Skip to content

build(deps): bump the npm-dependencies group with 10 updates - #108

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-b3a656f1b9
Open

build(deps): bump the npm-dependencies group with 10 updates#108
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-b3a656f1b9

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubSep 4, 2026•
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 10 updates:

PackageFromTo
@tanstack/react-query5.101.45.102.8
lucide-react1.33.01.35.0
viem2.55.192.56.0
@cloudflare/vite-plugin1.53.11.54.1
@cloudflare/workers-types5.20260821.15.20260828.1
@types/node26.2.026.4.0
@types/react-dom19.2.419.2.5
@vitejs/plugin-react6.1.06.1.1
knip6.32.26.32.3
wrangler4.125.04.127.0

Updates @tanstack/react-query from 5.101.4 to 5.102.8

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-next-experimental@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-persist-client@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.8

@​tanstack/react-query-devtools@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-next-experimental@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-persist-client@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query@​5.102.7

Patch Changes

  • Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.7

5.102.6

Patch Changes

  • #11305ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

  • Updated dependencies []:

    • @​tanstack/query-core@​5.102.6

5.102.5

Patch Changes

  • Updated dependencies [578e5c2]:
    • @​tanstack/query-core@​5.102.5

5.102.4

Patch Changes

  • Updated dependencies [a05df6a]:
    • @​tanstack/query-core@​5.102.4

5.102.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.3

5.102.2

Patch Changes

  • Updated dependencies [80fbf73]:
    • @​tanstack/query-core@​5.102.2

... (truncated)

Commits

Updates lucide-react from 1.33.0 to 1.35.0

Release notes

Sourced from lucide-react's releases.

Version 1.35.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.34.0...1.35.0

Version 1.34.0

What's Changed

Full Changelog: lucide-icons/lucide@1.33.0...1.34.0

Commits

Updates viem from 2.55.19 to 2.56.0

Release notes

Sourced from viem's releases.

viem@2.56.0

Minor Changes

  • #5040c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @​jxom! - Breaking (viem/tempo): Renamed Abis.abis to Abis.all and expanded the aggregate with Earn and Zone ABIs.

    -const abis = Abis.abis+const abis = Abis.all

  • #5040c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @​jxom! - Breaking (viem/tempo): Moved Zone exports from viem/tempo/zones into viem/tempo.

    -import { Abis, Addresses, http, zoneModerato } from 'viem/tempo/zones'+import { Abis, Addresses, http, Zone } from 'viem/tempo'

  • #5040c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @​jxom! - Breaking (viem/tempo): Replaced curried Zone network factories with built-in Zone definitions and Zone.from for custom chains.

    -const zone = zoneModerato(6)+const zone = Zone.a

  • #5040c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @​jxom! - Breaking (viem/tempo): Replaced chain-specific Zone portal registries with deterministic Addresses.zonePortal(id) resolution for Zone IDs and chain IDs.

    -import { getPortalAddress } from 'viem/tempo/zones'+import { Addresses, Zone } from 'viem/tempo'-const portal = getPortalAddress(42_431, 7)+const portal = Addresses.zonePortal(Zone.b.id)

  • #5040c73282bfa7309a5017f684b8001ec5c13fda4194 Thanks @​jxom! - Added selector maps for Zone portal, outbox, messenger, and verifier ABIs.

    import{Selectors}from"viem/tempo";constselector=Selectors.zonePortal.admin;

Patch Changes

... (truncated)

Commits

Updates @cloudflare/vite-plugin from 1.53.1 to 1.54.1

Release notes

Sourced from @​cloudflare/vite-plugin's releases.

@​cloudflare/vite-plugin@​1.54.1

Patch Changes

@​cloudflare/vite-plugin@​1.54.0

Minor Changes

  • #15134c66d2d5 Thanks @​gpanders! - Enable FUSE-capable local container development

    Miniflare now automatically passes the Docker privileges needed for FUSE to local Durable Object containers when using local rootless Docker on Linux with /dev/fuse available, or a local Docker engine on macOS or through WSL where Linux containers run in a VM. This applies to Wrangler, the Cloudflare Vite plugin, and direct Miniflare use.

  • #153269fcb1c9 Thanks @​jamesopstad! - Record the selected mode in the Build Output Specification top-level config.json

    The mode a build was produced in is now written to .cloudflare/output/v0/config.json as a mode field, alongside the account and compliance settings.

Patch Changes

Changelog

Sourced from @​cloudflare/vite-plugin's changelog.

1.54.1

Patch Changes

1.54.0

Minor Changes

  • #15134c66d2d5 Thanks @​gpanders! - Enable FUSE-capable local container development

    Miniflare now automatically passes the Docker privileges needed for FUSE to local Durable Object containers when using local rootless Docker on Linux with /dev/fuse available, or a local Docker engine on macOS or through WSL where Linux containers run in a VM. This applies to Wrangler, the Cloudflare Vite plugin, and direct Miniflare use.

  • #153269fcb1c9 Thanks @​jamesopstad! - Record the selected mode in the Build Output Specification top-level config.json

    The mode a build was produced in is now written to .cloudflare/output/v0/config.json as a mode field, alongside the account and compliance settings.

Patch Changes

Commits

Updates @cloudflare/workers-types from 5.20260821.1 to 5.20260828.1

Commits

Updates @types/node from 26.2.0 to 26.4.0

Commits

Updates @types/react-dom from 19.2.4 to 19.2.5

Commits

Updates @vitejs/plugin-react from 6.1.0 to 6.1.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.1

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.1 (2026-08-28)

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

Commits
  • 04cac50 release: plugin-react@6.1.1 (#1440)
  • 82d35ab fix(react): respect environment sourcemap option when builder.sharedPlugins...
  • 397e847 fix(react): make logging diagnostics an opt-in for React Compiler (#1431)
  • 61006e6 fix(deps): update all non-major dependencies (#1433)
  • e2a649c chore: use deps.neverBundle instead of external in tsdown config (#1430)
  • fb2d6f3 fix(deps): update all non-major dependencies (#1427)
  • See full diff in compare view

Updates knip from 6.32.2 to 6.32.3

Release notes

Sourced from knip's releases.

Release 6.32.3

  • Update sentry production snapshot (9f18cba93c91de8554636b13692d6e7a937b7697)
  • Pin TypeScript ecosystem test (de5162952d223050f3135afb02d4e8de6d46f381)
  • Update query snapshot (f6964dd577d8f7967f9be6778f5c3953632e3c96)
  • fix(tsup): match config files with .cts and .mts extensions (#1938) (68d6f52f7913cfa1e36618e6b03f90734da34149) - thanks @​codeAnqiang-ma!
  • fix(lefthook): match all config file names and extensions (#1940) (4015ae0330c78e97360a2c8f697d17f82c5c24ae) - thanks @​codeAnqiang-ma!
  • fix(binaries): resolve missing pnpm subcommands (#1945) (deedbf69dcbd6a59d6705a72cadb4e40ad9c8029) - thanks @​marcalexiei!
  • Fix nested gitignore negation inside ignored dot-directories (#1913) (#1942) (0201641af48f52edfbe72076118944ee6273718e) - thanks @​DSeaStar!
  • fix(webdriver-io): match all supported config file extensions (#1948) (dc7aca5a865d1762a41dd97493b73398ec3abc19) - thanks @​solomonaustin!
  • Resolve vitest include patterns relative to test.dir (#1929) (ee555d227208dd6a34e002318bd6710dedb4d5ca) - thanks @​kirthi-b!
  • Change GitHub stars badge style to flat (#1967) (ff0d791e8130430524dc88c4df73ad87f82879f7) - thanks @​DreamLongYT!
  • Ignore printf as global binary (#1972) (a0c0b0805a8a26a6efdedfe2561b168da2a22b68) - thanks @​taracutie!
  • fix: add bun 1.4 dedupe subcommand (#1969) (d1d5d4276ece6daf2215f5ff3f4224b5b50dcac3) - thanks @​NimmLor!
  • Resolve Vitest mocks from test root (e655b0ba0192546a2688d702323c8e7c58fecde1)
  • Resolve local Vitest reporters from test root (resolve #1953) (f4ff31ad0385c5955627ec1b3bed2bc0000b14fe)
Commits

Updates wrangler from 4.125.0 to 4.127.0

Release notes

Sourced from wrangler's releases.

wrangler@4.127.0

Minor Changes

  • #15356fe265f8 Thanks @​rubuy-74! - Add support for configuring a per-workflow max concurrency limit via workflows[].concurrency.limit in your Wrangler config.

    The limit is the maximum number of Workflow instances that can run concurrently. It is validated as a positive integer and persisted on deploy; the ceiling is enforced server-side. Concurrency is ignored in local development.

    {
"workflows": [
{
"binding": "MY_WORKFLOW",
"name": "my-workflow",
"class_name": "MyWorkflow",
"concurrency": { "limit": 10 }
}
]
}

Patch Changes

  • #15367412c79e Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    DependencyFromTo
    @​cloudflare/workers-types^5.20260825.1^5.20260826.1
    workerd1.20260825.11.20260826.1

  • #1537592874f6 Thanks @​WillTaylorDev! - Upload wrangler preview modules as multipart form data

    wrangler preview used to base64 the bundle, its modules, and any sourcemaps into a single JSON request body. Base64 inflates content by a third, so a Worker with a large sourcemap could exceed the API request size limit and fail to deploy.

    The preview deployment request is now multipart/form-data. The deployment settings travel in a metadata part and each module follows as its own part carrying raw bytes, matching how wrangler deploy already uploads a Worker.

  • Updated dependencies [412c79e]:

wrangler@4.126.0

Minor Changes

  • #15332d1cc3af Thanks @​pombosilva! - Add default_retention to Workflow bindings for configuring how long instances are retained

    Workflow instances are retained for an account-wide default period after they finish. You can now set a per-Workflow default in your Wrangler configuration, applied to instances that do not specify their own retention:

    {
"workflows": [

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency NameIgnore Conditions
@types/node[>= 25.a, < 26]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates 10 npm dependencies to latest versions, including a React Query error-boundary fix, new Lucide icons, and a faster Cloudflare preview upload path.

  • Breaking changes in viem 2.56.0: the viem/tempo module renamed Abis.abis to Abis.all, moved Zone exports to the main entry, and replaced curried Zone factories with built-in definitions.
  • Notable updates:
    • @tanstack/react-query 5.102.8 now throws falsy errors from useQueries and useSuspenseQueries to the error boundary.
    • wrangler 4.127.0 uploads preview deployments as multipart form data, reducing request size by a third.
    • @vitejs/plugin-react 6.1.1 adds a compiler.logDiagnostics option and respects environment sourcemap settings.

Written for commit 9eeaad6. Summary will update on new commits.

@dependabot
build(deps): bump the npm-dependencies group with 10 updates
9eeaad6
Bumps the npm-dependencies group with 10 updates:
| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.4` | `5.102.8` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.33.0` | `1.35.0` |
| [viem](https://github.com/wevm/viem) | `2.55.19` | `2.56.0` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.53.1` | `1.54.1` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260821.1` | `5.20260828.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.0` | `6.1.1` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.32.3` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.125.0` | `4.127.0` |
Updates `@tanstack/react-query` from 5.101.4 to 5.102.8
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query)
Updates `lucide-react` from 1.33.0 to 1.35.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.35.0/packages/lucide-react)
Updates `viem` from 2.55.19 to 2.56.0
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.55.19...viem@2.56.0)
Updates `@cloudflare/vite-plugin` from 1.53.1 to 1.54.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.54.1/packages/vite-plugin-cloudflare)
Updates `@cloudflare/workers-types` from 5.20260821.1 to 5.20260828.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)
Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)
Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)
Updates `@vitejs/plugin-react` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)
Updates `knip` from 6.32.2 to 6.32.3
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.3/packages/knip)
Updates `wrangler` from 4.125.0 to 4.127.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.127.0/packages/wrangler)
---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
dependency-version: 5.102.8
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: lucide-react
dependency-version: 1.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: viem
dependency-version: 2.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@cloudflare/vite-plugin"
dependency-version: 1.54.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@cloudflare/workers-types"
dependency-version: 5.20260828.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@types/node"
dependency-version: 26.4.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@types/react-dom"
dependency-version: 19.2.5
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@vitejs/plugin-react"
dependency-version: 6.1.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: knip
dependency-version: 6.32.3
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: wrangler
dependency-version: 4.127.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@dependabot
dependabotBot requested a review from a teamSeptember 4, 2026 12:13
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pagesBot commented Sep 4, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Deploying with Cloudflare Workers Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

StatusNameLatest CommitUpdated (UTC)
❌ Deployment failed
View logs		auth9eeaad6Sep 04 2026, 12:14 PM

@socket-security

socket-securityBot commented Sep 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

DiffPackageSupply Chain
Security		VulnerabilityQualityMaintenanceLicense
Updated@​types/​react-dom@​19.2.4 ⏵ 19.2.5100+110075+189-3100
Updatedlucide-react@​1.33.0 ⏵ 1.35.0100+110098+196+180
Updated@​types/​node@​26.2.0 ⏵ 26.4.0100+110081+196100
Updated@​cloudflare/​vite-plugin@​1.53.1 ⏵ 1.54.1971008596100
Updated@​tanstack/​react-query@​5.101.4 ⏵ 5.102.89910091+498+1100
Updatedwrangler@​4.125.0 ⏵ 4.127.098+110092+196100
Updatedknip@​6.32.2 ⏵ 6.32.399+110095+196100
Updated@​vitejs/​plugin-react@​6.1.0 ⏵ 6.1.1100+1100100+195+1100
Updated@​cloudflare/​workers-types@​5.20260821.1 ⏵ 5.20260828.110010096+199100

View full report

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants