Skip to content

chore(deps): bump the npm-dependencies group with 13 updates#17

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-dependencies-9e45b02975
Closed

chore(deps): bump the npm-dependencies group with 13 updates#17
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-dependencies-9e45b02975

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 14, 2025

Bumps the npm-dependencies group with 13 updates:

Package From To
@vercel/analytics 1.6.0 1.6.1
@vercel/speed-insights 1.3.0 1.3.1
next 16.0.6 16.0.10
react 19.2.0 19.2.3
react-dom 19.2.0 19.2.3
@tailwindcss/postcss 4.1.17 4.1.18
@vitejs/plugin-react 5.1.1 5.1.2
baseline-browser-mapping 2.8.32 2.9.7
jsdom 27.2.0 27.3.0
lefthook 2.0.4 2.0.11
markdownlint-cli2 0.19.1 0.20.0
tailwindcss 4.1.17 4.1.18
vitest 4.0.14 4.0.15

Updates @vercel/analytics from 1.6.0 to 1.6.1

Release notes

Sourced from @​vercel/analytics's releases.

1.6.1

What's Changed

Full Changelog: vercel/analytics@1.6.0...1.6.1

Commits

Updates @vercel/speed-insights from 1.3.0 to 1.3.1

Release notes

Sourced from @​vercel/speed-insights's releases.

1.3.1

What's Changed

Full Changelog: vercel/speed-insights@1.3.0...1.3.1

Commits

Updates next from 16.0.6 to 16.0.10

Release notes

Sourced from next's releases.

v16.0.10

Please see the Next.js Security Update for information about this security patch.

v16.0.8

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Update react version in cna templates (#86950)

Credits

Huge thanks to @​huozhi for helping!

v16.0.7

Please see CVE-2025-66478 for additional details about this release.

Commits

Updates react from 19.2.0 to 19.2.3

Release notes

Sourced from react's releases.

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Commits

Updates react-dom from 19.2.0 to 19.2.3

Release notes

Sourced from react-dom's releases.

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Commits

Updates @tailwindcss/postcss from 4.1.17 to 4.1.18

Release notes

Sourced from @​tailwindcss/postcss's releases.

v4.1.18

Fixed

  • Ensure validation of source(…) happens relative to the file it is in (#19274)
  • Include filename and line numbers in CSS parse errors (#19282)
  • Skip comments in Ruby files when checking for class names (#19243)
  • Skip over arbitrary property utilities with a top-level ! in the value (#19243)
  • Support environment API in @tailwindcss/vite (#18970)
  • Preserve case of theme keys from JS configs and plugins (#19337)
  • Write source maps correctly on the CLI when using --watch (#19373)
  • Handle special defaults (like ringColor.DEFAULT) in JS configs (#19348)
  • Improve backwards compatibility for content theme key from JS configs (#19381)
  • Upgrade: Handle future and experimental config keys (#19344)
  • Try to canonicalize any arbitrary utility to a bare value (#19379)
  • Validate candidates similarly to Oxide (#19397)
  • Canonicalization: combine text-* and leading-* classes (#19396)
  • Correctly handle duplicate CLI arguments (#19416)
  • Don’t emit color-mix fallback rules inside @keyframes (#19419)
  • CLI: Don't hang when output is /dev/stdout (#19421)
Changelog

Sourced from @​tailwindcss/postcss's changelog.

[4.1.18] - 2025-12-11

Fixed

  • Ensure validation of source(…) happens relative to the file it is in (#19274)
  • Include filename and line numbers in CSS parse errors (#19282)
  • Skip comments in Ruby files when checking for class names (#19243)
  • Skip over arbitrary property utilities with a top-level ! in the value (#19243)
  • Support environment API in @tailwindcss/vite (#18970)
  • Preserve case of theme keys from JS configs and plugins (#19337)
  • Write source maps correctly on the CLI when using --watch (#19373)
  • Handle special defaults (like ringColor.DEFAULT) in JS configs (#19348)
  • Improve backwards compatibility for content theme key from JS configs (#19381)
  • Upgrade: Handle future and experimental config keys (#19344)
  • Try to canonicalize any arbitrary utility to a bare value (#19379)
  • Validate candidates similarly to Oxide (#19397)
  • Canonicalization: combine text-* and leading-* classes (#19396)
  • Correctly handle duplicate CLI arguments (#19416)
  • Don’t emit color-mix fallback rules inside @keyframes (#19419)
  • CLI: Don't hang when output is /dev/stdout (#19421)

[3.4.19] - 2025-12-10

Fixed

  • Don’t break sibling-*() functions when used inside calc(…) (#19335)
Commits

Updates @vitejs/plugin-react from 5.1.1 to 5.1.2

Changelog

Sourced from @​vitejs/plugin-react's changelog.

5.1.2 (2025-12-08)

Commits

Updates baseline-browser-mapping from 2.8.32 to 2.9.7

Release notes

Sourced from baseline-browser-mapping's releases.

v2.9.3 - remove process.loadEnvFile()

What's Changed

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3

v2.9.2 - fix browser support bug

What's Changed

v2.9.0 - Reduce frequency of data staleness warnings

This version introduces a number of changes to data staleness warnings in response to #105 , #107 and #109

  • Data staleness warnings are now only shown if the getCompatibleVersions() or getAllVersions() functions are called - previously they were shown whenever the module was loaded, which meant many browserslist consumers were seeing the warning despite not targeting Baseline, especially those who were consuming browserslist in a pre-compiled format via next.js.
  • Adds new conditions for these warnings to be displayed which should only warn users for whom data freshness is critical:
    • The feature cut off data must be within the last two months, i.e. widelyAvailableOnDate: today + >2 years and 4 months or newly available in a browserslist query.
    • The module data must be more than 2 months old.
  • Introduces suppression options for these warning via the options objects and environment variables:
    • Adds a new suppressWarnings boolean to the getCompatibleVersions() and getAllVersions()
    • Respects the existing BROWSERSLIST_IGNORE_OLD_DATA environment variable.
    • Respects a new BASELINE_BROWSER_MAPPING_IGNORE_OLD_DATA environment variable.
  • Adds explanatory text to the README for how to avoid such warnings when reproducible builds are a requirement.
  • Change warning text to be package manager agnostic and mention the possibility of pre-compiled data.
Commits
  • 30bd7d0 Patch to 2.9.7 because browser or feature data changed
  • 40a5973 Browser or feature data changed
  • 13617df Updating static site
  • 92a0110 Patch to 2.9.6 because browser or feature data changed
  • 78b2795 Browser or feature data changed
  • d3d9879 Updating static site
  • 9193e75 Patch to 2.9.5 because browser or feature data changed
  • b418f5d Browser or feature data changed
  • baac99e Updating static site
  • 73c8429 Patch to 2.9.4 because browser or feature data changed
  • Additional commits viewable in compare view

Updates jsdom from 27.2.0 to 27.3.0

Release notes

Sourced from jsdom's releases.

Version 27.3.0

  • Improved CSS parsing and CSSOM object APIs via updates to @acemir/cssom. (acemir)
Changelog

Sourced from jsdom's changelog.

27.3.0

  • Improved CSS parsing and CSSOM object APIs via updates to @acemir/cssom. (acemir)
Commits

Updates lefthook from 2.0.4 to 2.0.11

Release notes

Sourced from lefthook's releases.

v2.0.11

Changelog

  • dcb45c027230c883f3b9a360896708aa9d6b50a3 ci: npm trusted publishing (#1234)
  • fd62bbb6586477b7d090e356c27f8a9e987c82a3 feat: more rudimentary shell completions (#1230)
  • f7bfafdd87868ea85de46c87802ab53278b77f67 feat: refetch and cleanup on ref change (#1210)

v2.0.10

Changelog

  • b3791f6b3abdbea78b7c43ef85e0d3ededb69a15 feat: add no_auto_install to lefthook.yml (#1231)
  • 1f7303df83e2af58015292986ebe2b8177c77667 fix: skip if empty files template (#1233)

v2.0.9

Changelog

  • d2fa5d9f31c57a79d2354654de1939272006fc88 chore: remove unnecessary .svg executable permissions (#1219)
  • 0792c2c03a98c306fd9fd762040e9f1d237fb1b1 chore: upgrade golangci-lint to 2.7.1, add godoclint (#1223)
  • 0b9f1936ddf18488cb95078e7a3a6f85724a3878 fix: check and report Scanner errors (#1222)
  • 97a7399c008be5e646538317f1701a1613be587a fix: do not try to hash-object directories (#1220)
  • 16fe016a8e25f9b4d15aa2848fb516d4842618be fix: improve separation of options and filenames for more git commands (#1225)
  • 07c5ccbd254cdad1135c260ac797191709382560 fix: skip pre commit hook if no staged files (#1229)
  • 98699c83d34fc36fa4f29d669a0ab4f3ec48d991 refactor: command executor tweaks (#1224)
  • 76cc6de4fd048d1de4ec4bc45930e780fd7e549a refactor: remove some redundant code (#1221)

v2.0.8

Changelog

  • 0324368284009ac0946a529b021495ad6f7377cc fix: do not escape custom templates in command replacement (#1213)

v2.0.7

Changelog

  • 88a192375815e0838850e72dd1ed5c6581792b8a fix: prefer using lefthook from the $PATH (#1211)

v2.0.6

Changelog

  • 4bb758673d1f77b399cce2582845752a3c8d2d93 feat: save original executable location in hooks (#1208)

v2.0.5

Changelog

  • 11306c9bed69501115a7c763ae4acd713016a36b chore(release): publish artifact attestations (#1189)
  • acdabe50afc5c7c3145f1ca642b5533c308df6e2 chore: upgrade golangci-lint to 2.6.1, add modernize (#1190)
  • 92033167ac4b3e1a8f0cd66c0075448d863bdf6a deps: November 2025 (#1200)
  • 57b10946714197e5116cb5d4492c91b9172ef4b3 feat: add optional args to scripts (#1206)
Changelog

Sourced from lefthook's changelog.

2.0.11 (2025-12-12)

2.0.10 (2025-12-12)

2.0.9 (2025-12-08)

  • fix: skip pre commit hook if no staged files (#1229) by @​mrexox
  • fix: do not try to hash-object directories (#1220) by @​scop
  • fix: check and report Scanner errors (#1222) by @​scop
  • refactor: command executor tweaks (#1224) by @​scop
  • refactor: remove some redundant code (#1221) by @​scop
  • fix: improve separation of options and filenames for more git commands (#1225) by @​scop
  • chore: upgrade golangci-lint to 2.7.1, add godoclint (#1223) by @​scop
  • chore: remove unnecessary .svg executable permissions (#1219) by @​scop

2.0.8 (2025-12-05)

2.0.7 (2025-12-04)

2.0.6 (2025-12-03)

2.0.5 (2025-12-02)

Commits
  • cffbf6c 2.0.11: improved remotes fetching, flags completion
  • f7bfafd feat: refetch and cleanup on ref change (#1210)
  • dcb45c0 ci: npm trusted publishing (#1234)
  • fd62bbb feat: more rudimentary shell completions (#1230)
  • 8d74b7c 2.0.10: no_auto_install option + fix for empty {files} template
  • b3791f6 feat: add no_auto_install to lefthook.yml (#1231)
  • 1f7303d fix: skip if empty files template (#1233)
  • c951a26 2.0.9: skip pre-commit hook if staged only deleted files
  • 07c5ccb fix: skip pre commit hook if no staged files (#1229)
  • 97a7399 fix: do not try to hash-object directories (#1220)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lefthook since your current version.


Updates markdownlint-cli2 from 0.19.1 to 0.20.0

Changelog

Sourced from markdownlint-cli2's changelog.

0.20.0

  • Update dependencies
Commits
  • 7339935 Update to version 0.20.0.
  • b4a4257 Add custom rule markdownlint-rule-numbered-headings-unique to Docker containe...
  • dff79cc Update documentation and tests for markdownlint version update in previous co...
  • dedb028 Bump markdownlint from 0.39.0 to 0.40.0
  • cddf727 Add test to ensure all project version numbers match.
  • a1f74ab Bump execa from 9.6.0 to 9.6.1
  • d2942ba Update indirect playwright dependencies to 1.57.0.
  • 619cca1 Bump @​playwright/test from 1.56.1 to 1.57.0
  • 320454a Bump eslint-plugin-jsdoc from 61.4.0 to 61.4.1
  • bacb4e3 Exclude more invalid JavaScript test files from CodeQL analysis to avoid "Cou...
  • See full diff in compare view

Updates tailwindcss from 4.1.17 to 4.1.18

Release notes

Sourced from tailwindcss's releases.

v4.1.18

Fixed

  • Ensure validation of source(…) happens relative to the file it is in (#19274)
  • Include filename and line numbers in CSS parse errors (#19282)
  • Skip comments in Ruby files when checking for class names (#19243)
  • Skip over arbitrary property utilities with a top-level ! in the value (#19243)
  • Support environment API in @tailwindcss/vite (#18970)
  • Preserve case of theme keys from JS configs and plugins (#19337)
  • Write source maps correctly on the CLI when using --watch (#19373)
  • Handle special defaults (like ringColor.DEFAULT) in JS configs (#19348)
  • Improve backwards compatibility for content theme key from JS configs (#19381)
  • Upgrade: Handle future and experimental config keys (#19344)
  • Try to canonicalize any arbitrary utility to a bare value (#19379)
  • Validate candidates similarly to Oxide (#19397)
  • Canonicalization: combine text-* and leading-* classes (#19396)
  • Correctly handle duplicate CLI arguments (#19416)
  • Don’t emit color-mix fallback rules inside @keyframes (#19419)
  • CLI: Don't hang when output is /dev/stdout (#19421)
Changelog

Sourced from tailwindcss's changelog.

[4.1.18] - 2025-12-11

Fixed

  • Ensure validation of source(…) happens relative to the file it is in (#19274)
  • Include filename and line numbers in CSS parse errors (#19282)
  • Skip comments in Ruby files when checking for class names (#19243)
  • Skip over arbitrary property utilities with a top-level ! in the value (#19243)
  • Support environment API in @tailwindcss/vite (#18970)
  • Preserve case of theme keys from JS configs and plugins (#19337)
  • Write source maps correctly on the CLI when using --watch (#19373)
  • Handle special defaults (like ringColor.DEFAULT) in JS configs (#19348)
  • Improve backwards compatibility for content theme key from JS configs (#19381)
  • Upgrade: Handle future and experimental config keys (#19344)
  • Try to canonicalize any arbitrary utility to a bare value (#19379)
  • Validate candidates similarly to Oxide (#19397)
  • Canonicalization: combine text-* and leading-* classes (#19396)
  • Correctly handle duplicate CLI arguments (#19416)
  • Don’t emit color-mix fallback rules inside @keyframes (#19419)
  • CLI: Don't hang when output is /dev/stdout (#19421)

[3.4.19] - 2025-12-10

Fixed

  • Don’t break sibling-*() functions when used inside calc(…) (#19335)
Commits

Updates vitest from 4.0.14 to 4.0.15

Release notes

Sourced from vitest's releases.

v4.0.15

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • eb1abf0 chore: release v4.0.15
  • a68f74e feat(cache): add opt-out on a plugin level, fix internal root cache (#9154)
  • 122ff32 feat(reporters): print import duration breakdown (#9105)
  • 0d2e7e3 fix(browser): run toMatchScreenshot only once when used with `expect.elemen...
  • d57d8bf fix(pool): terminate workers on CTRL+c forceful exits (#9140)
  • bb65e15 fix(reporters): show project in github reporter (#9138)
  • 52b242b chore(deps): update all non-major dependencies (#9133)
  • 4c75492 fix: fix external behavior with deps.optimizer (#9125)
  • a5d98fd refactor(vitest): get current test name from task property (#9120)
  • fd8bd6d fix: use optimizeDeps.rolldownOptions to fix depreated warning + fix `ssr.e...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm-dependencies group with 13 updates
f212dbe 
Bumps the npm-dependencies group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web) | `1.6.0` | `1.6.1` |
| [@vercel/speed-insights](https://github.com/vercel/speed-insights/tree/HEAD/packages/web) | `1.3.0` | `1.3.1` |
| [next](https://github.com/vercel/next.js) | `16.0.6` | `16.0.10` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.3` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.3` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.1.17` | `4.1.18` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.1.1` | `5.1.2` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.8.32` | `2.9.7` |
| [jsdom](https://github.com/jsdom/jsdom) | `27.2.0` | `27.3.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.0.4` | `2.0.11` |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.19.1` | `0.20.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.17` | `4.1.18` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.14` | `4.0.15` |


Updates `@vercel/analytics` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/vercel/analytics/releases)
- [Commits](https://github.com/vercel/analytics/commits/1.6.1/packages/web)

Updates `@vercel/speed-insights` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/vercel/speed-insights/releases)
- [Commits](https://github.com/vercel/speed-insights/commits/1.3.1/packages/web)

Updates `next` from 16.0.6 to 16.0.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.0.6...v16.0.10)

Updates `react` from 19.2.0 to 19.2.3
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react)

Updates `react-dom` from 19.2.0 to 19.2.3
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react-dom)

Updates `@tailwindcss/postcss` from 4.1.17 to 4.1.18
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.1.18/packages/@tailwindcss-postcss)

Updates `@vitejs/plugin-react` from 5.1.1 to 5.1.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.2/packages/plugin-react)

Updates `baseline-browser-mapping` from 2.8.32 to 2.9.7
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.8.32...v2.9.7)

Updates `jsdom` from 27.2.0 to 27.3.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md)
- [Commits](jsdom/jsdom@27.2.0...27.3.0)

Updates `lefthook` from 2.0.4 to 2.0.11
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.0.4...v2.0.11)

Updates `markdownlint-cli2` from 0.19.1 to 0.20.0
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.19.1...v0.20.0)

Updates `tailwindcss` from 4.1.17 to 4.1.18
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.1.18/packages/tailwindcss)

Updates `vitest` from 4.0.14 to 4.0.15
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vercel/analytics"
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@vercel/speed-insights"
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: next
  dependency-version: 16.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.1.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 5.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: baseline-browser-mapping
  dependency-version: 2.9.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: jsdom
  dependency-version: 27.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lefthook
  dependency-version: 2.0.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: markdownlint-cli2
  dependency-version: 0.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.1.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 4.0.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 14, 2025
@vercel
Copy link

vercel bot commented Dec 14, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
nextjs-base Ready Ready Preview, Comment Dec 14, 2025 1:09pm

@dependabot dependabot bot added the javascript Pull requests that update javascript code label Dec 14, 2025
@coderabbitai
Copy link

coderabbitai bot commented Dec 14, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Comment @coderabbitai help to get the list of available commands and usage tips.

michellepace added a commit that referenced this pull request Dec 19, 2025
@michellepace @claude
chore: update dependencies and GitHub Actions
1fa28f4 
Dependencies (security):
- next: 16.0.8 → 16.0.10 (CVE-2025-66478)
- react/react-dom: 19.2.1 → 19.2.3 (RSC security fixes)

Dependencies (dev):
- @tailwindcss/postcss: 4 → 4.1.18
- @types/node: 24 → 25 (major)
- baseline-browser-mapping: 2.9.6 → 2.9.7
- lefthook: 2.0.9 → 2.0.11
- tailwindcss: 4 → 4.1.18

GitHub Actions:
- actions/upload-artifact: v5 → v6 (Node.js 24 support)

Consolidates updates from dependabot PRs #16, #17, #18. Includes security patches
for Next.js and React Server Components.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@michellepace
Copy link
Owner

michellepace commented Dec 19, 2025

Consolidated into PR #15

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 19, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm-dependencies-9e45b02975 branch December 19, 2025 06:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@michellepace