chore(deps): Bump the npm-dependencies group with 8 updates by dependabot[bot] · Pull Request #38 · toshi0607/matenaiyo

dependabot · 2026-10-08T00:10:47Z

Bumps the npm-dependencies group with 8 updates:

Package	From	To
@next/third-parties	`16.3.6`	`16.3.8`
lucide-react	`1.48.0`	`1.52.0`
next	`16.3.6`	`16.3.8`
react-day-picker	`10.0.1`	`10.0.2`
shadcn	`4.21.0`	`4.21.1`
@biomejs/biome	`2.5.14`	`2.5.15`
@types/node	`26.6.3`	`26.6.4`
vitest	`5.0.2`	`5.0.3`

Updates @next/third-parties from 16.3.6 to 16.3.8

Release notes

Sourced from @next/third-parties's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Server-Side Request Forgery in Image Optimization

Medium:

Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Pending use cache fill can leak Draft Mode content into regular responses and persisted pages

Cache leak across root param values in nested 'use cache' functions

Low:

Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @lukesandberg for helping!

Commits

b0fad0d v16.3.8
4c20699 v16.3.7
See full diff in compare view

Updates lucide-react from 1.48.0 to 1.52.0

Release notes

Sourced from lucide-react's releases.

Version 1.52.0

What's Changed

fix(icons): changed wifi-cog icon by @karsa-mistmere in lucide-icons/lucide#4952

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

fix(site): persist icon customizer by @karsa-mistmere in lucide-icons/lucide#4944

chore(deps): Upgrade to vite 8 by @ericfennis in lucide-icons/lucide#4950

feat(icons): added rugby-ball icon by @dev-mralph in lucide-icons/lucide#3496

chore(deps): bump the react-deps group across 1 directory with 3 updates by @dependabot[bot] in lucide-icons/lucide#4951

fix(react-native): stop forwarding arbitrary rest props to child shape elements by @cipherprofessor in lucide-icons/lucide#4903

test(lucide-solid): add Vite and SolidStart integration fixtures by @ericfennis in lucide-icons/lucide#4884

feat(icons): add door-closed-cog icon by @ajaxjiang96 in lucide-icons/lucide#4905

feat(icons): add text-align-justify-* icons by @HectorZaGa in lucide-icons/lucide#4942

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4939

chore(deps): Upgrade to vitest 5 by @ericfennis in lucide-icons/lucide#4953

feat(icons): added wind-arrow-up icon by @jamesgpearce in lucide-icons/lucide#4501

fix(github/actions): move to daily release flow by @karsa-mistmere in lucide-icons/lucide#4911

feat(@lucide/solid): Support for Solid 2.0 RC by @davedbase in lucide-icons/lucide#4751

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#4954

chore(deps): bump nuxt from 4.4.8 to 4.5.1 by @dependabot[bot] in lucide-icons/lucide#4949

feat(icons): added armenian-dram icon by @Elawphant in lucide-icons/lucide#4456

feat(icons): add kazakh-tenge icon by @hkayrad in lucide-icons/lucide#4925

New Contributors

@dev-mralph made their first contribution in lucide-icons/lucide#3496

@cipherprofessor made their first contribution in lucide-icons/lucide#4903

@HectorZaGa made their first contribution in lucide-icons/lucide#4942

@jamesgpearce made their first contribution in lucide-icons/lucide#4501

@davedbase made their first contribution in lucide-icons/lucide#4751

@Elawphant made their first contribution in lucide-icons/lucide#4456

@hkayrad made their first contribution in lucide-icons/lucide#4925

Full Changelog: lucide-icons/lucide@1.50.0...1.51.0

Version 1.50.0

What's Changed

fix(shared): escape attribute values in buildLucideSvg by @Saadanjum0 in lucide-icons/lucide#4940

fix(github/actions): use canonical metadata instructions for PR suggestions by @karsa-mistmere in lucide-icons/lucide#4910

fix(icons): replaced nut & nut-off with compliant designs by @karsa-mistmere in lucide-icons/lucide#4840

chore(deps-dev): bump @angular/router from 22.1.7 to 22.2.0 by @dependabot[bot] in lucide-icons/lucide#4945

chore(deps): bump next from 16.3.4 to 16.3.6 by @dependabot[bot] in lucide-icons/lucide#4946

chore(deps-dev): bump the svelte-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4918

test(integrations): add Vue integration fixtures for Vite, Nuxt and Vike by @ericfennis in lucide-icons/lucide#4882

feat(svelte): export context subpath by @vugarbbakhishov-hub in lucide-icons/lucide#4927

fix(lucide-preact): add Preact v11 compatibility by @JoviDeCroock in lucide-icons/lucide#4924

feat(icons): added layout-grid-circles icon by @karsa-mistmere in lucide-icons/lucide#4567

... (truncated)

Commits

98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
See full diff in compare view

Updates next from 16.3.6 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Server-Side Request Forgery in Image Optimization

Medium:

Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Pending use cache fill can leak Draft Mode content into regular responses and persisted pages

Cache leak across root param values in nested 'use cache' functions

Low:

Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @lukesandberg for helping!

Commits

b0fad0d v16.3.8
719e4c6 [lts-active] Scope response cache keys to their source route (#218)
e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
4c20699 v16.3.7
2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
See full diff in compare view

Updates react-day-picker from 10.0.1 to 10.0.2

Release notes

Sourced from react-day-picker's releases.

v10.0.2

What's Changed

react-day-picker

fix: preserve focus when controlled month changes replace the focused day. #3010 by @gpbl

fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @amanokh

fix: avoid loading all date-fns locales when importing a locale subpath. #3007 by @huuyafwww

@daypicker/react

fix: preserve focus when controlled month changes replace the focused day. #3010 by @gpbl

fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @amanokh

fix: avoid loading all date-fns locales when importing a locale subpath. #3007 by @huuyafwww

@daypicker/buddhist

fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @amanokh

@daypicker/ethiopic

fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @amanokh

@daypicker/hebrew

fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @amanokh

@daypicker/hijri

fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @amanokh

Changelog

Sourced from react-day-picker's changelog.

10.0.2

Patch Changes

#3010 19033b4 Thanks @gpbl! - fix: preserve focus when controlled month changes replace the focused day.

#3020 bf1947a Thanks @amanokh! - fix: import date-fns functions and DayPicker locales from their subpaths

#3007 e07f143 Thanks @huuyafwww! - fix: avoid loading all date-fns locales when importing a locale subpath.

DayPicker follows Semantic Versioning. See the Releases page on Github for the complete list of changes, diffs and contributors, or the list of versions published on npm.

Commits

1bfd4f0 build: version packages (#3008)
54d489e test: protect class name compatibility (#3021)
bf1947a fix: import date-fns functions and DayPicker locales from their subpaths (#3020)
19033b4 fix: preserve focus after controlled month changes (#3010)
430bdf3 test: cover time zone changes after mount (#3011)
e07f143 fix: import date-fns locales from subpaths (#3007)
See full diff in compare view

Updates shadcn from 4.21.0 to 4.21.1

Release notes

Sourced from shadcn's releases.

[email protected]

Patch Changes

#12087 bf6646b449684e687f28531305eca4e4768c2782 Thanks @shadcn! - Add @shadcn/registry, the registry engine behind the CLI. shadcn now depends on it, and shadcn/registry and shadcn/schema re-export it, so there are no changes for existing users.

#12061 a9c1da49ec4eab488dc99c69ae20a7ffaa4897d4 Thanks @shadcn! - fix shimmer reduced motion handling when used with a variant

#12087 bf6646b449684e687f28531305eca4e4768c2782 Thanks @shadcn! - shadcn docs only rewrites links on the ui.shadcn.com host.

Updated dependencies [bf6646b449684e687f28531305eca4e4768c2782]:

@shadcn/registry@0.1.0

Changelog

Sourced from shadcn's changelog.

4.21.1

Patch Changes

#12087 bf6646b449684e687f28531305eca4e4768c2782 Thanks @shadcn! - Add @shadcn/registry, the registry engine behind the CLI. shadcn now depends on it, and shadcn/registry and shadcn/schema re-export it, so there are no changes for existing users.

