them, vp create runs vp pm approve-builds and then vp pm rebuild (#2336), by @​fengmk2
    • Large downloads no longer stop on slow connections. Node.js tarballs and package-manager tarballs now use a 10 minute timeout. Before this release, they used the shared 2 minute per-request limit. That limit stopped healthy downloads below approximately 250 KB/s. It also made vp env install and vp migrate impossible to complete. Set VP_DOWNLOAD_TIMEOUT to a different number of seconds (#2386), by @​tarikermis
    • Package-manager downloads now show a byte progress bar. The managed Node.js runtime already showed one. A slow download no longer looks stopped (#2369), by @​semimikoh
    • You can now select JetBrains editors (IntelliJ, WebStorm, and similar) in the editor setup question. Vite+ writes the Oxc plugin ID to .idea/externalDependencies.xml. The docs now describe the gitignore strategy for .idea (#2204, #2378), by @​KTrain5169
    • vp now shows a warning when it falls back to the global CLI in a project that has no project-local vite-plus. If the project declares the dependency, vp tells you to run vp install. If the project does not declare it, vp points to the migration guide. vp migrate and commands outside a project stay silent (#2362), by @​liangmiQwQ
    • Generated editor settings now disable nested Oxlint config resolution. The Vite+ config stays authoritative (#2331), by @​liangmiQwQ

    [!NOTE] Upstream toolchain upgrade: vite 8.2.0 -> 8.2.1, rolldown 1.2.2 -> 1.2.3, oxlint 1.76.0 -> 1.77.0, oxfmt 0.61.0 -> 0.62.0, and the oxc npm packages and Rust crates 0.142.0 -> 0.143.0. oxfmt and oxlint both changed. The new versions can report problems in code that passed before. If your CI runs vp check, run vp fmt after you upgrade (#2373), by @​voidzero-guard[bot]

    Fixes & Enhancements

    • Yarn 2+ pins from corepack use now verify against the extracted CLI (bin/yarn.js), not the npm tarball. vp install no longer fails on a cold cache. vp run no longer downloads Yarn again on every run (#2227), by @​leslieeilsel
    • vp dev no longer crashes at startup with ENOENT when experimental.bundledDev is enabled. The bundled dev client path now points to the packaged layout (#2384), by @​lofcz
    • vp migrate now rejects a workspace member as its target. Before this release, it migrated the enclosing workspace instead. It now tells you to run the command from the workspace root (#2229), by @​leslieeilsel
    • VP_NODE_VERSION=22 and other partial versions now resolve to an exact Node.js release. This applies to shim-dispatched commands such as vp env exec node -v (#2411), by @​jong-kyung
    • Managed bunx shims now dispatch through bun x. bunx <package> no longer starts a matching package script recursively. This applies to new Bun installations (#2151), by @​liangmiQwQ
    • Managed Bun now selects the baseline build on x64 CPUs that do not have AVX2. Bun's standard builds require AVX2. Cached installations keep their current files (#2179), by @​liangmiQwQ
    • Generated Nushell env files now escape and normalize paths correctly. A VP_HOME path that contains spaces or quotes now loads without an error (#2191), by @​naokihaba
    • vite-plus/test/browser-* type exports now add .js extensions to relative shim specifiers. Those specifiers now resolve with NodeNext module resolution (#2360), by @​eai04191
    • Tool-backed help is now consistent with upstream. An exact vp <command> --help shows the local themed help. A command with more arguments (vp test --help --coverage, vp test list --help) goes to the bundled tool. Deep help and subcommand help stay complete (#2345), by @​liangmiQwQ
    • Vite Task diagnostics now print paths and working directories without Rust debug formatting. Vite+ no longer prints quoted paths or escaped Windows backslashes (vite-task#534), by @​liangmiQwQ
    • Broad workspace globs no longer find and run package scripts inside node_modules (vite-task#539), by @​jong-kyung

    Refactor

    • Rename the internal Rust crates from vite_* to vp_* (#2335), by @​fengmk2
    • Move the shared CLI helpers into utils (#2347), by @​jong-kyung
    • Remove a redundant Vite reporter patch from core (#2355), by @​jong-kyung
    • Remove the duplicate export transformers in tools (#2358), by @​jong-kyung
    • Move the accent helpers into crate::help (#2363), by @​jong-kyung
    • Sort ...

      Description has been truncated

      Summary by cubic

      Upgrade 10 npm dependencies to pick up stability, performance, and DX improvements, with notable majors to wagmi (v3) and typescript (v7). Default runtime behavior is unchanged; some APIs tighten and type checks may surface issues.

      • wagmi v3 (breaking): Tempo hooks updated; Hooks.zone.useDepositStatus was removed. Connectors bumped; recheck wallet flows.
      • typescript v7 + @types/node v26.2: stricter types may fail CI locally; expect new type errors.
      • astro 7.2 + @astrojs/cloudflare 14.2: supports experimental incremental static builds (faster rebuilds). session: false now tree-shakes session code (smaller Worker bundles). Optional build-time Cloudflare Images optimization; default behavior unchanged.
      • viem 2.55.11: validateTypedData rejects nonstandard uint/int aliases; retry hanging fixed.
      • @supabase/supabase-js 2.112.x: Realtime stability fixes; OpenTelemetry tracing moved to opt-in /tracing path; no default behavior change.
      • vite-plus 0.2.9: new vp toolchain and vp hooks; formatting and lint engines upgraded (may surface new findings). vp run more reliable in sandboxed dev environments.

      Migration and rollout

      • Replace wagmi/tempo’s removed Hooks.zone.useDepositStatus with Hooks.zone.useWaitForTempoBlock or Hooks.zone.useZoneInfo; adjust callers expecting Tempo token reads to return Amount.
      • If using EIP-712, ensure typed data uses explicit sizes (e.g., uint256), not uint/int, to satisfy viem validation.
      • Run a full typecheck under typescript v7 and resolve new errors; update tsconfig or local types as needed.
      • Optional performance: enable experimental.incrementalBuild in Astro; set session: false to reduce bundle size; opt into Cloudflare build-time image optimization via imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' }.
      • If CI flags new formatting/lint issues from vite-plus’s toolchain, run vp fmt. Re-test wallet connect, Supabase auth/Realtimes, and build/preview on Cloudflare.

      Written for commit 20bc002. Summary will update on new commits.

    @dependabot
    build(deps): bump the npm-dependencies group with 10 updates
    20bc002 
    Bumps the npm-dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) | `14.1.7` | `14.2.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.111.0` | `2.112.2` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.6` | `7.2.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.31.0` |
| [viem](https://github.com/wevm/viem) | `2.55.10` | `2.55.11` |
| [wagmi](https://github.com/wevm/wagmi/tree/HEAD/packages/react) | `2.19.5` | `3.7.6` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260801.1` | `5.20260809.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.2` | `26.2.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.2.8` | `0.2.9` |


Updates `@astrojs/cloudflare` from 14.1.7 to 14.2.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@14.2.0/packages/integrations/cloudflare)

Updates `@supabase/supabase-js` from 2.111.0 to 2.112.2
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.2/packages/core/supabase-js)

Updates `astro` from 7.1.6 to 7.2.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.0/packages/astro)

Updates `lucide-react` from 1.28.0 to 1.31.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.31.0/packages/lucide-react)

Updates `viem` from 2.55.10 to 2.55.11
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.55.10...viem@2.55.11)

Updates `wagmi` from 2.19.5 to 3.7.6
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/wagmi@3.7.6/packages/react)

Updates `@cloudflare/workers-types` from 5.20260801.1 to 5.20260809.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@types/node` from 26.1.2 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vite-plus` from 0.2.8 to 0.2.9
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.2.9/packages/cli)

---
updated-dependencies:
- dependency-name: "@astrojs/cloudflare"
  dependency-version: 14.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: astro
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lucide-react
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: viem
  dependency-version: 2.55.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: wagmi
  dependency-version: 3.7.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260809.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vite-plus
  dependency-version: 0.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 16, 2026
    @cloudflare-workers-and-pages

    cloudflare-workers-and-pages Bot commented Aug 16, 2026 •
    edited
    Loading

    Copy link
    Copy Markdown

    Deploying with  Cloudflare Workers  Cloudflare Workers

    The latest updates on your project. Learn more about integrating Git with Workers.

    Status Name Latest Commit Updated (UTC)
    ❌ Deployment failed
    View logs    		 kuest-com 20bc002 Aug 16 2026, 02:57 PM

    @socket-security

    socket-security Bot commented Aug 16, 2026

    Copy link
    Copy Markdown

    Review the following changes in direct dependencies. Learn more about Socket for GitHub.

    Diff Package Supply Chain
    Security    		 Vulnerability Quality Maintenance License
    Updatedwagmi@​2.19.5 ⏵ 3.7.680 +210079 +297100
    Addedvite-plus@​0.2.979100100100100
    Addedlucide-react@​1.31.0100100989580
    Added@​types/​node@​26.2.01001008195100
    Added@​astrojs/​cloudflare@​14.2.01001008497100
    Addedastro@​7.2.0981008898100
    Added@​supabase/​supabase-js@​2.112.28810010098100
    Updatedtypescript@​6.0.3 ⏵ 7.0.29910089 -1100100 +10
    Added@​cloudflare/​workers-types@​5.20260809.11001009699100

    View full report

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants