Skip to content

chore(deps): bump the production-minor group with 10 updates - #867

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-2880a79640
Closed

chore(deps): bump the production-minor group with 10 updates#867
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-2880a79640

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor group with 10 updates:

Package From To
@cloudflare/workers-oauth-provider 0.8.2 0.8.3
lucide-react 1.27.0 1.28.0
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
@remotion/bundler 4.0.500 4.0.503
@remotion/cli 4.0.500 4.0.503
@remotion/google-fonts 4.0.500 4.0.503
@remotion/renderer 4.0.500 4.0.503
@remotion/tailwind-v4 4.0.500 4.0.503
remotion 4.0.500 4.0.503

Updates @cloudflare/workers-oauth-provider from 0.8.2 to 0.8.3

Release notes

Sourced from @​cloudflare/workers-oauth-provider's releases.

v0.8.3

Patch Changes

  • #240 0061270 Thanks @​agent-think! - Fix worker crash (HTTP 500) when the /token request sends a malformed Content-Type header. The endpoint previously used a loose includes() check, so a header such as application/json, application/x-www-form-urlencoded passed validation and then caused request.formData() to throw. The media type is now parsed strictly (parameters are stripped and the exact media type is compared), and form parsing is guarded so invalid bodies return a 400 invalid_request instead of crashing the worker.

  • #246 771a207 Thanks @​agent-think! - Validate the RFC 8707 resource parameter before consuming an authorization code, so a token request rejected with invalid_target can be retried with an allowed resource.

  • #249 f0f5dc0 Thanks @​mattzcarey! - Preserve a subject access token's scope when issuing tokens through OAuth 2.0 Token Exchange.

Changelog

Sourced from @​cloudflare/workers-oauth-provider's changelog.

0.8.3

Patch Changes

  • #240 0061270 Thanks @​agent-think! - Fix worker crash (HTTP 500) when the /token request sends a malformed Content-Type header. The endpoint previously used a loose includes() check, so a header such as application/json, application/x-www-form-urlencoded passed validation and then caused request.formData() to throw. The media type is now parsed strictly (parameters are stripped and the exact media type is compared), and form parsing is guarded so invalid bodies return a 400 invalid_request instead of crashing the worker.

  • #246 771a207 Thanks @​agent-think! - Validate the RFC 8707 resource parameter before consuming an authorization code, so a token request rejected with invalid_target can be retried with an allowed resource.

  • #249 f0f5dc0 Thanks @​mattzcarey! - Preserve a subject access token's scope when issuing tokens through OAuth 2.0 Token Exchange.

Commits

Updates lucide-react from 1.27.0 to 1.28.0

Release notes

Sourced from lucide-react's releases.

Version 1.28.0

What's Changed

Full Changelog: lucide-icons/lucide@1.27.0...1.28.0

Commits

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @remotion/bundler from 4.0.500 to 4.0.503

Release notes

Sourced from @​remotion/bundler's releases.

v4.0.503

What's Changed

Templates

Docs

Internal and Experimental

... (truncated)

Commits
  • 9f4e47e Fix @remotion/three/webgpu resolution in example testbed
  • 1b83e30 v4.0.503
  • f643d9f Reduce mobile sidebar widths (#9989)
  • fc91971 Fix modal stacking above floating sidebars (#9990)
  • 92f0d54 Fix submenu positioning in narrow viewports (#9988)
  • 36496da Fix pointer sessions outside the window (#9985)
  • aa6d657 docs: document v5 measureSpring from/to removal (#9974)
  • c659c75 @remotion/studio: Fix source stack resolution in Safari (#9983)
  • d28b404 remotion.dev/convert: Open canvas captures directly (#9984)
  • 67de30e docs: document v5 visualizeAudio optimizeFor default (#9972)
  • Additional commits viewable in compare view

Updates @remotion/cli from 4.0.500 to 4.0.503

Release notes

Sourced from @​remotion/cli's releases.

v4.0.503

What's Changed

Templates

Docs

Internal and Experimental

... (truncated)

Commits
  • 9f4e47e Fix @remotion/three/webgpu resolution in example testbed
  • 1b83e30 v4.0.503
  • f643d9f Reduce mobile sidebar widths (#9989)
  • fc91971 Fix modal stacking above floating sidebars (#9990)
  • 92f0d54 Fix submenu positioning in narrow viewports (#9988)
  • 36496da Fix pointer sessions outside the window (#9985)
  • aa6d657 docs: document v5 measureSpring from/to removal (#9974)
  • c659c75 @remotion/studio: Fix source stack resolution in Safari (#9983)
  • d28b404 remotion.dev/convert: Open canvas captures directly (#9984)
  • 67de30e docs: document v5 visualizeAudio optimizeFor default (#9972)
  • Additional commits viewable in compare view

Updates @remotion/google-fonts from 4.0.500 to 4.0.503

Release notes

Sourced from @​remotion/google-fonts's releases.

v4.0.503

What's Changed

Templates

Docs

Internal and Experimental

... (truncated)

Commits
  • 9f4e47e Fix @remotion/three/webgpu resolution in example testbed
  • 1b83e30 v4.0.503
  • f643d9f Reduce mobile sidebar widths (#9989)
  • fc91971 Fix modal stacking above floating sidebars (#9990)
  • 92f0d54 Fix submenu positioning in narrow viewports (#9988)
  • 36496da Fix pointer sessions outside the window (#9985)
  • aa6d657 docs: document v5 measureSpring from/to removal (#9974)
  • c659c75 @remotion/studio: Fix source stack resolution in Safari (#9983)
  • d28b404 remotion.dev/convert: Open canvas captures directly (#9984)
  • 67de30e docs: document v5 visualizeAudio optimizeFor default (#9972)
  • Additional commits viewable in compare view

Updates @remotion/renderer from 4.0.500 to 4.0.503

Release notes

Sourced from @​remotion/renderer's releases.

v4.0.503

What's Changed

Templates

Docs

Internal and Experimental

... (truncated)

Commits
  • 9f4e47e Fix @remotion/three/webgpu resolution in example testbed
  • 1b83e30 v4.0.503
  • f643d9f Reduce mobile sidebar widths (#9989)
  • fc91971 Fix modal stacking above floating sidebars (#9990)
  • 92f0d54 Fix submenu positioning in narrow viewports (#9988)
  • 36496da Fix pointer sessions outside the window (#9985)
  • aa6d657 docs: document v5 measureSpring from/to removal (#9974)
  • c659c75 @remotion/studio: Fix source stack resolution in Safari (#9983)
  • d28b404 remotion.dev/convert: Open canvas captures directly (#9984)
  • 67de30e docs: document v5 visualizeAudio optimizeFor default (#9972)
  • Additional commits viewable in compare view

Updates @remotion/tailwind-v4 from 4.0.500 to 4.0.503

Release notes

Sourced from @​remotion/tailwind-v4's releases.

v4.0.503

What's Changed

@dependabot
chore(deps): bump the production-minor group with 10 updates
d3248bb 
Bumps the production-minor group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@cloudflare/workers-oauth-provider](https://github.com/cloudflare/workers-oauth-provider) | `0.8.2` | `0.8.3` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.27.0` | `1.28.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@remotion/bundler](https://github.com/remotion-dev/remotion) | `4.0.500` | `4.0.503` |
| [@remotion/cli](https://github.com/remotion-dev/remotion) | `4.0.500` | `4.0.503` |
| [@remotion/google-fonts](https://github.com/remotion-dev/remotion) | `4.0.500` | `4.0.503` |
| [@remotion/renderer](https://github.com/remotion-dev/remotion) | `4.0.500` | `4.0.503` |
| [@remotion/tailwind-v4](https://github.com/remotion-dev/remotion) | `4.0.500` | `4.0.503` |
| [remotion](https://github.com/remotion-dev/remotion) | `4.0.500` | `4.0.503` |


Updates `@cloudflare/workers-oauth-provider` from 0.8.2 to 0.8.3
- [Release notes](https://github.com/cloudflare/workers-oauth-provider/releases)
- [Changelog](https://github.com/cloudflare/workers-oauth-provider/blob/main/CHANGELOG.md)
- [Commits](cloudflare/workers-oauth-provider@v0.8.2...v0.8.3)

Updates `lucide-react` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@remotion/bundler` from 4.0.500 to 4.0.503
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.500...v4.0.503)

Updates `@remotion/cli` from 4.0.500 to 4.0.503
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.500...v4.0.503)

Updates `@remotion/google-fonts` from 4.0.500 to 4.0.503
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.500...v4.0.503)

Updates `@remotion/renderer` from 4.0.500 to 4.0.503
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.500...v4.0.503)

Updates `@remotion/tailwind-v4` from 4.0.500 to 4.0.503
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.500...v4.0.503)

Updates `remotion` from 4.0.500 to 4.0.503
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.500...v4.0.503)

---
updated-dependencies:
- dependency-name: "@cloudflare/workers-oauth-provider"
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: lucide-react
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: "@remotion/bundler"
  dependency-version: 4.0.503
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: "@remotion/cli"
  dependency-version: 4.0.503
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: "@remotion/google-fonts"
  dependency-version: 4.0.503
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: "@remotion/renderer"
  dependency-version: 4.0.503
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: "@remotion/tailwind-v4"
  dependency-version: 4.0.503
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: remotion
  dependency-version: 4.0.503
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 5, 2026
@dependabot
dependabot Bot requested a review from choraria as a code owner August 5, 2026 03:05
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 5, 2026
@choraria choraria mentioned this pull request Aug 5, 2026
Merged
@choraria choraria closed this in #868 Aug 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-minor-2880a79640 branch August 5, 2026 06:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@choraria choraria Awaiting requested review from choraria choraria is a code owner

Assignees

@choraria choraria

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@choraria