chore(deps): bump the production-dependencies group across 1 directory with 14 updates by dependabot[bot] · Pull Request #16 · Kwondh0321/proofstack

dependabot · 2026-10-18T18:08:10Z

Bumps the production-dependencies group with 14 updates in the / directory:

Package	From	To
@fastify/cors	`11.3.0`	`11.3.1`
@fastify/helmet	`13.1.1`	`13.2.0`
@fastify/rate-limit	`11.2.0`	`11.2.1`
fastify	`5.12.6`	`5.12.7`
openid-client	`6.8.7`	`6.8.8`
next	`16.4.1`	`16.4.2`
react	`19.2.8`	`19.3.1`
react-dom	`19.2.8`	`19.3.1`
@aws-sdk/client-s3	`3.1119.0`	`3.1153.0`
@smithy/node-http-handler	`4.11.3`	`4.12.1`
@types/node	`24.13.3`	`24.19.2`
pg	`8.23.0`	`8.23.1`
protobufjs	`8.6.6`	`8.8.1`
zod	`4.4.3`	`4.6.7`

Updates @fastify/cors from 11.3.0 to 11.3.1

Release notes

Sourced from @fastify/cors's releases.

v11.3.1

What's Changed

ci: pin actions to commit-hash by @Fdawgs in fastify/fastify-cors#413

chore: bump c8 from 11.0.0 to 12.0.0 by @dependabot[bot] in fastify/fastify-cors#414

chore: bump typescript from 6.0.3 to 7.0.2 in the dev-dependencies-typescript group across 1 directory by @dependabot[bot] in fastify/fastify-cors#412

chore: return to typescript v6.x by @Tony133 in fastify/fastify-cors#415

chore(.npmrc): add min-release-age by @Fdawgs in fastify/fastify-cors#416

chore: bump fastify/workflows/.github/workflows/plugins-ci.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify-cors#417

chore: bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify-cors#418

ci: enable trusted publishing releases by @Puppo in fastify/fastify-cors#421

New Contributors

@Puppo made their first contribution in fastify/fastify-cors#421

Full Changelog: fastify/fastify-cors@v11.3.0...v11.3.1

Commits

a4fb482 Bumped v11.3.1
4627a17 ci: enable trusted publishing releases
7670483 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#418)
d03ec98 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#417)
5a2e0d0 chore(.npmrc): add min-release-age
2a47537 chore: return to typescript v6.x
10c73be chore: bump typescript (#412)
b9f74b7 chore: bump c8 from 11.0.0 to 12.0.0 (#414)
61789f1 ci: pin actions to commit-hash
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @fastify/cors since your current version.

Updates @fastify/helmet from 13.1.1 to 13.2.0

Release notes

Sourced from @fastify/helmet's releases.

v13.2.0

What's Changed

fix: inherit global enableCSPNonces on routes with custom helmet options by @TalhaHunter101 in fastify/fastify-helmet#324

Note: routes with custom helmet options now inherit the global enableCSPNonces setting. If you relied on nonces being disabled on those routes, set { helmet: { enableCSPNonces: false } } on the route.

New Contributors

@TalhaHunter101 made their first contribution in fastify/fastify-helmet#324

Full Changelog: fastify/fastify-helmet@v13.1.2...v13.2.0

v13.1.2

What's Changed

ci: enable trusted publishing releases by @Puppo in fastify/fastify-helmet#322

New Contributors

@Puppo made their first contribution in fastify/fastify-helmet#322

Full Changelog: fastify/fastify-helmet@v13.1.1...v13.1.2

Commits

f715808 Bumped v13.2.0
6ab142a fix: inherit global enableCSPNonces on routes with custom helmet options (#324)
6e3234f Bumped v13.1.2
4b0aac4 ci: enable trusted publishing releases
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @fastify/helmet since your current version.

Updates @fastify/rate-limit from 11.2.0 to 11.2.1

Release notes

Sourced from @fastify/rate-limit's releases.

v11.2.1

What's Changed

chore(.npmrc): add min-release-age by @Fdawgs in fastify/fastify-rate-limit#458

chore: Bump fastify/workflows/.github/workflows/plugins-ci-redis.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify-rate-limit#459

chore: Bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify-rate-limit#460

chore: Bump ioredis from 5.11.1 to 6.0.0 by @dependabot[bot] in fastify/fastify-rate-limit#461

ci: enable trusted publishing releases by @Puppo in fastify/fastify-rate-limit#465

New Contributors

@Puppo made their first contribution in fastify/fastify-rate-limit#465

Full Changelog: fastify/fastify-rate-limit@v11.2.0...v11.2.1

Commits

4cc3d70 Bumped v11.2.1
f2dc235 ci: enable trusted publishing releases
78a7d41 chore: Bump ioredis from 5.11.1 to 6.0.0 (#461)
a7fbb20 chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#460)
258e4ae chore: Bump fastify/workflows/.github/workflows/plugins-ci-redis.yml (#459)
25aaf33 chore(.npmrc): add min-release-age
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @fastify/rate-limit since your current version.

Updates fastify from 5.12.6 to 5.12.7

Release notes

Sourced from fastify's releases.

v5.12.7

Full Changelog: fastify/fastify@v5.12.6...v5.12.7

Commits

9f40003 Bumped v5.12.7
See full diff in compare view

Updates openid-client from 6.8.7 to 6.8.8

Release notes

Sourced from openid-client's releases.

v6.8.8

Fixes

apply the default HTTP request timeout (af32783)

calculate token lifetimes using elapsed time (e816bf0)

isolate lazy client authentication handler caches (d687796)

passport: handle rejected async verification callbacks (d730f80)

preserve clock settings across DCR nonce retries (5433d68)

release: separate changelog sections (57fcbc6)

retain polling abort signals through response processing (b26170e)

select a unique decryption key when kid is omitted (10ba026)

Refactor

share grant polling lifecycle and retry handling (b931c40)

Changelog

Sourced from openid-client's changelog.

