Skip to content

chore(deps): bump the misc-runtime group across 1 directory with 14 updates - #122

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/misc-runtime-b8aee3be47
Open

chore(deps): bump the misc-runtime group across 1 directory with 14 updates#122
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/misc-runtime-b8aee3be47

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the misc-runtime group with 14 updates in the / directory:

Package From To
@lobehub/icons 5.16.0 5.18.0
@lobehub/ui 5.35.0 5.42.8
@simplewebauthn/browser 13.3.0 14.0.0
@simplewebauthn/server 13.3.3 14.0.1
antd 6.6.2 6.6.3
jotai 2.20.3 3.0.0
lucide-react 1.35.0 1.45.0
motion 12.42.2 13.2.0
next-intl 4.14.1 4.14.4
zod 4.5.2 4.6.2
@next/eslint-plugin-next 16.3.3 16.3.5
lint-staged 17.4.1 17.5.1
postcss 8.5.26 8.5.28
sass 1.103.1 1.104.0

Updates @lobehub/icons from 5.16.0 to 5.18.0

Changelog

Sourced from @​lobehub/icons's changelog.

Version 5.18.0

Released on 2026-09-05

✨ Features

  • auto: Auto build static icons.

🐛 Bug Fixes

  • misc: Use Meta AI icon for Muse Spark models, use Meta infinity icon for Muse Spark models.

What's improved

  • auto: Auto build static icons (5fa93d3)

What's fixed

  • misc: Use Meta AI icon for Muse Spark models (2771dc9)
  • misc: Use Meta infinity icon for Muse Spark models (1c89dbc)

Version 5.17.0

Released on 2026-09-05

✨ Features

  • auto: Auto build static icons.

🐛 Bug Fixes

  • misc: Stop the workspace glob from descending into nested node_modules.

... (truncated)

Commits
  • 60d3728 🔖 chore(release): v5.18.0 [skip ci]
  • 359c309 Merge pull request #406 from lobehub/fix/muse-spark-meta-ai-icon
  • 1c89dbc 🐛 fix: use Meta infinity icon for Muse Spark models
  • 2771dc9 🐛 fix: use Meta AI icon for Muse Spark models
  • c450bac 🔖 chore(release): @​lobehub/icons-static-webp@​1.94.0 [skip ci]
  • 53ead06 🔖 chore(release): @​lobehub/icons-static-svg@​1.95.0 [skip ci]
  • 361d95c 🔖 chore(release): @​lobehub/icons-static-png@​1.96.0 [skip ci]
  • 2575265 🔖 chore(release): @​lobehub/icons-static-avatar@​1.14.0 [skip ci]
  • 7f21d6e 🔖 chore(release): @​lobehub/icons-rn@​2.13.0 [skip ci]
  • 5fa93d3 ✨ feat(auto): Auto build static icons
  • Additional commits viewable in compare view

Updates @lobehub/ui from 5.35.0 to 5.42.8

Release notes

Sourced from @​lobehub/ui's releases.

v5.42.8

5.42.8 (2026-09-12)

♻ Code Refactoring

  • motion: Consume the motion context only, never provide it from components, closes #654 (2b66314)

v5.42.7

5.42.7 (2026-09-11)

♻ Code Refactoring

  • base-ui: Drop the empty ScrollArea content style wrapper (df093eb)

💄 Styles

  • base-ui: Stop forcing typography and flex layout on ScrollArea content (0b82243)

v5.42.6

5.42.6 (2026-09-11)

💄 Styles

  • base-ui: Morph TooltipGroup and PopoverGroup between triggers (1c3ec70)

v5.42.5

5.42.5 (2026-09-11)

💄 Styles

  • base-ui: Tighten ScrollArea scrollbar inset and thicken it on hover (3da2409)

v5.42.4

5.42.4 (2026-09-10)

🐛 Bug Fixes

  • base-ui: Apply DraggablePanel's style prop to the content layer (733aa36)

v5.42.3

5.42.3 (2026-09-10)

🎫 Chores

... (truncated)

Changelog

Sourced from @​lobehub/ui's changelog.

5.42.8 (2026-09-12)

♻ Code Refactoring

  • motion: Consume the motion context only, never provide it from components, closes #654 (2b66314)

5.42.7 (2026-09-11)

♻ Code Refactoring

  • base-ui: Drop the empty ScrollArea content style wrapper (df093eb)

💄 Styles

  • base-ui: Stop forcing typography and flex layout on ScrollArea content (0b82243)

5.42.6 (2026-09-11)

💄 Styles

  • base-ui: Morph TooltipGroup and PopoverGroup between triggers (1c3ec70)

5.42.5 (2026-09-11)

💄 Styles

  • base-ui: Tighten ScrollArea scrollbar inset and thicken it on hover (3da2409)

5.42.4 (2026-09-10)

🐛 Bug Fixes

  • base-ui: Apply DraggablePanel's style prop to the content layer (733aa36)

5.42.3 (2026-09-10)

🎫 Chores

  • eslint: Ban the antd-based DraggablePanel, closes #652 (b71080c)

🐛 Bug Fixes

  • base-ui: Stop DraggablePanel from painting a default background (66f111f)

5.42.2 (2026-09-10)

🐛 Bug Fixes

  • base-ui: Clip a DraggablePanel that was collapsed by dragging past its threshold, closes #651 (1aaf4ba)

... (truncated)

Commits
  • 14f5f1c 🔖 chore(release): v5.42.8 [skip ci]
  • 2b66314 ♻️ refactor(motion): consume the motion context only, never provide it from c...
  • f1c4b01 🔖 chore(release): v5.42.7 [skip ci]
  • df093eb ♻️ refactor(base-ui): drop the empty ScrollArea content style wrapper
  • 0b82243 💄 style(base-ui): stop forcing typography and flex layout on ScrollArea content
  • a843394 🔖 chore(release): v5.42.6 [skip ci]
  • 1c3ec70 💄 style(base-ui): morph TooltipGroup and PopoverGroup between triggers
  • d95b504 🔖 chore(release): v5.42.5 [skip ci]
  • 3da2409 💄 style(base-ui): tighten ScrollArea scrollbar inset and thicken it on hover
  • ac59b62 🔖 chore(release): v5.42.4 [skip ci]
  • Additional commits viewable in compare view

Updates @simplewebauthn/browser from 13.3.0 to 14.0.0

Release notes

Sourced from @​simplewebauthn/browser's releases.

v14.0.0 - The one after they go quantum

The headlining feature of this release is @​simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info 🚀

Setting our sites on the browser, @​simplewebauthn/browser picks up a new sendSignal() method as a single method to call all of the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info 🛜

As for breaking changes, the minimum supported version of Node has been raised to Node LTS 22.x and higher, and Deno v2.4.x and higher. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on the Node.js Releases page, and aim to support Deno minor releases for up to one year after their release

That's not all, though. Continue reading for the full list of changes in this release! 🎉

Changes:

Breaking Changes

  • [browser] [server] The minimum supported runtime versions have been increased to Node LTS 22.x and higher, and Deno v2.4.x and higher (#763)

v13.3.3

Changes:

  • [server] Updated MDS blob signature verification to support more algorithms (#788)
  • [server] Updated MetadataService to know about the new FIDO MDS blob trust anchor certificate (#789)

v13.3.2

This update fixes a CVSS v4 Low (2.0) security vulnerability identified in @​simplewebauthn/server. See the security advisory linked below for more information.

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() allowing a maliciously-crafted attestation statement's x5c to contain a self-signed "root certificate" instead of chaining back to an RP-specified trust anchor (GHSA-6hxq-p678-4hr2)

v13.3.1

Changes:

... (truncated)

Changelog

Sourced from @​simplewebauthn/browser's changelog.

v14.0.0 - The one after they go quantum

The headlining feature of this release is @​simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info 🚀

Setting our sites on the browser, @​simplewebauthn/browser picks up a new sendSignal() method as a single method to call all of the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info 🛜

As for breaking changes, the minimum supported version of Node has been raised to Node LTS 22.x and higher, and Deno v2.4.x and higher. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on the Node.js Releases page, and aim to support Deno minor releases for up to one year after their release

That's not all, though. Continue reading for the full list of changes in this release! 🎉

Changes:

... (truncated)

Commits

Updates @simplewebauthn/server from 13.3.3 to 14.0.1

Release notes

Sourced from @​simplewebauthn/server's releases.

v14.0.1

  • [server] Attestation statements using PQC algorithms can now be verified (#800)

v14.0.0 - The one after they go quantum

The headlining feature of this release is @​simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info 🚀

Setting our sites on the browser, @​simplewebauthn/browser picks up a new sendSignal() method as a single method to call all of the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info 🛜

As for breaking changes, the minimum supported version of Node has been raised to Node LTS 22.x and higher, and Deno v2.4.x and higher. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on the Node.js Releases page, and aim to support Deno minor releases for up to one year after their release

That's not all, though. Continue reading for the full list of changes in this release! 🎉

Changes:

Breaking Changes

  • [browser] [server] The minimum supported runtime versions have been increased to Node LTS 22.x and higher, and Deno v2.4.x and higher (#763)
Changelog

Sourced from @​simplewebauthn/server's changelog.

v14.0.1

Changes:

  • [server] Attestation statements using PQC algorithms can now be verified (#800)

v14.0.0 - The one after they go quantum

The headlining feature of this release is @​simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info 🚀

Setting our sites on the browser, @​simplewebauthn/browser picks up a new sendSignal() method as a single method to call all of the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info 🛜

As for breaking changes, the minimum supported version of Node has been raised to Node LTS 22.x and higher, and Deno v2.4.x and higher. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on the Node.js Releases page, and aim to support Deno minor releases for up to one year after their release

That's not all, though. Continue reading for the full list of changes in this release! 🎉

Changes:

... (truncated)

Commits

Updates antd from 6.6.2 to 6.6.3

Release notes

Sourced from antd's releases.

6.6.3

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.3

2026-09-07

Commits
  • 6b46530 docs: add changelog for 6.6.3 (#59239)
  • 9e9d2d5 fix(DatePicker): use German date formats (#59151)
  • 9ed4ef1 docs: explain SVG icon alignment in FAQ (#59238)
  • c0972ce docs: align API table defaults and versions between en-US and zh-CN (#59214)
  • c840fec docs: align open-state callback parameter names (#59236)
  • 23207f0 fix: stop mutating the mask config object passed by the user (#59233)
  • e825c6d docs: align getting started guides (#59188)
  • a170e43 chore(deps): update nearform-actions/github-action-notify-twitter digest to c...
  • a3f839f chore(deps): update dependency @​antfu/eslint-config to ~9.5.0 (#59227)
  • c4a242f chore(deps): update jest dependencies to v30.5.1 (#59228)
  • Additional commits viewable in compare view

Updates jotai from 2.20.3 to 3.0.0

Release notes

Sourced from jotai's releases.

v3.0.0

👻 Jotai v3 is here! 🎉

This is a mostly backward-compatible update, dropping some legacy support and deprecated APIs.

Migration Guide

https://github.com/pmndrs/jotai/blob/main/docs/guides/migrating-to-v3.mdx

What's Changed

Full Changelog: pmndrs/jotai@v2.20.3...v3.0.0

v3.0.0-alpha.1

Includes v2.20.3 changes.

What's Changed

New Contributors

Full Changelog: pmndrs/jotai@v3.0.0-alpha.0...v3.0.0-alpha.1

v3.0.0-alpha.0

https://github.com/pmndrs/jotai/blob/v3/docs/guides/migrating-to-v3.mdx

What's Changed

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 13, 2026
@codecov

codecov Bot commented Sep 13, 2026

Copy link
Copy Markdown

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

@dependabot
dependabot Bot force-pushed the dependabot/bun/misc-runtime-b8aee3be47 branch 2 times, most recently from 5662f25 to cfa4fd0 Compare September 14, 2026 04:32
@dependabot
chore(deps): bump the misc-runtime group across 1 directory with 14 u…
cdb8789 
…pdates

Bumps the misc-runtime group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@lobehub/icons](https://github.com/lobehub/lobe-icons) | `5.16.0` | `5.18.0` |
| [@lobehub/ui](https://github.com/lobehub/lobe-ui) | `5.35.0` | `5.42.8` |
| [@simplewebauthn/browser](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser) | `13.3.0` | `14.0.0` |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.3` | `14.0.1` |
| [antd](https://github.com/ant-design/ant-design) | `6.6.2` | `6.6.3` |
| [jotai](https://github.com/pmndrs/jotai) | `2.20.3` | `3.0.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.35.0` | `1.45.0` |
| [motion](https://github.com/motiondivision/motion) | `12.42.2` | `13.2.0` |
| [next-intl](https://github.com/amannn/next-intl) | `4.14.1` | `4.14.4` |
| [zod](https://github.com/colinhacks/zod) | `4.5.2` | `4.6.2` |
| [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) | `16.3.3` | `16.3.5` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.5.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| [sass](https://github.com/sass/dart-sass) | `1.103.1` | `1.104.0` |



Updates `@lobehub/icons` from 5.16.0 to 5.18.0
- [Release notes](https://github.com/lobehub/lobe-icons/releases)
- [Changelog](https://github.com/lobehub/lobe-icons/blob/master/CHANGELOG.md)
- [Commits](lobehub/lobe-icons@v5.16.0...v5.18.0)

Updates `@lobehub/ui` from 5.35.0 to 5.42.8
- [Release notes](https://github.com/lobehub/lobe-ui/releases)
- [Changelog](https://github.com/lobehub/lobe-ui/blob/master/CHANGELOG.md)
- [Commits](lobehub/lobe-ui@v5.35.0...v5.42.8)

Updates `@simplewebauthn/browser` from 13.3.0 to 14.0.0
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.0/packages/browser)

Updates `@simplewebauthn/server` from 13.3.3 to 14.0.1
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.1/packages/server)

Updates `antd` from 6.6.2 to 6.6.3
- [Release notes](https://github.com/ant-design/ant-design/releases)
- [Changelog](https://github.com/ant-design/ant-design/blob/master/CHANGELOG.en-US.md)
- [Commits](ant-design/ant-design@6.6.2...6.6.3)

Updates `jotai` from 2.20.3 to 3.0.0
- [Release notes](https://github.com/pmndrs/jotai/releases)
- [Commits](pmndrs/jotai@v2.20.3...v3.0.0)

Updates `lucide-react` from 1.35.0 to 1.45.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.45.0/packages/lucide-react)

Updates `motion` from 12.42.2 to 13.2.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.42.2...v13.2.0)

Updates `next-intl` from 4.14.1 to 4.14.4
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.14.1...v4.14.4)

Updates `zod` from 4.5.2 to 4.6.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.2...v4.6.2)

Updates `@next/eslint-plugin-next` from 16.3.3 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/eslint-plugin-next)

Updates `lint-staged` from 17.4.1 to 17.5.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.4.1...v17.5.1)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `sass` from 1.103.1 to 1.104.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.103.1...1.104.0)

---
updated-dependencies:
- dependency-name: "@lobehub/icons"
  dependency-version: 5.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-runtime
- dependency-name: "@lobehub/ui"
  dependency-version: 5.42.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-runtime
- dependency-name: "@next/eslint-plugin-next"
  dependency-version: 16.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: misc-runtime
- dependency-name: "@simplewebauthn/browser"
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: misc-runtime
- dependency-name: "@simplewebauthn/server"
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: misc-runtime
- dependency-name: antd
  dependency-version: 6.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: misc-runtime
- dependency-name: jotai
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: misc-runtime
- dependency-name: lint-staged
  dependency-version: 17.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: misc-runtime
- dependency-name: lucide-react
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-runtime
- dependency-name: motion
  dependency-version: 13.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: misc-runtime
- dependency-name: next-intl
  dependency-version: 4.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: misc-runtime
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: misc-runtime
- dependency-name: sass
  dependency-version: 1.104.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: misc-runtime
- dependency-name: zod
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/misc-runtime-b8aee3be47 branch from cfa4fd0 to cdb8789 Compare September 15, 2026 06:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants