chore(deps): bump the npm-major group with 11 updates - #9
Merged
jonathansantilli merged 1 commit intoAug 31, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
jonathansantilli
force-pushed
the
dependabot/npm_and_yarn/npm-major-f328d8c851
branch
from
August 31, 2026 08:26
0b13c63 to
f0ed2a9
Compare
Rebased onto main and the lockfile regenerated, because the production group landed first and the two conflicted. Verified beyond the suites, on the two that could break quietly: bcrypt-ts 5 to 9 changes the prefix it writes from $2a$ to $2b$. Both are bcrypt, and a hash written by version 5 still verifies under version 9 — checked directly, because the test suite hashes and verifies with the same version and would pass either way. Had it not, every deployed instance would have locked out its operator on upgrade with nothing in the logs to say why. TypeScript 7 works here. It is held back on the codegate client by typescript-eslint, which declares <6.1.0; this repository lints with biome and has no such constraint. zod 4 across every route schema, sonner 2, lucide-react 1, tailwind-merge 3, dotenv 17, testcontainers 12, c8 12, @types/node 26: 131 unit, 95 integration and 31 end-to-end pass, and the console builds.
jonathansantilli
force-pushed
the
dependabot/npm_and_yarn/npm-major-f328d8c851
branch
from
August 31, 2026 08:34
f0ed2a9 to
8c81b09
Compare
jonathansantilli
deleted the
dependabot/npm_and_yarn/npm-major-f328d8c851
branch
August 31, 2026 08:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-major group with 11 updates:
5.0.39.0.216.4.717.4.20.446.01.33.01.7.42.0.82.6.03.6.03.25.764.4.311.14.012.1.022.13.1026.2.011.0.012.0.011.14.012.1.05.8.27.0.2Updates
bcrypt-tsfrom 5.0.3 to 9.0.2Release notes
Sourced from bcrypt-ts's releases.
Changelog
Sourced from bcrypt-ts's changelog.
... (truncated)
Commits
ec3f349chore: release15525a6docs: add CLAUDE.mdc6739b1chore: use import.meta.dirname in vitest config7f40731fix: validate the fourth character in decodeBase641bdbedcdocs: update README225660dbuild: bump depsc457372chore(deps): update dependency oxlint to v1.76.0 (#823)200d93fchore(deps): update dependency oxfmt to v0.61.0 (#822)9ad9ebachore(deps): update dependency oxc-config-hope to v0.3.12 (#821)90c9f35chore(deps): update dependency tsdown to v0.22.14 (#820)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for bcrypt-ts since your current version.
Install script changes
This version modifies
prepublishscript that runs during installation. Review the package contents before updating.Updates
dotenvfrom 16.4.7 to 17.4.2Changelog
Sourced from dotenv's changelog.
... (truncated)
Commits
f116f7017.4.23a81612fix visual order of faq13f55a8Merge branch 'skill'4bbbf73reorganize faqc3da64bMerge pull request #1009 from motdotla/skill6f743b1update sourcefc2c624update skill972315bTighten up skill2795fcereorganize faqd5495d4adjust skillUpdates
lucide-reactfrom 0.446.0 to 1.33.0Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
75b5516chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)0f8d48btest(packages): updates unit test snapshots with face-slightly-smiling (#4676)f229f83chore(depedencies): Update dependencies (#4553)5ff536eci(release.yml): Fix workflow and removeversionscripts in package scripts...07c885efix(docs): fix zephyr-cloud URL in readmes50d8af5docs(readme): Update readme files (#4320)653e44bfeat(packages): use .mjs for ESM bundles (#4285)7623e23feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...dada0a8fix(lucide-react): Fix dynamic imports (#4210)a6e648afix(lucide-react): correct client directives in RSC files (#4189)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for lucide-react since your current version.
Updates
sonnerfrom 1.7.4 to 2.0.8Release notes
Sourced from sonner's releases.
... (truncated)
Commits
Updates
tailwind-mergefrom 2.6.0 to 3.6.0Release notes
Sourced from tailwind-merge's releases.
... (truncated)
Commits
d54f7e5v3.6.0638871aUpdate README to add info about Tailwind CSS v4.3 support39fc7b5Revert "v3.6.0"bd8390fv3.6.0802877cadd v3.6.0 changeloga35fedaMerge pull request #665 from dcastil/renovate/rollup-plugin-babel-7.x940389cMerge pull request #667 from dcastil/renovate/release-drafter-release-drafter...005af6dpin to specific version5816cedimplement breaking changes17041e1Merge pull request #676 from dcastil/dependabot/npm_and_yarn/babel/plugin-tra...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for tailwind-merge since your current version.
Updates
zodfrom 3.25.76 to 4.4.3Release notes
Sourced from zod's releases.
... (truncated)
Commits
1fb56a5docs: document release procedure in AGENTS.mdf3c9ec04.4.3c2be4f8fix(v4): generalize optin/fallback to transform; restore preprocess on absent...1cab693fix(v4): restore catch handling for absent object keys (#5937) (#5939)b8dffe9docs: remove Numeric and Speakeasy (2+ missed monthly cycles)9195250docs: remove Mintlify from bronze sponsors (churned)2c70332docs: normalize bronze sponsor logos to github avatar pattern7391be8docs: prune lapsed silver/bronze sponsors and add active ones2aeec83docs: prune lapsed gold sponsors and rebalance logo sizing4c2fa95docs: use Zernio primary wordmark for gold sponsor logoMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.
Updates
@testcontainers/postgresqlfrom 11.14.0 to 12.1.0Release notes
Sourced from @testcontainers/postgresql's releases.
... (truncated)
Commits
cdd8c89Bump undici (#1424)b73d94eBump ip-address from 10.2.0 to 10.4.0 (#1426)e340783Bump brace-expansion from 2.1.2 to 2.1.4 (#1423)ab4b485Bump fast-uri from 3.1.4 to 3.1.5 (#1422)2e065acDeclare the supported Node.js version (#1414)7662b16Apply npm audit fixes (#1421)2b4094dUse default stale issue timings (#1420)9566a1dBump the actions group across 1 directory with 2 updates (#1415)9e072ecBump the dependencies group across 11 directories with 10 updates (#1416)f314a3eBump the dependencies group across 1 directory with 15 updates (#1417)Updates
@types/nodefrom 22.13.10 to 26.2.0Commits
Updates
c8from 11.0.0 to 12.0.0Release notes
Sourced from c8's releases.
Changelog
Sourced from c8's changelog.
Commits
ae5a0cfchore(main): release 12.0.0 (#600)dc2d6c8feat!: update yargs to 18.x.x (#599)ee2f1cfchore(deps): update dependency@types/nodeto v24 (#579)923c238build: go back to publishing manuallyUpdates
testcontainersfrom 11.14.0 to 12.1.0Release notes
Sourced from testcontainers's releases.
... (truncated)
Commits
cdd8c89Bump undici (#1424)b73d94eBump ip-address from 10.2.0 to 10.4.0 (#1426)e340783Bump brace-expansion from 2.1.2 to 2.1.4 (#1423)ab4b485Bump fast-uri from 3.1.4 to 3.1.5 (#1422)2e065acDeclare the supported Node.js version (#1414)7662b16Apply npm audit fixes (#1421)2b4094dUse default stale issue timings (#1420)9566a1dBump the actions group acr...Description has been truncated