#12061 a9c1da49ec4eab488dc99c69ae20a7ffaa4897d4 Thanks @shadcn! - fix shimmer reduced motion handling when used with a variant

#12087 bf6646b449684e687f28531305eca4e4768c2782 Thanks @shadcn! - shadcn docs only rewrites links on the ui.shadcn.com host.

Updated dependencies [bf6646b449684e687f28531305eca4e4768c2782]:

@shadcn/registry@0.1.0

Commits

3502dbc chore(release): version packages (#12063)
bf6646b feat(registry): extract @shadcn/registry from shadcn (#12087)
a9c1da4 fix(shadcn): apply shimmer reduced motion to variants (#12061)
7bc5604 chore(deps): bump next, astro, postcss, undici, postcss-selector-parser, base...
5c7072d fix(registry): correct logo quoting in directory JSON (#11807)
See full diff in compare view

Updates @biomejs/biome from 2.5.14 to 2.5.15

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes
#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
function Component({ items = [] }) {
  return items;
}
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
<script>
  export let name;
</script>
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.15

Patch Changes
#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
function Component({ items = [] }) {
  return items;
}
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
<script>
  export let name;
</script>
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
import { page } from "$app/stores";
#11723 3b429d1 Thanks @m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

0b4c11f ci: release (#11815)
ad5b362 feat: adds noAstroConflictingSetDirectives rule for .astro (#11494)
034366d chore: update codspeed logo in readme (#12019)
717db8c feat(lint): add noMisplacedListElements (#11917)
089bde0 feat(lint/js): add useStrictBooleanExpressions (#11750)
1fdb5c2 feat(lint/js/svelte): add useSvelteKitRuneImports lint rule (#11960)
faa8b37 feat(lint/js/svelte): add noSvelteExportLet (#11956)
b2b4400 chore: update sponsors (#11973)
ff4c4dd feat(lint/js): add noMeaninglessVoidOperator (#11732)
1b9479e feat(lint): add useLogicalProperties rule (#10816)
Additional commits viewable in compare view

Updates @types/node from 26.6.3 to 26.6.4

Commits

See full diff in compare view

Updates vitest from 5.0.2 to 5.0.3

Release notes

Sourced from vitest's releases.

v5.0.3

🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11218 (5dbeb)

Don't print an interceptor warning in browser mode - by @sheremet-va in vitest-dev/vitest#11377 (15cc0)

Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11219 (b2458)

Scope cache key generators to projects - by @ecoyoung in vitest-dev/vitest#11281 and vitest-dev/vitest#11301 (92ba7)

browser:

Delay server listen until tests start running - by @sheremet-va in vitest-dev/vitest#11366 (7d8ed)

Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in vitest-dev/vitest#11361 and vitest-dev/vitest#11362 (1c388)

Keep config of browser-consumed environments - by @kasperpeulen and Claude in vitest-dev/vitest#11378 (aafc0)

Ignore page crash while cancelling - by @sheremet-va in vitest-dev/vitest#11386 (7c367)

toMatchScreenshot uses wrong reference on retried tests - by @macarie in vitest-dev/vitest#11393 (c22ab)

cache:

Revalidate imports of cached modules - by @sheremet-va in vitest-dev/vitest#11381 (38f98)

deps:

Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in vitest-dev/vitest#11403 (f6c9a)

expect:

Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in vitest-dev/vitest#11401 (3e794)

jsdom:

Support Blob on jsdom 30.1 - by @sheremet-va in vitest-dev/vitest#11379 (6c49b)

pool:

Preserve unique pool ids when groupOrder is set - by @mtorp in vitest-dev/vitest#11392 (50312)

ui:

Split-pane handle overlapping iframe - by @macarie in vitest-dev/vitest#11221 (f91db)

vitest:

Remove root temp dir on close - by @abhinav-phi in vitest-dev/vitest#11248 (7c711)

vm:

Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11329 and vitest-dev/vitest#11360 (caf28)

Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in vitest-dev/vitest#11395 (346d3)

View changes on GitHub

Commits

33cadea chore: release v5.0.3 (#11409)
346d389 fix(vm): don't reuse scripts across vite environments (#11395)
f6c9a49 fix(deps): pin why-is-node-running to 3.2.1 to avoid users running into `...
062c75d chore: fix standalone docs build, update exports maps (#11394)
caf2887 fix(vm): do not optimize deps from index.html (fix #11329) (#11360)
50312eb fix(pool): preserve unique pool ids when groupOrder is set (#11392)
7c36748 fix(browser): ignore page crash while cancelling (#11386)
92ba7fc fix: scope cache key generators to projects (fix #11281) (#11301)
38f9885 fix(cache): revalidate imports of cached modules (#11381)
b24585f fix: don't retry when test.fails expectedly failed (#11219)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 8 updates: | Package | From | To | | --- | --- | --- | | [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties) | `16.3.6` | `16.3.8` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.48.0` | `1.52.0` | | [next](https://github.com/vercel/next.js) | `16.3.6` | `16.3.8` | | [react-day-picker](https://github.com/gpbl/react-day-picker/tree/HEAD/packages/react-day-picker) | `10.0.1` | `10.0.2` | | [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.0` | `4.21.1` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.14` | `2.5.15` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.4` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.2` | `5.0.3` | Updates `@next/third-parties` from 16.3.6 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.8/packages/third-parties) Updates `lucide-react` from 1.48.0 to 1.52.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.52.0/packages/lucide-react) Updates `next` from 16.3.6 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.6...v16.3.8) Updates `react-day-picker` from 10.0.1 to 10.0.2 - [Release notes](https://github.com/gpbl/react-day-picker/releases) - [Changelog](https://github.com/gpbl/react-day-picker/blob/main/packages/react-day-picker/CHANGELOG.md) - [Commits](https://github.com/gpbl/react-day-picker/commits/v10.0.2/packages/react-day-picker) Updates `shadcn` from 4.21.0 to 4.21.1 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/[email protected]/packages/shadcn) Updates `@biomejs/biome` from 2.5.14 to 2.5.15 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome) Updates `@types/node` from 26.6.3 to 26.6.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `vitest` from 5.0.2 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) --- updated-dependencies: - dependency-name: "@next/third-parties" dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: lucide-react dependency-version: 1.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: react-day-picker dependency-version: 10.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: shadcn dependency-version: 4.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@biomejs/biome" dependency-version: 2.5.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: vitest dependency-version: 5.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

vercel · 2026-10-08T00:10:49Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
matenaiyo	Ready	Preview	Oct 8, 2026 12:11am UTC

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026

vercel Bot deployed to Preview October 8, 2026 00:11

View deployment

toshi0607 approved these changes Oct 10, 2026

View reviewed changes

toshi0607 merged commit 1b86d3e into main Oct 10, 2026
3 checks passed

toshi0607 deleted the dependabot/npm_and_yarn/npm-dependencies-01f5cc3780 branch October 10, 2026 00:23

Navigation Menu

Repository navigation

chore(deps): Bump the npm-dependencies group with 8 updates - #38

chore(deps): Bump the npm-dependencies group with 8 updates#38
toshi0607 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-01f5cc3780

dependabot Bot commented on behalf of github Oct 8, 2026

Uh oh!

vercel Bot commented Oct 8, 2026 •

edited

Loading

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026

v16.3.8

v16.3.7

Core Changes

Credits

Version 1.52.0

What's Changed

Version 1.51.0

What's Changed

New Contributors

Version 1.50.0

What's Changed

v16.3.8

v16.3.7

Core Changes

Credits

v10.0.2

What's Changed

react-day-picker

@​daypicker/react

@​daypicker/buddhist

@​daypicker/ethiopic

@​daypicker/hebrew

@​daypicker/hijri

10.0.2

Patch Changes

[email protected]

Patch Changes

4.21.1

Patch Changes

Biome CLI v2.5.15

2.5.15

Patch Changes

2.5.15

Patch Changes

v5.0.3

🐞 Bug Fixes

View changes on GitHub

Uh oh!

vercel Bot commented Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@daypicker/react`

`@daypicker/buddhist`

`@daypicker/ethiopic`

`@daypicker/hebrew`

`@daypicker/hijri`

vercel Bot commented Oct 8, 2026 •

edited

Loading