Skip to content

chore(deps): bump the npm-production group across 1 directory with 8 updates - #2296

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-production-9d7c78ff3c
Open

chore(deps): bump the npm-production group across 1 directory with 8 updates#2296
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-production-9d7c78ff3c

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-production group with 7 updates in the / directory:

PackageFromTo
@next/env16.3.016.3.1
@sentry/nextjs10.69.010.70.0
@supabase/supabase-js2.112.22.112.3
lucide-react1.29.01.33.0
mammoth1.12.01.12.1
next16.3.016.3.1
openai7.4.07.5.0

Updates @next/env from 16.3.0 to 16.3.1

Release notes

Sourced from @​next/env's releases.

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

  • docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645
  • Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636
  • Turbopack: rename to use turbopack: no side effects: #94427
  • refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360
  • [PPF] unstable_navigation(): #96908
  • [PPF] Scaffold unstable_navigation(): #97236
  • docs: Explicit cache output description: #97548
  • Improve Cache Components sync IO migration guidance: #97572
  • [test] Use a non-native stub for the server externals list test: #97614
  • Avoid GitHub API rate limits for create-next-app examples: #97612
  • [test] Cover the prerender worker-thread backend with an addon we control: #97543
  • [test] Convert the prerender-native-module suite to local fixture packages: #97542
  • [test] Replace the turbopack-reportssqlite3 dependency with a local addon fixture: #97541
  • [test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540
  • [ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590
  • Remove HmrTarget: #97253
  • Keep HMR instructions typed until serialization: #96569
  • Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits

Updates @sentry/nextjs from 10.69.0 to 10.70.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.70.0

  • feat(v10/core): Support stable MCP SDK v2 (#22986)
  • feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)
  • feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
  • fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)
  • fix(v10/cloudflare): Get original waituntil in workflows (#23192)
  • fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)
  • fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)
  • fix(v10/cloudflare): Set conversation id independent of session name (#23193)
  • fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)
  • fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)
  • fix(v10/core,browser): Handle errors from other realms (#23201)
  • fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)
  • fix(v10/hono): Include originalException in captured exception hint (#22990)
  • fix(v10/nextjs): meriyah issue for standalone build (#23055)
  • fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)
  • fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)
  • fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#22966)
  • fix(v10/react): Remove routes from shared set on <Routes> unmount (#22948)
  • fix(v10/sveltekit): Export metrics from worker entry point (#23027)
  • test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#23009)
  • test(v10/e2e): Fix failing sveltekit-3 test (#23016)
  • test(v10/e2e): Fix type error in nextjs ai-error tests (#23011)
  • test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#23048)

Work in this release was contributed by @​davidmurdoch, @​Jxxunnn, and @​kamilogorek. Thank you for your contributions!

Bundle size 📦

PathSize
@​sentry/browser27.09 KB
@​sentry/browser - with treeshaking flags25.58 KB
@​sentry/browser (incl. Tracing)45.5 KB
@​sentry/browser (incl. Tracing + Span Streaming)47.24 KB
@​sentry/browser (incl. Tracing, Profiling)50.13 KB
@​sentry/browser (incl. Tracing, Replay)83.82 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags73.7 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)88.42 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)100.78 KB
@​sentry/browser (incl. Feedback)43.87 KB
@​sentry/browser (incl. sendFeedback)31.78 KB
@​sentry/browser (incl. FeedbackAsync)36.79 KB
@​sentry/browser (incl. Metrics)28.16 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.70.0

  • feat(v10/core): Support stable MCP SDK v2 (#22986)
  • feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)
  • feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
  • fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)
  • fix(v10/cloudflare): Get original waituntil in workflows (#23192)
  • fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)
  • fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)
  • fix(v10/cloudflare): Set conversation id independent of session name (#23193)
  • fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)
  • fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)
  • fix(v10/core,browser): Handle errors from other realms (#23201)
  • fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)
  • fix(v10/hono): Include originalException in captured exception hint (#22990)
  • fix(v10/nextjs): meriyah issue for standalone build (#23055)
  • fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)
  • fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)
  • fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#22966)
  • fix(v10/react): Remove routes from shared set on <Routes> unmount (#22948)
  • fix(v10/sveltekit): Export metrics from worker entry point (#23027)
  • test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#23009)
  • test(v10/e2e): Fix failing sveltekit-3 test (#23016)
  • test(v10/e2e): Fix type error in nextjs ai-error tests (#23011)
  • test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#23048)

Work in this release was contributed by @​davidmurdoch, @​Jxxunnn, and @​kamilogorek. Thank you for your contributions!

Commits
  • 0356ffd release: 10.70.0
  • c2ac1be meta(changelog): Update changelog for 10.70.0 (#23217)
  • 9c2f31d fix(v10/core,browser): Handle errors from other realms (#23201)
  • 8ad6cd1 fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)
  • 4b5e80a fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy ...
  • 91af62c fix(v10/cloudflare): Set conversation id independent of session name (#23193)
  • 2096839 fix(v10/cloudflare): Get original waituntil in workflows (#23192)
  • 0062819 fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23...
  • 390b05a feat(v10/core): Support stable MCP SDK v2 (#22986)
  • 3b56ecb feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
  • Additional commits viewable in compare view

Updates @sentry/node from 10.69.0 to 10.70.0

Release notes

Sourced from @​sentry/node's releases.

10.70.0

  • feat(v10/core): Support stable MCP SDK v2 (#22986)
  • feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)
  • feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
  • fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)
  • fix(v10/cloudflare): Get original waituntil in workflows (#23192)
  • fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)
  • fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)
  • fix(v10/cloudflare): Set conversation id independent of session name (#23193)
  • fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)
  • fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)
  • fix(v10/core,browser): Handle errors from other realms (#23201)
  • fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)
  • fix(v10/hono): Include originalException in captured exception hint (#22990)
  • fix(v10/nextjs): meriyah issue for standalone build (#23055)
  • fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)
  • fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)
  • fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#22966)
  • fix(v10/react): Remove routes from shared set on <Routes> unmount (#22948)
  • fix(v10/sveltekit): Export metrics from worker entry point (#23027)
  • test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#23009)
  • test(v10/e2e): Fix failing sveltekit-3 test (#23016)
  • test(v10/e2e): Fix type error in nextjs ai-error tests (#23011)
  • test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#23048)

Work in this release was contributed by @​davidmurdoch, @​Jxxunnn, and @​kamilogorek. Thank you for your contributions!

Bundle size 📦

PathSize
@​sentry/browser27.09 KB
@​sentry/browser - with treeshaking flags25.58 KB
@​sentry/browser (incl. Tracing)45.5 KB
@​sentry/browser (incl. Tracing + Span Streaming)47.24 KB
@​sentry/browser (incl. Tracing, Profiling)50.13 KB
@​sentry/browser (incl. Tracing, Replay)83.82 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags73.7 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)88.42 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)100.78 KB
@​sentry/browser (incl. Feedback)43.87 KB
@​sentry/browser (incl. sendFeedback)31.78 KB
@​sentry/browser (incl. FeedbackAsync)36.79 KB
@​sentry/browser (incl. Metrics)28.16 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.70.0

  • feat(v10/core): Support stable MCP SDK v2 (#22986)
  • feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)
  • feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
  • fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)
  • fix(v10/cloudflare): Get original waituntil in workflows (#23192)
  • fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)
  • fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)
  • fix(v10/cloudflare): Set conversation id independent of session name (#23193)
  • fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)
  • fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)
  • fix(v10/core,browser): Handle errors from other realms (#23201)
  • fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)
  • fix(v10/hono): Include originalException in captured exception hint (#22990)
  • fix(v10/nextjs): meriyah issue for standalone build (#23055)
  • fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)
  • fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)
  • fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#22966)
  • fix(v10/react): Remove routes from shared set on <Routes> unmount (#22948)
  • fix(v10/sveltekit): Export metrics from worker entry point (#23027)
  • test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#23009)
  • test(v10/e2e): Fix failing sveltekit-3 test (#23016)
  • test(v10/e2e): Fix type error in nextjs ai-error tests (#23011)
  • test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#23048)

Work in this release was contributed by @​davidmurdoch, @​Jxxunnn, and @​kamilogorek. Thank you for your contributions!

Commits
  • 0356ffd release: 10.70.0
  • c2ac1be meta(changelog): Update changelog for 10.70.0 (#23217)
  • 9c2f31d fix(v10/core,browser): Handle errors from other realms (#23201)
  • 8ad6cd1 fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)
  • 4b5e80a fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy ...
  • 91af62c fix(v10/cloudflare): Set conversation id independent of session name (#23193)
  • 2096839 fix(v10/cloudflare): Get original waituntil in workflows (#23192)
  • 0062819 fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23...
  • 390b05a feat(v10/core): Support stable MCP SDK v2 (#22986)
  • 3b56ecb feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.112.2 to 2.112.3

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.3

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.3-canary.0

2.112.3-canary.0 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: improve trace propagation sampling and diagnostics (#2604)
  • supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

Commits
  • e44447c fix(supabase): improve trace propagation sampling and diagnostics (#2604)
  • 9f0358c fix(supabase): add trace context headers to canonical CORS allow-list (#2603)
  • 84beab1 chore(release): version 2.112.2 changelogs (#2599)
  • See full diff in compare view

Updates lucide-react from 1.29.0 to 1.33.0

Release notes

Sourced from lucide-react's releases.

Version 1.33.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.32.0...1.33.0

Version 1.32.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Version 1.31.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.30.0...1.31.0

Version 1.30.0

What's Changed

... (truncated)

Commits
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates mammoth from 1.12.0 to 1.12.1

Changelog

Sourced from mammoth's changelog.

1.12.1

  • Fix: on Windows, when an image's content type includes a backslash in the subpart, files may be written outside of the directory set by --output-dir.

  • Detect and ignore numbering levels that use numStyleLink to refer to themselves.

Commits
  • e3b9cec Bump version to 1.12.1
  • c69ea62 Ignore numbering levels that use numStyleLink to refer to themselves
  • fbf5e22 Check image content type for backslashes
  • 1a495a9 Add note on performance
  • ee59684 Remove donations section
  • See full diff in compare view

Updates next from 16.3.0 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

  • docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645
  • Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636
  • Turbopack: rename to use turbopack: no side effects: #94427
  • refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360
  • [PPF] unstable_navigation(): #96908
  • [PPF] Scaffold unstable_navigation(): #97236
  • docs: Explicit cache output description: #97548
  • Improve Cache Components sync IO migration guidance: #97572
  • [test] Use a non-native stub for the server externals list test: #97614
  • Avoid GitHub API rate limits for create-next-app examples: #97612
  • [test] Cover the prerender worker-thread backend with an addon we control: #97543
  • [test] Convert the prerender-native-module suite to local fixture packages: #97542
  • [test] Replace the turbopack-reportssqlite3 dependency with a local addon fixture: #97541
  • [test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540
  • [ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590
  • Remove HmrTarget: #97253
  • Keep HMR instructions typed until serialization: #96569
  • Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits
  • 3d32eb8 v16.3.1
  • 2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
  • 228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
  • 16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
  • 75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
  • f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
  • 43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
  • 9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
  • 323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
  • 6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
  • Additional commits viewable in compare view

Updates openai from 7.4.0 to 7.5.0

Release notes

Sourced from openai's releases.

v7.5.0

7.5.0 (2026-08-17)

Features

  • add Bedrock Runtime endpoint support (SDK-290) (#2348) (4a199af)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (9a38e63)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (#2278) (9a38e63)
  • api: Add ServiceTier and ImageDetail types (#2364) (602d481)
  • api: add WebSocket stream IDs (#2314) (156a8db)
  • api: add workload identity access token issued event (#2307) (322a5b1)
  • api: deprecate Sora video APIs (#2313) (4424b40)
  • api: Ultrafast tier, structured MCP and websocket errors, separate websocket events (#2332) (a3deafb)

Bug Fixes

  • api: clarify audio upload metadata requirements (#2279) (34ecf3f)
  • audio: prevent microphone leaks and playback pipe deadlocks (#2339) (1c692fe)
  • audio: reject ffplay spawn errors (#2012) (6d42d4d)
  • auth: reject redirects during workload identity token exchange (#2321) (240385e)
  • auth: reject unsafe workload-identity token expirations (#2345) (1f0349d)
  • avoid TypeError in toFile for Responses without a URL (#2311) (3313f54)
  • await webhook verification in README examples (#2302) (0fe7ad0)
  • azure: honor explicit browser denial for Entra token providers (#2328) (9d47510)
  • azure: preserve model-to-deployment mapping for images.edit (#1918) (6c207c6)
  • azure: prevent API-key disclosure across HTTP redirects (#2320) (

…updates
Bumps the npm-production group with 7 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@next/env](https://github.com/vercel/next.js/tree/HEAD/packages/next-env) | `16.3.0` | `16.3.1` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.69.0` | `10.70.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.2` | `2.112.3` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.29.0` | `1.33.0` |
| [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.0` | `1.12.1` |
| [next](https://github.com/vercel/next.js) | `16.3.0` | `16.3.1` |
| [openai](https://github.com/openai/openai-node) | `7.4.0` | `7.5.0` |
Updates `@next/env` from 16.3.0 to 16.3.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.1/packages/next-env)
Updates `@sentry/nextjs` from 10.69.0 to 10.70.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.69.0...10.70.0)
Updates `@sentry/node` from 10.69.0 to 10.70.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.69.0...10.70.0)
Updates `@supabase/supabase-js` from 2.112.2 to 2.112.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.3/packages/core/supabase-js)
Updates `lucide-react` from 1.29.0 to 1.33.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react)
Updates `mammoth` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.0...1.12.1)
Updates `next` from 16.3.0 to 16.3.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.0...v16.3.1)
Updates `openai` from 7.4.0 to 7.5.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.4.0...v7.5.0)
---
updated-dependencies:
- dependency-name: "@next/env"
dependency-version: 16.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
- dependency-name: "@sentry/nextjs"
dependency-version: 10.70.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-production
- dependency-name: "@sentry/node"
dependency-version: 10.70.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-production
- dependency-name: "@supabase/supabase-js"
dependency-version: 2.112.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
- dependency-name: lucide-react
dependency-version: 1.33.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-production
- dependency-name: mammoth
dependency-version: 1.12.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
- dependency-name: next
dependency-version: 16.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-production
- dependency-name: openai
dependency-version: 7.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added the dependencies Pull requests that update a dependency file label Aug 22, 2026
@dependabot
dependabotBot requested a review from BigSimmo as a code ownerAugust 22, 2026 15:31
@dependabotdependabotBot added javascript Pull requests that update javascript code dependencies Pull requests that update a dependency file labels Aug 22, 2026

@cursorcursorBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left a non-blocking comment; not approving. Cursor Bugbot was not present on this head, and this production dependency bump (Next.js, OpenAI, Supabase) needs human review. No additional reviewers assigned.

Open in WebView Automation

Sent by Cursor Approval Agent: Pull Request Router and Approver

BigSimmo pushed a commit that referenced this pull request Aug 24, 2026
…, #2326
Immutable review records for the four-PR dependency sweep: CI fix on
#2325, clean main-syncs on #2296/#2297, and diagnosis-only on #2326
(Node 26 Docker bump incompatible with the engine-strict Node 24 pin).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
BigSimmo added a commit that referenced this pull request Aug 24, 2026
* Add branch review record for PR #2342 sweep
Records the Run-PR-style sweep check on PR #2342 (Improve Therapy
best-match visibility): review comments already fixed, branch synced
from main, CI green on completed checks.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
* docs(ledger): record Run PR sweep of Dependabot PRs #2296, #2297, #2325, #2326
Immutable review records for the four-PR dependency sweep: CI fix on
#2325, clean main-syncs on #2296/#2297, and diagnosis-only on #2326
(Node 26 Docker bump incompatible with the engine-strict Node 24 pin).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
* Add branch review record for PR #2339 sweep
Records the Run-PR-style sweep check on PR #2339 (therapy comparison
mobile design mockups): already fully green, only needed a main sync.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
* Add branch review records for PR #2341, #2347 sweep
Records the Run-PR-style sweep checks on #2341 (dictionary filter
band, fixed via main sync, unrelated flake confirmed) and #2347
(browser test gate handoff, fixed stale generated file + doc-link
allowlist entries; owner closed the PR mid-sweep for unrelated reasons).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
---------
Co-authored-by: Claude <noreply@anthropic.com>
BigSimmo added a commit that referenced this pull request Aug 24, 2026
* Add branch review record for PR #2342 sweep
Records the Run-PR-style sweep check on PR #2342 (Improve Therapy
best-match visibility): review comments already fixed, branch synced
from main, CI green on completed checks.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
* docs(ledger): record Run PR sweep of Dependabot PRs #2296, #2297, #2325, #2326
Immutable review records for the four-PR dependency sweep: CI fix on
#2325, clean main-syncs on #2296/#2297, and diagnosis-only on #2326
(Node 26 Docker bump incompatible with the engine-strict Node 24 pin).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
* Add branch review record for PR #2339 sweep
Records the Run-PR-style sweep check on PR #2339 (therapy comparison
mobile design mockups): already fully green, only needed a main sync.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
* Add branch review records for PR #2341, #2347 sweep
Records the Run-PR-style sweep checks on #2341 (dictionary filter
band, fixed via main sync, unrelated flake confirmed) and #2347
(browser test gate handoff, fixed stale generated file + doc-link
allowlist entries; owner closed the PR mid-sweep for unrelated reasons).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
* Add branch review records for PR #2338, #2337, #2333 sweep
Records the Run-PR-style sweep checks: #2337 fixed a design-token
ratchet failure, #2333 fixed a tap-target size regression and
resolved a concurrent-push merge, #2338 was only a main sync. #2333
and #2338 still have an open PR-policy failure (missing Clinical
Governance Preflight section) left for the PR author to fill in.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1
---------
Co-authored-by: Claude <noreply@anthropic.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@BigSimmo