Skip to content

chore(deps)(deps): bump the production-dependencies group across 1 directory with 16 updates - #7195

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-5fd8cd04f6
Closed

chore(deps)(deps): bump the production-dependencies group across 1 directory with 16 updates#7195
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-5fd8cd04f6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 16 updates in the / directory:

Package From To
tsx 4.23.1 4.23.11
@oclif/core 4.13.2 4.13.3
better-sqlite3 13.0.2 13.0.3
@hono/node-server 2.0.12 2.1.0
js-yaml 5.2.2 5.2.3
mingo 7.2.2 7.2.3
nanoid 6.0.0 6.0.1
@noble/hashes 2.2.0 2.3.0
jose 6.2.7 6.2.8
hono 4.12.34 4.13.1
nodemailer 9.0.3 9.0.5
fumadocs-core 16.14.0 16.14.1
fumadocs-mdx 15.2.1 15.2.2
fumadocs-ui 16.14.0 16.14.1
lucide-react 1.28.0 1.30.0
next 16.2.12 16.3.0

Updates tsx from 4.23.1 to 4.23.11

Release notes

Sourced from tsx's releases.

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

  • map Node test locations (2f55884)
  • support data URLs in tsImport (b94f46f)

This release is also available on:

v4.23.8

4.23.8 (2026-08-05)

Bug Fixes

  • preserve package subpath resolution (be1315e)
  • preserve typeless ESM dependency exports (70dfc5e)

This release is also available on:

... (truncated)

Commits
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • b94f46f fix: support data URLs in tsImport
  • be1315e fix: preserve package subpath resolution
  • 5efba41 docs: organize transform backend research
  • Additional commits viewable in compare view

Updates @oclif/core from 4.13.2 to 4.13.3

Release notes

Sourced from @​oclif/core's releases.

4.13.3

Bug Fixes

  • deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)
Changelog

Sourced from @​oclif/core's changelog.

4.13.3 (2026-08-04)

Bug Fixes

  • deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)
Commits
  • 617b3cd chore(release): 4.13.3 [skip ci]
  • b143cdc Merge pull request #1633 from oclif/dependabot-npm_and_yarn-ip-address-10.4.0
  • e13240b fix(deps): bump ip-address from 10.2.0 to 10.4.0
  • See full diff in compare view

Updates better-sqlite3 from 13.0.2 to 13.0.3

Release notes

Sourced from better-sqlite3's releases.

v13.0.3

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v13.0.2...v13.0.3

Commits

Updates @hono/node-server from 2.0.12 to 2.1.0

Release notes

Sourced from @​hono/node-server's releases.

v2.1.0

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

Commits
  • 82ba34e 2.1.0
  • 1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
  • 977a242 feat: add Early Hints (HTTP 103) middleware (#378)
  • See full diff in compare view

Updates js-yaml from 5.2.2 to 5.2.3

Changelog

Sourced from js-yaml's changelog.

[5.2.3] - 2026-08-01

Fixed

  • Prevent prototype fallback when resolving tags and mapping entries, #782.
  • Resolve !!timestamp years 0000-0099 correctly, #775.
  • Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
  • Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through present(); dump() and loading are unaffected, #780.
Commits
  • 6740445 5.2.3 released
  • 94e766d Update changelog
  • c3bd7ca Polish previous commit, #780
  • 00209b6 presenter: treat a tab-indented line in a folded scalar as more-indented (#780)
  • 40fcb4f Fix missing mapping values before document markers and reject unpaired mappin...
  • 49280f3 Fix !!timestamp resolution for years 0000-0099, #775
  • 355dc96 fix: prevent prototype fallback in tag and harden object lookups, #782 (than...
  • d524f83 docs: add contributing guidelines
  • See full diff in compare view

Updates mingo from 7.2.2 to 7.2.3

Changelog

Sourced from mingo's changelog.

7.2.3 / 2026-08-03 (deprecated)

Incorrect types configurations. (#625)

Commits
  • 9793665 Release 7.2.3
  • d85c76e update changelog and bump to version 7.2.3
  • ab2233b chore: pin dependencies
  • 8e1487f fix: $bit must apply strictly to integeral values.
  • 833e15a validate operator args at runtime (#621)
  • a6a8059 fix 2 operator edge cases (#620)
  • be07c2b fix: $min fails for empty field (#619)
  • d803856 fix: update with $rename fails due to not adding destination to updateParams ...
  • 94bb5e1 fix: make $elemMatch with empty field and $in/$nin with regex behave correctl...
  • f682e06 chore: fix test file path for new Node runtime version and minor test improve...
  • Additional commits viewable in compare view

Updates nanoid from 6.0.0 to 6.0.1

Release notes

Sourced from nanoid's releases.

6.0.1

  • Fixed docs.
Changelog

Sourced from nanoid's changelog.

6.0.1

  • Fixed docs.
Commits

Updates @noble/hashes from 2.2.0 to 2.3.0

Release notes

Sourced from @​noble/hashes's releases.

2.3.0

Improve speed:

  • +10-45% 32b inputs across all hashes
  • +40% SHA-3 / SHAKE, +50% 1mb KT128 / KT256 / TurboSHAKE, +20% kmac
  • 2.2x argon
  • +20% pbkdf2 and hkdf

Other changes:

  • Better error messages and stricter type checks everywhere
  • Bugfix: HMAC _cloneInto now preserves canXOF (#134, ChALkeR); Argon2d typo rename (#135).
  • blake2.compress renamed to _compress (marked internal).
  • Reduce on-disk unpacked size 869kb → 665kb (-204kb) by disabling source maps (they became less relevant).

Full Changelog: paulmillr/noble-hashes@2.2.0...2.3.0

Commits

Updates jose from 6.2.7 to 6.2.8

Release notes

Sourced from jose's releases.

v6.2.8

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)
Changelog

Sourced from jose's changelog.

6.2.8 (2026-08-03)

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)
Commits
  • 8b768eb chore(release): 6.2.8
  • 1500459 refactor: name the "alg" source in unsupported algorithm failures
  • 714f870 fix: reject a non-string "alg" in EmbeddedJWK
  • 925f3bb refactor: index the JWS and JWE registries without a wrapper
  • 505c383 fix: enforce a single recipient when decrypting dir and ECDH-ES
  • 514831d chore(deps): bump the actions group with 3 updates
  • 45965db chore: cleanup after release
  • See full diff in compare view

Updates hono from 4.12.34 to 4.13.1

Release notes

Sourced from hono's releases.

v4.13.1

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.13.0...v4.13.1

v4.13.0

Hono v4.13.0 is now available!

The highlight of this release is performance: a batch of low-level optimizations makes the core request/response path significantly faster — up to 1.25x on common routes in our benchmark. This release also adds first-class support for the HTTP QUERY method, defined in RFC 10008, a new Method Not Allowed middleware, and more.

Performance improvements

This release includes a series of small optimizations: skipping unnecessary Headers allocations, replacing regex tests with indexOf, allocating internal state lazily, and more.

Here is benchmarks/fetch comparing v4.12 and v4.13 (ROUNDS=5 ./compare.sh, Bun 1.4.0, Apple Silicon — each measurement runs in a fresh process, and the variant order is reversed every round to avoid warm-up bias):

Benchmark v4.12 v4.13 Speedup
ping — GET / 165.83 ns 163.99 ns 1.01x
query — GET /id/1?name=bun 674.40 ns 616.99 ns 1.09x
json — GET /user 528.99 ns 422.44 ns 1.25x
body — POST /json 1.16 µs 1.00 µs 1.15x

The individual changes:

In addition, the RegExpRouter rewrite described below makes route registration plus the first match roughly 20% faster.

Thanks @​kibertoad for the contributions!

First-class QUERY method support

The QUERY method — a safe, idempotent method that carries a request body — is now a first-class citizen in Hono. You can define QUERY handlers with app.query():

const app = new Hono()
</tr></table>

... (truncated)

Commits
  • cf78528 4.13.1
  • f6aa913 fix(etag): skip unsafe methods or error responses on non-* case (#5196)
  • cd31bc1 fix(utils/stream): re-acquire writer lock when pipe() throws (#4988)
  • 569b419 fix(trie-router): count every slash a pattern consumes (#5189)
  • 192768f 4.13.0
  • b0c2d90 Merge pull request #5154 from honojs/next
  • 8f07028 fix(compress): set Vary: Accept-Encoding on negotiated responses (#5137)
  • 8a0b18f feat(reg-exp-router): throw UnsupportedPathError during route registration (#...
  • 3feb355 fix(jsx): allow a function component to return an array (#5179)
  • 5d911d2 feat(utils/headers): add HTTP fields newly registered with IANA (#5153)
  • Additional commits viewable in compare view

Updates nodemailer from 9.0.3 to 9.0.5

Release notes

Sourced from nodemailer's releases.

v9.0.5

9.0.5 (2026-08-07)

Bug Fixes

  • ci: retrigger the workflows dropped during the Actions outage (85d16c1)
  • mailer: escape specials in List-* header comments (#1842) (75913bb)
  • mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
  • mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
  • mime: encode DEL in header parameters and List-* comments (cf69430)
  • mime: keep control chars out of the remaining header positions (5ed9d26)
  • mime: normalize an address parsed out of a string as well (63685f7)
  • mime: normalize an address so header and envelope agree (a9343b4)
  • mime: stop a header key callback and the dkim tags from injecting (b7d772e)

v9.0.4

9.0.4 (2026-08-04)

Bug Fixes

  • mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
  • mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
  • mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
  • mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
  • mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)
Changelog

Sourced from nodemailer's changelog.

9.0.5 (2026-08-07)

Bug Fixes

  • ci: retrigger the workflows dropped during the Actions outage (85d16c1)
  • mailer: escape specials in List-* header comments (#1842) (75913bb)
  • mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
  • mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
  • mime: encode DEL in header parameters and List-* comments (cf69430)
  • mime: keep control chars out of the remaining header positions (5ed9d26)
  • mime: normalize an address parsed out of a string as well (63685f7)
  • mime: normalize an address so header and envelope agree (a9343b4)
  • mime: stop a header key callback and the dkim tags from injecting (b7d772e)

9.0.4 (2026-08-04)

Bug Fixes

  • mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
  • mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
  • mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
  • mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
  • mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)
Commits
  • 742cff9 chore(master): release 9.0.5 (#1843)
  • 524f0af chore: apply prettier to the punycode decode loop
  • 63685f7 fix(mime): normalize an address parsed out of a string as well
  • d899213 test: cover the custom envelope path of every transport
  • c4daee0 chore(ci): trigger the workflows now that the Actions outage is over
  • 85d16c1 fix(ci): retrigger the workflows dropped during the Actions outage
  • 76d0d92 chore(deps): update devDependencies
  • a9343b4 fix(mime): normalize an address so header and envelope agree
  • b7d772e fix(mime): stop a header key callback and the dkim tags from injecting
  • 5ed9d26 fix(mime): keep control chars out of the remaining header positions
  • Additional commits viewable in compare view

Updates fumadocs-core from 16.14.0 to 16.14.1

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.14.1

  • @​fumadocs/base-ui@​16.14.1
  • fumadocs-core@16.14.1
  • fumadocs-ui@16.14.1

Fix unusable tokenizer search option

The search engine rejects a language alongside a custom tokenizer, since the tokenizer carries its own. Both search entry points supplied one unconditionally — createDB/createDBSimple through a destructuring default that language: undefined could not suppress, and createI18nSearchAPI by hardcoding multilingual after the spread — so passing tokenizer always threw NO_LANGUAGE_WITH_CUSTOM_TOKENIZER at index-build time. On i18n sources there was no call that worked at all.

language is now omitted when a tokenizer is present (from either tokenizer or components.tokenizer), and i18n servers no longer overwrite a caller-supplied language. Attaching a stemmer to the default multilingual segmentation works as documented:

import { stemmer } from '@zbsearch/stemmers/english';
createFromSource(source, {
tokenizer: { language: 'multilingual', stemming: true, stemmer },
});

Commits
  • c2ce5cb Version Packages (#3463)
  • 19e269e chore: drop typescript 7
  • eacc5e1 fix(graphql): no dropped optional arguments in playground
  • 2452e01 fix(core): fix unusable tokenizer search option
  • cc694a1 chore: bump deps
  • 7c31d84 Merge pull request #3457 from fuma-nama/tegami/version-packages
  • c6aa185 fix(graphql): migrate deprecated APIs of graphql v18
  • 5b2a798 docs: drop mcp-handler
  • 9ad3757 chore: bump deps
  • 15ea7ea docs: document GraphQL options
  • Additional commits viewable in compare view

Updates fumadocs-mdx from 15.2.1 to 15.2.2

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.2.2

Support thenable Next.js config

Allow the promises to be awaited.

Commits

Updates fumadocs-ui from 16.14.0 to 16.14.1

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.14.1

  • @​fumadocs/base-ui@​16.14.1
  • fumadocs-core@16.14.1
  • fumadocs-ui@16.14.1

Fix unusable tokenizer search option

The search engine rejects a language alongside a custom tokenizer, since the tokenizer carries its own. Both search entry points supplied one unconditionally — createDB/createDBSimple through a destructuring default that language: undefined could not suppress, and createI18nSearchAPI by hardcoding multilingual after the spread — so passing tokenizer always threw NO_LANGUAGE_WITH_CUSTOM_TOKENIZER at index-build time. On i18n sources there was no call that worked at all.

language is now omitted when a tokenizer is present (from either tokenizer or components.tokenizer), and i18n servers no longer overwrite a caller-supplied language. Attaching a stemmer to the default multilingual segmentation works as documented:

import { stemmer } from '@zbsearch/stemmers/english';
createFromSource(source, {
tokenizer: { language: 'multilingual', stemming: true, stemmer },
});

Commits
  • c2ce5cb Version Packages (#3463)
  • 19e269e chore: drop typescript 7
  • eacc5e1 fix(graphql): no dropped optional arguments in playground
  • 2452e01 fix(core): fix unusable tokenizer search option
  • cc694a1 chore: bump deps
  • 7c31d84 Merge pull request #3457 from fuma-nama/tegami/version-packages
  • c6aa185 fix(graphql): migrate deprecated APIs of graphql v18
  • 5b2a798 docs: drop mcp-handler
  • 9ad3757 chore: bump deps
  • 15ea7ea docs: document GraphQL options
  • Additional commits viewable in compare view

Updates lucide-react from 1.28.0 to 1.30.0

Release notes

Sourced from lucide-react's releases.

Version 1.30.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

Version 1.29.0

What's Changed

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

Commits

Updates next from 16.2.12 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

  • Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
  • Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
  • Normalize encoded dynamic placeholders in app routes: #91603
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
  • Update tokio from 1.43.0 to 1.47.3: #90945
  • [turbopack] Simplify snapshotting logic: #91178
  • Turbopack: enable server HMR for app route handlers: #91466
  • turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
  • [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
  • Skip loadBindings() Lightning CSS check during next start: #91538
  • turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
  • Turbopack: Add importModule() support to webpack loaders: #89630
  • turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
  • turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
  • feat(node-streams): add config flag, define-env, and env precedence test: #90427
  • Rename /_next/webpack-hmr to /_next/hmr: #91415
  • Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
  • Handle encoded params further: #91627
  • [turbopack] Respect {eval:true} in worker_threads constructors: #91666
  • Fix missing route in otel spans without base-server: #91665
  • [turbopack] Optimize compaction cpu usage: #91468
  • Fix layout segment optimization: move app-page imports to server-utility transition: #91701
  • Fix server actions in standalone mode with cacheComponents: #91711
  • turbo-persistence: remove Unmergeable mmap advice: #91713
  • turbopack: move "compact database" tracing span to backend layer: #91693
  • Turbopack: lazy require metadata and handle TLA: #91705
  • Fix adapter outputs for dynamic metadata routes: #91680
  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
  • [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
  • [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336
  • Turbopack: Define Effect as a trait instead of a closure: #89080
  • Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • [devtools] Make instant navs panel draggable: #91914
  • [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits
  • d73f562 v16.3.0
  • 2e0d4cb Edits to turbopackFileSystemCache (#96531)
  • 86df9c7 docs: cover direct visits and client navigations in the instant() e2e example...
  • Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@vercel

vercel Bot commented Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
objectstack Ignored Ignored Aug 10, 2026 2:40pm

Request Review

@github-actions

github-actions Bot commented Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

📓 Docs Drift Check

This PR changes 10 package(s): @objectstack/cli, @objectstack/driver-memory, @objectstack/driver-mongodb, @objectstack/driver-sql, @objectstack/driver-sqlite-wasm, @objectstack/driver-turso, @objectstack/metadata, @objectstack/plugin-auth, @objectstack/plugin-email, @objectstack/plugin-hono-server.

34 hand-written doc(s) reference the affected code and may need an implementation-accuracy re-verification:

  • content/docs/ai/skills-reference.mdx (via packages/cli)
  • content/docs/api/client-sdk.mdx (via @objectstack/cli)
  • content/docs/api/data-flow.mdx (via @objectstack/cli)
  • content/docs/api/environment-routing.mdx (via @objectstack/cli)
  • content/docs/api/error-catalog.mdx (via @objectstack/cli)
  • content/docs/automation/flows.mdx (via @objectstack/plugin-email)
  • content/docs/automation/hook-bodies.mdx (via packages/cli)
  • content/docs/concepts/metadata-lifecycle.mdx (via @objectstack/metadata)
  • content/docs/data-modeling/drivers.mdx (via @objectstack/driver-memory, @objectstack/driver-mongodb, @objectstack/driver-sql, @objectstack/driver-sqlite-wasm, @objectstack/driver-turso)
  • content/docs/deployment/backup-restore.mdx (via @objectstack/cli)
  • content/docs/deployment/cli.mdx (via @objectstack/cli, @objectstack/driver-turso, @objectstack/plugin-auth)
  • content/docs/deployment/environment-variables.mdx (via @objectstack/driver-turso, @objectstack/plugin-email)
  • content/docs/deployment/production-readiness.mdx (via @objectstack/plugin-auth)
  • content/docs/deployment/self-hosting.mdx (via @objectstack/cli, @objectstack/driver-turso)
  • content/docs/deployment/vercel.mdx (via @objectstack/driver-memory)
  • content/docs/getting-started/glossary.mdx (via @objectstack/driver-memory, @objectstack/driver-mongodb, @objectstack/driver-sql, @objectstack/driver-sqlite-wasm, @objectstack/driver-turso)
  • content/docs/getting-started/your-first-project.mdx (via @objectstack/cli, @objectstack/plugin-hono-server)
  • content/docs/kernel/cluster.mdx (via packages/metadata)
  • content/docs/kernel/contracts/cache-service.mdx (via @objectstack/plugin-auth)
  • content/docs/kernel/runtime-services/data-service.mdx (via @objectstack/cli)
  • content/docs/kernel/runtime-services/index.mdx (via packages/cli)
  • content/docs/kernel/services-checklist.mdx (via @objectstack/driver-memory, @objectstack/driver-mongodb, @objectstack/driver-sql, @objectstack/driver-sqlite-wasm, @objectstack/metadata, @objectstack/plugin-auth)
  • content/docs/permissions/authentication.mdx (via @objectstack/cli, @objectstack/driver-memory, @objectstack/plugin-auth, @objectstack/plugin-hono-server)
  • content/docs/permissions/sso.mdx (via @objectstack/plugin-auth)
  • content/docs/plugins/anatomy.mdx (via @objectstack/driver-sql)
  • content/docs/plugins/index.mdx (via @objectstack/cli, @objectstack/driver-memory, @objectstack/plugin-auth, @objectstack/plugin-hono-server)
  • content/docs/plugins/packages.mdx (via @objectstack/cli, @objectstack/driver-memory, @objectstack/driver-mongodb, @objectstack/driver-sql, @objectstack/driver-sqlite-wasm, @objectstack/driver-turso, @objectstack/metadata, @objectstack/plugin-auth, @objectstack/plugin-email, @objectstack/plugin-hono-server)
  • content/docs/protocol/kernel/http-protocol.mdx (via @objectstack/metadata, @objectstack/plugin-hono-server)
  • content/docs/protocol/kernel/index.mdx (via @objectstack/driver-sql, @objectstack/plugin-email)
  • content/docs/protocol/kernel/lifecycle.mdx (via @objectstack/driver-sql)
  • content/docs/protocol/kernel/metadata-service.mdx (via @objectstack/metadata)
  • content/docs/protocol/kernel/plugin-spec.mdx (via @objectstack/cli)
  • content/docs/protocol/kernel/realtime-protocol.mdx (via @objectstack/cli)
  • content/docs/protocol/objectql/query-syntax.mdx (via @objectstack/driver-memory, @objectstack/driver-mongodb, @objectstack/driver-sql, @objectstack/driver-sqlite-wasm)

⛔ 5 release-owned page(s) also reference the affected code. These are read-only:

  • content/docs/releases/implementation-status.mdx (via @objectstack/cli, @objectstack/driver-memory, @objectstack/driver-mongodb, @objectstack/driver-sql, @objectstack/driver-sqlite-wasm, @objectstack/plugin-auth, @objectstack/plugin-hono-server)
  • content/docs/releases/v12.mdx (via @objectstack/metadata)
  • content/docs/releases/v16.mdx (via @objectstack/cli, @objectstack/plugin-hono-server)
  • content/docs/releases/v17.mdx (via @objectstack/cli)
  • content/docs/releases/v9.mdx (via @objectstack/metadata, @objectstack/plugin-auth)

content/docs/releases/ is RELEASE-OWNED (AGENTS.md "Documentation Guardrails"): release
notes are written centrally at release time, and a code PR that edits them is the exact PR
that guardrail exists to stop. They are still audited — read-only. If one of them is actually
wrong, file an issue or open a dedicated docs-only PR; do not edit it here.

Advisory only. To re-verify, run the docs-accuracy-audit workflow scoped to these files:
node scripts/docs-audit/affected-docs.mjs origin/main → pass the list as args.docs.

@github-actions github-actions Bot added the documentation Improvements or additions to documentation label Aug 10, 2026
@dependabot dependabot Bot changed the title chore(deps)(deps): bump the production-dependencies group with 16 updates chore(deps)(deps): bump the production-dependencies group across 1 directory with 16 updates Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-5fd8cd04f6 branch 3 times, most recently from eff305b to ff5b1cf Compare August 10, 2026 13:13
@dependabot
chore(deps)(deps): bump the production-dependencies group across 1 di…
0473883 
…rectory with 16 updates

Bumps the production-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.11` |
| [@oclif/core](https://github.com/oclif/core) | `4.13.2` | `4.13.3` |
| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `13.0.2` | `13.0.3` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.12` | `2.1.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.2` | `5.2.3` |
| [mingo](https://github.com/kofrasa/mingo) | `7.2.2` | `7.2.3` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.0` | `6.0.1` |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.2.0` | `2.3.0` |
| [jose](https://github.com/panva/jose) | `6.2.7` | `6.2.8` |
| [hono](https://github.com/honojs/hono) | `4.12.34` | `4.13.1` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.3` | `9.0.5` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.14.1` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.2.1` | `15.2.2` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.14.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.30.0` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.0` |



Updates `tsx` from 4.23.1 to 4.23.11
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.11)

Updates `@oclif/core` from 4.13.2 to 4.13.3
- [Release notes](https://github.com/oclif/core/releases)
- [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md)
- [Commits](oclif/core@4.13.2...4.13.3)

Updates `better-sqlite3` from 13.0.2 to 13.0.3
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v13.0.2...v13.0.3)

Updates `@hono/node-server` from 2.0.12 to 2.1.0
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.12...v2.1.0)

Updates `js-yaml` from 5.2.2 to 5.2.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.2...5.2.3)

Updates `mingo` from 7.2.2 to 7.2.3
- [Changelog](https://github.com/kofrasa/mingo/blob/main/CHANGELOG.md)
- [Commits](kofrasa/mingo@7.2.2...7.2.3)

Updates `nanoid` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.0...6.0.1)

Updates `@noble/hashes` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Commits](paulmillr/noble-hashes@2.2.0...2.3.0)

Updates `jose` from 6.2.7 to 6.2.8
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.7...v6.2.8)

Updates `hono` from 4.12.34 to 4.13.1
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.34...v4.13.1)

Updates `nodemailer` from 9.0.3 to 9.0.5
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v9.0.3...v9.0.5)

Updates `fumadocs-core` from 16.14.0 to 16.14.1
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.14.0...fumadocs@16.14.1)

Updates `fumadocs-mdx` from 15.2.1 to 15.2.2
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.2.1...fumadocs-mdx@15.2.2)

Updates `fumadocs-ui` from 16.14.0 to 16.14.1
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.14.0...fumadocs@16.14.1)

Updates `lucide-react` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react)

Updates `next` from 16.2.12 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.0)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@noble/hashes"
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@oclif/core"
  dependency-version: 4.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: better-sqlite3
  dependency-version: 13.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fumadocs-core
  dependency-version: 16.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fumadocs-mdx
  dependency-version: 15.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fumadocs-ui
  dependency-version: 16.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: hono
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: jose
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: js-yaml
  dependency-version: 5.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: mingo
  dependency-version: 7.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: nanoid
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: nodemailer
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.23.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-5fd8cd04f6 branch from ff5b1cf to 0473883 Compare August 10, 2026 14:40
@os-help os-help closed this Aug 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-5fd8cd04f6 branch August 11, 2026 02:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation javascript Pull requests that update javascript code size/s

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@os-help