Bump the minor-and-patch group across 1 directory with 16 updates by dependabot[bot] · Pull Request #75 · monashcoding/monmap

dependabot · 2026-10-29T04:39:33Z

Bumps the minor-and-patch group with 16 updates in the / directory:

Package	From	To
@types/node	`24.19.1`	`24.19.2`
dotenv	`18.0.6`	`18.0.9`
@base-ui/react	`1.8.0`	`1.9.0`
@dagrejs/dagre	`3.1.1`	`3.1.3`
@next/third-parties	`16.4.2`	`16.4.3`
better-auth	`1.7.7`	`1.7.14`
jose	`6.2.12`	`6.2.14`
lucide-react	`1.53.0`	`1.64.0`
posthog-js	`1.438.3`	`1.442.1`
posthog-node	`5.55.1`	`5.60.1`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
@next/bundle-analyzer	`16.4.0`	`16.4.3`
eslint-config-next	`16.3.8`	`16.4.3`
postcss	`8.5.29`	`8.5.32`
prettier	`3.9.9`	`3.9.10`

Updates @types/node from 24.19.1 to 24.19.2

Commits

See full diff in compare view

Updates dotenv from 18.0.6 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

Permit DOTENV_PATH being empty string with the CLI (#1076)

18.0.8 (2026-10-14)

Changed

Fast parser should strip appended extra quotes (#1073)

Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

Treat undefined settings like quiet: true as null rather than falsey (#1070)

CLI should honor DOTENV_QUIET setting in .env file (#1071)

Commits

8d1ab85 18.0.9
59a40ce changelog
88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
e2fe95e 18.0.8
7aa712a type detail improvement
53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
0b4843a changelog
Additional commits viewable in compare view

Updates @base-ui/react from 1.8.0 to 1.9.0

Release notes

Sourced from @base-ui/react's releases.

v1.9.0

General changes

Export CssVariables and DataAttributes types (#5243) by @superhooman

Fix stale focused field state (#5345) by @atomiks

Fix animation waits retaining detached elements (#5719) by @flaviendelangle

Keep item registration in sync when items change under Strict Mode (#5862) by @atomiks

Avoid re-rendering inactive triggers on open and close (#5865) by @atomiks

Accordion

Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @cpruijsen

Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @atomiks

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Alert Dialog

Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Autocomplete

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Checkbox

Prefer aria-label over associated labels (#5787) by @atomiks

Collapsible

Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @atomiks

Finish closing when the render function removes the panel (#5890) by @michaldudak

Restore animations when a removed panel reopens (#5891) by @michaldudak

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Combobox

Fix stale chip focus after returning to the input (#5879) by @mdm317

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Fix label focus in Shadow DOM (#5871) by @lyzno1

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Reset typeahead state when closing without moving focus (#5816) by @mdm317

Accept readonly arrays for multiple values (#5710) by @MonstraG

Share item indicator implementation (#5728) by @flaviendelangle

Improve mount performance of large lists (#5819) by @atomiks

Combine item store subscriptions (#5863) by @atomiks

Dialog

... (truncated)

Changelog

Sourced from @base-ui/react's changelog.

v1.9.0

Oct 9, 2026

General changes

Export CssVariables and DataAttributes types (#5243) by @superhooman

Fix stale focused field state (#5345) by @atomiks

Fix animation waits retaining detached elements (#5719) by @flaviendelangle

Keep item registration in sync when items change under Strict Mode (#5862) by @atomiks

Avoid re-rendering inactive triggers on open and close (#5865) by @atomiks

Accordion

Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @cpruijsen

Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @atomiks

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Alert Dialog

Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Autocomplete

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Checkbox

Prefer aria-label over associated labels (#5787) by @atomiks

Collapsible

Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @atomiks

Finish closing when the render function removes the panel (#5890) by @michaldudak

Restore animations when a removed panel reopens (#5891) by @michaldudak

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Combobox

Fix stale chip focus after returning to the input (#5879) by @mdm317

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Fix label focus in Shadow DOM (#5871) by @lyzno1

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Reset typeahead state when closing without moving focus (#5816) by @mdm317

Accept readonly arrays for multiple values (#5710) by @MonstraG

... (truncated)

Commits

ad7ecda [release] v1.9.0 (#5906)
3296de3 [drawer] Avoid retaining unmounted drawers in DrawerProvider (#5921)
69c33b4 [drawer] Fix deferred touch swipes leaving the popup (#5922)
51b70db [menu] Strip internal filter components from public types (#5923)
8d8b98c [menu] Ignore filter input edits while the menu animates out (#5911)
aeba3eb [combobox][menu][select] Revert highlightItem imperative action (#5910)
ec6bf32 [field][select][combobox][slider] Fall back to the owner document when lookin...
1f112a5 [popups] Avoid re-rendering inactive triggers on open and close (#5865)
bc53db6 [fieldset] Await render in Legend disabled-state test (#5909)
147092e [test] Strengthen tests, add test lint rules and share copied suites (#5892)
Additional commits viewable in compare view

Updates @dagrejs/dagre from 3.1.1 to 3.1.3

Changelog

Sourced from @dagrejs/dagre's changelog.

v3.1.3

Fixes & Improvements

ESM & Package Exports (PR #516): Added "type": "module" to package.json and renamed the CommonJS bundle to dist/dagre.cjs so both ESM import and CommonJS require() resolve properly. Re-exported Graph with default generic parameters for backward compatibility.

Dynamic Layout State Isolation (PR #515): Scoped remembered dynamic layout state to the input graph rather than module-level state to prevent state leaks across layouts.

Cluster Edge Routing (PR #523): Restored internal edge routes inside clusters with custom rankdir directions.

Zero-Width Node Intersections (PR #524): Fixed vertical edge route intersection calculations with zero-width nodes.

Parallel Edge Subgraph Sorting (PR #522): Fixed sortSubgraph so each parallel-edge dummy node is paired at most once when laying out three or more parallel edges.

Flat Graph Conflict Scan Optimization (PR #520): Skipped findType2Conflicts scan when no border dummy nodes are present in flat graphs.

Release & Tooling (PR #526, PR #527): Added a preflight release check to ensure changelog.md is updated before releasing, and added .pre-commit-config.yaml to run tests.

Dependency Updates: Updated @dagrejs/graphlib to 4.0.6.

[3.1.0] - 2026

New Features

Per-Cluster Direction Support (PR #511): Each cluster/subgraph can now specify its own rankdir, ranksep, nodesep, and align settings. The layout engine recursively applies these settings, enabling complex nested cluster hierarchies with independent flow directions. Fully backward compatible with global rankdir and legacy layouts.

Dynamic Graph Layout Support (PR #512): Added support for dynamic graph layouts via useDynamic and corePath configuration options in LayoutConfig. Enables persistent node ordering and layout stability when modifying graph structures.

Refactoring & Fixes

TypeScript & Type Safety Improvements: Added ClusterNodeLabel and NodeCollection types, updated NodeLabel interfaces, and eliminated any type assertions across the codebase.

Nested Cluster Fixes: Resolved edge cases in nested cluster isolation and improved edge routing for cross-cluster edges.

[3.0.0] - 2026

Major Improvements: TypeScript Migration

Full TypeScript Rewrite (PR #509): Migrated the entire core codebase from JavaScript to TypeScript for improved type safety, better IDE autocompletion, and easier maintenance.

Native Type Definitions: Removed the need for external @types/dagre packages; high-quality types are now shipped directly with the library.

Modern Build Pipeline: * Replaced JSHint with ESLint for stricter code quality.

Replaced Browserify/Karma with modern bundling and testing tools.

Standardized project indentation to 2 spaces (aligning .eslintrc and .editorconfig).

Refactoring & Fixes

Dependency Cleanup: Removed deprecated dependencies including bower.json and legacy test configurations.

Module Exports: Standardized ESM and CommonJS exports to ensure compatibility with modern bundlers like Webpack 5, Vite, and Rollup.

Internal Logic: Refined internal graph traversal algorithms to utilize TypeScript interfaces, reducing "undefined" runtime errors.

[2.0.0] - Legacy Modernization

Major Changes

Organization Transfer: Formally moved the repository to the @dagrejs GitHub organization.

Package Renaming: Published under the @dagrejs/dagre npm scope.

Dropped Legacy Environments: Discontinued support for extremely old Node.js versions (pre-v10) and legacy browsers that do not support ES6 features.

Fixes

... (truncated)

Commits

a73acbf Bumping for release
a037580 Merge pull request #527 from dagrejs/check-release-notes
17757d9 Adding a check on release notes to the release
744d6e1 Bump version and set as pre-release
a5ea31c Building for release
89b75d9 Merge pull request #526 from dagrejs/pre-commit
09913ac chore: add .pre-commit-config.yaml to run tests
daa9324 Merge pull request #524 from dajiaohuang/fix/zero-width-edge-intersections-20...
77c6330 Merge branch 'master' into fix/zero-width-edge-intersections-20261015
a4cfd26 chore: revert dist changes and move tests to layout-test.ts
Additional commits viewable in compare view

Updates @next/third-parties from 16.4.2 to 16.4.3

Release notes

Sourced from @next/third-parties's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[lts-active] Fix extensionless Google font URLs in both bundlers (#100277)

[lts-active] Don't load the app-page runtime in proxy.ts (#100423)

[lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)

[lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)

[lts-active] test: Pin react-virtualized (#100545)

[lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)

[lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)

[lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @mischnic, @lukesandberg, @acdlite, @eps1lon, and @sokra for helping!

Commits

29bbeab v16.4.3
See full diff in compare view

Updates better-auth from 1.7.7 to 1.7.14

Release notes

Sourced from better-auth's releases.

v1.7.14

better-auth

Bug Fixes

Fixed two-factor TOTP to accept imported Base32 secrets stored as base32:<secret> (#12031)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

Fixed Kakao sign-in to forward loginHint so the Kakao Account login page opens with the ID field prefilled (#12045)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@bytaesu, @honuuk

Full changelog: v1.7.13...v1.7.14

v1.7.13

better-auth

Bug Fixes

Fixed type declarations so type-only exports are no longer listed as values, making a value import fail type checking instead of failing at runtime (#11985)

For detailed changes, see CHANGELOG

@better-auth/core

Features

Added token endpoint authentication options to the Vercel social provider, including dynamic OIDC tokens and private key JWT client assertions, without replacing the built-in sign-in flow (#11948)

Bug Fixes

Added tokenEndpointAuth: { method } to the Cloudflare provider and deprecated tokenEndpointAuthMethod, which remains supported (#11997)

For detailed changes, see CHANGELOG

@better-auth/stripe

Features

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.14

Patch Changes

#12031 d2cb7f5 Thanks @bytaesu! - Two-factor TOTP now accepts imported Base32 secrets stored as base32:<secret>.

Updated dependencies [2947ab7]:

@better-auth/core@1.7.14

@better-auth/drizzle-adapter@1.7.14

@better-auth/kysely-adapter@1.7.14

@better-auth/memory-adapter@1.7.14

@better-auth/mongo-adapter@1.7.14

@better-auth/prisma-adapter@1.7.14

@better-auth/telemetry@1.7.14

1.7.13

Patch Changes

#11985 9cb95fe Thanks @bytaesu! - Type declarations no longer list type-only exports as values, so importing one as a value now fails type checking instead of failing at runtime.

Updated dependencies [2712441, 1cf4b2c]:

@better-auth/core@1.7.13

@better-auth/drizzle-adapter@1.7.13

@better-auth/kysely-adapter@1.7.13

@better-auth/memory-adapter@1.7.13

@better-auth/mongo-adapter@1.7.13

@better-auth/prisma-adapter@1.7.13

@better-auth/telemetry@1.7.13

1.7.12

Patch Changes

#11925 fb48619 Thanks @bytaesu! - The JWT plugin now verifies JWTs and session cookie-cache JWTs with the algorithm of the stored key instead of the one named in the token header, and logs a warning when it signs or verifies a JWT without an issuer or audience.

#11924 681aa5c Thanks @bytaesu! - auth.api.getSession() now keeps the original database error as error.cause when the session lookup fails, so server code can tell a transient failure from a bug.

#11930 b18e3b8 Thanks @bytaesu! - OAuth callbacks completed through the OAuth proxy now run the same checks as the standard OAuth callback, including issuer and ID token nonce validation.

Updated dependencies [681aa5c, 4bc78ba, 876608d, 083a743, 492134a]:

@better-auth/core@1.7.12

@better-auth/drizzle-adapter@1.7.12

@better-auth/kysely-adapter@1.7.12

@better-auth/memory-adapter@1.7.12

@better-auth/mongo-adapter@1.7.12

@better-auth/prisma-adapter@1.7.12

@better-auth/telemetry@1.7.12

1.7.11

... (truncated)

Commits

a936663 chore: release v1.7.14 (#12055)
d2cb7f5 fix(two-factor): accept imported Base32 TOTP secrets (#12031)
7f61081 chore: release v1.7.13 (#11994)
ea3cbfd docs(organization): addMember requires userId (#12007)
2712441 refactor(cloudflare): standardize token endpoint auth options (#11997)
1cf4b2c feat(vercel): support token endpoint authentication strategies (#11948)
7a1ecde chore(deps): bump next to 16.4.2 (#11976)
f4260a9 chore: release v1.7.12 (#11922)
b18e3b8 fix(oauth-proxy): run the standard callback checks on proxied callbacks (#11930)
fb48619 fix(jwt): verify tokens with the stored key's algorithm (#11925)
Additional commits viewable in compare view

Updates jose from 6.2.12 to 6.2.14

Release notes

Sourced from jose's releases.

v6.2.14

Fixes

types: preserve contextual JWT payload inference (0dbf7a0), closes #911

v6.2.13

Refactor

align terminology with JOSE specifications (bafcb74)

preserve underlying error causes (724ba24), closes #908

Changelog

Sourced from jose's changelog.

6.2.14 (2026-10-29)

Fixes

types: preserve contextual JWT payload inference (0dbf7a0), closes #911

6.2.13 (2026-10-20)

Refactor

align terminology with JOSE specifications (bafcb74)

preserve underlying error causes (724ba24), closes #908

Commits

5a6a5b6 chore(release): 6.2.14
b04c907 test: handle JWKS rotation and algorithm migration
4e3292e chore: bump packages
0dbf7a0 fix(types): preserve contextual JWT payload inference
4080772 test: simplify runtime support checks
2cddc59 chore: cleanup after release
316b7f2 chore(release): 6.2.13
8106395 chore: bump packages
724ba24 refactor: preserve underlying error causes
b112a5e chore: bump packages
Additional commits viewable in compare view

Updates lucide-react from 1.53.0 to 1.64.0

Release notes

Sourced from lucide-react's releases.

Version 1.64.0

What's Changed

chore(docs|site): Remove Plausible, add tracking events and privacy statement by @ericfennis in lucide-icons/lucide#5092

feat(icons): added square-kanban-plus icon by @KesleyDavid in lucide-icons/lucide#4688

feat(icons): added letter-b, letter-c, letter-d and 21 more icons by @karsa-mistmere in lucide-icons/lucide#4743

feat(icons): added numbers icon by @karsa-mistmere in lucide-icons/lucide#4778

feat(icons): added circle-letter-a, circle-letter-b, circle-letter-c and 46 more icons by @karsa-mistmere in lucide-icons/lucide#4744

feat(icons): added new Letters & digits category by @karsa-mistmere in lucide-icons/lucide#5095

fix(icons): align Unicode currency icon cap heights with other typographic icons by @karsa-mistmere in lucide-icons/lucide#4926

ci(claude-review): add Claude PR review workflow by @ericfennis in lucide-icons/lucide#5097

fix(icons): remove bracket from square-letter-d.svg by @ericfennis in lucide-icons/lucide#5101

New Contributors

@KesleyDavid made their first contribution in lucide-icons/lucide#4688

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Version 1.63.0

What's Changed

fix(lucide-react): ignore stale DynamicIcon loads after the name changes by @mkantautas in lucide-icons/lucide#5060

feat(icons): added calendar-arrow-left, calendar-arrow-right icons by @ryck in lucide-icons/lucide#5080

feat(icons): added siren-off icon by @Xougui in lucide-icons/lucide#5046

feat(icons): added square-chevrons-down, square-chevrons-left, square-chevrons-right and 1 more icons by @ypotti in lucide-icons/lucide#5054

feat(icons): added archive-arrow-down icon by @bduffany in lucide-icons/lucide#4854

feat(icons): added chart-radar icon by @Nitero in lucide-icons/lucide#4979

feat(icons): added user-round-shield icon by @DrashtiC07 in lucide-icons/lucide#5044

feat(icons): added database-cog icon by @PrimeTestLab in lucide-icons/lucide#5016

feat(icons): added laser icon by @kotaindah55 in lucide-icons/lucide#5023

fix(icons): renamed archive-restore to archive-arrow-up by @karsa-mistmere in lucide-icons/lucide#5089

feat(icons): added chart-quadrant icon by @Nitero in lucide-icons/lucide#4981

feat(icons): added boxes-linked icon by @ericfennis in lucide-icons/lucide#5087

chore(metadata): Align use-cases with metadata guidelines by @ericfennis in lucide-icons/lucide#5081

feat(icons): added earbuds-off, earbuds icons by @rrod497 in lucide-icons/lucide#5088

New Contributors

@mkantautas made their first contribution in lucide-icons/lucide#5060

@PrimeTestLab made their first contribution in lucide-icons/lucide#5016

@kotaindah55 made their first contribution in lucide-icons/lucide#5023

Full Changelog: lucide-icons/lucide@1.62.0...1.63.0

Version 1.62.0

What's Changed

chore(packages): Update sponsors by @ericfennis in lucide-icons/lucide#5034

ci(metadata-suggestions): Improve suggest metadata action by @ericfennis in lucide-icons/lucide#5061

chore(deps-dev): bump markdown-it from 15.0.1 to 15.0.3 by @dependabot[bot] in lucide-icons/lucide#5051

fix(build-icons): support Windows paths in dynamic imports for template and metadata by @grzdev in lucide-icons/lucide#5058

feat(docs): add OpenPanel analytics alongside Plausible by @ericfennis in lucide-icons/lucide#5063

ci(metadata-suggestions): run on every PR update with cached suggestions by @ericfennis in lucide-icons/lucide#5062

test(lucide): add tests for replaceElement and edge cases by @grzdev in lucide-icons/lucide#5059

... (truncated)

Commits

e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
20aef31 chore(packages): Update sponsors (#5034)
fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
3f1255e chore(deps-dev): bump @vitejs/plugin-react (#4995)
949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
See full diff in compare view

Updates posthog-js from 1.438.3 to 1.442.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.442.1

1.442.1

Patch Changes

#5341 de6b06f Thanks @sebxt! - Keep the rest of the URL when masking personal data query params and a query value contains ? or the hash contains #. (2026-10-29)

Updated dependencies [de6b06f]:

@posthog/browser-common@0.10.2

posthog-js@1.442.0

1.442.0

Minor Changes

#5467 afde45e Thanks @veryayskiy! - Add posthog.conversations.open() and posthog.conversations.close() to open and close the support chat panel (2026-10-29)

posthog-js@1.441.2

1.441.2

Patch Changes

#5421 34833f2 Thanks @frostfire575! - Session replay releases a removed shadow DOM host as soon as it leaves the page, instead of keeping it and its detached subtree in memory until the next full snapshot. (2026-10-28)

posthog-js@1.441.1

1.441.1

Patch Changes

#5222 6d12d24 Thanks @posthog! - Fall back to Math.random when crypto.getRandomValues throws, so UUID generation no longer breaks capture. (2026-10-28)

Updated dependencies [6d12d24]:

@posthog/browser-common@0.10.1

posthog-js@1.441.0

1.441.0

Minor Changes

#5269 950d034 Thanks @dustinbyrne! - Add $input_value to autocapture change events for fields marked data-ph-capture-value, or matched by the new autocapture.capture_value_css_selector_allowlist option (CSS selectors or an (element) => boolean predicate). (2026-10-28)

Patch Changes

Updated dependencies [950d034]:

@posthog/browser-common@0.10.0

@posthog/types@1.418.0

... (truncated)

Commits

dfb2e00 chore: update versions and lockfile [version bump]
a96d286 feat(Surveys): Implement survey popup delay (surveyPopupDelaySeconds)… (#5243)
de6b06f fix(browser): keep the full URL when masking query params that contain ? or #...
a3187e2 chore: upda...
Description has been truncated

