Skip to content

deps(web): bump the web-production-minor-and-patch group across 1 directory with 9 updates#43

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-production-minor-and-patch-41ce4b8bc5
Open

deps(web): bump the web-production-minor-and-patch group across 1 directory with 9 updates#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-production-minor-and-patch-41ce4b8bc5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-production-minor-and-patch group with 9 updates in the /web directory:

Package From To
@ai-sdk/react 4.0.34 4.0.40
@radix-ui/react-slot 1.3.0 1.3.3
@tanstack/react-query 5.101.2 5.101.4
ai 7.0.31 7.0.37
lucide-react 1.25.0 1.26.0
radix-ui 1.6.3 1.6.7
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
recharts 3.9.2 3.10.0

Updates @ai-sdk/react from 4.0.34 to 4.0.40

Release notes

Sourced from @​ai-sdk/react's releases.

@​ai-sdk/react@​4.0.40

Patch Changes

  • ai@7.0.37

@​ai-sdk/react@​4.0.39

Patch Changes

  • Updated dependencies [7fa85b2]
    • ai@7.0.36
Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.40

Patch Changes

  • ai@7.0.37

4.0.39

Patch Changes

  • Updated dependencies [7fa85b2]
    • ai@7.0.36

4.0.38

Patch Changes

  • Updated dependencies [7f6650b]
  • Updated dependencies [106ea59]
    • ai@7.0.35

4.0.37

Patch Changes

  • ai@7.0.34

4.0.36

Patch Changes

  • Updated dependencies [02ffdcb]
  • Updated dependencies [76cb673]
  • Updated dependencies [e808fa5]
  • Updated dependencies [33647d7]
    • @​ai-sdk/provider-utils@​5.0.12
    • ai@7.0.33
    • @​ai-sdk/mcp@​2.0.16

4.0.35

Patch Changes

  • Updated dependencies [6cd7c74]
  • Updated dependencies [e35bcae]
  • Updated dependencies [a4eb3f3]
    • ai@7.0.32
Commits

Updates @radix-ui/react-slot from 1.3.0 to 1.3.3

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.3.2, 1.3.3

  • Reverted breaking changes that caused compatibility issues with React Server Components.

1.3.1

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4
Commits

Updates @tanstack/react-query from 5.101.2 to 5.101.4

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.4
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-next-experimental@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-persist-client@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.4
    • @​tanstack/react-query@​5.101.4

@​tanstack/react-query@​5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.4

@​tanstack/react-query-devtools@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.3
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-next-experimental@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-persist-client@​5.101.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.3
    • @​tanstack/react-query@​5.101.3

@​tanstack/react-query@​5.101.3

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.4

5.101.3

Patch Changes

  • Updated dependencies [7e3c822]:
    • @​tanstack/query-core@​5.101.3
Commits
  • 86bb8a6 ci: Version Packages (#11094)
  • 181ea82 ci: Version Packages (#11089)
  • 6d55b07 test({react,preact}-query): use the '.then()' convention consistently (#11085)
  • 44f38df test({react,preact,solid}-query/useInfiniteQuery): inline the shared 'fetchIt...
  • d1558c1 test({react,preact}-query/usePrefetchQuery): inline the 'generateQueryFn' fac...
  • 99690d1 test({react,preact}-query/usePrefetchInfiniteQuery): inline single-use helper...
  • 10770f0 test({react,preact}-query/usePrefetchInfiniteQuery): inline the shared 'Suspe...
  • dbd5a86 test({react,preact}-query/usePrefetchQuery): inline the shared 'Suspended' co...
  • b955f60 test({react,preact}-query/useSuspenseQuery): assert the 'loading' fallback is...
  • b9c657e test({react,preact}-query/usePrefetchQuery): assert the 'Loading...' fallback...
  • Additional commits viewable in compare view

Updates ai from 7.0.31 to 7.0.37

Release notes

Sourced from ai's releases.

ai@7.0.37

Patch Changes

  • Updated dependencies [0a7c7f4]
    • @​ai-sdk/gateway@​4.0.28

ai@7.0.36

Patch Changes

  • 7fa85b2: fix(ai): use injective serialization for tool approval HMAC payload

    The tool approval signature (experimental_toolApprovalSecret) built its HMAC payload by joining fields with \n. Because fields such as toolName and toolCallId can themselves contain a newline, distinct field tuples could serialize to identical bytes, allowing a signed approval to verify against a different tuple. The payload is now serialized with JSON.stringify (with a versioned domain-separation prefix), which escapes delimiter/control characters and makes the encoding injective.

    Verification remains backwards compatible: a signature in the old format still verifies, but only when no field contains the \n delimiter (the condition that made the old format ambiguous), so a pending approval that straddles an upgrade is not rejected while the collision stays closed.

Changelog

Sourced from ai's changelog.

7.0.37

Patch Changes

  • Updated dependencies [0a7c7f4]
    • @​ai-sdk/gateway@​4.0.28

7.0.36

Patch Changes

  • 7fa85b2: fix(ai): use injective serialization for tool approval HMAC payload

    The tool approval signature (experimental_toolApprovalSecret) built its HMAC payload by joining fields with \n. Because fields such as toolName and toolCallId can themselves contain a newline, distinct field tuples could serialize to identical bytes, allowing a signed approval to verify against a different tuple. The payload is now serialized with JSON.stringify (with a versioned domain-separation prefix), which escapes delimiter/control characters and makes the encoding injective.

    Verification remains backwards compatible: a signature in the old format still verifies, but only when no field contains the \n delimiter (the condition that made the old format ambiguous), so a pending approval that straddles an upgrade is not rejected while the collision stays closed.

7.0.35

Patch Changes

  • 7f6650b: Return response piping promises so callers can catch stream read and write errors.
  • 106ea59: feat(ai): add per-step first content timeout for streaming generations
  • Updated dependencies [2112ff1]
    • @​ai-sdk/gateway@​4.0.27

7.0.34

Patch Changes

  • Updated dependencies [7c16f21]
    • @​ai-sdk/gateway@​4.0.26

7.0.33

Patch Changes

  • 76cb673: fix: detect MP4 audio from its ftyp box during transcription
  • e808fa5: fix(ai): preserve tool parts when tool call IDs repeat across steps
  • 33647d7: Preserve provider options when combining consecutive tool messages.
  • Updated dependencies [02ffdcb]

... (truncated)

Commits

Updates lucide-react from 1.25.0 to 1.26.0

Release notes

Sourced from lucide-react's releases.

Version 1.26.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Commits

Updates radix-ui from 1.6.3 to 1.6.7

Changelog

Sourced from radix-ui's changelog.

1.6.6, 1.6.7

  • Reverted breaking changes that caused compatibility issues with React Server Components.

1.6.5

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.

1.6.4

  • Fixed a regression where importing primitives from the root radix-ui entry point erased every primitive's types to any.
Commits

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates recharts from 3.9.2 to 3.10.0

Release notes

Sourced from recharts's releases.

v3.10.0

What's Changed

Legend position

Legend now supports position and offset props, same as Label and LabeList. This replaces the previous align and verticalAlign for a more convenient positioning, and fixes couple visual bugs too. See https://recharts.github.io/en-US/examples/LegendPosition/

XAxis auto height

XAxis now supports height="auto" prop, similar to YAxis width="auto".

Other features

Bugfixes

New Contributors

Full Changelog: recharts/recharts@v3.9.2...v3.10.0

Commits
  • 770191a 3.10.0
  • 9d9b15d feat(XAxis): support height="auto" to size the axis to its tick labels (#7570)
  • 38020e8 chore(deps-dev): bump the storybook group with 8 updates (#7568)
  • e9795a1 Clarify Legend comments and examples (#7567)
  • 9817ae5 fix(Area): connectNulls connects across stacked points where every series is ...
  • 082495a Legend position and offset (#7564)
  • 2ea9ca0 fix: prevent getBandSizeOfAxis from collapsing band size due to floating-poin...
  • ccdd02a fix(CartesianAxis): skip renderedTicks dispatch when tick values are unchange...
  • ca62d1c fix(Label): pass computed position attributes to custom label content (#7549)
  • ea3eef3 chore(deps-dev): bump babel-loader from 9.2.1 to 10.1.1 (#7562)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(web): bump the web-production-minor-and-patch group across 1 dir…
0e89864 
…ectory with 9 updates

Bumps the web-production-minor-and-patch group with 9 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.34` | `4.0.40` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.0` | `1.3.3` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.2` | `5.101.4` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.31` | `7.0.37` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.26.0` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.3` | `1.6.7` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [recharts](https://github.com/recharts/recharts) | `3.9.2` | `3.10.0` |



Updates `@ai-sdk/react` from 4.0.34 to 4.0.40
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.40/packages/react)

Updates `@radix-ui/react-slot` from 1.3.0 to 1.3.3
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@tanstack/react-query` from 5.101.2 to 5.101.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query)

Updates `ai` from 7.0.31 to 7.0.37
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.37/packages/ai)

Updates `lucide-react` from 1.25.0 to 1.26.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.26.0/packages/lucide-react)

Updates `radix-ui` from 1.6.3 to 1.6.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `recharts` from 3.9.2 to 3.10.0
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.9.2...v3.10.0)

---
updated-dependencies:
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-production-minor-and-patch
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-production-minor-and-patch
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-production-minor-and-patch
- dependency-name: ai
  dependency-version: 7.0.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-production-minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-production-minor-and-patch
- dependency-name: radix-ui
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-production-minor-and-patch
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-production-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-production-minor-and-patch
- dependency-name: recharts
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-production-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants