Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 35 updates - #129

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-2f57d7bac8
Open

chore(deps): bump the production-dependencies group across 1 directory with 35 updates#129
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-2f57d7bac8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown

Bumps the production-dependencies group with 34 updates in the / directory:

Package From To
concurrently 9.2.1 10.0.4
@huggingface/inference 4.13.18 4.13.24
dotenv 16.6.1 17.4.2
express-rate-limit 7.5.1 8.6.1
firebase-admin 13.10.0 14.2.0
groq-sdk 0.19.0 1.5.0
helmet 8.2.0 8.3.0
mongoose 8.24.0 9.9.1
multer 2.1.1 2.2.0
nodemailer 7.0.13 9.0.3
pdf-parse 1.1.1 2.4.5
zod 3.25.76 4.4.3
@fontsource/inter 5.2.5 5.3.0
@radix-ui/react-dialog 1.1.16 1.1.23
@radix-ui/react-label 2.1.9 2.1.15
@radix-ui/react-select 2.3.0 2.3.7
@radix-ui/react-slot 1.2.5 1.3.3
@radix-ui/react-switch 1.3.0 1.3.7
@tailwindcss/vite 4.3.0 4.3.3
@tanstack/react-query 5.101.0 5.101.4
axios 1.17.0 1.19.0
firebase 11.10.0 12.17.0
jspdf 3.0.4 4.2.1
lucide-react 0.522.0 1.28.0
react 19.2.7 19.2.8
@types/react 19.2.17 19.2.18
react-dom 19.2.7 19.2.8
@types/react-dom 19.2.3 19.2.4
react-router-dom 6.30.4 7.18.2
recharts 3.8.1 3.10.1
@eslint/js 9.39.4 10.0.1
@vitejs/plugin-react 4.7.0 6.0.5
globals 16.5.0 17.9.0
vite 6.4.3 8.2.0

Updates concurrently from 9.2.1 to 10.0.4

Release notes

Sourced from concurrently's releases.

v10.0.4

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v10.0.3...v10.0.4

v10.0.3

Republish of https://github.com/open-cli-tools/concurrently/releases/tag/v10.0.1 with Trusted Publishing enabled (see #595)

Full Changelog: open-cli-tools/concurrently@v10.0.2...v10.0.3

v10.0.2

Test version to restore Trusted Publishing. Not published to npm.

v10.0.1

  • Ensure FlowController type is exported - #594

Full Changelog: open-cli-tools/concurrently@v10.0.0...v10.0.1

v10.0.0

💥 Breaking Changes

  • Dropped support for Node.js <22.0.0. Older Node.js version have reached end-of-life, and certain features require new-ish JS APIs.
  • concurrently is now ESM-only. It's now possible to require(esm). See here for interoperability.
  • Prefix colors now default to automatic - #581 The colors used to default to reset (which does nothing). Concurrently now automatically selects a color, out of the box. The list of colors used is not jarring nor carries semantic meaning, and reads well in both dark and light terminal backgrounds.
  • Removed deprecated flags and options
    • CLI flag --name-separator: use commas instead.
    • API option killOthers: use killOthersOn instead.

✨ New Features

  • Support applying modifiers to hex prefix colors (e.g. #ff0000.bold) - #450
  • Support chalk's color functions in prefixes (e.g. rgb(), hex(), bgRgb(), etc) - #578
  • Set prefix background color via bg#RRGGBB - #578
  • Allow shell override via --shell CLI flag/shell API option - #288, #589, #556 concurrently distinguishes between cmd.exe, powershell, and POSIX-based shells.
  • Manual prefix coloring in templates e.g. [{color}{name}{/color}] - #583, #587

🐛 Bug fixes

  • Scope quote normalization to CLI input - #582, #585 It should now also be possible to run commands like "/some/command" foo bar"
  • Don't throw when color doesn't exist - #580

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for concurrently since your current version.