Bumps the minor-and-patch group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.19.1` | `24.19.2` | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.6` | `18.0.9` | | [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.8.0` | `1.9.0` | | [@dagrejs/dagre](https://github.com/dagrejs/dagre) | `3.1.1` | `3.1.3` | | [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties) | `16.4.2` | `16.4.3` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.7` | `1.7.14` | | [jose](https://github.com/panva/jose) | `6.2.12` | `6.2.14` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.53.0` | `1.64.0` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.438.3` | `1.442.1` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.55.1` | `5.60.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [@next/bundle-analyzer](https://github.com/vercel/next.js/tree/HEAD/packages/next-bundle-analyzer) | `16.4.0` | `16.4.3` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.8` | `16.4.3` | | [postcss](https://github.com/postcss/postcss) | `8.5.29` | `8.5.32` | | [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` | Updates `@types/node` from 24.19.1 to 24.19.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `dotenv` from 18.0.6 to 18.0.9 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.6...v18.0.9) Updates `@base-ui/react` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/mui/base-ui/releases) - [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/base-ui/commits/v1.9.0/packages/react) Updates `@dagrejs/dagre` from 3.1.1 to 3.1.3 - [Release notes](https://github.com/dagrejs/dagre/releases) - [Changelog](https://github.com/dagrejs/dagre/blob/master/changelog.md) - [Commits](dagrejs/dagre@v3.1.1...v3.1.3) Updates `@next/third-parties` from 16.4.2 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/third-parties) Updates `better-auth` from 1.7.7 to 1.7.14 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.7.14/packages/better-auth) Updates `jose` from 6.2.12 to 6.2.14 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.12...v6.2.14) Updates `lucide-react` from 1.53.0 to 1.64.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.64.0/packages/lucide-react) Updates `posthog-js` from 1.438.3 to 1.442.1 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.438.3...posthog-js@1.442.1) Updates `posthog-node` from 5.55.1 to 5.60.1 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.60.1/packages/node) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@next/bundle-analyzer` from 16.4.0 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/next-bundle-analyzer) Updates `eslint-config-next` from 16.3.8 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/eslint-config-next) Updates `postcss` from 8.5.29 to 8.5.32 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.29...8.5.32) Updates `prettier` from 3.9.9 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.9...3.9.10) --- updated-dependencies: - dependency-name: "@base-ui/react" dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@dagrejs/dagre" dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@next/bundle-analyzer" dependency-version: 16.4.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@next/third-parties" dependency-version: 16.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 24.19.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: better-auth dependency-version: 1.7.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dotenv dependency-version: 18.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint-config-next dependency-version: 16.4.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: jose dependency-version: 6.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: postcss dependency-version: 8.5.31 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: posthog-js dependency-version: 1.438.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: posthog-node dependency-version: 5.57.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 29, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-77a8a9610c branch from 8516799 to 0973f38 Compare November 2, 2026 01:02

Navigation Menu

Repository navigation

Bump the minor-and-patch group across 1 directory with 16 updates - #75

Bump the minor-and-patch group across 1 directory with 16 updates#75
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-77a8a9610c

dependabot Bot commented on behalf of github Oct 29, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

18.0.9 (2026-10-14)

Changed

18.0.8 (2026-10-14)

Changed

18.0.7 (2026-10-09)

Changed

v1.9.0

General changes

Accordion

Alert Dialog

Autocomplete

Checkbox

Collapsible

Combobox

Dialog

v1.9.0

General changes

Accordion

Alert Dialog

Autocomplete

Checkbox

Collapsible

Combobox

v3.1.3

Fixes & Improvements

[3.1.0] - 2026

New Features

Refactoring & Fixes

[3.0.0] - 2026

Major Improvements: TypeScript Migration

Refactoring & Fixes

[2.0.0] - Legacy Modernization

Major Changes

Fixes

v16.4.3

Core Changes

Credits

v1.7.14

better-auth

Bug Fixes

@better-auth/core

Bug Fixes

Contributors

v1.7.13

better-auth

Bug Fixes

@better-auth/core

Features

Bug Fixes

@better-auth/stripe

Features

1.7.14

Patch Changes

1.7.13

Patch Changes

1.7.12

Patch Changes

1.7.11

v6.2.14

Fixes

v6.2.13

Refactor

6.2.14 (2026-10-29)

Fixes

6.2.13 (2026-10-20)

Refactor

Version 1.64.0

What's Changed

New Contributors

Version 1.63.0

What's Changed

New Contributors

Version 1.62.0

What's Changed

posthog-js@1.442.1

1.442.1

Patch Changes

dependabot Bot commented on behalf of github Oct 29, 2026 •

edited

Loading

`better-auth`

`@better-auth/core`

`better-auth`

`@better-auth/core`

`@better-auth/stripe`