chore(deps): bump the minor-and-patch group across 1 directory with 15 updates by dependabot[bot] · Pull Request #387 · meith-dev/meith

dependabot · 2026-09-18T14:01:46Z

Bumps the minor-and-patch group with 15 updates in the / directory:

Package	From	To
@biomejs/biome	`2.5.12`	`2.5.14`
@types/node	`26.4.1`	`26.6.2`
dependency-cruiser	`18.2.0`	`18.3.1`
@aws-sdk/client-s3	`3.1127.0`	`3.1136.0`
next	`16.3.4`	`16.3.5`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
marked	`18.0.11`	`18.0.13`
@aws-sdk/s3-request-presigner	`3.1127.0`	`3.1136.0`
zod	`4.5.4`	`4.6.5`
nodemailer	`10.0.9`	`10.0.10`
mysql2	`3.24.3`	`3.24.4`
tailwind-merge	`3.6.0`	`3.7.0`

Updates @biomejs/biome from 2.5.12 to 2.5.14

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes
#9022 0d49e24 Thanks @dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.
// Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })
Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.
#11754 71eaa0d Thanks @griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

{@debug user}
The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.
#11725 5eb5f09 Thanks @m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

#11735 9bd70c7 Thanks @ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

#11715 f05a3c3 Thanks @ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

#11766 c2542c6 Thanks @dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.
#11461 22e9966 Thanks @FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.
 const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;
#11766 c2542c6 Thanks @dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.14

Patch Changes
#9022 0d49e24 Thanks @dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.
// Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })
Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.
#11754 71eaa0d Thanks @griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

{@debug user}
The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.
#11725 5eb5f09 Thanks @m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

#11735 9bd70c7 Thanks @ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

#11715 f05a3c3 Thanks @ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

#11766 c2542c6 Thanks @dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.
#11461 22e9966 Thanks @FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.
 const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;
#11766 c2542c6 Thanks @dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

#11790 17d0ff0 Thanks @ematipico! - Fixed #10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

... (truncated)

Commits

af4365d ci: release (#11711)
7ee3a6c fix(useExhaustiveSwitchCases): add option requireExplicitCase (#11777)
02ea438 feat(json_analyze): implement noJsonUnsafeValues (#9758)
64fd314 feat(json_analyze): implement useConsistentObjectKeys (#9797)
a9c4aa0 feat(html): detect undeclared custom Vue directives (#11651)
1fc17e3 feat: expand useIncludes (#11739)
71eaa0d feat(lint/html/svelte): add noSvelteAtDebugTags (#11754)
9bd70c7 fix: various bug fixes (#11735)
c7c4e2b fix(analyzer): various bugs (#11720)
5eb5f09 feat(biome_js_analyze): implement useValidTestTitle rule (#9176) (#11725)
Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.6.2

Commits

See full diff in compare view

Updates dependency-cruiser from 18.2.0 to 18.3.1

Release notes

Sourced from dependency-cruiser's releases.

v18.3.1

🐛 fixes

aed44794 fix(extract/swc): finds the swc Visitor when bun hands over the default export (#1093) - thanks @kurovskyiii for raising the issue and providing the fix in the pull request.

👷 maintenance

0b873f48 chore(npm): updates all external devDependencies

v18.3.0

✨ features

Updates to the 'baseline' feature

feat: makes it possible to update the baseline "shrink-only", so violations that are fixed get removed, but no new ones are added (#1088/ #1091/ #1085)

feat(cli): exposes the baseline feature as a regular --baseline option (with same functionality as depcruise-baseline command) (#1084)

feat(baseline): when the baseline is updated show how many are new, same or removed (#1079)

Thanks to @yunusdim for the idea(s) to introduce these features.

Improvements to processing with the 'swc' compiler

ee229c36 feat(extract/swc): adds support for parsing tsx/jsx (#1086) thanks @JPBuildsRoot for the issue & initial code that led to this feature

2aa2e34e feat(extract/swc): adds support recognizing type-only imports (#1087) thanks @JPBuildsRoot for raising the issue that led to this feature

👷 maintenance

ed21436e/ ceb7d676 build(npm): updates external dependencies

1f28f44a perf(utl): initializes severity translation table only once

88c7cf9e docs: standardizes the command name for running the command to dependency-cruiser (#1083)

9a8a3dd1 chore(doc): marks depcruise-baseline command as deprecated in favor of dependency-cruiser --baseline (#1090)

400553d9 chore(report): takes x-dot-webpage out of experimental and names it dot-webpage (#1089)

Commits

62c78b6 18.3.1
0b873f4 chore(npm): updates all external devDependencies
aed4479 fix(extract/swc): finds the swc Visitor when bun hands over the default expor...
5e067a0 18.3.0
ceb7d67 build(npm): updates external dependencies
66d9d5c feat(cli): replaces --baseline-shrink-only option with --baseline-mode option...
9a8a3dd chore(doc): marks depcruise-baseline command as deprecated in favor of depend...
400553d chore(report): takes x-dot-webpage out of experimental and names it dot-webpa...
786431a feat(cli): adds --baseline-shrink-only option (#1088)
2aa2e34 feat(extract/swc): adds support recognizing type-only imports (#1087)
Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1127.0 to 3.1136.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1136.0

3.1136.0(2026-09-18)

New Features

client-datazone: Adds support for specifying Notebook type (dfe90a44)

client-sagemaker: Adds support for the hub content resource in SageMaker Search. (5733f294)

client-glue: Introducing AWS Glue Data Quality advanced rule recommendations for faster recommendations. This capability uses Amazon Athena to analyze a sample of table data and Amazon Bedrock to recommend DQDL rules. (984a8422)

client-ec2: This release adds documentation for the T8i instance family to the EC2 ModifyDefaultCreditSpecification and GetDefaultCreditSpecification APIs. (27cc9e36)

client-appintegrations: This release adds support for A2A servers via the ApplicationType and AuthConfig fields, allowing customers to register their agent-to-agent servers with API key authentication. (6be76cb1)

client-transcribe: Amazon Transcribe now lets you encrypt your custom vocabularies, custom vocabulary filters, and custom language models with a customer managed AWS KMS key instead of an AWS owned key, and adds a new UpdateLanguageModel operation to transition CLM encryption to a different KMS key. (22124b1c)

client-qconnect: Amazon Connect AI Agents now support multi-agent orchestration and structured JSON input and output messaging for orchestration agents. (299b4e03)

client-connect: This release adds the ListSecurityProfileAIAgents API and updates the CreateSecurityProfile and UpdateSecurityProfile APIs to support the AllowedAIAgents field on security profiles, allowing customers to manage the 3P AI agents associated with a security profile for Agent-to-Agent interactions. (2c765d8d)

client-ivs-realtime: GetParticipant, ListParticipantEvents, ListParticipantReplicas, StartParticipantReplication, and StopParticipantReplication now accept participant IDs containing underscores. (dc23e6f2)

Tests

undici-http-handler: skip invokeModelWithBidirectionalStream test (#8309) (82637a1c)

For list of updated packages, view updated-packages.md in assets-3.1136.0.zip

v3.1135.0

3.1135.0(2026-09-17)

Documentation Changes

client-sns: SNS API reference documentation update (0e22e2d7)

New Features

client-connect: Made the replicaAlias attribute optional in the ReplicateInstance API to support Global routing for Amazon Connect Global Resiliency (ACGR) instances. This change maintains backward compatibility. When onboarding to ACGR without Global routing, you must specify a custom replicaAlias in your API call (f134c352)

client-ec2: Adding support for "Tunnel" VPC Endpoint (cb7c9bc5)

client-notifications: Added support for attachments on managed notification events. Added support to access and subscribe sensitive managed notification events. (c8a9cc10)

client-guardduty: This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence. (854ccbfa)

client-sesv2: Added support to query the tenant name for BatchGetMetricData and CreateExportJob APIs to filter metrics and messages at the tenant level. (3beafcbc)

client-iot-wireless: Adds Multi-frame GNSS support to the AWS IoT Core Device Location GetPositionEstimate API. The new GnssMultiFrame measurement type improves location accuracy by combining multiple GNSS signal captures (2, 4, 8, 16, or 32) from the same device to estimate its position. (294ad0a3)

client-vpc-lattice: Adding support for CIDR Resource Configuration (46656caf)

client-socialmessaging: Add support for WhatsApp Calling APIs. (b897c28f)

client-bedrock-agentcore: Batch evaluation now supports evaluating specific traces within a session. Each session can specify up to 100 trace IDs to evaluate. (fac9ee4c)

For list of updated packages, view updated-packages.md in assets-3.1135.0.zip

v3.1134.0

3.1134.0(2026-09-16)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1136.0 (2026-09-18)

Note: Version bump only for package @aws-sdk/client-s3

3.1135.0 (2026-09-17)

Note: Version bump only for package @aws-sdk/client-s3

3.1134.0 (2026-09-16)

Note: Version bump only for package @aws-sdk/client-s3

3.1133.0 (2026-09-15)

Note: Version bump only for package @aws-sdk/client-s3

3.1132.0 (2026-09-14)

Note: Version bump only for package @aws-sdk/client-s3

3.1131.0 (2026-09-11)

Note: Version bump only for package @aws-sdk/client-s3

3.1130.0 (2026-09-10)

... (truncated)

Commits

d6b94db Publish v3.1136.0
2d5f18d Publish v3.1135.0
0d6310b Publish v3.1134.0
615a1ca Publish v3.1133.0
99b4bd0 Publish v3.1132.0
33f2cc7 Publish v3.1131.0
996d664 docs(client-s3): Updated S3 Object Lock Default Retention documentation.
cd49ceb Publish v3.1130.0
cece980 Publish v3.1129.0
523fff6 Publish v3.1128.0
Additional commits viewable in compare view

Updates next from 16.3.4 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)

next/image: Reject empty images when reading/writing to the disk cache (#98186)

Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)

Add CSP nonce to script tags of loading and template files (#98403)

Fix use cache prerender signal retention (#98448)

Commits

ca2c75e v16.3.5
14fb290 [backport] Fix use cache prerender signal retention (#98448)
2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
4b56cee [16.3.x] Backport docs fixes (#98317)
5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
d9eac96 [16.3.x] next/image: skip 0-byte entries when initializing disk LRU cache (#9...
84b35fe [test] Fix 16.3 deploy test assertions (#98133)
14f9c1a [16.3.x][ci] Run flake detection and new deploy tests when merged and on back...
See full diff in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon:

…5 updates Bumps the minor-and-patch group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.12` | `2.5.14` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.6.2` | | [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `18.2.0` | `18.3.1` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1127.0` | `3.1136.0` | | [next](https://github.com/vercel/next.js) | `16.3.4` | `16.3.5` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [marked](https://github.com/markedjs/marked) | `18.0.11` | `18.0.13` | | [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1127.0` | `3.1136.0` | | [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.9` | `10.0.10` | | [mysql2](https://github.com/sidorares/node-mysql2) | `3.24.3` | `3.24.4` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | Updates `@biomejs/biome` from 2.5.12 to 2.5.14 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.14/packages/@biomejs/biome) Updates `@types/node` from 26.4.1 to 26.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `dependency-cruiser` from 18.2.0 to 18.3.1 - [Release notes](https://github.com/sverweij/dependency-cruiser/releases) - [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md) - [Commits](sverweij/dependency-cruiser@v18.2.0...v18.3.1) Updates `@aws-sdk/client-s3` from 3.1127.0 to 3.1136.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1136.0/clients/client-s3) Updates `next` from 16.3.4 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.4...v16.3.5) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `marked` from 18.0.11 to 18.0.13 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.0.11...v18.0.13) Updates `@aws-sdk/s3-request-presigner` from 3.1127.0 to 3.1136.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1136.0/packages/s3-request-presigner) Updates `zod` from 4.5.4 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.5.4...v4.6.5) Updates `nodemailer` from 10.0.9 to 10.0.10 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v10.0.9...v10.0.10) Updates `mysql2` from 3.24.3 to 3.24.4 - [Release notes](https://github.com/sidorares/node-mysql2/releases) - [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md) - [Commits](sidorares/node-mysql2@v3.24.3...v3.24.4) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1132.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@aws-sdk/s3-request-presigner" dependency-version: 3.1132.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@biomejs/biome" dependency-version: 2.5.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: dependency-cruiser dependency-version: 18.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: marked dependency-version: 18.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: mysql2 dependency-version: 3.24.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: nodemailer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-29T17:10:37Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 18, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-b7aec99c35 branch 4 times, most recently from aec7990 to d520aff Compare September 20, 2026 20:40

dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-b7aec99c35 branch from d520aff to cc90d24 Compare September 22, 2026 17:09

dependabot Bot closed this Sep 29, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-b7aec99c35 branch September 29, 2026 17:10

Navigation Menu

Repository navigation

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates - #387

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates#387
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-b7aec99c35

dependabot Bot commented on behalf of github Sep 18, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.14

2.5.14

Patch Changes

2.5.14

Patch Changes

v18.3.1

🐛 fixes

👷 maintenance

v18.3.0

✨ features

👷 maintenance

v3.1136.0

3.1136.0(2026-09-18)

New Features

Tests

v3.1135.0

3.1135.0(2026-09-17)

Documentation Changes

New Features

v3.1134.0

3.1134.0(2026-09-16)

3.1136.0 (2026-09-18)

3.1135.0 (2026-09-17)

3.1134.0 (2026-09-16)

3.1133.0 (2026-09-15)

3.1132.0 (2026-09-14)

3.1131.0 (2026-09-11)

3.1130.0 (2026-09-10)

v16.3.5

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

Uh oh!

dependabot Bot commented on behalf of github Sep 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 18, 2026 •

edited

Loading