PR #94 opened: chore(deps): bump the minor-and-patch group across 1 directory with 10 updates
Bumps the minor-and-patch group with 10 updates in the / directory:
| Package | From | To |
|---|---|---|
| @inertiajs/react | 2.3.17 | 2.3.18 |
| @sentry/react | 10.40.0 | 10.43.0 |
| @stripe/react-stripe-js | 5.6.0 | 5.6.1 |
| @stripe/stripe-js | 8.8.0 | 8.9.0 |
| laravel-echo | 2.3.0 | 2.3.1 |
| lucide-react | 0.576.0 | 0.577.0 |
| @types/node | 25.3.3 | 25.5.0 |
| typescript-eslint | 8.56.1 | 8.57.0 |
| lightningcss-linux-x64-gnu | 1.31.1 | 1.32.0 |
| lightningcss-win32-x64-msvc | 1.31.1 | 1.32.0 |
Updates @inertiajs/react from 2.3.17 to 2.3.18
▶Release notes
Sourced from @inertiajs/react's releases.
v2.3.18
What's Changed
- Bump
@sveltejs/kitfrom 2.53.2 to 2.53.3 by@dependabot[bot] in inertiajs/inertia#2919- Bump multer from 2.0.2 to 2.1.1 by
@dependabot[bot] in inertiajs/inertia#2923- [2.x] Remove request from stream on network failure by
@pascalbaljetin inertiajs/inertia#2948- Use SharedPageProps in GlobalEventsMap event types by
@hamedelasmain inertiajs/inertia#2946- [2.x] fix: include SharedPageProps in createInertiaApp and onSuccess types by
@isaackaarain inertiajs/inertia#2931- [2.x] Remove
server-rendererdependency from Vue adapter type by@pascalbaljetin inertiajs/inertia#2955- [2.x] fix(types): module augmentation example by
@pascalbaljetin inertiajs/inertia#2954- [2.x] fix: always fire flash event regardless of partial reload equality by
@pascalbaljetin inertiajs/inertia#2953- fix: skip view transition when document visibility is hidden by
@mortenhaubergin inertiajs/inertia#2957New Contributors
@hamedelasmamade their first contribution in inertiajs/inertia#2946@mortenhaubergmade their first contribution in inertiajs/inertia#2957Full Changelog: https://github.com/inertiajs/inertia/compare/v2.3.17...v2.3.18
▶Changelog
Sourced from @inertiajs/react's changelog.
v2.3.18 - 2026-03-12
What's Changed
- Bump
@sveltejs/kit from 2.53.2 to 2.53.3 by@dependabot[bot] in inertiajs/inertia#2919- Bump multer from 2.0.2 to 2.1.1 by
@dependabot[bot] in inertiajs/inertia#2923- [2.x] Remove request from stream on network failure by
@pascalbaljetin inertiajs/inertia#2948- Use SharedPageProps in GlobalEventsMap event types by
@hamedelasmain inertiajs/inertia#2946- [2.x] fix: include SharedPageProps in createInertiaApp and onSuccess types by
@isaackaarain inertiajs/inertia#2931- [2.x] Remove
server-rendererdependency from Vue adapter type by@pascalbaljetin inertiajs/inertia#2955- [2.x] fix(types): module augmentation example by
@pascalbaljetin inertiajs/inertia#2954- [2.x] fix: always fire flash event regardless of partial reload equality by
@pascalbaljetin inertiajs/inertia#2953- fix: skip view transition when document visibility is hidden by
@mortenhaubergin inertiajs/inertia#2957New Contributors
@hamedelasmamade their first contribution in inertiajs/inertia#2946@mortenhaubergmade their first contribution in inertiajs/inertia#2957Full Changelog: https://github.com/inertiajs/inertia/compare/v2.3.17...v2.3.18
▶Commits
Updates @sentry/react from 10.40.0 to 10.43.0
▶Release notes
Sourced from @sentry/react's releases.
10.43.0
Important Changes
feat(nextjs): Add Turbopack support for React component name annotation (#19604)
We added experimental support for React component name annotation in Turbopack builds. When enabled, JSX elements are annotated with
data-sentry-component,data-sentry-element, anddata-sentry-source-fileattributes at build time. This enables searching Replays by component name, seeing component names in breadcrumbs, and performance monitoring — previously only available with webpack builds.This feature requires Next.js 16+ and is currently behind an experimental flag:
// next.config.ts import { withSentryConfig } from '@sentry/nextjs';
export default withSentryConfig(nextConfig, { _experimental: { turbopackReactComponentAnnotation: { enabled: true, ignoredComponents: ['Header', 'Footer'], // optional }, }, });feat(hono): Instrument middlewares
app.use()(#19611)Hono middleware registered via
app.use()is now automatically instrumented, creating spans for each middleware invocation.Other Changes
- feat(node-core,node): Add
tracePropagationoption to http and fetch integrations (#19712)- feat(hono): Use parametrized names for errors (#19577)
- fix(browser): Fix missing traces for user feedback (#19660)
- fix(cloudflare): Use correct Proxy receiver in
instrumentDurableObjectStorage(#19662)- fix(core): Standardize Vercel AI span descriptions to align with GenAI semantic conventions (#19624)
- fix(deps): Bump hono to 4.12.5 to fix multiple vulnerabilities (#19653)
- fix(deps): Bump svgo to 4.0.1 to fix DoS via entity expansion (#19651)
- fix(deps): Bump tar to 7.5.10 to fix hardlink path traversal (#19650)
- fix(nextjs): Align Turbopack module metadata injection with webpack behavior (#19645)
- fix(node): Prevent duplicate LangChain spans from double module patching (#19684)
- fix(node-core,vercel-edge): Use HEROKU_BUILD_COMMIT env var for default release (#19617)
- fix(sveltekit): Fix file system race condition in source map cleaning (#19714)
- fix(tanstackstart-react): Add workerd and worker export conditions (#19461)
- fix(vercel-ai): Prevent tool call span map memory leak (#19328)
- feat(deps): Bump
@sentry/rollup-pluginfrom 5.1.0 to 5.1.1 (#19658)
... (truncated)
▶Changelog
Sourced from @sentry/react's changelog.
10.43.0
Important Changes
feat(nextjs): Add Turbopack support for React component name annotation (#19604)
We added experimental support for React component name annotation in Turbopack builds. When enabled, JSX elements are annotated with
data-sentry-component,data-sentry-element, anddata-sentry-source-fileattributes at build time. This enables searching Replays by component name, seeing component names in breadcrumbs, and performance monitoring — previously only available with webpack builds.This feature requires Next.js 16+ and is currently behind an experimental flag:
// next.config.ts import { withSentryConfig } from '@sentry/nextjs';
export default withSentryConfig(nextConfig, { _experimental: { turbopackReactComponentAnnotation: { enabled: true, ignoredComponents: ['Header', 'Footer'], // optional }, }, });feat(hono): Instrument middlewares
app.use()(#19611)Hono middleware registered via
app.use()is now automatically instrumented, creating spans for each middleware invocation.Other Changes
- feat(node-core,node): Add
tracePropagationoption to http and fetch integrations (#19712)- feat(hono): Use parametrized names for errors (#19577)
- fix(browser): Fix missing traces for user feedback (#19660)
- fix(cloudflare): Use correct Proxy receiver in
instrumentDurableObjectStorage(#19662)- fix(core): Standardize Vercel AI span descriptions to align with GenAI semantic conventions (#19624)
- fix(deps): Bump hono to 4.12.5 to fix multiple vulnerabilities (#19653)
- fix(deps): Bump svgo to 4.0.1 to fix DoS via entity expansion (#19651)
- fix(deps): Bump tar to 7.5.10 to fix hardlink path traversal (#19650)
- fix(nextjs): Align Turbopack module metadata injection with webpack behavior (#19645)
- fix(node): Prevent duplicate LangChain spans from double module patching (#19684)
- fix(node-core,vercel-edge): Use HEROKU_BUILD_COMMIT env var for default release (#19617)
- fix(sveltekit): Fix file system race condition in source map cleaning (#19714)
- fix(tanstackstart-react): Add workerd and worker export conditions (#19461)
- fix(vercel-ai): Prevent tool call span map memory leak (#19328)
- feat(deps): Bump
@sentry/rollup-pluginfrom 5.1.0 to 5.1.1 (#19658)
... (truncated)
▶Commits
3fb8102release: 10.43.08706e4eMerge pull request #19716 from getsentry/prepare-release/10.43.061d7a84meta(changelog): Update changelog for 10.43.0f83f288test(angular): Fix failing canary test (#19639)2b3ce34fix(sveltekit): Fix file system race condition in source map cleaning (#19714)98be6b0chore(skills): Addbump-size-limitskill (#19715)cdee7a9chore(sourcemaps): Make sourcemaps e2e test more generic (#19678)b26df86feat(node-core,node): Add tracePropagation option to http and fetch integrati...7b69774chore(ci): Allow triage action to run on issues from external users (#19701)5651be2fix(browser): Fix missing traces for user feedback (#19660)- Additional commits viewable in compare view
Updates @stripe/react-stripe-js from 5.6.0 to 5.6.1
▶Release notes
Sourced from @stripe/react-stripe-js's releases.
v5.6.1
Fixes
- Fail fast if hub GitHub auth is invalid during publish (#656)
Changed
- Bump rollup from 4.22.4 to 4.59.0 (#657)
▶Commits
Updates @stripe/stripe-js from 8.8.0 to 8.9.0
▶Release notes
Sourced from @stripe/stripe-js's releases.
v8.9.0
New features
- Add types for new Payment Form Element method & change event values 👾 (#878)
- Add buttonColorText and buttonColorBackground Appearance API vars (#876)
Changed
▶Commits
e082e40v8.9.06beb2e3Bump minimatch from 3.1.2 to 3.1.5 in /examples/rollup (#884)a607fbaBump minimatch from 3.1.2 to 3.1.5 in /examples/parcel (#882)7ccd407Bump rollup from 2.79.2 to 2.80.0 (#881)870e250Add types for new Payment Form Element method & change event values 👾 (#878)7789da9Add buttonColorText and buttonColorBackground Appearance API vars (#876)- See full diff in compare view
Updates laravel-echo from 2.3.0 to 2.3.1
▶Release notes
Sourced from laravel-echo's releases.
v2.3.1
What's Changed
- fix: prevent isConstructor from executing constructor side effects by
@valentin-dufoisin laravel/echo#476- Bump axios from 1.12.0 to 1.13.5 by
@dependabot[bot] in laravel/echo#477- Add Boost skills for Echo, Vue, and React packages by
@pushpak1300in laravel/echo#480- fix: useEchoNotification callback not firing after re-render by
@pataarin laravel/echo#481New Contributors
@valentin-dufoismade their first contribution in laravel/echo#476@pushpak1300made their first contribution in laravel/echo#480Full Changelog: https://github.com/laravel/echo/compare/v2.3.0...v2.3.1
▶Changelog
Sourced from laravel-echo's changelog.
v2.3.1 - 2026-03-10
What's Changed
- fix: prevent isConstructor from executing constructor side effects by
@valentin-dufoisin laravel/echo#476- Bump axios from 1.12.0 to 1.13.5 by
@dependabot[bot] in laravel/echo#477- Add Boost skills for Echo, Vue, and React packages by
@pushpak1300in laravel/echo#480- fix: useEchoNotification callback not firing after re-render by
@pataarin laravel/echo#481New Contributors
@valentin-dufoismade their first contribution in laravel/echo#476@pushpak1300made their first contribution in laravel/echo#480Full Changelog: https://github.com/laravel/echo/compare/v2.3.0...v2.3.1
▶Commits
1237fdav2.3.1eb3834cfix: re-register notification listener after stopListening in useEchoNotifica...0d9bbd1Add Boost skills for Echo, Vue, and React packages (#480)d298108Bump axios from 1.12.0 to 1.13.5 (#477)54f13c4fix: prevent isConstructor from executing constructor side effects (#476)475b4ceUpdate CHANGELOG- See full diff in compare view
Updates lucide-react from 0.576.0 to 0.577.0
▶Release notes
Sourced from lucide-react's releases.
Version 0.577.0
What's Changed
- chore(deps): bump rollup from 4.53.3 to 4.59.0 by
@dependabot[bot] in lucide-icons/lucide#4106- fix(repo): correctly ignore docs/releaseMetadata via .gitignore by
@bhavberiin lucide-icons/lucide#4100- feat(icons): added
ellipseicon by@KISHORE-KUMAR-Sin lucide-icons/lucide#3749New Contributors
@bhavberimade their first contribution in lucide-icons/lucide#4100@KISHORE-KUMAR-Smade their first contribution in lucide-icons/lucide#3749Full Changelog: https://github.com/lucide-icons/lucide/compare/0.576.0...0.577.0
▶Commits
f6c0d06chore(deps): bump rollup from 4.53.3 to 4.59.0 (#4106)- See full diff in compare view
Updates @types/node from 25.3.3 to 25.5.0
▶Commits
- See full diff in compare view
Updates typescript-eslint from 8.56.1 to 8.57.0
▶Release notes
Sourced from typescript-eslint's releases.
v8.57.0
8.57.0 (2026-03-09)
🚀 Features
- eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#12080)
🩹 Fixes
- eslint-plugin: [strict-void-return] false positives with overloads (#12055)
- eslint-plugin: handle statically analyzable computed keys in prefer-readonly (#12079)
- eslint-plugin: guard against negative paramIndex in no-useless-default-assignment (#12077)
- eslint-plugin: [prefer-promise-reject-errors] add allow
TypeOrValueSpecifierto prefer-promise-reject-errors (#12094)- eslint-plugin: [no-base-to-string] fix false positive for toString with overloads (#12089)
- typescript-estree: switch back to use
ts.getModifiers()(#12034)- typescript-estree: if the template literal is tagged and the text has an invalid escape,
cookedwill benull(#11355)❤️ Thank You
- Brad Zacher
@bradzacher- Brian Schlenker
@bschlenk- Evyatar Daud
@StyleShit- fisker Cheung
@fisker- James Henry
@JamesHenry- Josh Goldberg
- Kirk Waiblinger
@kirkwaiblinger- Moses Odutusin
@thebolarin- Newton Yuan
@NewtonYuan- SungHyun627
@SungHyun627- Younsang Na
@nayounsangSee GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
▶Changelog
Sourced from typescript-eslint's changelog.
8.57.0 (2026-03-09)
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
▶Commits
Updates lightningcss-linux-x64-gnu from 1.31.1 to 1.32.0
▶Release notes
Sourced from lightningcss-linux-x64-gnu's releases.
v1.32.0
Added
- Enable custom resolvers to mark imports as external. Resolvers may now return
{external: string}to mark an import as external. This will leave the@importin the output CSS instead of bundling it. See the docs for details.- Allow visitors to add dependencies. Visitors may now be functions which receive an
addDependencyfunction as an option. Dependencies may be used by tools that call Lightning CSS such as bundlers to implement file watching or caching. See the docs for details.- Add
mix-blend-modeproperty supportFixed
- Output unknown
color-schemekeywords as-is instead ofnormal- Improved serialization of the rotate property
- keep a single space between functions when formatting
transformvalues- Fix additionally inserted whitespace in
var(--foo,)andenv(--foo,)- Convert the percentage in the
scaleproperty orscale()to a number- update compat data
▶Commits
- See full diff in compare view
Updates lightningcss-win32-x64-msvc from 1.31.1 to 1.32.0
▶Release notes
Sourced from lightningcss-win32-x64-msvc's releases.
v1.32.0
Added
- Enable custom resolvers to mark imports as external. Resolvers may now return
{external: string}to mark an import as external. This will leave the@importin the output CSS instead of bundling it. See the docs for details.- Allow visitors to add dependencies. Visitors may now be functions which receive an
addDependencyfunction as an option. Dependencies may be used by tools that call Lightning CSS such as bundlers to implement file watching or caching. See the docs for details.- Add
mix-blend-modeproperty supportFixed
- Output unknown
color-schemekeywords as-is instead ofnormal- Improved serialization of the rotate property
- keep a single space between functions when formatting
transformvalues- Fix additionally inserted whitespace in
var(--foo,)andenv(--foo,)- Convert the percentage in the
scaleproperty orscale()to a number- update compat data
▶Commits
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
▶Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions