Skip to content

chore(deps): bump the js-workspace group with 11 updates - #239

Merged
AbirAbbas merged 2 commits into
mainfrom
dependabot/npm_and_yarn/js-workspace-dd7ddf8df7
Oct 20, 2026
Merged

AbirAbbas merged 2 commits into
mainfrom
dependabot/npm_and_yarn/js-workspace-dd7ddf8df7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the js-workspace group with 11 updates:

Package From To
@hookform/resolvers 5.9.1 5.9.2
kysely 0.29.6 0.29.7
lucide-react 1.55.0 1.59.0
next 16.4.0 16.4.2
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
shadcn 4.21.4 4.22.0
zod 4.6.6 4.6.7
eslint-config-next 16.4.0 16.4.2
playwright 1.64.0 1.64.1
vitest 4.1.11 4.1.12

Updates @hookform/resolvers from 5.9.1 to 5.9.2

Release notes

Sourced from @​hookform/resolvers's releases.

v5.9.2

5.9.2 (2026-10-17)

Bug Fixes

  • ajv: preserve escaped field names in validation errors (#879) (71e6052)
Commits

Updates kysely from 0.29.6 to 0.29.7

Release notes

Sourced from kysely's releases.

0.29.7

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

Controlled transactions get fixes for connection leaks, shared completion state, and commands racing with ongoing queries:

  • Commit, rollback, and savepoint commands now wait for ongoing queries and streams to finish.
  • Close or exhaust active streams before awaiting these commands.
  • A failed rollback now releases the connection and marks the transaction as rolled back.

🚀 Features

🐞 Bugfixes

PostgreSQL 🐘

MSSQL 🥅

📖 Documentation

... (truncated)

Commits
  • ac876c2 0.29.7
  • e50ef04 docs: clarify shared pool and database instance lifecycles (#2143)
  • af446a0 fix(postgres): release the client when destroyed while acquiring a connection...
  • 9db0d49 chore: bump deps. (#2142)
  • 59841c3 fix: serialize controlled transaction commands with queries (#2081)
  • 3037377 ci: add registry fallbacks and reuse the SQL Server image (#2140)
  • cbe5eb6 fix: release controlled transaction connection when rollback fails (#2136)
  • fcc56f5 fix(site): respect reduced motion and add demo playback control (#2130)
  • 5048e23 docs(site): remove duplicate intro help paragraph (#2133)
  • 9a873eb fix: share completion state between controlled transaction handles (#2090)
  • Additional commits viewable in compare view

Updates lucide-react from 1.55.0 to 1.59.0

Release notes

Sourced from lucide-react's releases.

Version 1.59.0

What's Changed

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.57.0...1.58.0

Version 1.57.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.56.0...1.57.0

Version 1.56.0

What's Changed

... (truncated)

Commits

Updates next from 16.4.0 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

High:

Commits
  • 2864b17 v16.4.2
  • a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
  • f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
  • 845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
  • 6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
  • a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
  • 8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
  • 29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
  • 3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
  • 9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates shadcn from 4.21.4 to 4.22.0

Release notes

Sourced from shadcn's releases.

shadcn@4.22.0

Minor Changes

  • #12298 954ce95 Thanks @​shadcn! - Upgrade to Zod 4. shadcn/schema and @shadcn/registry/schema now export Zod 4 schemas, so passing them to Zod 3's z no longer typechecks. On Zod 3, use the exported types (RegistryItem, RegistryItemFile, Config) and the schema's own methods (registryItemSchema.array()) instead of z.infer and z.array. Zod errors expose issues, not errors. Validation messages now use Zod 4's wording.

Patch Changes

  • Updated dependencies [954ce95]:
    • @​shadcn/registry@​0.2.0

shadcn@4.21.5

Patch Changes

Changelog

Sourced from shadcn's changelog.

4.22.0

Minor Changes

  • #12298 954ce95 Thanks @​shadcn! - Upgrade to Zod 4. shadcn/schema and @shadcn/registry/schema now export Zod 4 schemas, so passing them to Zod 3's z no longer typechecks. On Zod 3, use the exported types (RegistryItem, RegistryItemFile, Config) and the schema's own methods (registryItemSchema.array()) instead of z.infer and z.array. Zod errors expose issues, not errors. Validation messages now use Zod 4's wording.

Patch Changes

  • Updated dependencies [954ce95]:
    • @​shadcn/registry@​0.2.0

4.21.5

Patch Changes

Commits

Updates zod from 4.6.6 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

  • b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7
Commits

Updates eslint-config-next from 16.4.0 to 16.4.2

Release notes

Sourced from eslint-config-next's releases.

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

High:

Commits

Updates playwright from 1.64.0 to 1.64.1

Release notes

Sourced from playwright's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)
Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • See full diff in compare view

Updates vitest from 4.1.11 to 4.1.12

Release notes

Sourced from vitest's releases.

v4.1.12

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the js-workspace group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.9.1` | `5.9.2` |
| [kysely](https://github.com/kysely-org/kysely) | `0.29.6` | `0.29.7` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.59.0` |
| [next](https://github.com/vercel/next.js) | `16.4.0` | `16.4.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.4` | `4.22.0` |
| [zod](https://github.com/colinhacks/zod) | `4.6.6` | `4.6.7` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.4.0` | `16.4.2` |
| [playwright](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `4.1.12` |


Updates `@hookform/resolvers` from 5.9.1 to 5.9.2
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v5.9.1...v5.9.2)

Updates `kysely` from 0.29.6 to 0.29.7
- [Release notes](https://github.com/kysely-org/kysely/releases)
- [Commits](kysely-org/kysely@v0.29.6...v0.29.7)

Updates `lucide-react` from 1.55.0 to 1.59.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.59.0/packages/lucide-react)

Updates `next` from 16.4.0 to 16.4.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.0...v16.4.2)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `shadcn` from 4.21.4 to 4.22.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.22.0/packages/shadcn)

Updates `zod` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.6...v4.6.7)

Updates `eslint-config-next` from 16.4.0 to 16.4.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.2/packages/eslint-config-next)

Updates `playwright` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.0...v1.64.1)

Updates `vitest` from 4.1.11 to 4.1.12
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.12/packages/vitest)

---
updated-dependencies:
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-workspace
- dependency-name: kysely
  dependency-version: 0.29.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-workspace
- dependency-name: lucide-react
  dependency-version: 1.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: js-workspace
- dependency-name: next
  dependency-version: 16.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-workspace
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-workspace
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-workspace
- dependency-name: shadcn
  dependency-version: 4.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: js-workspace
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-workspace
- dependency-name: eslint-config-next
  dependency-version: 16.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-workspace
- dependency-name: playwright
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-workspace
- dependency-name: vitest
  dependency-version: 4.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-workspace
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area:dashboard Next.js dashboard type:chore Maintenance labels Oct 20, 2026
The js-workspace group bumps both apps to next 16.4.2, but the root pnpm override still pinned 16.4.0, so the lockfile kept installing 16.4.0 for the dashboard and customer app. Align the override so the apps actually run the version the PR advertises.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Signed-off-by: Abir Abbas <abirabbas1998@gmail.com>
@AbirAbbas
AbirAbbas merged commit bc547a2 into main Oct 20, 2026
31 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/js-workspace-dd7ddf8df7 branch October 20, 2026 21:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:dashboard Next.js dashboard type:chore Maintenance

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant