Skip to content

chore(deps): bump the workspace group across 1 directory with 41 updates - #288

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/workspace-822b197685
Open

chore(deps): bump the workspace group across 1 directory with 41 updates#288
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/workspace-822b197685

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the workspace group with 41 updates in the / directory:

Package From To
@ai-sdk/anthropic 4.0.36 4.0.41
@ai-sdk/deepseek 3.0.26 3.0.31
@ai-sdk/google 4.0.36 4.0.50
@ai-sdk/openai 4.0.36 4.0.46
@ai-sdk/react 4.0.61 4.0.80
@biomejs/biome 2.5.2 2.5.10
@clerk/backend 3.11.6 3.16.10
@clerk/nextjs 7.5.19 7.8.0
@clerk/ui 1.25.4 1.30.6
@cloudflare/workers-types 5.20260722.1 5.20260822.1
@commitlint/cli 21.2.1 21.2.2
@commitlint/config-conventional 21.2.0 21.2.2
@google/genai 2.16.0 2.18.0
@hookform/resolvers 5.4.0 5.9.1
@mastra/core 1.57.0 1.61.0
@next/env 16.2.11 16.3.2
@polar-sh/sdk 0.48.1 0.49.0
@tailwindcss/postcss 4.3.2 4.3.3
@tanstack/react-query 5.101.2 5.101.4
@tanstack/react-virtual 3.14.6 3.14.10
ai 7.0.58 7.0.77
dependency-cruiser 18.1.0 18.2.0
hono 4.12.34 4.13.3
katex 0.17.0 0.18.4
knip 6.27.0 6.32.2
lucide-react 1.24.0 1.33.0
next 16.2.11 16.3.2
nuqs 2.9.0 2.10.0
pg 8.22.0 8.23.0
@types/pg 8.20.0 8.23.1
react-dom 19.2.7 19.2.8
@types/react-dom 19.2.3 19.2.4
react-hook-form 7.81.0 7.86.0
react 19.2.7 19.2.8
@types/react 19.2.17 19.2.18
sonner 2.0.7 2.0.8
tailwindcss 4.3.2 4.3.3
tsx 4.23.1 4.23.12
turbo 2.10.5 2.10.11
wrangler 4.114.0 4.125.0
zustand 5.0.14 5.0.15

Updates @ai-sdk/anthropic from 4.0.36 to 4.0.41

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.41

Patch Changes

  • Updated dependencies [b74971f]
    • @​ai-sdk/provider-utils@​5.0.29

4.0.40

Patch Changes

  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28

4.0.39

Patch Changes

  • 4579b08: Preserve Anthropic server-tool caller metadata in multi-turn conversations.

4.0.38

Patch Changes

  • Updated dependencies [7fbfc6d]
    • @​ai-sdk/provider-utils@​5.0.27

4.0.37

Patch Changes

  • Updated dependencies [401a4ba]
    • @​ai-sdk/provider-utils@​5.0.26
Commits

Updates @ai-sdk/deepseek from 3.0.26 to 3.0.31

Changelog

Sourced from @​ai-sdk/deepseek's changelog.

3.0.31

Patch Changes

  • Updated dependencies [b74971f]
    • @​ai-sdk/provider-utils@​5.0.29

3.0.30

Patch Changes

  • 9a4337d: feat: add DeepSeek V4 Flash Vision Exp image input and Files API support

3.0.29

Patch Changes

  • e6087c9: fix: handle empty string tool call IDs
  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28

3.0.28

Patch Changes

  • Updated dependencies [7fbfc6d]
    • @​ai-sdk/provider-utils@​5.0.27

3.0.27

Patch Changes

  • Updated dependencies [401a4ba]
    • @​ai-sdk/provider-utils@​5.0.26
Commits

Updates @ai-sdk/google from 4.0.36 to 4.0.50

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.50

Patch Changes

  • Updated dependencies [b74971f]
    • @​ai-sdk/provider-utils@​5.0.29

4.0.49

Patch Changes

  • f607a12: chore(google): drop support for Imagen models and their integration following API shutdown

4.0.48

Patch Changes

  • 6c5a1ed: Inline local JSON Schema references in Google tool and structured-output schemas.

4.0.47

Patch Changes

  • e6087c9: fix: handle empty string tool call IDs
  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28

4.0.46

Patch Changes

  • f69920a: fix(google): use low as the minimum reasoning level for full Gemini Flash 3.7 and later

4.0.45

Patch Changes

  • bb0cf2e: fix(google): coerce minimal reasoning to low for Gemini 3.7 Flash

4.0.44

Patch Changes

  • 16650e9: feat(google): add gemini-3.7-flash model

4.0.43

Patch Changes

  • 8e90283: Preserve forced tool calls when strict function tools are configured.

... (truncated)

Commits

Updates @ai-sdk/openai from 4.0.36 to 4.0.46

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.46

Patch Changes

  • Updated dependencies [b74971f]
    • @​ai-sdk/provider-utils@​5.0.29

4.0.45

Patch Changes

  • 6be0f51: fix(openai): expand internal parallel tool call wrappers from the Responses API while preserving stateful continuation and streaming fallbacks

4.0.44

Patch Changes

  • e6087c9: fix: handle empty string tool call IDs
  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28

4.0.43

Patch Changes

  • a062795: fix(openai): support built-in and provider-defined tools in the Responses allowedTools option

    allowedTools emitted every allow-list entry as { type: 'function', name }, but OpenAI identifies built-in tools by type. Allow-listing a declared provider-defined tool (web search, image generation, MCP, custom, ...) therefore failed with Tool choice '<name>' not found in 'tools' parameter. Entries are now derived from the declared tool, including the MCP server label and custom tool name.

    Tools that OpenAI cannot allow-list (the tool search tool, deferred tools, and namespaced tools) are dropped from the allow-list with a warning, and an error is thrown if that would leave the allow-list empty rather than silently sending an unrestricted request.

    Ambiguous names are now reported instead of resolved silently. A name that matches both a declared tool and another tool's provider tool name resolves to the declared tool and warns; a provider tool name shared by several tools in the same request (two MCP servers, for example) is dropped with a warning. A name that matches no declared tool keeps its existing behavior and is now warned about.

4.0.42

Patch Changes

  • b6fff2e: feat(provider/openai): support explicit Responses compaction triggers

4.0.41

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/react from 4.0.61 to 4.0.80

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.80

Patch Changes

  • Updated dependencies [b74971f]
  • Updated dependencies [b352a6a]
    • @​ai-sdk/provider-utils@​5.0.29
    • @​ai-sdk/mcp@​2.0.36
    • ai@7.0.77

4.0.79

Patch Changes

  • Updated dependencies [c6d57f3]
  • Updated dependencies [76fb75d]
  • Updated dependencies [677a707]
    • ai@7.0.76
    • @​ai-sdk/mcp@​2.0.35

4.0.78

Patch Changes

  • Updated dependencies [8978ad8]
    • ai@7.0.75

4.0.77

Patch Changes

  • ai@7.0.74

4.0.76

Patch Changes

  • ai@7.0.73

4.0.75

Patch Changes

  • ai@7.0.72

4.0.74

Patch Changes

  • Updated dependencies [9a37469]

... (truncated)

Commits

Updates @biomejs/biome from 2.5.2 to 2.5.10

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.10

2.5.10

Patch Changes

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

    <div /* block comment */ class="something"></div>
<Component /* c */ client:load />

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

  • #11438 3133ffa Thanks @​Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

    <div>{/* a note */}</div>
<div class={/* a note */}>x</div>

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

    <div>{/* block comment */ x}</div>
<div>{/* only a comment */}</div>

  • #11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

    <>
  <p>a</p>
</>

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

    ---
const a = "</script>";
// </script> in a comment
---

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.10

Patch Changes

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

    <div /* block comment */ class="something"></div>
<Component /* c */ client:load />

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

  • #11438 3133ffa Thanks @​Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

    <div>{/* a note */}</div>
<div class={/* a note */}>x</div>

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

    <div>{/* block comment */ x}</div>
<div>{/* only a comment */}</div>

  • #11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

    <>
  <p>a</p>
</>

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

    ---
const a = "</script>";
// </script> in a comment
---

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

    <!-- c -->

... (truncated)

Commits

Updates @clerk/backend from 3.11.6 to 3.16.10

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​3.16.10

Patch Changes

  • Mark the internal createBootstrapSignedOutState as deprecated. It is no longer used by @clerk/nextjs and is kept only for older published SDK versions. (#9493) by @​djgould

  • Updated dependencies [ea8cb05]:

    • @​clerk/shared@​4.29.3

@​clerk/backend@​3.16.9

Patch Changes

  • Reject JWT-template tokens where a session or handshake token is expected. authenticateRequest() now returns a signed-out state with reason token-type-mismatch for such a token in the Authorization header or __session cookie. Tokens with no category tag, and instances configured to omit it, are unaffected. (#9469) by @​dominic-clerk
Changelog

Sourced from @​clerk/backend's changelog.

3.16.10

Patch Changes

  • Mark the internal createBootstrapSignedOutState as deprecated. It is no longer used by @clerk/nextjs and is kept only for older published SDK versions. (#9493) by @​djgould

  • Updated dependencies [ea8cb05]:

    • @​clerk/shared@​4.29.3

3.16.9

Patch Changes

  • Reject JWT-template tokens where a session or handshake token is expected. authenticateRequest() now returns a signed-out state with reason token-type-mismatch for such a token in the Authorization header or __session cookie. Tokens with no category tag, and instances configured to omit it, are unaffected. (#9469) by @​dominic-clerk

3.16.8

Patch Changes

  • Scope the JWKS cache per Clerk instance. The cache was keyed on the JWT kid alone and shared across the whole process, so an application verifying tokens for more than one Clerk instance (for example the Dynamic Keys / multi-tenant pattern) could resolve a signing key that was fetched for a different instance. Keys are now cached separately per secret key and API URL, so a token can only be verified against the instance whose credentials fetched its signing key. (#9394) by @​dominic-clerk

    Networkless verification with jwtKey had the same flaw: the JWK derived from the PEM was cached by kid alone, so a process verifying tokens with different jwtKey values could resolve a key derived from another instance's PEM. The JWK is now always derived from the jwtKey that was passed in.

    The jwk-kid-mismatch error message no longer lists the key IDs currently held in the cache.

3.16.7

Patch Changes

  • Fix Cookie header parsing in authenticateRequest() to follow RFC 6265 and guard against a non-string iss. Legitimate cookies and JWTs are unaffected. (#9466) by @​dominic-clerk

  • Updated dependencies [b815047]:

    • @​clerk/shared@​4.29.2

3.16.6

Patch Changes

  • Updated dependencies [7f5c294]:
    • @​clerk/shared@​4.29.1

3.16.5

Patch Changes

  • Billing applied-discount snapshots now include optional durationInCycles. Payment attempt and statement UIs use the original discount length instead of cycles remaining, and omit the duration copy when it is unavailable. (#9401) by @​mauricioabreu

  • Updated dependencies [81840b3, b7fb564, 44edcc9]:

    • @​clerk/shared@​4.29.0

... (truncated)

Commits

Updates @clerk/nextjs from 7.5.19 to 7.8.0

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.8.0

Minor Changes

  • In development, missing Clerk keys no longer activate keyless mode. When NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are not set, the SDK now throws an error directing you to run npx clerk@latest init, which provisions a Clerk application and writes the keys to .env.local. Keyless credentials stored in the development keyless cookie are no longer read. Existing apps with configured or claimed keys are unaffected. (#9493) by @​djgould

Patch Changes

@​clerk/nextjs@​7.7.9

Patch Changes

  • Updated dependencies [10615ea]:
    • @​clerk/backend@​3.16.9
    • @​clerk/react@​6.14.4

@​clerk/nextjs@​7.7.8

Patch Changes

  • Allow Clerk's abuse and fraud protection hosts on all ports in the generated connect-src directive. The contentSecurityPolicy option previously emitted https://*.protect.clerk.com, which matches port 443 only, so requests to those hosts on other ports were blocked by the resulting policy. (#9458) by @​mwickett

  • Updated dependencies [4ebcff3]:

    • @​clerk/backend@​3.16.8

@​clerk/nextjs@​7.7.7

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

7.8.0

Minor Changes

  • In development, missing Clerk keys no longer activate keyless mode. When NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are not set, the SDK now throws an error directing you to run npx clerk@latest init, which provisions a Clerk application and writes the keys to .env.local. Keyless credentials stored in the development keyless cookie are no longer read. Existing apps with configured or claimed keys are unaffected. (#9493) by @​djgould

Patch Changes

7.7.9

Patch Changes

  • Updated dependencies [10615ea]:
    • @​clerk/backend@​3.16.9
    • @​clerk/react@​6.14.4

7.7.8

Patch Changes

  • Allow Clerk's abuse and fraud protection hosts on all ports in the generated connect-src directive. The contentSecurityPolicy option previously emitted https://*.protect.clerk.com, which matches port 443 only, so requests to those hosts on other ports were blocked by the resulting policy. (#9458) by @​mwickett

  • Updated dependencies [4ebcff3]:

    • @​clerk/backend@​3.16.8

7.7.7

Patch Changes

7.7.6

Patch Changes

  • Fix a stray double space in the getAuth() "Clerk can't detect usage of clerkMiddleware()" error, so the first bullet renders as - clerkMiddleware() is used in your Next.js middleware or proxy file. (#9408) by @​manovotny

  • Updated dependencies [7f5c294]:

    • @​clerk/shared@​4.29.1
    • @​clerk/backend@​3.16.6
    • @​clerk/react@​6.14.3

... (truncated)

Commits
  • 297c03d ci(repo): Version packages (#9514)
  • f541dbf feat(nextjs): throw missing-env error instead of keyless bootstrap (#9493)
  • 99082cb ci(repo): Version packages (#9495)
  • ff25005 ci(repo): Version packages (#9477)
  • 75ec072 fix(nextjs): allow Clerk protection hosts on all ports in connect-src (#9458)
  • 2b83bd3 ci(repo): Version packages (#9467)
  • 6c63025 ci(repo): Version packages (#9447)
  • 7220975 fix(nextjs): remove stray double space in clerkMiddleware detection error (#9...
  • 45514ca ci(repo): Version packages (#9402)
  • f9c97ef feat(nextjs): Added error with docs URL in Core 3 for <SignedIn>, <SignedOut>...
  • Additional commits viewable in compare view

Updates @clerk/ui from 1.25.4 to 1.30.6

Release notes

Sourced from @​clerk/ui's releases.

@​clerk/ui@​1.30.6

Patch Changes

  • Updated dependencies [ea8cb05]:
    • @​clerk/shared@​4.29.3
    • @​clerk/localizations@​4.15.5

@​clerk/ui@​1.30.5

Patch Changes

  • Stop passkey autofill from opening a passkey prompt as soon as the sign-in form renders. Autofill now runs as a real background request when the window can service one (an https origin matching your RP ID), and is not attempted at all when it would route to the OS passkey dialog. Signing in with the explicit "Use passkey" action is unchanged. (#9500) by @​jeremy-clerk

@​clerk/ui@​1.30.4

Patch Changes

  • Display a proper message when a password is rejected for matching one of the account's identifiers. Previously this error rendered as the incomplete sentence "Your password must contain ." on sign-up, reset password, and the user profile password form. The new message is available under the unstable__errors.form_password_matches_identifier localization key, and any password error the UI does not recognize now falls back to the message returned by the API instead of an empty sentence. (#9453) by @​dmoerner

  • Updated dependencies [b815047]:

    • @​clerk/localizations@​4.15.4
    • @​clerk/shared@​4.29.2
Changelog

Sourced from @​clerk/ui's changelog.

1.30.6

Patch Changes

  • Updated dependencies [ea8cb05]:
    • @​clerk/shared@​4.29.3
    • @​clerk/localizations@​4.15.5

1.30.5

Patch Changes

  • Stop passkey autofill from opening a passkey prompt as soon as the sign-in form renders. Autofill now runs as a real background request when the window can service one (an https origin matching your RP ID), and is not attempted at all when it would route to the OS passkey dialog. Signing in with the explicit "Use passkey" action is unchanged. (#9500) by @​jeremy-clerk

1.30.4

Patch Changes

  • Display a proper message when a password is rejected for matching one of the account's identifiers. Previously this error rendered as the incomplete sentence "Your password must contain ." on sign-up, reset password, and the user profile password form. The new message is available under the unstable__errors.form_password_matches_identifier localization key, and any password error the UI does not recognize now falls back to the message returned by the API instead of an empty sentence. (#9453) by @​dmoerner

  • Updated dependencies [b815047]:

    • @​clerk/localizations@​4.15.4
    • @​clerk/shared@​4.29.2

1.30.3

Patch Changes

  • Add a "Back" action to the sign-in second-factor and client-trust steps, letting a stuck user abandon the attempt and return to the sign-in start. (#9190) by @​alexcarpenter

  • Updated dependencies [7f5c294]:

    • @​clerk/shared@​4.29.1
    • @​clerk/localizations@​4.15.3

1.30.2

Patch Changes

  • Billing applied-discount snapshots now include optional durationInCycles. Payment attempt and statement UIs use the original discount length instead of cycles remaining, and omit the duration copy when it is unavailable. (#9401) by @​mauricioabreu

  • Updated dependencies [81840b3, b7fb564, 44edcc9]:

    • @​clerk/shared@​4.29.0
    • @​clerk/localizations@​4.15.2

1.30.1

Patch Changes

  • Fix native OAuth transport flows (e.g. @clerk/electron) breaking out of modal components and failing with "Redirect url mismatch" errors. (#9370) by @​wobsoriano

... (truncated)

Commits

Updates @cloudflare/workers-types from 5.20260722.1 to 5.20260822.1

Commits

Updates @commitlint/cli from 21.2.1 to 21.2.2

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

  • parse:Description has been truncated

@dependabot
chore(deps): bump the workspace group across 1 directory with 41 updates
cd4050f 
Bumps the workspace group with 41 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.36` | `4.0.41` |
| [@ai-sdk/deepseek](https://github.com/vercel/ai/tree/HEAD/packages/deepseek) | `3.0.26` | `3.0.31` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.36` | `4.0.50` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.36` | `4.0.46` |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.61` | `4.0.80` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.2` | `2.5.10` |
| [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) | `3.11.6` | `3.16.10` |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.5.19` | `7.8.0` |
| [@clerk/ui](https://github.com/clerk/javascript/tree/HEAD/packages/ui) | `1.25.4` | `1.30.6` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260722.1` | `5.20260822.1` |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.1` | `21.2.2` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.0` | `21.2.2` |
| [@google/genai](https://github.com/googleapis/js-genai) | `2.16.0` | `2.18.0` |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.4.0` | `5.9.1` |
| [@mastra/core](https://github.com/mastra-ai/mastra/tree/HEAD/packages/core) | `1.57.0` | `1.61.0` |
| [@next/env](https://github.com/vercel/next.js/tree/HEAD/packages/next-env) | `16.2.11` | `16.3.2` |
| [@polar-sh/sdk](https://github.com/polarsource/polar-js) | `0.48.1` | `0.49.0` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.2` | `4.3.3` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.2` | `5.101.4` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.6` | `3.14.10` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.58` | `7.0.77` |
| [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `18.1.0` | `18.2.0` |
| [hono](https://github.com/honojs/hono) | `4.12.34` | `4.13.3` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.17.0` | `0.18.4` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.27.0` | `6.32.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.24.0` | `1.33.0` |
| [next](https://github.com/vercel/next.js) | `16.2.11` | `16.3.2` |
| [nuqs](https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs) | `2.9.0` | `2.10.0` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |
| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.20.0` | `8.23.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.81.0` | `7.86.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.2` | `4.3.3` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.12` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.5` | `2.10.11` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.114.0` | `4.125.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |



Updates `@ai-sdk/anthropic` from 4.0.36 to 4.0.41
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.41/packages/anthropic)

Updates `@ai-sdk/deepseek` from 3.0.26 to 3.0.31
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/deepseek/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/deepseek@3.0.31/packages/deepseek)

Updates `@ai-sdk/google` from 4.0.36 to 4.0.50
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.50/packages/google)

Updates `@ai-sdk/openai` from 4.0.36 to 4.0.46
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.46/packages/openai)

Updates `@ai-sdk/react` from 4.0.61 to 4.0.80
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.80/packages/react)

Updates `@biomejs/biome` from 2.5.2 to 2.5.10
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.10/packages/@biomejs/biome)

Updates `@clerk/backend` from 3.11.6 to 3.16.10
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@3.16.10/packages/backend)

Updates `@clerk/nextjs` from 7.5.19 to 7.8.0
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.8.0/packages/nextjs)

Updates `@clerk/ui` from 1.25.4 to 1.30.6
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/ui/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/ui@1.30.6/packages/ui)

Updates `@cloudflare/workers-types` from 5.20260722.1 to 5.20260822.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@commitlint/cli` from 21.2.1 to 21.2.2
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.2.0 to 21.2.2
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/config-conventional)

Updates `@google/genai` from 2.16.0 to 2.18.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v2.16.0...v2.18.0)

Updates `@hookform/resolvers` from 5.4.0 to 5.9.1
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v5.4.0...v5.9.1)

Updates `@mastra/core` from 1.57.0 to 1.61.0
- [Release notes](https://github.com/mastra-ai/mastra/releases)
- [Changelog](https://github.com/mastra-ai/mastra/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/mastra-ai/mastra/commits/@mastra/core@1.61.0/packages/core)

Updates `@next/env` from 16.2.11 to 16.3.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.2/packages/next-env)

Updates `@polar-sh/sdk` from 0.48.1 to 0.49.0
- [Release notes](https://github.com/polarsource/polar-js/releases)
- [Changelog](https://github.com/polarsource/polar-js/blob/main/RELEASES.md)
- [Commits](polarsource/polar-js@v0.48.1...v0.49.0)

Updates `@tailwindcss/postcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss)

Updates `@tanstack/react-query` from 5.101.2 to 5.101.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query)

Updates `@tanstack/react-virtual` from 3.14.6 to 3.14.10
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.10/packages/react-virtual)

Updates `ai` from 7.0.58 to 7.0.77
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.77/packages/ai)

Updates `dependency-cruiser` from 18.1.0 to 18.2.0
- [Release notes](https://github.com/sverweij/dependency-cruiser/releases)
- [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md)
- [Commits](sverweij/dependency-cruiser@v18.1.0...v18.2.0)

Updates `hono` from 4.12.34 to 4.13.3
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.34...v4.13.3)

Updates `katex` from 0.17.0 to 0.18.4
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.17.0...v0.18.4)

Updates `knip` from 6.27.0 to 6.32.2
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.2/packages/knip)

Updates `lucide-react` from 1.24.0 to 1.33.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react)

Updates `next` from 16.2.11 to 16.3.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.3.2)

Updates `nuqs` from 2.9.0 to 2.10.0
- [Release notes](https://github.com/47ng/nuqs/releases)
- [Commits](https://github.com/47ng/nuqs/commits/v2.10.0/packages/nuqs)

Updates `pg` from 8.22.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `@types/pg` from 8.20.0 to 8.23.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-hook-form` from 7.81.0 to 7.86.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.81.0...v7.86.0)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `sonner` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](emilkowalski/sonner@v2.0.7...v2.0.8)

Updates `tailwindcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `tsx` from 4.23.1 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.12)

Updates `turbo` from 2.10.5 to 2.10.11
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.5...v2.10.11)

Updates `wrangler` from 4.114.0 to 4.125.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.125.0/packages/wrangler)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@ai-sdk/deepseek"
  dependency-version: 3.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.80
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@clerk/backend"
  dependency-version: 3.16.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@clerk/ui"
  dependency-version: 1.30.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260822.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@google/genai"
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@mastra/core"
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@next/env"
  dependency-version: 16.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@polar-sh/sdk"
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: ai
  dependency-version: 7.0.77
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: dependency-cruiser
  dependency-version: 18.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: hono
  dependency-version: 4.13.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: katex
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: knip
  dependency-version: 6.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: lucide-react
  dependency-version: 1.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: next
  dependency-version: 16.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: nuqs
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: "@types/pg"
  dependency-version: 8.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: react-hook-form
  dependency-version: 7.86.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: turbo
  dependency-version: 2.10.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
- dependency-name: wrangler
  dependency-version: 4.125.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 25, 2026
@dependabot
dependabot Bot requested a review from iamjr15 as a code owner August 25, 2026 11:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@iamjr15 iamjr15 Awaiting requested review from iamjr15 iamjr15 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants