Skip to content

chore(deps): bump the npm-minor-and-patch group across 1 directory with 18 updates - #369

Open
dependabot[bot] wants to merge 2 commits into
developfrom
dependabot/npm_and_yarn/npm-minor-and-patch-71d11b515e
Open

chore(deps): bump the npm-minor-and-patch group across 1 directory with 18 updates#369
dependabot[bot] wants to merge 2 commits into
developfrom
dependabot/npm_and_yarn/npm-minor-and-patch-71d11b515e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 18 updates in the / directory:

Package From To
lint-staged 17.3.0 17.4.1
simple-git-hooks 2.13.1 2.14.0
supabase 2.115.0 2.116.0
turbo 2.10.11 2.10.12
@supabase/ssr 0.12.4 0.12.5
@supabase/supabase-js 2.112.3 2.112.4
svelte 5.56.9 5.57.0
@playwright/test 1.61.1 1.62.1
xstate 5.32.5 5.32.6
@types/chrome 0.2.6 0.2.7
@types/node 26.2.0 26.4.0
eslint 10.8.1 10.9.1
globals 17.11.0 17.12.0
tsx 4.23.12 4.23.13
typescript-eslint 8.67.0 8.69.0
@vercel/oidc 3.8.4 3.8.5
ai 7.0.65 7.0.87
eve 0.37.1 0.47.7

Updates lint-staged from 17.3.0 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

  • #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

  • #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

    // lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})

  • #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

    By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

  • #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

  • #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

  • #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

  • #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

    // lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})

  • #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

    By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

  • #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

  • #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Commits
  • d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
  • f061335 chore(changeset): release
  • d2721af Merge pull request #1840 from lint-staged/updates
  • efe5b63 ci: update Changesets action because it failed to publish
  • cd76ce3 build: update dependencies
  • ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
  • a6a0d61 chore(changeset): release
  • 0a09098 Merge pull request #1832 from lint-staged/add-all-flag
  • 7fd685b fix: further fix parsing options logic
  • 510a27c feat: add --all flag for including all files tracked by Git instead of just...
  • Additional commits viewable in compare view

Updates simple-git-hooks from 2.13.1 to 2.14.0

Release notes

Sourced from simple-git-hooks's releases.

2.14.0

What's Changed

New Contributors

Full Changelog: toplenboren/simple-git-hooks@2.13.1...2.14.0

Changelog

Sourced from simple-git-hooks's changelog.

2.14.0

Minor Changes

Patch Changes

  • #146 e9e9367 Thanks @​colinhacks! - fix: resolve the project root from INIT_CWD during postinstall so hooks install correctly on isolated node_modules layouts (pnpm, yarn, bun, and other package managers) regardless of the store directory name

  • #149 f071064 Thanks @​wmaurer! - fix: install and remove hooks correctly inside a git worktree, including worktrees created with git worktree add --relative-paths

  • #151 eb795de Thanks @​DanMat! - fix: don't crash postinstall when the resolved project directory has no package.json — skip instead of throwing an uncaught ENOENT

Commits
  • e9aebbd fix: fix tests
  • e9e9367 fix: resolve project root via INIT_CWD in postinstall (#146)
  • eb795de fix: skip postinstall when project has no package.json (#151)
  • f071064 fix: install and remove hooks correctly inside a git worktree (#149)
  • d513d07 Update installation guide and usages in README.md (#147)
  • 523532b README.md - better info about uninstall, manual uninstall (#143)
  • 7625657 Update README.md
  • 2f3ec3f feat: silent success if nothing has changed (#138)
  • 33af460 Support node_modules created with bun install --linker=isolated (#136)
  • bcbc720 chore: remove some unnecessary ignore files (#135)
  • See full diff in compare view

Updates supabase from 2.115.0 to 2.116.0

Release notes

Sourced from supabase's releases.

v2.116.0

Supabase CLI v2.116.0 — 2026-08-26

This release speeds up your local dev and adds workers support to your config. Major wins: supabase start/stop are much faster, migration testing is quicker, and edge runtime output streams in real time.

Highlights

  • supabase start and stop are 10 seconds faster — Docker shutdown no longer waits; saves time on every restart. (#6203)
  • Migration testing is faster with shadow database baseline caching — Your baseline is cached as a PGDATA snapshot, speeding up repeated diffs and migrations. (#6184)
  • Edge runtime bootstrap streams output in real time — See progress instead of waiting for full completion. (#6273)
  • New [workers] configuration section — Configure workers in supabase/config.toml. (#6260)

Improvements

  • auto_expose_new_tables defaults to true — Matches your Supabase project behavior by default. (#6337)

Bug fixes

  • Piped stdin is no longer buffered endlessly — Fixed memory overflow when piping data to the CLI. (#6290)
  • Stale database connections are detected and dropped — Operations no longer hang on dead connections. (#6277)
  • Edge runtime respects system file descriptor limits — Prevents "too many open files" crashes. (#6284)
  • DROP INDEX CONCURRENTLY works outside migrations — Index drops no longer deadlock your transaction. (#6276)
  • Postgres role management is more stable — Roles are restored correctly after changes. (#6246)
  • Loopback network proxying is bypassed — Local requests route directly, improving reliability. (#6283)
  • Kong local DNS cache is optimized — DNS resolution is more responsive and consistent. (#6324)
  • Service startup is more reliable — Fixed edge cases during start and stop. (#6245)

Plus 14 internal improvements and dependency updates.

Full changelog: supabase/cli@v2.115.0...v2.116.0

v2.116.0-beta.13

2.116.0-beta.13 (2026-08-26)

Bug Fixes

  • config: default auto_expose_new_tables to true to match platform (#6337) (b950373), closes #5524

v2.116.0-beta.12

2.116.0-beta.12 (2026-08-25)

Features

v2.116.0-beta.11

... (truncated)

Commits
  • 997a1e6 test(cli): cover functions download (CLI-2259) (#6341)
  • 1b72374 chore(repo): migrate live tasks to Turborepo (#6343)
  • b950373 fix(config): default auto_expose_new_tables to true to match platform (#6337)
  • f7d3d01 chore(repo): migrate build tasks to Turborepo (#6342)
  • aa667a1 chore(repo): migrate quality checks to Turborepo (#6336)
  • 78d455f ci: shard package-local test suites (#6327)
  • 0527ed2 chore(codeql): resolve deploy scan findings (#6326)
  • 7b2f02d refactor(config): rename config document type ProjectConfig to CliConfig (CLI...
  • 38f31b4 fix(cli): cap kong dns cache ttls (#6324)
  • 1099080 refactor(config): split entrypoints into pure default, /io and /effect (CLI-2...
  • Additional commits viewable in compare view

Updates turbo from 2.10.11 to 2.10.12

Release notes

Sourced from turbo's releases.

Turborepo v2.10.12

What's Changed

Changelog

... (truncated)

Commits

Updates @supabase/ssr from 0.12.4 to 0.12.5

Release notes

Sourced from @​supabase/ssr's releases.

v0.12.5

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

v0.12.5-rc.154

What's Changed

New Contributors

Full Changelog: supabase/ssr@v0.12.4...v0.12.5-rc.154

Changelog

Sourced from @​supabase/ssr's changelog.

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142
Commits
  • c5310fd chore(main): release 0.12.5 (#286)
  • c1700f2 fix: warn when auth.storage is ignored by createBrowserClient/createServerCli...
  • b4797e3 chore: update @​supabase/supabase-js to v2.112.4 (#285)
  • 6f5bc21 chore: update @​supabase/supabase-js to v2.112.3 (#282)
  • 35187b2 build(deps): bump postcss from 8.5.15 to 8.5.25 in the npm_and_yarn group acr...
  • 1b761fd build(deps): bump pnpm/action-setup from 6.0.9 to 6.0.10 (#280)
  • 69a6209 docs: add React Router middleware example (#274)
  • See full diff in compare view

Updates @supabase/supabase-js from 2.112.3 to 2.112.4

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.4

2.112.4 (2026-08-24)

🩹 Fixes

  • auth: convert stolen-lock AbortError when acquireTimeout is 0 (#2616)
  • auth: warn on deprecated lock option and prevent unhandled refresh rejection (#2627)
  • postgrest: move override fixtures out of generated types, repair codegen (#2605)
  • realtime: respect custom logger for send() REST fallback warning (#2612)

❤️ Thank You

v2.112.4-canary.3

2.112.4-canary.3 (2026-08-24)

🩹 Fixes

  • auth: warn on deprecated lock option and prevent unhandled refresh rejection (#2627)

