Bump the minor-and-patch group across 1 directory with 13 updates

[dependabot]

Bumps the minor-and-patch group with 11 updates in the / directory:

Package	From	To
@supabase/supabase-js	2.110.5	2.112.2
next	16.2.10	16.3.0
react	19.2.7	19.2.8
@types/react	19.2.17	19.2.18
react-dom	19.2.7	19.2.8
@types/react-dom	19.2.3	19.2.4
@tailwindcss/postcss	4.3.2	4.3.3
@vitejs/plugin-react	6.0.3	6.0.5
axe-core	4.12.1	4.13.0
eslint-config-next	16.2.10	16.3.0
happy-dom	20.10.6	20.11.2

Updates @supabase/supabase-js from 2.110.5 to 2.112.2

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

• realtime: prevent duplicate on bindings (#2594)
• realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

• Filipe Cabaço @​filipecabaco
• Vaibhav @​7ttp

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

• realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

• Vaibhav @​7ttp

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

🩹 Fixes

• realtime: prevent duplicate on bindings (#2594)

❤️ Thank You

• Filipe Cabaço @​filipecabaco

v2.112.1

2.112.1 (2026-08-05)

🩹 Fixes

• auth: preserve 5xx error message (#2587)
• realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

• Eduardo Gurgel
• Vaibhav @​7ttp

v2.112.1-canary.1

2.112.1-canary.1 (2026-08-05)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

• realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

• Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

• supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

• supabase: forward db retry option (#2571)

❤️ Thank You

• Katerina Skroumpelou @​mandarini
• Vaibhav @​7ttp

2.111.0 (2026-07-28)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.9 (2026-07-27)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.8 (2026-07-21)

🩹 Fixes

• supabase: skip Node warning in Deno (#2541)

❤️ Thank You

• Vaibhav @​7ttp

2.110.7 (2026-07-16)

🩹 Fixes

... (truncated)

Commits

• 07b27ee chore(release): version 2.112.1 changelogs (#2593)
• 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
• 0136f34 chore(release): version 2.112.0 changelogs (#2589)
• 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
• a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
• e6c975c fix(supabase): forward db retry option (#2571)
• a262492 chore(release): version 2.111.0 changelogs (#2572)
• 18b5bb2 chore(release): version 2.110.9 changelogs (#2567)
• fc2e61e chore(repo): bump postcss override and fix playwright 1.62 tsconfig failure (...
• 22050de chore(release): version 2.110.8 changelogs (#2546)
• Additional commits viewable in compare view

Updates next from 16.2.10 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

• Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
• Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
• Normalize encoded dynamic placeholders in app routes: #91603
• Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
• Update tokio from 1.43.0 to 1.47.3: #90945
• [turbopack] Simplify snapshotting logic: #91178
• Turbopack: enable server HMR for app route handlers: #91466
• turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
• [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
• Skip loadBindings() Lightning CSS check during next start: #91538
• turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
• Turbopack: Add importModule() support to webpack loaders: #89630
• turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
• turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
• feat(node-streams): add config flag, define-env, and env precedence test: #90427
• Rename /_next/webpack-hmr to /_next/hmr: #91415
• Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
• Handle encoded params further: #91627
• [turbopack] Respect {eval:true} in worker_threads constructors: #91666
• Fix missing route in otel spans without base-server: #91665
• [turbopack] Optimize compaction cpu usage: #91468
• Fix layout segment optimization: move app-page imports to server-utility transition: #91701
• Fix server actions in standalone mode with cacheComponents: #91711
• turbo-persistence: remove Unmergeable mmap advice: #91713
• turbopack: move "compact database" tracing span to backend layer: #91693
• Turbopack: lazy require metadata and handle TLA: #91705
• Fix adapter outputs for dynamic metadata routes: #91680
• Turbopack: fix webpack loader runner layer: #91727
• [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
• Add module count field to module graph tracing spans: #91697
• turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
• Turbopack: pull in updated vercel/nft tests: #91651
• [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
• [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
• [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
• Avoid deprecated TS node10 moduleResolution defaults: #91847
• [turbopack] Rebuild the docker build scripts: #91799
• Fix TS6 baseUrl deprecation for extended tsconfig: #91855
• Add next internal post-build CLI command for Turbopack database compaction: #91336
• Turbopack: Define Effect as a trait instead of a closure: #89080
• Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
• turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
• Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
• Use charCodeAt for normalizePathTrailingSlash: #91380
• Turbopack: Only patch lockfile when bindings fails to load: #91379
• [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
• [devtools] Make instant navs panel draggable: #91914
• [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

• d73f562 v16.3.0
• 2e0d4cb Edits to turbopackFileSystemCache (#96531)
• 86df9c7 docs: cover direct visits and client navigations in the instant() e2e example...
• 47a52c0 [turbopack / next.js] Add an end-to-end test for new root detection (#96544)
• 8e878d4 Remove implicit Partial Prefetching opt-in from instant (#96539)
• e37ddd1 Fix deploy test TypeScript exclusions (#96545)
• 8a4920c docs: clarify first-party Skills workflows (#96495)
• 4344b83 Flag newly disabled deploy tests (#96505)
• 459617a fix: double fragment on navigation (#93132)
• cbf0cef Enable TypeScript CLI by default (#96497)
• Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates @tailwindcss/postcss from 4.3.2 to 4.3.3

Release notes

Sourced from @​tailwindcss/postcss's releases.

v4.3.3

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Changelog

Sourced from @​tailwindcss/postcss's changelog.

[4.3.3] - 2026-07-16

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Commits

• c2b24dd 4.3.3 (#20334)
• e48c5e8 Fix weird character rendering on Windows with Japanese locale (#20318)
• 9b0e8af Ensure @tailwindcss/postcss rebuilds when the input CSS changes but its mti...
• b53fa09 fix: exclude iframes from focus-visible auto outline in Preflight (#20292)
• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.0.3 to 6.0.5

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

plugin-react@6.0.4

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

6.0.4 (2026-07-22)

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

Commits

• 68c0cb8 release: plugin-react@6.0.5 (#1362)
• 555cdbc fix(react): make the react compiler preset filter linear (#1353)
• a00a9f8 fix(deps): update all non-major dependencies (#1327)
• f4b5498 release: plugin-react@6.0.4
• 7a40659 fix(react): $RefreshSig$ is not defined with NODE_ENV=production vite dev ...
• 98b32d4 fix(deps): update react 19.2.8 (#1298)
• 8ae5449 fix: babel-plugin-react-compiler cannot be imported when used in a framework ...
• f09ea01 fix(deps): update all non-major dependencies (#1282)
• See full diff in compare view

Updates axe-core from 4.12.1 to 4.13.0

Release notes

Sourced from axe-core's releases.

Release 4.13.0

In summary, this release adds:

1. Support Element Internals: A modern way for building accessible component libraries Axe-core is the first accessibility tool to support this major new web feature! Thanks to RedHat and Adobe for working with us to figure out the right way forward.

2. A new Swedish translation, thanks to our a community contribution

3. A new Finish contribution (not open source), thanks to our Scandinavian partner

4. 10 False positives closed, including all the critical ones!

5. And 13 updates to get Axe-core consistent with the latest web standards

This release is one of the bigger changes we've done in a few years, so likely issue numbers are going to change in adopting this version.

Features

• aria-actions: add aria-actions to allowed ARIA attributes (#5200) (029655d), closes #4584 #5199, references #5215 #5215
• aria-allowed-attr: flag deprecated ARIA attributes as needs-review (#5246) (518f3cc), closes #3341
• aria-prohibited-attr: allow many elements to be named and disallow label and body from being named (#5259) (d8b1ea5)
• aria-roles: add sectionheader and sectionfooter roles (#5238) (c36c109), closes #4734, references #4734
• aria/get-aria-value: new function to get aria values of a node (#5109) (a7d8f3e), references #5042
• aria/has-attr-value: new function to check if node has aria value (#5136) (61f2624), references #5109
• aria: support role=image as equivalent to role=img (#5248) (5aa8aaf), closes #4656, references #5272
• checks/aria: support ARIA element internals properties (#5172) (9b7f754)
• checks/label: support ARIA element internals properties (#5170) (21c5f8b)
• checks/navigation: support ARIA element internals properties (#5167) (2c3a98f)
• commons/aria: support ARIA element internals properties (#5171) (31f09e7)
• commons/dom: support ARIA element internals properties (#5163) (f0a12cf)
• commons/forms: support ARIA element internals properties (#5165) (27a4686)
• commons/matches/fromPrimative: deprecate in favor of correct spelling (#5270) (31cfb2e)
• commons/text: support ARIA element internals properties (#5169) (e841a33)
• commons/text: support form-associated labels via element internals (#5182) (57cfe0a), closes #5045, references #5170 #5039 #5151 #5039
• dom/getResolvedRefs: new function to get the resolved virtual nodes of idrefs (#5151) (489cdea), references #5109
• element-internals: enable ElementInternals by default (#5284) (2740d42), closes #5277
• i18n: Add Swedish locale (#5190) (dcd13f2), references #5189
• matches: add inSectioningContent, hasChild, and isSummaryForDetails matches (#5262) (c47cdcd)
• rules: support ARIA element internals properties (#5168) (065baf7)
• standards/ariaAttrs: add caseInsensitive property for attributes (#5224) (bcd791c)

Bug Fixes

• aria-allowed-role: allow roles on a non-details summary (#5242) (3bd9875), closes #3911, references #3443 #3911
• aria-allowed-role: restrict figure roles with child figcaption (#5240) (178a635), closes #3443
• aria-prohibited-attr: visible aria-labelledby requires review only (#5285) (fd6fa9f)
• axe.d.ts: make enabled property of RuleMetadata optional (#5129) (90fce18)
• color-contrast: fix various stacking context bugs (#5214) (d5e5b04), references #8 #5213

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.13.0 (2026-08-05)

Features

• aria-actions: add aria-actions to allowed ARIA attributes (#5200) (029655d), closes #4584 #5199, references #5215 #5215
• aria-allowed-attr: flag deprecated ARIA attributes as needs-review (#5246) (518f3cc), closes #3341
• aria-prohibited-attr: allow many elements to be named and disallow label and body from being named (#5259) (d8b1ea5)
• aria-roles: add sectionheader and sectionfooter roles (#5238) (c36c109), closes #4734, references #4734
• aria/get-aria-value: new function to get aria values of a node (#5109) (a7d8f3e), references #5042
• aria/has-attr-value: new function to check if node has aria value (#5136) (61f2624), references #5109
• aria: support role=image as equivalent to role=img (#5248) (5aa8aaf), closes #4656, references #5272
• checks/aria: support ARIA element internals properties (#5172) (9b7f754)
• checks/label: support ARIA element internals properties (#5170) (21c5f8b)
• checks/navigation: support ARIA element internals properties (#5167) (2c3a98f)
• commons/aria: support ARIA element internals properties (#5171) (31f09e7)
• commons/dom: support ARIA element internals properties (#5163) (f0a12cf)
• commons/forms: support ARIA element internals properties (#5165) (27a4686)
• commons/matches/fromPrimative: deprecate in favor of correct spelling (#5270) (31cfb2e)
• commons/text: support ARIA element internals properties (#5169) (e841a33)
• commons/text: support form-associated labels via element internals (#5182) (57cfe0a), closes #5045, references #5170 #5039 #5151 #5039
• dom/getResolvedRefs: new function to get the resolved virtual nodes of idrefs (#5151) (489cdea), references #5109
• element-internals: enable ElementInternals by default (#5284) (2740d42), closes #5277
• i18n: Add Swedish locale (#5190) (dcd13f2), references #5189
• matches: add inSectioningContent, hasChild, and isSummaryForDetails matches (#5262) (c47cdcd)
• rules: support ARIA element internals properties (#5168) (065baf7)
• standards/ariaAttrs: add caseInsensitive property for attributes (#5224) (bcd791c)

Bug Fixes

• aria-allowed-role: allow roles on a non-details summary (#5242) (3bd9875), closes #3911, references #3443 #3911
• aria-allowed-role: restrict figure roles with child figcaption (#5240) (178a635), closes #3443
• aria-prohibited-attr: visible aria-labelledby requires review only (#5285) (fd6fa9f)
• axe.d.ts: make enabled property of RuleMetadata optional (#5129) (90fce18)
• color-contrast: fix various stacking context bugs (#5214) (d5e5b04), references #8 #5213
• gather-internals: handle non-HTMLElement nodes (#5161) (06e84c3)
• get-selector: escape control characters in attribute selectors (#5273) (4b60ac5), closes #5204 #5204
• image-alt: allow whitespace alt on presentational images (#5218) (c5dd0ef), closes #5216
• landmark-unique: exclude section/form with non-landmark roles from landmark match (#5085) (c5fd013), closes #4722 #5064
• name the image role in role-img-alt and svg-img-alt metadata (#5279) (995a269), closes #5272, references #5248 #5248
• standards: update aria-errormessage and aria-details to be idrefs (#5157) (fb94f8a)

Commits

• 1cc54b9 chore(release): v4.13.0 (#5288)
• a1c9ebb chore(release): 4.13.0
• 98400d7 test(arialabelledby-text): cover closed shadow DOM and out-of-tree idrefs (#5...
• bcd791c feat(standards/ariaAttrs): add caseInsensitive property for attributes (#5224)
• fd6fa9f fix(aria-prohibited-attr): visible aria-labelledby requires review only (#5285)
• 013ee82 ci: increase wait-for-npm-ready timeout for publish scan delay (#5286)
• c5fd013 fix(landmark-unique): exclude section/form with non-landmark roles from landm...
• dcd13f2 feat(i18n): Add Swedish locale (#5190)
• a713bd8 test(hasAriaValue): reenable skipped test due to firefox crash (#5229)
• fb94f8a fix(standards): update aria-errormessage and aria-details to be idrefs (#5157)
• Additional commits viewable in compare view

Updates eslint-config-next from 16.2.10 to 16.3.0

Release notes

Sourced from eslint-config-next's releases.

v16.3.0

Core Changes

• Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
• Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
• Normalize encoded dynamic placeholders in app routes: #91603
• Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
• Update tokio from 1.43.0 to 1.47.3: #90945
• [turbopack] Simplify snapshotting logic: #91178
• Turbopack: enable server HMR for app route handlers: #91466
• turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
• [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
• Skip loadBindings() Lightning CSS check during next start: #91538
• turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
• Turbopack: Add importModule() support to webpack loaders: #89630
• turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
• turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
• feat(node-streams): add config flag, define-env, and env precedence test: #90427
• Rename /_next/webpack-hmr to /_next/hmr: #91415
• Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
• Handle encoded params further: #91627
• [turbopack] Respect {eval:true} in worker_threads constructors: #91666
• Fix missing route in otel spans without base-server: #91665
• [turbopack] Optimize compaction cpu usage: #91468
• Fix layout segment optimization: move app-page imports to server-utility transition: #91701
• Fix server actions in standalone mode with cacheComponents: Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
framio	Ready	Preview	Aug 10, 2026 6:18pm