Code Issues Pull Requests Actions Security InsightsSettings

deps: bump the minor-and-patch group across 1 directory with 9 updates #3906

ClosedXSccantynz wants to mergedependabot/npm_and_yarn/minor-and-patch-99bfda07f3→mainopened Apr 15, 2026

ccantynzcommented Apr 15, 2026

Originally written by @dependabot[bot] on GitHub.
Imported from https://github.com/ccantynz-alt/MarcoReid.com/pull/37

Bumps the minor-and-patch group with 9 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	`0.82.0`	`0.89.0`
next	`16.2.2`	`16.2.3`
next-auth	`4.24.13`	`4.24.14`
react	`19.2.4`	`19.2.5`
react-dom	`19.2.4`	`19.2.5`
@next/bundle-analyzer	`16.2.2`	`16.2.3`
@types/node	`25.5.2`	`25.6.0`
eslint-config-next	`16.2.2`	`16.2.3`
postcss	`8.5.8`	`8.5.10`

Updates @anthropic-ai/sdk from 0.82.0 to 0.89.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.89.0

0.89.0 (2026-04-14)

Full Changelog: sdk-v0.88.0...sdk-v0.89.0

Features

api: manual updates (57c2a11)

api: mark Sonnet and Opus 4 as deprecated (eff41b7)

Bug Fixes

streaming: add missing events (4c52919)

sdk: v0.88.0

0.88.0 (2026-04-10)

Full Changelog: sdk-v0.87.0...sdk-v0.88.0

Features

vertex eu region (#882) (1933857)

Documentation

improve examples (de4f483)

update examples (454e1c5)

sdk: v0.87.0

0.87.0 (2026-04-09)

Full Changelog: sdk-v0.86.1...sdk-v0.87.0

Features

api: Add beta advisor tool (1e99a8d)

sdk: v0.86.1

0.86.1 (2026-04-08)

Full Changelog: sdk-v0.86.0...sdk-v0.86.1

Chores

update @anthropic-ai/sdk dependency version (#870) (036342b)

sdk: v0.86.0

0.86.0 (2026-04-08)

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.89.0 (2026-04-14)

Full Changelog: sdk-v0.88.0...sdk-v0.89.0

Features

api: manual updates (57c2a11)

api: mark Sonnet and Opus 4 as deprecated (eff41b7)

Bug Fixes

streaming: add missing events (4c52919)

0.88.0 (2026-04-10)

Full Changelog: sdk-v0.87.0...sdk-v0.88.0

Features

vertex eu region (#882) (1933857)

Documentation

improve examples (de4f483)

update examples (454e1c5)

0.87.0 (2026-04-09)

Full Changelog: sdk-v0.86.1...sdk-v0.87.0

Features

api: Add beta advisor tool (1e99a8d)

0.86.1 (2026-04-08)

Full Changelog: sdk-v0.86.0...sdk-v0.86.1

Chores

update @anthropic-ai/sdk dependency version (#870) (036342b)

0.86.0 (2026-04-08)

Full Changelog: sdk-v0.85.0...sdk-v0.86.0

Features

... (truncated)

Commits

39549e9 chore: release main (#993)
089fe05 chore: release main (#987)
73f128f chore: release main (#985)
fd6cf54 chore: release main (#983)
79d1d73 chore: release main (#982)
4ade5b1 chore: release main (#979)
4368602 chore: release main (#978)
4105fd6 chore: release main (#973)
0b536ae chore: release main (#970)
See full diff in compare view

Updates next from 16.2.2 to 16.2.3

Release notes

Sourced from next's releases.

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)

Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)

Deduplicate output assets and detect content conflicts on emit (#92292)

Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)

turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @icyJoseph, @sokra, @wbinnssmith, @eps1lon and @ztanner for helping!

Commits

d5f649b v16.2.3
2873928 [16.x] Avoid consuming cyclic models multiple times (#75)
d7c7765 [backport]: Ensure app-page reports stale ISR revalidation errors via onReque...
c573e8c fix(server-hmr): metadata routes overwrite page runtime HMR handler (#92273)
57b8f65 next-core: deduplicate output assets and detect content conflicts on emit (#9...
f158df1 Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
356d605 turbo-tasks-backend: stability fixes for task cancellation and error handling...
3b77a6e Fix DashMap read-write self-deadlock in task_cache causing hangs (#92210)
b2f208a Backport: new view-transitions guide, update and fixes (#92264)
See full diff in compare view

Updates next-auth from 4.24.13 to 4.24.14

Release notes

Sourced from next-auth's releases.

next-auth@4.24.14

Bugfixes

providers: add issuer to GitHub provider for RFC 9207 compliance (#13412)

GitHub now returns an iss parameter in OAuth callbacks. openid-client validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to https://github.com/login/oauth.

Commits

e9a892a chore(release): bump version [skip ci]
0497da4 fix(providers): add issuer to github (#13412)
See full diff in compare view

Maintainer changes

This version was pushed to npm by better-gustavo, a new releaser for next-auth since your current version.

Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

23f4f9f 19.2.5
See full diff in compare view

Updates react-dom from 19.2.4 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

23f4f9f 19.2.5
See full diff in compare view

Updates @next/bundle-analyzer from 16.2.2 to 16.2.3

Release notes

Sourced from @next/bundle-analyzer's releases.

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)

Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)

Deduplicate output assets and detect content conflicts on emit (#92292)

Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)

turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @icyJoseph, @sokra, @wbinnssmith, @eps1lon and @ztanner for helping!

Commits

d5f649b v16.2.3
See full diff in compare view

Updates @types/node from 25.5.2 to 25.6.0

Commits

See full diff in compare view

Updates eslint-config-next from 16.2.2 to 16.2.3

Release notes

Sourced from eslint-config-next's releases.

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)

Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)

Deduplicate output assets and detect content conflicts on emit (#92292)

Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)

turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @icyJoseph, @sokra, @wbinnssmith, @eps1lon and @ztanner for helping!

Commits

d5f649b v16.2.3
See full diff in compare view

Updates postcss from 8.5.8 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

Changelog

Sourced from postcss's changelog.

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

Commits

33b9790 Release 8.5.10 version
536c79e Escape </style> in CSS output (#2074)
afa96b2 Update dependencies (#2073)
effe88b Typo (#2072)
3ee79a2 Thread model (#2071)
2e0683d Create incident response docs (#2070)
fe88ac2 Release 8.5.9 version
c551632 Avoid RegExp when we can use simple JS
89a6b74 Move SECURITY.txt for docs folder to keep GitHub page cleaner
6ceb8a4 Create SECURITY.md
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

ccantynzcommented Apr 15, 2026

Originally written by @dependabot[bot] on GitHub.

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

ccantynzcommented Apr 15, 2026

Originally written by @vercel[bot] on GitHub.

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
marco-reid-com	Ready	Preview, Comment	Apr 20, 2026 8:31pm

ccantynzcommented Apr 21, 2026

Originally written by @dependabot[bot] on GitHub.

Looks like these dependencies are updatable in another way, so this is no longer needed.

Files changed

Side-by-side diff for dependabot/npm_and_yarn/minor-and-patch-99bfda07f3 → main.

View diff →

Cross-repo impact

See what breaks downstream if this PR merges.

Analyze →

✕ Closed without merging

This pull request was closed and not merged.

c comment · e edit title · m merge · a approve · r request changes · ? shortcuts