Updates @huggingface/inference from 4.13.18 to 4.13.24

Commits
  • 075c9fe 🔖 @​huggingface/inference 4.13.24
  • 0c0e85c Serialize model first in conversational payloads (#2335)
  • b282718 [Inference Providers] deepinfra: add text-to-speech support (#2304)
  • 78f09be 🔖 @​huggingface/tasks 0.21.32
  • f7643d3 Register real5-omnidocbench as an evaluation framework (#2309)
  • 6361ac4 revert diffusers dtype snippet (#2328)
  • 0873a43 🔖 @​huggingface/tasks 0.21.31
  • 8f4490c [tasks] add aliases to HardwareSpec (#2326)
  • 3b9396c 🔖 @​huggingface/hub 2.14.4
  • 9813555 add nobg code snippet (#2324)
  • Additional commits viewable in compare view

Updates dotenv from 16.6.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

  • Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

  • Add a new README section on dotenv’s approach to the agentic future.

Changed

  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

... (truncated)

Commits

Updates express-rate-limit from 7.5.1 to 8.6.1

Release notes

Sourced from express-rate-limit's releases.

v8.6.1

You can view the changelog here.

v8.6.0

You can view the changelog here.

v8.5.2

You can view the changelog here.

v8.5.1

You can view the changelog here.

v8.5.0

You can view the changelog here.

v8.4.1

You can view the changelog here.

v8.4.0

You can view the changelog here.

v8.3.2

You can view the changelog here.

v8.3.1

You can view the changelog here.

v8.3.0

You can view the changelog here.

v8.2.1

You can view the changelog here.

v8.2.0

You can view the changelog here.

v8.1.0

You can view the changelog here.

v8.0.1

You can view the changelog here.

v8.0.0

You can view the changelog here.

Commits
  • c7fced5 8.6.1
  • b21110e chore: deprecate millisecond-based time constants (#662)
  • fad3d85 chore(deps-dev): bump the development-dependencies group with 4 updates (#660)
  • fffb3c4 8.6.0
  • f366b2d docs: debugging guide, time constants, & v8.6.0 changelog (#652)
  • 593ddd2 fix: make debug output easier to read (#653)
  • ef8c129 fix: Pin safe version of @​asyncapi/specs dev dep (#659)
  • 7b05e0d feat: add time constants to support more readable values for windowMs (#655)
  • 863e730 chore(deps-dev): bump the development-dependencies group with 3 updates (#657)
  • e0e711e fix: correct wording in usage documentation for express-rate-limit (#656)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express-rate-limit since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates firebase-admin from 13.10.0 to 14.2.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v14.2.0

New Features

  • feat(functions): Implement TaskQueue Scopes (#3210)

Bug Fixes

  • fix(dataconnect): Refactor CRUD helpers to use GraphQL variables and @allow directive (#3182)

Miscellaneous

  • [chore] Release 14.2.0 (#3213)
  • build(deps): bump websocket-driver from 0.7.4 to 0.7.5 (#3212)
  • build(deps-dev): bump @​types/node from 26.0.0 to 26.1.1 (#3207)
  • build(deps-dev): bump nock from 14.0.15 to 14.0.16 (#3202)
  • fix zizmor findings (#3200)
  • Security Audit & Remediation: GitHub Actions (#3192)
  • Security audit: remove unused dependencies and remediate dev vulnerabilities (#3191)
  • build(deps-dev): bump mocha from 11.7.5 to 11.7.6 (#3196)
  • build(deps-dev): bump @​types/jsonwebtoken from 8.5.1 to 8.5.9 (#3195)
  • build(deps-dev): bump eslint from 10.4.1 to 10.5.0 (#3197)
  • build(deps): bump google-auth-library from 10.7.0 to 10.9.0 (#3198)

Firebase Admin Node.js SDK v14.1.0

New Features

  • feat(fcm): Enable fid and deprecate token for Send API (#3145)

Bug Fixes

  • fix(dataconnect): fix deserialization of emulator gRPC error codes into detailed errors (#3180)

Miscellaneous

  • [chore] Release 14.1.0 (#3193)
  • build(deps-dev): bump typescript-eslint packages to 8.62.0 (#3194)
  • build(deps-dev): bump @​types/node from 25.7.0 to 26.0.0 (#3184)
  • build(deps-dev): bump @​firebase/auth-compat from 0.6.6 to 0.6.8 (#3187)
  • build(deps-dev): bump @​microsoft/api-extractor from 7.58.1 to 7.58.9 (#3188)
  • build(deps-dev): bump @​firebase/app-compat from 0.5.12 to 0.5.13 (#3175)
  • build(deps-dev): bump shell-quote from 1.8.3 to 1.8.4 (#3173)
  • build(deps): bump @​google-cloud/storage from 7.19.0 to 7.21.0 (#3174)
  • build(deps): bump google-auth-library from 10.6.2 to 10.7.0 (#3176)
  • build(deps-dev): bump nyc from 17.1.0 to 18.0.0 (#3177)
  • build(deps): bump @​grpc/grpc-js from 1.14.3 to 1.14.4 (#3178)

Firebase Admin Node.js SDK v14.0.0

Breaking Changes

... (truncated)

Commits
  • 7343f16 [chore] Release 14.2.0 (#3213)
  • 07fa1b1 build(deps): bump websocket-driver from 0.7.4 to 0.7.5 (#3212)
  • 4681c28 feat(functions): Implement TaskQueue Scopes (#3210)
  • 1dae1f9 build(deps-dev): bump @​types/node from 26.0.0 to 26.1.1 (#3207)
  • bcae57a build(deps-dev): bump nock from 14.0.15 to 14.0.16 (#3202)
  • b231b75 fix zizmor findings (#3200)
  • ee31969 fix(dataconnect): Refactor CRUD helpers to use GraphQL variables and @​allow d...
  • c550a22 Security Audit & Remediation: GitHub Actions (#3192)
  • ad97c0c Security audit: remove unused dependencies and remediate dev vulnerabilities ...
  • 0cb9f79 build(deps-dev): bump mocha from 11.7.5 to 11.7.6 (#3196)
  • Additional commits viewable in compare view

Updates groq-sdk from 0.19.0 to 1.5.0

Release notes

Sourced from groq-sdk's releases.

v1.5.0

1.5.0 (2026-07-30)

Full Changelog: v1.4.1...v1.5.0

Features

v1.4.1

1.4.1 (2026-07-29)

Full Changelog: v1.4.0...v1.4.1

Chores

  • internal: codegen related update (873736d)

v1.4.0

1.4.0 (2026-07-24)

Full Changelog: v1.3.0...v1.4.0

Features

  • stlc: configurable CI runner and private-production-repo support in workflow templates (21fa0b8)

Bug Fixes

  • ci: bump @​arethetypeswrong/cli to ^0.18.0 and run CI workflows on Node 24 (4f98c9b)

Chores

v1.3.0

1.3.0 (2026-06-17)

Full Changelog: v1.2.1...v1.3.0

Features

... (truncated)

Changelog

Sourced from groq-sdk's changelog.

1.5.0 (2026-07-30)

Full Changelog: v1.4.1...v1.5.0

Features

1.4.1 (2026-07-29)

Full Changelog: v1.4.0...v1.4.1

Chores

  • internal: codegen related update (873736d)

1.4.0 (2026-07-24)

Full Changelog: v1.3.0...v1.4.0

Features

  • stlc: configurable CI runner and private-production-repo support in workflow templates (21fa0b8)

Bug Fixes

  • ci: bump @​arethetypeswrong/cli to ^0.18.0 and run CI workflows on Node 24 (4f98c9b)

Chores

1.3.0 (2026-06-17)

Full Changelog: v1.2.1...v1.3.0

Features

Bug Fixes

  • client: send content-type header for requests with an omitted optional body (96b775b)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for groq-sdk since your current version.


Updates helmet from 8.2.0 to 8.3.0

Changelog

Sourced from helmet's changelog.

8.3.0 - 2026-07-11

Changed

  • Content-Security-Policy: improved performance by ~7% when there are no dynamic directives
  • Content-Security-Policy: improved error handling for invalid directive names

Fixed

  • Content-Security-Policy: useDefaults: false with no directives is no longer valid, both at runtime and the type level
  • Content-Security-Policy: dynamically-computed directive values would throw, not call next, when invalid
  • Content-Security-Policy: dynamically-computed directive value entries would throw, not call next, when function threw
Commits
  • 75f1a98 8.3.0
  • f03f70d Update changelog for 8.3.0 release
  • a307fce Fix capitalization in CSP package changelog
  • 5347b43 Format default CSP in README for readability
  • 9afc570 CSP: fix middleware-specific README missing link
  • 266c95c Minor speedups to project setups test
  • 7a4196c CSP: update package-specific changelog
  • 02716b4 CSP: improve performance when there are no dynamic directives
  • 3f511ed CSP: move utility functions to separate file
  • 80338af CSP: disabling defaults with no directives is now an error
  • Additional commits viewable in compare view

Updates mongoose from 8.24.0 to 9.9.1

Release notes

Sourced from mongoose's releases.

9.9.1 / 2026-07-31

  • fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798
  • types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

  • perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
  • perf(model): improve insertMany() performance and general change tracking performance #16370
  • perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
  • perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
  • types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

9.8.1 / 2026-07-27

  • perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
  • perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
  • fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
  • perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
  • types: respect the _id option when inferring StandardSchema types #16402
  • types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
  • docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

9.7.4 / 2026-07-06

  • types(create): fix handling of nested objects typed as interfaces #16363 #16362
  • types: correct this parameter handling for methods with versionKey #16344 #16046
  • docs: add FAQ entry for querySrv ECONNREFUSED errors on Windows with mongodb+srv:// connections #16342 ajay naik

9.7.3 / 2026-06-26

  • types(model): correct Model.validate() return type to Promise #16340 #16338
  • types: use @​standard-schema/spec for StandardSchema types rather than inlining #16341 #16339

9.7.2 / 2026-06-22

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.9.1 / 2026-07-31

  • fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798 BIGSUS24
  • types(model): apply schema-level lean to find() #16413
  • types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

  • perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
  • perf(model): improve insertMany() performance and general change tracking performance #16370
  • perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
  • perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
  • types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

8.24.2 / 2026-07-27

9.8.1 / 2026-07-27

  • perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
  • perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
  • fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
  • perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
  • types: respect the _id option when inferring StandardSchema types #16402
  • types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
  • docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

9.7.4 / 2026-07-06

  • types(create): fix handling of nested objects typed as interfaces #16363 #16362
  • types: correct this parameter handling for methods with versionKey #16344 #16046
  • docs: add FAQ entry for querySrv ECONNREFUSED errors on Windows with mongodb+srv:// connections #16342 ajay naik

... (truncated)

Commits
  • a510d89 chore: release 9.9.1
  • 1287a37 Merge pull request #16414 from Automattic/vkarpov15/gh-16413
  • cddce69 types: add lean: false overrides for remaining find operations
  • 3d301c9 types(model): support lean: false overriding schema-level lean option re: #16413
  • 95935a7 Merge pull request #16409 from BIGSUS24/fix/subdocument-select-false-projecti...
  • e970583 types(model): handle { lean: true } schema option on Model.find() types
  • c14e17e docs: add missing changelog entry
  • 650c286 chore: release 9.9.0
  • 0b4ef8a test: improve flakey test
  • 2ccf221 Merge pull request #16412 from Automattic/vkarpov15/gh-16045-3
  • Additional commits viewable in compare view

Updates multer from 2.1.1 to 2.2.0

Release notes

Sourced from multer's releases.

v2.2.0

Important

What's Changed

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
d9a0e1c 
…y with 35 updates

Bumps the production-dependencies group with 34 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.1` | `10.0.4` |
| [@huggingface/inference](https://github.com/huggingface/huggingface.js) | `4.13.18` | `4.13.24` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.4.2` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `7.5.1` | `8.6.1` |
| [firebase-admin](https://github.com/firebase/firebase-admin-node) | `13.10.0` | `14.2.0` |
| [groq-sdk](https://github.com/groq/groq-typescript) | `0.19.0` | `1.5.0` |
| [helmet](https://github.com/helmetjs/helmet) | `8.2.0` | `8.3.0` |
| [mongoose](https://github.com/Automattic/mongoose) | `8.24.0` | `9.9.1` |
| [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.2.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `7.0.13` | `9.0.3` |
| [pdf-parse](https://github.com/mehmet-kozan/pdf-parse) | `1.1.1` | `2.4.5` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` |
| [@fontsource/inter](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/inter) | `5.2.5` | `5.3.0` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.16` | `1.1.23` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.9` | `2.1.15` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.0` | `2.3.7` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.5` | `1.3.3` |
| [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.0` | `1.3.7` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.0` | `4.3.3` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.0` | `5.101.4` |
| [axios](https://github.com/axios/axios) | `1.17.0` | `1.19.0` |
| [firebase](https://github.com/firebase/firebase-js-sdk) | `11.10.0` | `12.17.0` |
| [jspdf](https://github.com/parallax/jsPDF) | `3.0.4` | `4.2.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.522.0` | `1.28.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `6.30.4` | `7.18.2` |
| [recharts](https://github.com/recharts/recharts) | `3.8.1` | `3.10.1` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `10.0.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.7.0` | `6.0.5` |
| [globals](https://github.com/sindresorhus/globals) | `16.5.0` | `17.9.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.3` | `8.2.0` |



Updates `concurrently` from 9.2.1 to 10.0.4
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v9.2.1...v10.0.4)

Updates `@huggingface/inference` from 4.13.18 to 4.13.24
- [Release notes](https://github.com/huggingface/huggingface.js/releases)
- [Commits](huggingface/huggingface.js@inference-v4.13.18...inference-v4.13.24)

Updates `dotenv` from 16.6.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.6.1...v17.4.2)

Updates `express-rate-limit` from 7.5.1 to 8.6.1
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v7.5.1...v8.6.1)

Updates `firebase-admin` from 13.10.0 to 14.2.0
- [Release notes](https://github.com/firebase/firebase-admin-node/releases)
- [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-admin-node@v13.10.0...v14.2.0)

Updates `groq-sdk` from 0.19.0 to 1.5.0
- [Release notes](https://github.com/groq/groq-typescript/releases)
- [Changelog](https://github.com/groq/groq-typescript/blob/main/CHANGELOG.md)
- [Commits](groq/groq-typescript@v0.19.0...v1.5.0)

Updates `helmet` from 8.2.0 to 8.3.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v8.2.0...v8.3.0)

Updates `mongoose` from 8.24.0 to 9.9.1
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@8.24.0...9.9.1)

Updates `multer` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.1.1...v2.2.0)

Updates `nodemailer` from 7.0.13 to 9.0.3
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v7.0.13...v9.0.3)

Updates `pdf-parse` from 1.1.1 to 2.4.5
- [Release notes](https://github.com/mehmet-kozan/pdf-parse/releases)
- [Commits](https://github.com/mehmet-kozan/pdf-parse/commits/v2.4.5)

Updates `zod` from 3.25.76 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.4.3)

Updates `@fontsource/inter` from 5.2.5 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/inter)

Updates `@radix-ui/react-dialog` from 1.1.16 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-label` from 2.1.9 to 2.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label)

Updates `@radix-ui/react-select` from 2.3.0 to 2.3.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select)

Updates `@radix-ui/react-slot` from 1.2.5 to 1.3.3
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@radix-ui/react-switch` from 1.3.0 to 1.3.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch)

Updates `@tailwindcss/vite` from 4.3.0 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `@tanstack/react-query` from 5.101.0 to 5.101.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query)

Updates `axios` from 1.17.0 to 1.19.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.17.0...v1.19.0)

Updates `firebase` from 11.10.0 to 12.17.0
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@11.10.0...firebase@12.17.0)

Updates `jspdf` from 3.0.4 to 4.2.1
- [Release notes](https://github.com/parallax/jsPDF/releases)
- [Changelog](https://github.com/parallax/jsPDF/blob/master/RELEASE.md)
- [Commits](parallax/jsPDF@v3.0.4...v4.2.1)

Updates `lucide-react` from 0.522.0 to 1.28.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-router-dom` from 6.30.4 to 7.18.2
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.2/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.2/packages/react-router-dom)

Updates `recharts` from 3.8.1 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.8.1...v3.10.1)

Updates `tailwindcss` from 4.3.0 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `@eslint/js` from 9.39.4 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 4.7.0 to 6.0.5
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react)

Updates `globals` from 16.5.0 to 17.9.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v16.5.0...v17.9.0)

Updates `vite` from 6.4.3 to 8.2.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite)

---
updated-dependencies:
- dependency-name: concurrently
  dependency-version: 10.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@huggingface/inference"
  dependency-version: 4.13.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: express-rate-limit
  dependency-version: 8.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: firebase-admin
  dependency-version: 14.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: groq-sdk
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: helmet
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: mongoose
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: multer
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: nodemailer
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: pdf-parse
  dependency-version: 2.4.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@fontsource/inter"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-label"
  dependency-version: 2.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-select"
  dependency-version: 2.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-switch"
  dependency-version: 1.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: axios
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: firebase
  dependency-version: 12.17.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: jspdf
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.18.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: globals
  dependency-version: 17.9.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: vite
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 6, 2026
@vercel

vercel Bot commented Aug 6, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
prepedge_ai Ready Ready Preview Aug 6, 2026 1:48am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@CoderUzumaki