deps(deps): bump the npm-production group with 7 updates - #108
deps(deps): bump the npm-production group with 7 updates#108dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm-production group with 7 updates: | Package | From | To | | --- | --- | --- | | [ioredis](https://github.com/luin/ioredis) | `5.10.1` | `5.11.1` | | [jose](https://github.com/panva/jose) | `6.2.2` | `6.2.3` | | [next](https://github.com/vercel/next.js) | `15.5.14` | `16.2.9` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.7` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.7` | | [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.1` | | [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` | Updates `ioredis` from 5.10.1 to 5.11.1 - [Release notes](https://github.com/luin/ioredis/releases) - [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md) - [Commits](redis/ioredis@v5.10.1...v5.11.1) Updates `jose` from 6.2.2 to 6.2.3 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.2...v6.2.3) Updates `next` from 15.5.14 to 16.2.9 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.5.14...v16.2.9) Updates `react` from 19.2.4 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.4 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `uuid` from 13.0.0 to 14.0.1 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v13.0.0...v14.0.1) Updates `zod` from 3.25.76 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.4.3) --- updated-dependencies: - dependency-name: ioredis dependency-version: 5.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: jose dependency-version: 6.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: next dependency-version: 16.2.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: uuid dependency-version: 14.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 762bf6ee2e
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "react": "^19.2.7", | ||
| "react-dom": "^19.2.7", | ||
| "uuid": "^14.0.1", | ||
| "zod": "^4.4.3" |
There was a problem hiding this comment.
Migrate Zod 4 call sites before bumping
With npm-based installs (for example .github/workflows/web.yml runs npm ci and then npm run typecheck), this pulls Zod 4 while the app still contains Zod 3-only APIs such as z.string().ip() in src/lib/location/radius-dhcp.ts:67-72, one-argument z.record(...) calls like src/lib/integrations/itsm/store.ts:43, and ZodError.errors in src/app/api/admin/integrations/itsm/templates/route.ts:87. Zod's v4 migration guide documents that .ip(), single-argument z.record(), and .errors were removed (https://zod.dev/v4/changelog), so typecheck/build will fail under the updated lockfile; either keep Zod 3 or migrate these call sites in the same change.
Useful? React with 👍 / 👎.
Bumps the npm-production group with 7 updates:
5.10.15.11.16.2.26.2.315.5.1416.2.919.2.419.2.719.2.419.2.713.0.014.0.13.25.764.4.3Updates
ioredisfrom 5.10.1 to 5.11.1Release notes
Sourced from ioredis's releases.
Changelog
Sourced from ioredis's changelog.
Commits
fb224a7chore(release): 5.11.1 [skip ci]131ee24fix: parse protocol-relative Redis URLs as TCP connections (#2125)c84b2eefix(cluster): reconnect to nodes that restart without slot changes (#2096)1490432chore(release): 5.11.0 [skip ci]5359d4drefactor(utils): inline defaults and isArguments helpers (#2107)b7b3deffeat: add vector set command support (#2116)faa53fdci: update Node.js and Redis test matrix (#2119)37d0695feat: add increx command (#2115)612ee9dchore: update Redis 8.8 test image to custom (#2118)baf68d6feat: add array commands, typings and tests (#2114)Updates
josefrom 6.2.2 to 6.2.3Release notes
Sourced from jose's releases.
Changelog
Sourced from jose's changelog.
Commits
41ad7e9chore(release): 6.2.3988e90fchore: account for commit-and-tag-version instead of standard-version4b24656chore: update CHANGELOG.md header0cdb851refactor: cleanly reject invalid PBES2 p2ca0b261etest: update Bun expectationsb39dc1achore: use fs.globSync0675be1build: replace rollup umd build with a custom esbuild iife wrap9b03323chore: bump packages914b73dchore(deps-dev): bump lodash9dce817chore: bump packagesUpdates
nextfrom 15.5.14 to 16.2.9Release notes
Sourced from next's releases.
... (truncated)
Commits
f37fad9v16.2.9d9aaaed[cd] Allow tagging semver-lower releases as@latestif@latestpo… (#94627)6f16804v16.2.80dbc1d5[16.2.x][cd] Ensure release can be triggered on old branches (#94598)90e3c81[16.2.x] Align Actions dependencies with Canary (#94339)83f402c[16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)411c455v16.2.7c63224f[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...63115c7[16.2.x] Don't dropFormDataentries (#94240)aef22fd[backport] Propagate adapter preferred regions (#94200)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.
Updates
reactfrom 19.2.4 to 19.2.7Release notes
Sourced from react's releases.
Changelog
Sourced from react's changelog.
Commits
6117d7cVersion 19.2.7 (#36591)eaf3e95Version 19.2.623f4f9f19.2.5Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.
Updates
react-domfrom 19.2.4 to 19.2.7Release notes
Sourced from react-dom's releases.
Changelog
Sourced from react-dom's changelog.
Commits
6117d7cVersion 19.2.7 (#36591)eaf3e95Version 19.2.623f4f9f19.2.5Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.
Updates
uuidfrom 13.0.0 to 14.0.1Release notes
Sourced from uuid's releases.
Changelog
Sourced from uuid's changelog.
Commits
7017780chore(main): release 14.0.1 (#964)f2c3e4bchore: fix release-please workflow (#963)27ffae5fix: add types condition to node export for moduleResolution bundler (#961)664cb31Remove outdated security contact information (#959)d729016fix(ci): checkout PR head commit in browser workflow (#957)89a5ebcWorkflows (#948)196e208chore: fix workflow (#947)95af448chore: update workflows (#946)3b57f95chore: add workflow_dispatch (#944)a433096chore: add 12.x and 13.x maintenance release branches (#941)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
zodfrom 3.25.76 to 4.4.3Release notes
Sourced from zod's releases.
... (truncated)
Commits
1fb56a5docs: document release procedure in AGENTS.mdf3c9ec04.4.3c2be4f8fix(v4): generalize optin/fallback to transform; restore preprocess on absent...1cab693fix(v4): restore catch handling for absent object keys (#5937) (#5939)b8dffe9docs: remove Numeric and Speakeasy (2+ missed monthly cycles)9195250docs: remove Mintlify from bronze sponsors (churned)2c70332docs: normalize bronze sponsor logos to github avatar pattern7391be8docs: prune lapsed silver/bronze sponsors and add active ones2aeec83docs: prune lapsed gold sponsors and rebalance logo sizing4c2fa95docs: use Zernio primary wordmark for gold sponsor logoMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions