chore: bump the dashboard-dependencies group in /dashboard with 6 updates by dependabot[bot] · Pull Request #392 · xiufengsun/TokenTracker

dependabot · 2026-07-29T12:06:19Z

Bumps the dashboard-dependencies group in /dashboard with 6 updates:

Package	From	To
lucide-react	`1.25.0`	`1.27.0`
motion	`12.42.2`	`12.43.0`
posthog-js	`1.406.2`	`1.407.6`
react-router-dom	`7.18.1`	`7.18.2`
playwright	`1.61.1`	`1.62.0`
postcss	`8.5.22`	`8.5.24`

Updates lucide-react from 1.25.0 to 1.27.0

Release notes

Sourced from lucide-react's releases.

Version 1.27.0

What's Changed

feat(icons): removed brand names from tags & revised brand stopwords by @karsa-mistmere in lucide-icons/lucide#4575

fix(docs): Fix site build by @ericfennis in lucide-icons/lucide#4582

fix(icons): optimised square-scissors icons by @karsa-mistmere in lucide-icons/lucide#4581

fix(packages/angular): add more supported attributes for SVG nodes by @karsa-mistmere in lucide-icons/lucide#4570

feat(icons): added pending-cw icon by @NielsLazaroms in lucide-icons/lucide#4439

fix(icons): changed zap and zap-off icons by @kapowaz in lucide-icons/lucide#4536

feat(icons): add square-off icon by @october-learns in lucide-icons/lucide#4496

chore(deps-dev): bump astro from 6.4.8 to 7.1.0 by @dependabot[bot] in lucide-icons/lucide#4572

fix(icons): changed toolbox icon by @karsa-mistmere in lucide-icons/lucide#4571

feat(icons): add scan-square by @samuelalake in lucide-icons/lucide#4550

feat(icons): added user-shield icon by @MArtytraM99 in lucide-icons/lucide#3099

feat(icons): added mosque icon by @iskepr in lucide-icons/lucide#4494

fix(request-review): Remove pull_request_target by @ericfennis in lucide-icons/lucide#4593

fix(icons): changed feather icon by @karsa-mistmere in lucide-icons/lucide#4584

feat(ci): added custom prettier plugin for icon SVG files by @karsa-mistmere in lucide-icons/lucide#4576

ci(ci.yml): Remove concurrency in ci.yml by @ericfennis in lucide-icons/lucide#4595

fix(icons): changed barrel icon by @karsa-mistmere in lucide-icons/lucide#4592

feat(lab): Migrate lab to main repo. by @ericfennis in lucide-icons/lucide#4521

fix(icons): changed trophy icon by @karsa-mistmere in lucide-icons/lucide#4591

feat(analytics): add utm source and medium by @jguddas in lucide-icons/lucide#4596

feat(docs): Add lab requirement in pull_request_template.md by @danielbayley in lucide-icons/lucide#3651

feat(icons): replaces podcast icon with new mic-* icons by @karsa-mistmere in lucide-icons/lucide#4583

feat(icons): add layout-freeform by @samuelalake in lucide-icons/lucide#4543

New Contributors

@NielsLazaroms made their first contribution in lucide-icons/lucide#4439

@kapowaz made their first contribution in lucide-icons/lucide#4536

@october-learns made their first contribution in lucide-icons/lucide#4496

@samuelalake made their first contribution in lucide-icons/lucide#4550

@iskepr made their first contribution in lucide-icons/lucide#4494

Full Changelog: lucide-icons/lucide@1.26.0...1.27.0

Version 1.26.0

What's Changed

fix(docs): fix home page package links & accessible labels by @karsa-mistmere in lucide-icons/lucide#4540

fix(icons): changed columns-3-cog icon by @kamilasw in lucide-icons/lucide#4578

fix(icons): extended metadata of ad icon by @karsa-mistmere in lucide-icons/lucide#4579

fix(icons): changed book-open icons by @karsa-mistmere in lucide-icons/lucide#4565

feat(icons): added shield-keyhole icon by @karsa-mistmere in lucide-icons/lucide#4580

New Contributors

@kamilasw made their first contribution in lucide-icons/lucide#4578

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Commits

See full diff in compare view

Updates motion from 12.42.2 to 12.43.0

Changelog

Sourced from motion's changelog.

[12.43.0] 2026-07-27

Added

Hardware acceleration for backgroundColor in supported browsers.

Hardware acceleration for SVG elements.

Fixed

AnimatePresence: Exiting children no longer interleave with entering children, which could reorder and remount children present in both renders.

motion: Throw error when passing a custom motion component an incorrect ref type.

Commits

a4ef40a v12.43.0
14f2d28 adding svg acceleration
1f5a27b Fixing merge
79f0353 Updating changelog
57f179b Updating changelog
695cb39 Merge pull request #3755 from motiondivision/fix-issue-2777
33a1820 Drop the production fallback for non-DOM refs
ebe35f2 Throw an actionable invariant for non-DOM custom component refs
a6ed094 Merge pull request #3754 from motiondivision/fix-3745-popchild-ref-warning
9f251f3 Merge pull request #3763 from motiondivision/advisor/003-color-waapi
Additional commits viewable in compare view

Updates posthog-js from 1.406.2 to 1.407.6

Release notes

Sourced from posthog-js's releases.

posthog-js@1.407.6

1.407.6

Patch Changes

#4305 b4250a7 Thanks @marandaneto! - Fix extension bundles when used with the slim no-external browser build. (2026-07-29)

posthog-js@1.407.5

1.407.5

Patch Changes

#4278 a19ba65 Thanks @marandaneto! - Fix paused replay seeks at an exact full snapshot timestamp so the snapshot frame is rebuilt before playback pauses. (2026-07-28)

posthog-js@1.407.4

1.407.4

Patch Changes

#4290 a08c226 Thanks @marandaneto! - Send session recording request timestamps in request bodies instead of query strings. (2026-07-28)

posthog-js@1.407.3

1.407.3

Patch Changes

#4214 f7399a0 Thanks @felipeatom! - Fix canRenderSurvey / canRenderSurveyAsync reporting a survey as renderable before its event/action activation trigger has fired. Surveys gated on a "User sends events" filter are now only eligible once the trigger event is received. (2026-07-27)

#4231 eabe2ef Thanks @marandaneto! - Send analytics request timestamps in capture bodies while retaining query timestamps for session recordings. (2026-07-27)

#4102 fa4844b Thanks @marandaneto! - Send SDK library identity in feature flag person properties instead of URL query parameters. (2026-07-27)

#4220 11330b3 Thanks @SegFaultZero! - fix(replay): prevent server timings from dropped ingestion requests causing an endless capture loop (2026-07-27)

Updated dependencies [7210789]:

@posthog/browser-common@0.2.2

posthog-js@1.407.2

1.407.2

Patch Changes

#4224 ba7042b Thanks @turnipdabeets! - Fix session replay recordings being unplayable after the session rotated in a tab with no user interaction. When a session expired and rotated (for example in a long-lived background tab), a recorder that had not yet seen user interaction kept attributing snapshots — including full snapshots — to the previous session, so the new session never received a playable full snapshot. The recorder now restarts on rotation in this state, re-syncs its session id from the session manager if they ever diverge, and flushes its buffer on the normal cadence before the first user interaction instead of holding data until the next rotation or page unload. (2026-07-23)

... (truncated)

Commits

acef5fb chore: update versions and lockfile [version bump]
b4250a7 fix(browser): preserve slim extension bundle ABI (#4305)
7718db1 ci: fail when Jest detects open handles (#4297)
36207d6 ci: use pinned Playwright image (#4298)
b293d12 ci: generate backward compatibility Playwright report (#4296)
de3d6e3 ci: install npm OIDC support only when publishing (#4295)
97078e9 chore: update versions and lockfile [version bump]
fbd457f fix(browser-common): reduce extension runtime overhead (#4284)
da71872 fix(react-native): compose iOS source map upload wrappers (#4291)
75e12fe chore: update GitHub Actions (#4292)
Additional commits viewable in compare view

Updates react-router-dom from 7.18.1 to 7.18.2

Changelog

Sourced from react-router-dom's changelog.

v7.18.2

Patch Changes

Updated dependencies:

react-router@7.18.2

Commits

69a653e Release v7.18.2 (#15354)
See full diff in compare view

Updates playwright from 1.61.1 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:
test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});
Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:
const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });
Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:
// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:
</tr></table> 

... (truncated)

Commits

e3950d9 chore: mark v1.62.0 (#41981)
f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
2934858 fix: correct pending navigation log spacing (#41949)
4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
15c4f55 fix(mcp): identify downloads explicitly (#41933)
f5fa967 fix(network): request.postData() returns null for empty string body override ...
0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
244a1ff feat(firefox): roll to r1538 (#41938)
Additional commits viewable in compare view

Updates postcss from 8.5.22 to 8.5.24

Release notes

Sourced from postcss's releases.

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

Changelog

Sourced from postcss's changelog.

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

Commits

0ebe8ad Release 8.5.24 version
73218c6 Update dependencies
9a114f6 Preserve the BOM when stringifying (#2119)
9069261 Fix types check
eb9e1fe Release 8.5.23 version
9d19c78 Update dependencies
7beca13 Does no load source map file without opts.from
decea51 Typo
c18e30d Update EM banner
98a39ad Update EM banner
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dashboard-dependencies group in /dashboard with 6 updates: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.27.0` | | [motion](https://github.com/motiondivision/motion) | `12.42.2` | `12.43.0` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.406.2` | `1.407.6` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.1` | `7.18.2` | | [playwright](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.22` | `8.5.24` | Updates `lucide-react` from 1.25.0 to 1.27.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react) Updates `motion` from 12.42.2 to 12.43.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.42.2...v12.43.0) Updates `posthog-js` from 1.406.2 to 1.407.6 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.406.2...posthog-js@1.407.6) Updates `react-router-dom` from 7.18.1 to 7.18.2 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.2/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.2/packages/react-router-dom) Updates `playwright` from 1.61.1 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.1...v1.62.0) Updates `postcss` from 8.5.22 to 8.5.24 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.22...8.5.24) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-dependencies - dependency-name: motion dependency-version: 12.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-dependencies - dependency-name: posthog-js dependency-version: 1.407.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-dependencies - dependency-name: react-router-dom dependency-version: 7.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dashboard-dependencies - dependency-name: playwright dependency-version: 1.62.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dashboard-dependencies - dependency-name: postcss dependency-version: 8.5.24 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dashboard-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 29, 2026

github-actions Bot added the dashboard label Jul 29, 2026

vercel Bot deployed to Preview July 29, 2026 12:10 View deployment

xiufengsun merged commit 03f924e into main Jul 30, 2026
6 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/dashboard/dashboard-dependencies-10d241520e branch July 30, 2026 01:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump the dashboard-dependencies group in /dashboard with 6 updates - #392

chore: bump the dashboard-dependencies group in /dashboard with 6 updates#392
xiufengsun merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dashboard/dashboard-dependencies-10d241520e

dependabot Bot commented on behalf of github Jul 29, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 29, 2026

Version 1.27.0

What's Changed

New Contributors

Version 1.26.0

What's Changed

New Contributors

[12.43.0] 2026-07-27

Added

Fixed

posthog-js@1.407.6

1.407.6

Patch Changes

posthog-js@1.407.5

1.407.5

Patch Changes

posthog-js@1.407.4

1.407.4

Patch Changes

posthog-js@1.407.3

1.407.3

Patch Changes

posthog-js@1.407.2

1.407.2

Patch Changes

v7.18.2

Patch Changes

v1.62.0

🧱 New component testing model

🛑 Cancel operations with AbortSignal

🖼️ WebP screenshots

🧩 Custom test filtering with Reporter.preprocess()

8.5.24

8.5.23

8.5.24

8.5.23

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant