Skip to content

Bump the minor-and-patch group across 1 directory with 15 updates#32

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-338b10c4da
Closed

Bump the minor-and-patch group across 1 directory with 15 updates#32
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-338b10c4da

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 15 updates in the / directory:

Package From To
@vercel/blob 2.4.1 2.6.1
ai 7.0.0-beta.178 7.0.18
better-auth 1.6.20 1.6.23
motion 12.41.0 12.42.2
neo4j-driver 6.1.0 6.2.0
next 16.2.9 16.2.10
react-icons 5.6.0 5.7.0
recharts 3.8.1 3.9.2
resend 6.14.0 6.17.1
workflow 4.5.0 4.6.0
@playwright/test 1.61.0 1.61.1
csv-parse 7.0.0 7.0.1
microsandbox 0.5.7 0.6.6
tsx 4.22.4 4.23.0
vitest 4.1.9 4.1.10

Updates @vercel/blob from 2.4.1 to 2.6.1

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.6.1

Patch Changes

  • d0118c4: Add a useCache option to presignUrl() for get operations. When useCache: false, the presigned URL includes a cache=0 query param so fetches bypass the CDN cache and read the latest content directly from origin storage. Like get(), the bypass only applies to private blobs. The param is not part of the signed payload, so holders of a presigned URL can also add or remove it manually.

@​vercel/blob@​2.6.0

Minor Changes

  • c4976ba: Add rename(fromUrlOrPathname, toPathname, options) to move a blob to another pathname. The blob is copied to the new pathname and the source is deleted afterwards; if the copy fails the source is left untouched. By default renaming onto an existing blob throws — pass allowOverwrite: true to replace it, or addRandomSuffix: true to generate a unique destination. Requires a read-write token (client tokens are not supported).
  • 89d94e9: Restore the useCache option on get(). Passing useCache: false bypasses the CDN cache and serves the blob directly from origin storage (via the cache=0 query parameter), guaranteeing the latest content at the cost of slower reads. Defaults to true.

@​vercel/blob@​2.5.0

Minor Changes

  • 31a8b8f: Deprecate the useCache option on get(). The backend no longer honors the cache=0 query parameter it produced, so the option is now a no-op — reads always go through the standard caching path. The option is still accepted (and ignored) to avoid breaking existing callers, and will be removed in a future major version.

Patch Changes

  • 9ac2586: Read the Vercel OIDC token via @vercel/oidc's refreshing getVercelOidcToken instead of the non-refreshing getVercelOidcTokenSync. This refreshes an expired token in development environments. In production with a valid token, behavior is unchanged. If a refresh is needed but fails, the token is treated as absent so callers still fall back to BLOB_READ_WRITE_TOKEN.
Changelog

Sourced from @​vercel/blob's changelog.

2.6.1

Patch Changes

  • d0118c4: Add a useCache option to presignUrl() for get operations. When useCache: false, the presigned URL includes a cache=0 query param so fetches bypass the CDN cache and read the latest content directly from origin storage. Like get(), the bypass only applies to private blobs. The param is not part of the signed payload, so holders of a presigned URL can also add or remove it manually.

2.6.0

Minor Changes

  • c4976ba: Add rename(fromUrlOrPathname, toPathname, options) to move a blob to another pathname. The blob is copied to the new pathname and the source is deleted afterwards; if the copy fails the source is left untouched. By default renaming onto an existing blob throws — pass allowOverwrite: true to replace it, or addRandomSuffix: true to generate a unique destination. Requires a read-write token (client tokens are not supported).
  • 89d94e9: Restore the useCache option on get(). Passing useCache: false bypasses the CDN cache and serves the blob directly from origin storage (via the cache=0 query parameter), guaranteeing the latest content at the cost of slower reads. Defaults to true.

2.5.0

Minor Changes

  • 31a8b8f: Deprecate the useCache option on get(). The backend no longer honors the cache=0 query parameter it produced, so the option is now a no-op — reads always go through the standard caching path. The option is still accepted (and ignored) to avoid breaking existing callers, and will be removed in a future major version.

Patch Changes

  • 9ac2586: Read the Vercel OIDC token via @vercel/oidc's refreshing getVercelOidcToken instead of the non-refreshing getVercelOidcTokenSync. This refreshes an expired token in development environments. In production with a valid token, behavior is unchanged. If a refresh is needed but fails, the token is treated as absent so callers still fall back to BLOB_READ_WRITE_TOKEN.
Commits

Updates ai from 7.0.0-beta.178 to 7.0.18

Release notes

Sourced from ai's releases.

ai@7.0.18

Patch Changes

  • Updated dependencies [ac306ed]
    • @​ai-sdk/provider-utils@​5.0.6
    • @​ai-sdk/gateway@​4.0.14

ai@7.0.17

Patch Changes

  • Updated dependencies [cad8227]
    • @​ai-sdk/gateway@​4.0.13
Changelog

Sourced from ai's changelog.

7.0.18

Patch Changes

  • Updated dependencies [ac306ed]
    • @​ai-sdk/provider-utils@​5.0.6
    • @​ai-sdk/gateway@​4.0.14

7.0.17

Patch Changes

  • Updated dependencies [cad8227]
    • @​ai-sdk/gateway@​4.0.13

7.0.16

Patch Changes

  • a8f9b6d: Preserve signed tool approval metadata when recording approval responses.

7.0.15

Patch Changes

  • Updated dependencies [0c3c7e4]
  • Updated dependencies [c8d2726]
    • @​ai-sdk/gateway@​4.0.12

7.0.14

Patch Changes

  • 5c5c0f5: Add experimental streaming transcription support for transcription models, including OpenAI gpt-realtime-whisper and xAI WebSocket STT.
  • Updated dependencies [5c5c0f5]
    • @​ai-sdk/provider@​4.0.2
    • @​ai-sdk/provider-utils@​5.0.5
    • @​ai-sdk/gateway@​4.0.11

7.0.13

Patch Changes

  • Updated dependencies [31abef7]
    • @​ai-sdk/gateway@​4.0.10

7.0.12

Patch Changes

... (truncated)

Commits

Updates better-auth from 1.6.20 to 1.6.23

Release notes

Sourced from better-auth's releases.

v1.6.23

better-auth

Features

  • Added Yandex as a social OAuth provider (#9138)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

  • Fixed affected row counting for D1 and postgres-js adapters (#10257)

For detailed changes, see CHANGELOG

@better-auth/stripe

Bug Fixes

  • Fixed organization subscription actions (cancel, upgrade, restore, and the billing portal) that could act on the wrong organization.

For detailed changes, see CHANGELOG

auth

Bug Fixes

  • Fixed string default values not being properly escaped in the generated Drizzle schema (#10259)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​vladflotsky

Full changelog: v1.6.22...v1.6.23

v1.6.22

better-auth

Bug Fixes

  • Fixed unproven credentials not being revoked during magic link and email OTP sign-in (#10239)
  • Fixed server-side OAuth requests to refuse redirect responses instead of following them (#10241)

For detailed changes, see CHANGELOG

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.6.23

Patch Changes

  • #9138 8581f97 Thanks @​vladflotsky! - Add a pre-configured Yandex provider helper for the generic OAuth plugin.

  • Updated dependencies [930b260]:

    • @​better-auth/drizzle-adapter@​1.6.23
    • @​better-auth/core@​1.6.23
    • @​better-auth/kysely-adapter@​1.6.23
    • @​better-auth/memory-adapter@​1.6.23
    • @​better-auth/mongo-adapter@​1.6.23
    • @​better-auth/prisma-adapter@​1.6.23
    • @​better-auth/telemetry@​1.6.23

1.6.22

Patch Changes

  • #10239 c06a56d Thanks @​gustavovalverde! - Magic-link and email-OTP sign-in now reset the credentials on an account whose email had never been confirmed. When verification resolves to such an account, any existing password on it is removed and its sessions are revoked before the user is signed in, so proven control of the mailbox is the source of truth for the account.

    If you signed up with email and password but first signed in through a magic link or email OTP rather than confirming the verification email, your password is cleared and you will need to set a new one through password reset.

  • #10240 3a035e9 Thanks @​gustavovalverde! - Add account-level lockout for two-factor verification. The attempt limit applies per account across sign-in challenges and across factors: TOTP, email-OTP, and backup codes share one counter, and a successful verification resets it.

    Enabled by default: an account locks for 15 minutes after 10 consecutive failed verifications, and locked attempts return 429 with the ACCOUNT_TEMPORARILY_LOCKED error code. Configure it with twoFactor({ accountLockout: { enabled, maxFailedAttempts, durationSeconds } }).

    Run a database migration after upgrading: this adds failedVerificationCount and lockedUntil columns to the twoFactor table.

  • Updated dependencies [8bd43d9]:

    • @​better-auth/core@​1.6.22
    • @​better-auth/drizzle-adapter@​1.6.22
    • @​better-auth/kysely-adapter@​1.6.22
    • @​better-auth/memory-adapter@​1.6.22
    • @​better-auth/mongo-adapter@​1.6.22
    • @​better-auth/prisma-adapter@​1.6.22
    • @​better-auth/telemetry@​1.6.22

1.6.21

Patch Changes

  • #10212 e0762a1 Thanks @​bytaesu! - In root-mounted deployments, requests whose path does not start with the configured basePath now return 404 instead of resolving to an endpoint.

  • #10187 882cf9e Thanks @​ping-maxwell! - Admin permission changes and bans now take effect immediately for admin APIs, even when session cookie cache is enabled. Sensitive session checks also continue to work in stateless apps where signed cookies are the session record.

  • #9939 f52e1ab Thanks @​benpsnyder! - fixes a bug causing deviceAuthorization() throwing a ZodError at construction when called without a schema option

  • #10196 b5bec19 Thanks @​Paola3stefania! - OAuth sign-up and account-link profile sync now ignore provider profile values for user fields marked input: false. Input-allowed additional fields still persist from mapProfileToUser, and schema defaults still apply when OAuth creates a user. Apps that used mapProfileToUser to fill input: false fields should set those fields in server-side provisioning code instead.

... (truncated)

Commits

Updates motion from 12.41.0 to 12.42.2

Changelog

Sourced from motion's changelog.

[12.42.2] 2026-07-01

Fixed

  • animateView: Cropped group layers now animate border-radius from the old to new radius.

[12.42.1] 2026-06-30

Fixed

  • animateView: Old layer fade out now cancelled when defining .new().

[12.42.0] 2026-06-24

Changed

  • animateView: Layers are automatically grouped to match their DOM-hierarchy. New .group(false) method opts-out.

Fixed

  • animateView: Auto-crop is now aspect-ratio aware, disabling crops for matching aspect-ratios.
  • animateView: Disabled automatic border-radius animation.
Commits
  • 40e8756 v12.42.2
  • 718ccc7 Merge pull request #3768 from motiondivision/view-cropped-corner-radius
  • 19195a4 Dedupe corner-radius longhands; merge crop box/radii measurements
  • 5299aa6 Resolve cropped-clip radius timing once; fix transition-option leak
  • 937cdf3 Animate cropped view-transition group corner radius
  • fd2d6f6 v12.42.1
  • 2223d87 Hold the old layer when only a non-opacity .new() is set
  • 9c84145 v12.42.0
  • 60d7c72 Add view-transition group nesting and aspect-aware cropping
  • 6437276 Updating
  • See full diff in compare view

Updates neo4j-driver from 6.1.0 to 6.2.0

Commits

Updates next from 16.2.9 to 16.2.10

Release notes

Sourced from next's releases.

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

Commits

Updates react-icons from 5.6.0 to 5.7.0

Release notes

Sourced from react-icons's releases.

v5.7.0

What's Changed

Full Changelog: react-icons/react-icons@v5.6.0...v5.7.0

Icon Library License Version Count
Circum Icons MPL-2.0 license 1.0.0 288
Font Awesome 5 CC BY 4.0 License 5.15.4-3-gafecf2a 1612
Font Awesome 6 CC BY 4.0 License 6.7.2-1-g840c215 2060
Ionicons 4 MIT 4.6.3 696
Ionicons 5 MIT 5.5.4 1332
Material Design icons Apache License Version 2.0 4.0.0-161-gf3fb4442b2 4341
Typicons CC BY-SA 3.0 2.1.2 336
Github Octicons icons MIT 18.3.0 264
Feather MIT 4.29.2 287
Lucide ISC 0.462.0 1541
Game Icons CC BY 3.0 12920d6565588f0512542a3cb0cdfd36a497f910 4040
Weather Icons SIL OFL 1.1 2.0.12 219
Devicons MIT 1.8.0 192
Ant Design Icons MIT 4.4.2 831
Bootstrap Icons MIT 1.13.1 2754
Remix Icon Apache License Version 2.0 4.9.1 3229
Flat Color Icons MIT 1.0.2 329
Grommet-Icons Apache License Version 2.0 4.14.0 637
Heroicons MIT 1.0.6 460
Heroicons 2 MIT 2.2.0 972
Simple Icons CC0 1.0 Universal 16.24.0 3446
Simple Line Icons MIT 2.5.5 189
IcoMoon Free CC BY 4.0 License d006795ede82361e1bac1ee76f215cf1dc51e4ca 491
BoxIcons MIT 2.1.4 1634
css.gg MIT 2.1.4 704
VS Code Icons CC BY 4.0 0.0.0 612
Tabler Icons MIT 3.44.0 6146
Themify Icons MIT v0.1.2-2-g9600186 352
Radix Icons MIT @​radix-ui/react-icons@​1.3.2-35-g112af91 332
Phosphor Icons MIT 2.1.1 9072
Icons8 Line Awesome MIT 1.3.1 1544
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-icons since your current version.


Updates recharts from 3.8.1 to 3.9.2

Release notes

Sourced from recharts's releases.

v3.9.2

What's Changed

New Contributors

Full Changelog: recharts/recharts@v3.9.1...v3.9.2

v3.9.1

What's Changed

New Contributors

Full Changelog: recharts/recharts@v3.9.0...v3.9.1

v3.9.0

What's Changed

Animations

3.9 comes with new animations! There are several bug fixes and what's best, all animations are now fully customizable.

See the animations guide on https://recharts.github.io/en-US/guide/animations/

... (truncated)

Commits
  • b345105 3.9.2
  • f27779c npm i
  • 85f9369 chore(deps-dev): bump prettier from 3.8.4 to 3.9.4 (#7520)
  • 52a2a89 fix(Sankey): avoid exponential depth traversal on dense graphs (#7479)
  • 8a056c1 chore(deps-dev): bump rollup from 4.61.1 to 4.62.2 (#7527)
  • 2af6ec6 chore(deps): bump immer from 11.1.8 to 11.1.9 (#7526)
  • 6f10d53 docs: clarify custom labels and ticks need SVG elements (#7524)
  • c04f1a7 chore(deps-dev): bump lint-staged from 17.0.7 to 17.0.8 (#7521)
  • 69c7a96 chore(deps-dev): bump glob from 11.1.0 to 13.0.6 (#7522)
  • 6efaf16 chore(deps): bump es-toolkit from 1.47.0 to 1.49.0 (#7515)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for recharts since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates resend from 6.14.0 to 6.17.1

Release notes

Sourced from resend's releases.

v6.17.1

remove resource field, it was a dead field (0572834)

v6.17.0

What's Changed

Full Changelog: resend/resend-node@v6.16.0...v6.17.0

v6.16.0

What's Changed

Full Changelog: resend/resend-node@v6.15.0...v6.16.0

v6.15.0

What's Changed

Full Changelog: resend/resend-node@v6.14.0...v6.15.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for resend since your current version.


Updates workflow from 4.5.0 to 4.6.0

Release notes

Sourced from workflow's releases.

workflow@4.6.0

@​workflow/core@​4.6.0

  • #1853 f2ad726 @​TooTallNate - Add wire-level framing for byte streams (type: 'bytes') so consumers can identify chunk boundaries — a prerequisite for transparent auto-reconnect.
  • #2397 20a6d73 @​pranaygp - start({ deploymentId: 'latest' }) is now a no-op in Worlds that don't support atomic deployments (local dev, Postgres) instead of throwing — it logs a warning and targets the current deployment, so workflows that use 'latest' on Vercel still run locally.
  • #2473 015452a @​pranaygp - Drain consecutively consumable replay events in a single synchronous pass instead of one process.nextTick per event, removing O(N) macrotask hops from replay.
  • #2768 d0e4191 @​VaguelySerious - Correct the byte-stream framing capability cutoff so framed byte streams are never written to deployments that cannot decode them
  • #2522 5a4c6cf @​VaguelySerious - Cache the local dev server port per process so workflow replays no longer re-run OS port discovery (which spawns lsof on macOS, ~60ms) on every replay.
  • #2511 db8a2c4 @​VaguelySerious - Emit workflowName on per-step events (step_created, step_completed) so Worlds can access it without additional queries
  • #2471 170ea96 @​pranaygp - Cache the compiled workflow-bundle vm.Script per process so replays reuse the compiled bundle instead of re-parsing it on every iteration.
  • #2472 0a5e2aa @​pranaygp - Memoize hydrated step return values across inline replay iterations, turning the per-invocation step-result decrypt+parse cost from O(N²) to O(N) for sequential workflows. Only primitive results are cached, so deterministic replay is preserved.
  • #2565 a4dd59b @​ijjk - Collapse default workflow build output to a single completion summary and move detailed progress logs behind DEBUG=workflow:build.
  • #2445 67fcf1a @​pranaygp - Treat transient world-vercel transport failures as retryable, surfacing them as a TRANSPORT type WorkflowWorldError, to be retried by the queue instead of failing the run.

@​workflow/cli@​4.3.0

  • #2467 3bb5de1 @​pranaygp - Add a --url flag to inspect/web that prints the run's dashboard deep link to stdout and exits (no browser, no server), and fix the Vercel dashboard URL to use the current …/workflows/runs/<id>?environment=<env> route (respecting --env).

@​workflow/world@​4.2.1

  • #2295 f9119d4 @​TooTallNate - Fix world-local and world-postgres turning duplicate processing of the same hook_created (same runId, hookId, and token) into a self-conflict; both worlds now treat same-entity duplicates as idempotent (matching step_created), and recover crash-orphaned token claims (world-local) and hook rows (world-postgres) by completing the partial write instead of incorrectly suppressing it.
  • #2511 db8a2c4 @​Va...

    Description has been truncated

@dependabot
Bump the minor-and-patch group across 1 directory with 15 updates
4a3b870 
Bumps the minor-and-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.4.1` | `2.6.1` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.0-beta.178` | `7.0.18` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.6.20` | `1.6.23` |
| [motion](https://github.com/motiondivision/motion) | `12.41.0` | `12.42.2` |
| [neo4j-driver](https://github.com/neo4j/neo4j-javascript-driver) | `6.1.0` | `6.2.0` |
| [next](https://github.com/vercel/next.js) | `16.2.9` | `16.2.10` |
| [react-icons](https://github.com/react-icons/react-icons) | `5.6.0` | `5.7.0` |
| [recharts](https://github.com/recharts/recharts) | `3.8.1` | `3.9.2` |
| [resend](https://github.com/resend/resend-node) | `6.14.0` | `6.17.1` |
| [workflow](https://github.com/vercel/workflow/tree/HEAD/packages/workflow) | `4.5.0` | `4.6.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.0` | `1.61.1` |
| [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `7.0.0` | `7.0.1` |
| [microsandbox](https://github.com/microsandbox/microsandbox) | `0.5.7` | `0.6.6` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` |



Updates `@vercel/blob` from 2.4.1 to 2.6.1
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.6.1/packages/blob)

Updates `ai` from 7.0.0-beta.178 to 7.0.18
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.18/packages/ai)

Updates `better-auth` from 1.6.20 to 1.6.23
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.6.23/packages/better-auth)

Updates `motion` from 12.41.0 to 12.42.2
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.41.0...v12.42.2)

Updates `neo4j-driver` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/neo4j/neo4j-javascript-driver/releases)
- [Commits](neo4j/neo4j-javascript-driver@6.1.0...6.2.0)

Updates `next` from 16.2.9 to 16.2.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.9...v16.2.10)

Updates `react-icons` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/react-icons/react-icons/releases)
- [Commits](react-icons/react-icons@v5.6.0...v5.7.0)

Updates `recharts` from 3.8.1 to 3.9.2
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.8.1...v3.9.2)

Updates `resend` from 6.14.0 to 6.17.1
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v6.14.0...v6.17.1)

Updates `workflow` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/vercel/workflow/releases)
- [Changelog](https://github.com/vercel/workflow/blob/workflow@4.6.0/packages/workflow/CHANGELOG.md)
- [Commits](https://github.com/vercel/workflow/commits/workflow@4.6.0/packages/workflow)

Updates `@playwright/test` from 1.61.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.61.1)

Updates `csv-parse` from 7.0.0 to 7.0.1
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.1/packages/csv-parse)

Updates `microsandbox` from 0.5.7 to 0.6.6
- [Release notes](https://github.com/microsandbox/microsandbox/releases)
- [Commits](superradcompany/microsandbox@v0.5.7...v0.6.6)

Updates `tsx` from 4.22.4 to 4.23.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.0)

Updates `vitest` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vercel/blob"
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ai
  dependency-version: 7.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: better-auth
  dependency-version: 1.6.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: motion
  dependency-version: 12.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: neo4j-driver
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-icons
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: recharts
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: resend
  dependency-version: 6.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: workflow
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: csv-parse
  dependency-version: 7.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: microsandbox
  dependency-version: 0.6.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 8, 2026
@vercel

vercel Bot commented Jul 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
trail-graph Ready Ready Preview, Comment Jul 8, 2026 5:40pm

Request Review

@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 22, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-338b10c4da branch July 22, 2026 17:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants