Skip to content

chore(deps): bump the npm-production group with 7 updates - #1268

Merged
cursor[bot] merged 11 commits into
mainfrom
dependabot/npm_and_yarn/npm-production-fbb78b0642
Jul 28, 2026
Merged

chore(deps): bump the npm-production group with 7 updates#1268
cursor[bot] merged 11 commits into
mainfrom
dependabot/npm_and_yarn/npm-production-fbb78b0642

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-production group with 7 updates:

PackageFromTo
@next/env16.2.1116.2.12
@supabase/supabase-js2.110.72.110.8
lucide-react1.25.01.27.0
next16.2.1116.2.12
openai6.48.06.49.0
react19.2.719.2.8
react-dom19.2.719.2.8

Updates @next/env from 16.2.11 to 16.2.12

Release notes

Sourced from @​next/env's releases.

v16.2.12

What's Changed

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

Commits

Updates @supabase/supabase-js from 2.110.7 to 2.110.8

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.110.8

2.110.8 (2026-07-21)

🩹 Fixes

  • auth: downgrade aborted/transient fetch failures from console.error to warn (#2544)
  • functions: clean up cross-signal abort listener on invoke() return (#2487)
  • functions: match response Content-Type case-insensitively (#2515)
  • storage: url-encode object key in CDN purge methods (#2545)
  • supabase: skip Node warning in Deno (#2541)

❤️ Thank You

v2.110.8-canary.2

2.110.8-canary.2 (2026-07-21)

🩹 Fixes

  • storage: url-encode object key in CDN purge methods (#2545)

❤️ Thank You

v2.110.8-canary.1

2.110.8-canary.1 (2026-07-21)

🩹 Fixes

  • auth: downgrade aborted/transient fetch failures from console.error to warn (#2544)

❤️ Thank You

v2.110.8-canary.0

2.110.8-canary.0 (2026-07-21)

🩹 Fixes

  • functions: clean up cross-signal abort listener on invoke() return (#2487)
  • functions: match response Content-Type case-insensitively (#2515)
  • supabase: skip Node warning in Deno (#2541)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.110.8 (2026-07-21)

🩹 Fixes

  • supabase: skip Node warning in Deno (#2541)

❤️ Thank You

Commits

Updates lucide-react from 1.25.0 to 1.27.0

Release notes

Sourced from lucide-react's releases.

Version 1.27.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.26.0...1.27.0

Version 1.26.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Commits

Updates next from 16.2.11 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

Commits

Updates openai from 6.48.0 to 6.49.0

Release notes

Sourced from openai's releases.

v6.49.0

6.49.0 (2026-07-23)

Full Changelog: v6.48.0...v6.49.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (c54a7f3)
  • api: add support for spend_limit admin apis (e8238b0)
  • helpers: add standard schema support (#1997) (4ced1a8)
  • helpers: add zod realtime function helper (#1996) (ee59911)
  • stlc: configurable CI runner and private-production-repo support in workflow templates (967a66b)
  • zod: support schema definitions (#1993) (eb04567)

Bug Fixes

  • address code scanning findings (#2007) (2706888)
  • address remaining Dependabot alerts (#2005) (6ab3428)
  • azure: normalize endpoint trailing slashes (#1995) (39a15b4)
  • ci: restore explicit TypeScript SDK runner selection (fe79401)
  • runTools: sanitize replayed messages (#1990) (a60cc25)
  • stream: handle audio completion markers (#1991) (bd86817)
  • zod: escape schema definition refs before strict validation (bff2b10)
  • zod: infer parsed tool callback arguments (#1992) (83cdb79)
  • zod: preserve schema types while escaping refs (cb7e195)

Chores

Changelog

Sourced from openai's changelog.

6.49.0 (2026-07-23)

Full Changelog: v6.48.0...v6.49.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (c54a7f3)
  • api: add support for spend_limit admin apis (e8238b0)
  • helpers: add standard schema support (#1997) (4ced1a8)
  • helpers: add zod realtime function helper (#1996) (ee59911)
  • stlc: configurable CI runner and private-production-repo support in workflow templates (967a66b)
  • zod: support schema definitions (#1993) (eb04567)

Bug Fixes

  • address code scanning findings (#2007) (2706888)
  • address remaining Dependabot alerts (#2005) (6ab3428)
  • azure: normalize endpoint trailing slashes (#1995) (39a15b4)
  • ci: restore explicit TypeScript SDK runner selection (fe79401)
  • runTools: sanitize replayed messages (#1990) (a60cc25)
  • stream: handle audio completion markers (#1991) (bd86817)
  • zod: escape schema definition refs before strict validation (bff2b10)
  • zod: infer parsed tool callback arguments (#1992) (83cdb79)
  • zod: preserve schema types while escaping refs (cb7e195)

Chores

Commits

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-production group with 7 updates:
| Package | From | To |
| --- | --- | --- |
| [@next/env](https://github.com/vercel/next.js/tree/HEAD/packages/next-env) | `16.2.11` | `16.2.12` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.110.7` | `2.110.8` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.27.0` |
| [next](https://github.com/vercel/next.js) | `16.2.11` | `16.2.12` |
| [openai](https://github.com/openai/openai-node) | `6.48.0` | `6.49.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
Updates `@next/env` from 16.2.11 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.2.12/packages/next-env)
Updates `@supabase/supabase-js` from 2.110.7 to 2.110.8
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.110.8/packages/core/supabase-js)
Updates `lucide-react` from 1.25.0 to 1.27.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react)
Updates `next` from 16.2.11 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.2.12)
Updates `openai` from 6.48.0 to 6.49.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.48.0...v6.49.0)
Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)
Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)
---
updated-dependencies:
- dependency-name: "@next/env"
dependency-version: 16.2.12
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
- dependency-name: "@supabase/supabase-js"
dependency-version: 2.110.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
- dependency-name: lucide-react
dependency-version: 1.27.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-production
- dependency-name: next
dependency-version: 16.2.12
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
- dependency-name: openai
dependency-version: 6.49.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-production
- dependency-name: react
dependency-version: 19.2.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
- dependency-name: react-dom
dependency-version: 19.2.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@dependabot
dependabotBot requested a review from BigSimmo as a code ownerJuly 27, 2026 01:09
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@github-actions

Copy link
Copy Markdown
Contributor

CI triage

CI failed on this PR. Automated classification of the 2 failed job(s):

  • Safety and config checksneeds investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.
  • PR requiredneeds investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.

Compared with main CI run #5905 (success).

Classification is evidence routing, not permission to ignore a failure. Exact quarantined Playwright identities remain governed by the flake ledger.

@coderabbitai

coderabbitaiBot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Free

Run ID: 7a1f0dd4-5251-41f5-9da7-34f02fef68ad

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

cursoragentand others added 2 commits July 28, 2026 16:06
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
@cursor
cursorBot enabled auto-merge (squash) July 28, 2026 16:11
cursoragentand others added 4 commits July 28, 2026 16:17
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
@cursor
cursorBot merged commit 1753c0b into mainJul 28, 2026
20 checks passed
@cursor
cursorBot deleted the dependabot/npm_and_yarn/npm-production-fbb78b0642 branch July 28, 2026 16:57
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@BigSimmo@cursoragent