Repository navigation
chore(deps): bump the production-dependencies group across 1 directory with 12 updates - #755
Closed
dependabot[bot] wants to merge 5 commits into
Closed
dependabot[bot] wants to merge 5 commits into
dependabot[bot] wants to merge 5 commits into
Conversation
…y with 12 updates Bumps the production-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.48.0` | `10.49.0` | | [discord.js](https://github.com/discordjs/discord.js/tree/HEAD/packages/discord.js) | `14.26.2` | `14.26.3` | | [dotenv](https://github.com/motdotla/dotenv) | `17.4.1` | `17.4.2` | | [lru-cache](https://github.com/isaacs/node-lru-cache) | `10.4.3` | `11.3.5` | | [youtube-dl-exec](https://github.com/microlinkhq/youtube-dl-exec) | `3.1.4` | `3.1.5` | | [youtubei.js](https://github.com/LuanRT/YouTube.js) | `16.0.1` | `17.0.1` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.97.0` | `5.99.2` | | [axios](https://github.com/axios/axios) | `1.15.0` | `1.15.1` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.72.1` | `7.73.1` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.14.0` | `7.14.1` | | [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.0` | | [@infisical/sdk](https://github.com/infisical/infisical-node-sdk) | `5.0.0` | `5.0.1` | Updates `@sentry/node` from 10.48.0 to 10.49.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.48.0...10.49.0) Updates `discord.js` from 14.26.2 to 14.26.3 - [Release notes](https://github.com/discordjs/discord.js/releases) - [Changelog](https://github.com/discordjs/discord.js/blob/14.26.3/packages/discord.js/CHANGELOG.md) - [Commits](https://github.com/discordjs/discord.js/commits/14.26.3/packages/discord.js) Updates `dotenv` from 17.4.1 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.4.1...v17.4.2) Updates `lru-cache` from 10.4.3 to 11.3.5 - [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md) - [Commits](isaacs/node-lru-cache@v10.4.3...v11.3.5) Updates `youtube-dl-exec` from 3.1.4 to 3.1.5 - [Release notes](https://github.com/microlinkhq/youtube-dl-exec/releases) - [Changelog](https://github.com/microlinkhq/youtube-dl-exec/blob/master/CHANGELOG.md) - [Commits](microlinkhq/youtube-dl-exec@v3.1.4...v3.1.5) Updates `youtubei.js` from 16.0.1 to 17.0.1 - [Release notes](https://github.com/LuanRT/YouTube.js/releases) - [Changelog](https://github.com/LuanRT/YouTube.js/blob/main/CHANGELOG.md) - [Commits](LuanRT/YouTube.js@v16.0.1...v17.0.1) Updates `@tanstack/react-query` from 5.97.0 to 5.99.2 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.99.2/packages/react-query) Updates `axios` from 1.15.0 to 1.15.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.0...v1.15.1) Updates `react-hook-form` from 7.72.1 to 7.73.1 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.72.1...v7.73.1) Updates `react-router-dom` from 7.14.0 to 7.14.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.14.1/packages/react-router-dom) Updates `uuid` from 13.0.0 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v13.0.0...v14.0.0) Updates `@infisical/sdk` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/infisical/infisical-node-sdk/releases) - [Commits](Infisical/node-sdk-v2@5.0.0...5.0.1) --- updated-dependencies: - dependency-name: "@sentry/node" dependency-version: 10.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: discord.js dependency-version: 14.26.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lru-cache dependency-version: 11.3.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: youtube-dl-exec dependency-version: 3.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: youtubei.js dependency-version: 17.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@tanstack/react-query" dependency-version: 5.99.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: axios dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-hook-form dependency-version: 7.73.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-router-dom dependency-version: 7.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@infisical/sdk" dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
LucasSantana-Dev
enabled auto-merge (squash)
April 21, 2026 02:07
|
Size Change: +201 B (+0.06%) Total Size: 334 kB 📦 View Changed
ℹ️ View Unchanged
|
|
Owner
|
@dependabot rebase |
Contributor
Author
|
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry! If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request |
3 tasks
Owner
|
Superseded by #766 (merged), which resolves the 6 high-severity tar CVEs by deleting the orphaned per-package pnpm-lock.yaml files that were the scan targets. The 12-package bundled production-deps bump this PR contained is no longer urgent; Dependabot will regenerate a clean grouped bump on its next run now that main has advanced. |
auto-merge was automatically disabled
April 22, 2026 05:38
Pull request was closed
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/production-dependencies-5d351dbe95
branch
April 22, 2026 05:38
3 tasks done
LucasSantana-Dev
added a commit
that referenced
this pull request
Apr 22, 2026
…ce (#775) * docs(backlog): mark completed 2026-04-21 backlog items with PR evidence 10 of the 16 tasks in docs/specs/2026-04-21-backlog-map/tasks.md already shipped — the unchecked state was sending future agents down dead ends. Splits the list into Open / Completed, cites the landing PR for each done item, and promotes the truly-remaining work to the top. Completed: - A-R2 token aliases (#763) - A-R3 SectionHeader eyebrowIcon + statusBand (#765) - PR #729 webhook coverage (ef06904) - tar Dependabot alerts (#766, replacing #755 which was closed) - PR queue rebase sweep — 14 PRs landed 2026-04-22 - Shared Top.gg constants (already in packages/shared/src/constants/topgg.ts) - validateBody + unskipped tests (#769) - Frontend token/font decision (#763) - Sonar coverage on #737 and #740 (both merged) Still open: follow-redirects/hono lock refresh, release/tag drift (production-visible), autoplay diversity dedup, queueManipulation refactor, /integrations page collapse (B-R4), BRANDING_GUIDE update (D-R2), per-page ports (13 pages). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * docs(backlog): normalize version prefix (v2.6.148) per CodeRabbit Use `v` prefix consistently alongside `v2.6.132`. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
LucasSantana-Dev
added a commit
that referenced
this pull request
May 13, 2026
…ce (#775) * docs(backlog): mark completed 2026-04-21 backlog items with PR evidence 10 of the 16 tasks in docs/specs/2026-04-21-backlog-map/tasks.md already shipped — the unchecked state was sending future agents down dead ends. Splits the list into Open / Completed, cites the landing PR for each done item, and promotes the truly-remaining work to the top. Completed: - A-R2 token aliases (#763) - A-R3 SectionHeader eyebrowIcon + statusBand (#765) - PR #729 webhook coverage (a8edbe8) - tar Dependabot alerts (#766, replacing #755 which was closed) - PR queue rebase sweep — 14 PRs landed 2026-04-22 - Shared Top.gg constants (already in packages/shared/src/constants/topgg.ts) - validateBody + unskipped tests (#769) - Frontend token/font decision (#763) - Sonar coverage on #737 and #740 (both merged) Still open: follow-redirects/hono lock refresh, release/tag drift (production-visible), autoplay diversity dedup, queueManipulation refactor, /integrations page collapse (B-R4), BRANDING_GUIDE update (D-R2), per-page ports (13 pages). * docs(backlog): normalize version prefix (v2.6.148) per CodeRabbit Use `v` prefix consistently alongside `v2.6.132`. --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-dependencies group with 12 updates in the / directory:
10.48.010.49.014.26.214.26.317.4.117.4.210.4.311.3.53.1.43.1.516.0.117.0.15.97.05.99.21.15.01.15.17.72.17.73.17.14.07.14.113.0.014.0.05.0.05.0.1Updates
@sentry/nodefrom 10.48.0 to 10.49.0Release notes
Sourced from
@sentry/node's releases.... (truncated)
Changelog
Sourced from
@sentry/node's changelog.... (truncated)
Commits
745af79release: 10.49.046dcef1Merge pull request #20348 from getsentry/prepare-release/10.49.0bf4e188meta(changelog): Update changelog for 10.49.05f72df5feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation...50438f9feat(browser): Emit web vitals as streamed spans (#19827)3332fecfix(opentelemetry): Use WeakRef for context stored on scope to prevent memory...684a41fref(opentelemetry): Replace@opentelemetry/resourceswith inline `getSentry...8b2a9dcci: Remove Docker container for Verdaccio package publishing (#20329)0007c7bci: Extract test names for flaky test issues (#20298)9b9d65cchore(ci): Bump actions/cache to v5 and actions/download-artifact to v7 (#20249)Updates
discord.jsfrom 14.26.2 to 14.26.3Release notes
Sourced from discord.js's releases.
Changelog
Sourced from discord.js's changelog.
Commits
666fce0chore(discord.js): release discord.js@14.26.3dced197fix(TeamMember): allow a defaultpermissionsUpdates
dotenvfrom 17.4.1 to 17.4.2Changelog
Sourced from dotenv's changelog.
Commits
f116f7017.4.23a81612fix visual order of faq13f55a8Merge branch 'skill'4bbbf73reorganize faqc3da64bMerge pull request #1009 from motdotla/skill6f743b1update sourcefc2c624update skill972315bTighten up skill2795fcereorganize faqd5495d4adjust skillUpdates
lru-cachefrom 10.4.3 to 11.3.5Changelog
Sourced from lru-cache's changelog.
... (truncated)
Commits
ad1060711.3.5697314eminify browser export1723a9511.3.443b7583add browser esm export condition to not even try to load diagnostics channele9ae122comment typo6de4a00correct comment (it's not about TLA)21db42b11.3.328e4dacRemove TLA, feature is DOA :(36204ccremove unnecessary unused internal exportb08aa7atest to ensure TLA is not in use in nodeInstall script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
youtube-dl-execfrom 3.1.4 to 3.1.5Release notes
Sourced from youtube-dl-exec's releases.
Changelog
Sourced from youtube-dl-exec's changelog.
Commits
f523661chore(release): 3.1.562573e6build(deps): bump pnpm/action-setup from 5 to 6 (#274)Updates
youtubei.jsfrom 16.0.1 to 17.0.1Release notes
Sourced from youtubei.js's releases.
Changelog
Sourced from youtubei.js's changelog.
Commits
5cc278fchore(main): release 17.0.1 (#1155)3cae95cchore(release): release 17.0.18bd1534chore(release-please): update permissions and node version for release workflow790a54cchore(main): release 17.0.0 (#1093)6630031chore: update deps7e10ac9fix(history): Add support forLockupViewcontent (#1075)5c7b1bafix(FlexibleActionsView): UpdateActionRowactions type (#1129)8130f80fix(parser): Resolve some old parser issues (#1154)b8d15cbchore(parser): Add 'GenAiFeedbackFormView' to ignored listda1fac2feat(parser): AddVideoSummaryContentViewandVideoSummaryParagraphView(...Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for youtubei.js since your current version.
Updates
@tanstack/react-queryfrom 5.97.0 to 5.99.2Release notes
Sourced from
@tanstack/react-query's releases.... (truncated)
Changelog
Sourced from
@tanstack/react-query's changelog.Commits
a3ec7b3ci: Version Packages (#10520)69d2757ci: Version Packages (#10514)7ffa1edtest({react,preact,solid}-query/useQueries): fix test description from 'useQu...bc83d37test({react,preact}-query/useMutation): unify destructuring pattern in comple...aad1bd5test({react,preact}-query/useMutation): add parallel 'mutateAsync' tests with...d7643b5test({react,preact}-query/useMutation): add optimistic update tests with succ...cd89d6ftest({react,preact}-query/useMutation): add conditional handling and retry te...6e15fe6test({react,preact}-query/useMutation): add chained 'mutateAsync' tests for s...792d3a5test({react,preact}-query/useMutation): add callback tests when 'useMutation'...1b661b3test({react,preact}-query/useMutation): add single callback tests for 'mutate...Updates
axiosfrom 1.15.0 to 1.15.1Release notes
Sourced from axios's releases.
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
ac42446chore(release): prepare release 1.15.1 (#10767)908f220docs: update threatmodel (#10765)f93f815docs: added docs around potential decompressions bomb (#10763)1728aa1fix: short-circuits on any truthy non-boolean in withXSRFToken (#10762)42eb721fix: replace in with has own prop util (#10761)7587327fix: strip crlf correctly (#10758)f0b9867chore: added additional testing for this issue (#10760)e033f24fix: incomplete fix for cve (#10755)e8904affix: stream response bypassed max content length (#10754)1c7f6d7fix: enforce max body length when max redirects is 0 (#10753)Updates
react-hook-formfrom 7.72.1 to 7.73.1Release notes
Sourced from react-hook-form's releases.