6.8.8 (2026-09-05)

Fixes

apply the default HTTP request timeout (af32783)

calculate token lifetimes using elapsed time (e816bf0)

isolate lazy client authentication handler caches (d687796)

passport: handle rejected async verification callbacks (d730f80)

preserve clock settings across DCR nonce retries (5433d68)

release: separate changelog sections (57fcbc6)

retain polling abort signals through response processing (b26170e)

select a unique decryption key when kid is omitted (10ba026)

Refactor

share grant polling lifecycle and retry handling (b931c40)

Commits

04c5982 chore(release): 6.8.8
5eccf2e chore: bump packages
d730f80 fix(passport): handle rejected async verification callbacks
b931c40 refactor: share grant polling lifecycle and retry handling
d687796 fix: isolate lazy client authentication handler caches
e816bf0 fix: calculate token lifetimes using elapsed time
10ba026 fix: select a unique decryption key when kid is omitted
b26170e fix: retain polling abort signals through response processing
af32783 fix: apply the default HTTP request timeout
5433d68 fix: preserve clock settings across DCR nonce retries
Additional commits viewable in compare view

Updates next from 16.4.1 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

Commits

2864b17 v16.4.2
a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
Additional commits viewable in compare view

Updates react-dom from 19.2.8 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617,

…y with 14 updates Bumps the production-dependencies group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.3.0` | `11.3.1` | | [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.1.1` | `13.2.0` | | [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit) | `11.2.0` | `11.2.1` | | [fastify](https://github.com/fastify/fastify) | `5.12.6` | `5.12.7` | | [openid-client](https://github.com/panva/openid-client) | `6.8.7` | `6.8.8` | | [next](https://github.com/vercel/next.js) | `16.4.1` | `16.4.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1119.0` | `3.1153.0` | | [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler) | `4.11.3` | `4.12.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `24.19.2` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.23.0` | `8.23.1` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `8.6.6` | `8.8.1` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.7` | Updates `@fastify/cors` from 11.3.0 to 11.3.1 - [Release notes](https://github.com/fastify/fastify-cors/releases) - [Commits](fastify/fastify-cors@v11.3.0...v11.3.1) Updates `@fastify/helmet` from 13.1.1 to 13.2.0 - [Release notes](https://github.com/fastify/fastify-helmet/releases) - [Commits](fastify/fastify-helmet@v13.1.1...v13.2.0) Updates `@fastify/rate-limit` from 11.2.0 to 11.2.1 - [Release notes](https://github.com/fastify/fastify-rate-limit/releases) - [Commits](fastify/fastify-rate-limit@v11.2.0...v11.2.1) Updates `fastify` from 5.12.6 to 5.12.7 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.6...v5.12.7) Updates `openid-client` from 6.8.7 to 6.8.8 - [Release notes](https://github.com/panva/openid-client/releases) - [Changelog](https://github.com/panva/openid-client/blob/main/CHANGELOG.md) - [Commits](panva/openid-client@v6.8.7...v6.8.8) Updates `next` from 16.4.1 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.4.1...v16.4.2) Updates `react` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@aws-sdk/client-s3` from 3.1119.0 to 3.1153.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1153.0/clients/client-s3) Updates `@smithy/node-http-handler` from 4.11.3 to 4.12.1 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/[email protected]/packages/node-http-handler) Updates `@types/node` from 24.13.3 to 24.19.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `pg` from 8.23.0 to 8.23.1 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/[email protected]/packages/pg) Updates `protobufjs` from 8.6.6 to 8.8.1 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v8.6.6...protobufjs-v8.8.1) Updates `zod` from 4.4.3 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.7) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1152.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@fastify/cors" dependency-version: 11.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@fastify/helmet" dependency-version: 13.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@fastify/rate-limit" dependency-version: 11.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@smithy/node-http-handler" dependency-version: 4.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@types/node" dependency-version: 24.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: fastify dependency-version: 5.12.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: next dependency-version: 16.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: openid-client dependency-version: 6.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: pg dependency-version: 8.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: protobufjs dependency-version: 8.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot requested a review from Kwondh0321 as a code owner October 18, 2026 18:08

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 18, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-7d5c2b47d7 branch 2 times, most recently from 3e41bb4 to 8b84a21 Compare October 22, 2026 18:32

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-7d5c2b47d7 branch from 8b84a21 to 5f0f802 Compare October 22, 2026 19:39

Navigation Menu

Repository navigation

chore(deps): bump the production-dependencies group across 1 directory with 14 updates - #16

chore(deps): bump the production-dependencies group across 1 directory with 14 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-7d5c2b47d7

dependabot Bot commented on behalf of github Oct 18, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v11.3.1

What's Changed

New Contributors

v13.2.0

What's Changed

New Contributors

v13.1.2

What's Changed

New Contributors

v11.2.1

What's Changed

New Contributors

v5.12.7

v6.8.8

Fixes

Refactor

6.8.8 (2026-09-05)

Fixes

Refactor

v16.4.2

What's Changed

19.3.1 (October 14th, 2026)

React Server Components

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.1 (October 14th, 2026)

React Server Components

19.3.0 (September 9, 2026)

New React Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 18, 2026 •

edited

Loading