❤️ Thank You

v2.112.4-canary.2

2.112.4-canary.2 (2026-08-24)

🩹 Fixes

  • auth: convert stolen-lock AbortError when acquireTimeout is 0 (#2616)
  • realtime: respect custom logger for send() REST fallback warning (#2612)

❤️ Thank You

v2.112.4-canary.1

2.112.4-canary.1 (2026-08-12)

This was a version bump only, there were no code changes.

v2.112.4-canary.0

2.112.4-canary.0 (2026-08-11)

🩹 Fixes

  • postgrest: move override fixtures out of generated types, repair codegen (#2605)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.4 (2026-08-24)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

Commits

Updates svelte from 5.56.9 to 5.57.0

Release notes

Sourced from svelte's releases.

svelte@5.57.0

Minor Changes

  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

  • feat: add has function to createContext (#18472)

  • feat: support defaultValue on <select> (#18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

  • fix: block template store subscriptions on the promise that assigns the store (#18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#18486)

  • fix: track SvelteDate snapshots in reactions (#18700)

  • fix: remove <svelte:head> anchors on unmount (#18697)

  • fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

  • perf: reuse the cached value in the <option>/<select> value guard (#18713)

  • fix: prevent malformed AST output for <select> with static value attribute (#18449)

  • fix: apply ownership mutation ignores to binding assignments (#18718)

  • fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

  • fix: preserve whitespace after inline elements when printing (#18685)

  • perf: fold SSR block-open markers into the branch's first push (#18712)

  • fix: run onDestroy callbacks when a server render throws (#18585)

  • fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

  • fix: never apply class hash to elements inside <svelte:head> (#18160)

  • fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

  • fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

  • perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

  • fix: distinct memoizer on style/class directives (#18466)

  • fix: measure nested transitions before applying their starting styles (#18647)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.0

Minor Changes

  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

  • feat: add has function to createContext (#18472)

  • feat: support defaultValue on <select> (#18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

  • fix: block template store subscriptions on the promise that assigns the store (#18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#18486)

  • fix: track SvelteDate snapshots in reactions (#18700)

  • fix: remove <svelte:head> anchors on unmount (#18697)

  • fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

  • perf: reuse the cached value in the <option>/<select> value guard (#18713)

  • fix: prevent malformed AST output for <select> with static value attribute (#18449)

  • fix: apply ownership mutation ignores to binding assignments (#18718)

  • fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

  • fix: preserve whitespace after inline elements when printing (#18685)

  • perf: fold SSR block-open markers into the branch's first push (#18712)

  • fix: run onDestroy callbacks when a server render throws (#18585)

  • fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

  • fix: never apply class hash to elements inside <svelte:head> (#18160)

  • fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

  • fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

  • perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

  • fix: distinct memoizer on style/class directives (#18466)

... (truncated)

Commits
  • 7bc0a70 Version Packages (#18682)
  • 6374a2a chore: move @types/trusted-types to devDependencies (#18730)
  • 4ae5eb3 feat: add has function to createContext (#18472)
  • 5034b59 chore: bump playwright (#18729)
  • 74197cc feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
  • edbe11e fix: properly apply static textarea value attribute during CSR (#18727)
  • 05b6916 fix: omit bind:focused from SSR output (#18724)
  • 7c6f36a fix: keep boolean attributes with an empty string value when rendering attrib...
  • 2e8b57b fix: render selected options for \<select multiple> with an array value ...
  • 864de81 fix: keep the current selection of a \<select> when its defaultValue is ap...
  • Additional commits viewable in compare view

Updates @playwright/test from 1.61.1 to 1.62.1

Release notes

Sourced from @​playwright/test's releases.

v1.62.1

Bug Fixes

  • #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
  • #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
  • #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
  • #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
  • #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits

@dependabot
chore(deps): bump the npm-minor-and-patch group across 1 directory wi…
956e412 
…th 18 updates

Bumps the npm-minor-and-patch group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.4.1` |
| [simple-git-hooks](https://github.com/toplenboren/simple-git-hooks) | `2.13.1` | `2.14.0` |
| [supabase](https://github.com/supabase/cli/tree/HEAD/apps/cli) | `2.115.0` | `2.116.0` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.11` | `2.10.12` |
| [@supabase/ssr](https://github.com/supabase/ssr) | `0.12.4` | `0.12.5` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.3` | `2.112.4` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.9` | `5.57.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.1` |
| [xstate](https://github.com/statelyai/xstate) | `5.32.5` | `5.32.6` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.2.6` | `0.2.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.9.1` |
| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.12.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.67.0` | `8.69.0` |
| [@vercel/oidc](https://github.com/vercel/vercel/tree/HEAD/packages/oidc) | `3.8.4` | `3.8.5` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.65` | `7.0.87` |
| [eve](https://github.com/vercel/eve/tree/HEAD/packages/eve) | `0.37.1` | `0.47.7` |



Updates `lint-staged` from 17.3.0 to 17.4.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.3.0...v17.4.1)

Updates `simple-git-hooks` from 2.13.1 to 2.14.0
- [Release notes](https://github.com/toplenboren/simple-git-hooks/releases)
- [Changelog](https://github.com/toplenboren/simple-git-hooks/blob/master/CHANGELOG.md)
- [Commits](toplenboren/simple-git-hooks@2.13.1...2.14.0)

Updates `supabase` from 2.115.0 to 2.116.0
- [Release notes](https://github.com/supabase/cli/releases)
- [Changelog](https://github.com/supabase/cli/blob/develop/apps/cli/docs/release-process.md)
- [Commits](https://github.com/supabase/cli/commits/v2.116.0/apps/cli)

Updates `turbo` from 2.10.11 to 2.10.12
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.11...v2.10.12)

Updates `@supabase/ssr` from 0.12.4 to 0.12.5
- [Release notes](https://github.com/supabase/ssr/releases)
- [Changelog](https://github.com/supabase/ssr/blob/main/CHANGELOG.md)
- [Commits](supabase/ssr@v0.12.4...v0.12.5)

Updates `@supabase/supabase-js` from 2.112.3 to 2.112.4
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.4/packages/core/supabase-js)

Updates `svelte` from 5.56.9 to 5.57.0
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.0/packages/svelte)

Updates `@playwright/test` from 1.61.1 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.1)

Updates `xstate` from 5.32.5 to 5.32.6
- [Release notes](https://github.com/statelyai/xstate/releases)
- [Commits](https://github.com/statelyai/xstate/compare/xstate@5.32.5...xstate@5.32.6)

Updates `@types/chrome` from 0.2.6 to 0.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.8.1 to 10.9.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.1...v10.9.1)

Updates `globals` from 17.11.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.11.0...v17.12.0)

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `typescript-eslint` from 8.67.0 to 8.69.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/typescript-eslint)

Updates `@vercel/oidc` from 3.8.4 to 3.8.5
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/oidc/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/frameworks@3.8.5/packages/oidc)

Updates `ai` from 7.0.65 to 7.0.87
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.87/packages/ai)

Updates `eve` from 0.37.1 to 0.47.7
- [Release notes](https://github.com/vercel/eve/releases)
- [Changelog](https://github.com/vercel/eve/blob/main/packages/eve/CHANGELOG.md)
- [Commits](https://github.com/vercel/eve/commits/eve@0.47.7/packages/eve)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-version: 17.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: simple-git-hooks
  dependency-version: 2.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: supabase
  dependency-version: 2.116.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: turbo
  dependency-version: 2.10.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@supabase/ssr"
  dependency-version: 0.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: svelte
  dependency-version: 5.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: xstate
  dependency-version: 5.32.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/chrome"
  dependency-version: 0.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: eslint
  dependency-version: 10.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.69.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@vercel/oidc"
  dependency-version: 3.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: ai
  dependency-version: 7.0.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: eve
  dependency-version: 0.47.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@vercel

vercel Bot commented Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
pulse Error Error Sep 7, 2026 9:53am UTC
pulse-dashboard Ready Ready Preview Sep 7, 2026 9:53am UTC

@guyghost

guyghost commented Sep 7, 2026

Copy link
Copy Markdown
Owner

CI rouge par design : le groupe inclut @playwright/test 1.61.1 → 1.62.1 alors que le repo épingle la version exacte (gate MV3 : « Pinned playwright-core version drifted from 1.61.1 »). La montée de Playwright demande une coordination dédiée (pin du harness + fixtures). PR laissée ouverte en l'état — à traiter dans un chore dédié ou à exclure playwright du groupement dependabot.

@guyghost guyghost mentioned this pull request Sep 7, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@guyghost