chore(deps): bump the minor-and-patch group across 1 directory with 18 updates by dependabot[bot] · Pull Request #93 · livepeer/console

dependabot · 2026-10-17T00:28:35Z

Bumps the minor-and-patch group with 18 updates in the / directory:

Package	From	To
@auth0/nextjs-auth0	`4.29.0`	`4.31.1`
@base-ui/react	`1.8.0`	`1.9.0`
@modelcontextprotocol/sdk	`1.30.0`	`1.32.1`
drizzle-orm	`0.45.2`	`0.45.4`
lucide-react	`1.43.0`	`1.54.0`
next	`16.3.4`	`16.4.0`
posthog-js	`1.428.8`	`1.438.7`
posthog-node	`5.51.8`	`5.55.1`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
tailwind-merge	`3.6.0`	`3.7.0`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
drizzle-kit	`0.31.10`	`0.31.11`
eslint-config-next	`16.3.4`	`16.4.0`
postcss	`8.5.28`	`8.5.29`
prettier	`3.9.6`	`3.9.9`
tsx	`4.23.13`	`4.23.15`

Updates @auth0/nextjs-auth0 from 4.29.0 to 4.31.1

Release notes

Sourced from @auth0/nextjs-auth0's releases.

v4.31.1

Added

feat: ship agent skills inside the package #2866 (subhankarmaiti)

Fixed

fix(anonymous-sessions): surface session expiry error instead of silently rotating #2879 (yogeshchoudhary147)

fix: pass request cookies in startEnterpriseLogin to evict stale txn cookies #2868 (kwy404)

Summary by CodeRabbit

New Features

Added anonymous-session support, including session creation and retrieval, a client hook, and login linking.

The package now ships agent skills.

Bug Fixes

Anonymous-session expiry errors are now surfaced.

Enterprise login now passes request cookies to clear stale transaction cookies.

Documentation

Updated API documentation for version 4.31.1 and added anonymous-session references.

v4.31.0

Added

feat(anonymous-sessions): anonymous sessions with Session Transfer Ticket linking (EA) #2865 (tusharpandey13)

v4.30.0

Added

feat: add typed Experiment Center override params #2852 (Piyush-85)

feat: Enterprise connect implementation #2799 (Piyush-85)

Fixed

fix: bind middleware to the Auth0Client instance #2840 (sleitor)

Summary by CodeRabbit

New Features

Added Enterprise Connect support for enterprise SSO flows.

Added federated-domain detection and login helpers.

Added Experiment Center parameters for selecting login experiments and variations.

Added route support for federated-domain checks.

Documentation

... (truncated)

Changelog

Sourced from @auth0/nextjs-auth0's changelog.

v4.31.1 (2026-10-07)

Full Changelog

Added

feat: ship agent skills inside the package #2866 (subhankarmaiti)

Fixed

fix(anonymous-sessions): surface session expiry error instead of silently rotating #2879 (yogeshchoudhary147)

fix: pass request cookies in startEnterpriseLogin to evict stale txn cookies #2868 (kwy404)

v4.31.0 (2026-10-01)

Full Changelog

Added

feat(anonymous-sessions): anonymous sessions with Session Transfer Ticket linking (EA) #2865 (tusharpandey13)

v4.30.0 (2026-09-16)

Full Changelog

Added

feat: add typed Experiment Center override params #2852 (Piyush-85)

feat: Enterprise connect implementation #2799 (Piyush-85)

Fixed

fix: bind middleware to the Auth0Client instance #2840 (sleitor)

Commits

9692824 Release v4.31.1 (#2887)
db54d18 fix(anonymous-sessions): surface session expiry error instead of silently rot...
169cdf5 chore(deps-dev): bump typescript-eslint from 8.70.1 to 8.71.0 (#2882)
35f69ff chore(deps-dev): bump @types/node from 22.20.4 to 22.20.5 (#2881)
f0e90f9 chore(deps-dev): bump next from 15.5.25 to 15.5.27 (#2880)
05aa4a9 chore(deps): bump postcss-selector-parser from 6.1.2 to 6.1.4 in /examples/wi...
bda8c21 chore(deps): bump postcss-selector-parser from 6.1.2 to 6.1.4 in /examples/wi...
1366901 chore(deps): bump markdown-it from 14.3.0 to 14.3.2 (#2876)
d1f28de chore(deps): bump source-map-js from 1.2.1 to 1.2.2 in /examples/with-passwor...
87e0b25 chore(deps): bump next from 16.3.3 to 16.3.6 in /examples/with-shadcn (#2878)
Additional commits viewable in compare view

Updates @base-ui/react from 1.8.0 to 1.9.0

Release notes

Sourced from @base-ui/react's releases.

v1.9.0

General changes

Export CssVariables and DataAttributes types (#5243) by @superhooman

Fix stale focused field state (#5345) by @atomiks

Fix animation waits retaining detached elements (#5719) by @flaviendelangle

Keep item registration in sync when items change under Strict Mode (#5862) by @atomiks

Avoid re-rendering inactive triggers on open and close (#5865) by @atomiks

Accordion

Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @cpruijsen

Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @atomiks

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Alert Dialog

Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Autocomplete

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Checkbox

Prefer aria-label over associated labels (#5787) by @atomiks

Collapsible

Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @atomiks

Finish closing when the render function removes the panel (#5890) by @michaldudak

Restore animations when a removed panel reopens (#5891) by @michaldudak

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Combobox

Fix stale chip focus after returning to the input (#5879) by @mdm317

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Fix label focus in Shadow DOM (#5871) by @lyzno1

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Reset typeahead state when closing without moving focus (#5816) by @mdm317

Accept readonly arrays for multiple values (#5710) by @MonstraG

Share item indicator implementation (#5728) by @flaviendelangle

Improve mount performance of large lists (#5819) by @atomiks

Combine item store subscriptions (#5863) by @atomiks

Dialog

... (truncated)

Changelog

Sourced from @base-ui/react's changelog.

v1.9.0

Oct 9, 2026

General changes

Export CssVariables and DataAttributes types (#5243) by @superhooman

Fix stale focused field state (#5345) by @atomiks

Fix animation waits retaining detached elements (#5719) by @flaviendelangle

Keep item registration in sync when items change under Strict Mode (#5862) by @atomiks

Avoid re-rendering inactive triggers on open and close (#5865) by @atomiks

Accordion

Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @cpruijsen

Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @atomiks

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Alert Dialog

Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Autocomplete

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Checkbox

Prefer aria-label over associated labels (#5787) by @atomiks

Collapsible

Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @atomiks

Finish closing when the render function removes the panel (#5890) by @michaldudak

Restore animations when a removed panel reopens (#5891) by @michaldudak

Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Combobox

Fix stale chip focus after returning to the input (#5879) by @mdm317

Fix autoHighlight for asynchronous results (#5818) by @atomiks

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Fix label focus in Shadow DOM (#5871) by @lyzno1

Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks

Reset typeahead state when closing without moving focus (#5816) by @mdm317

Accept readonly arrays for multiple values (#5710) by @MonstraG

... (truncated)

Commits

ad7ecda [release] v1.9.0 (#5906)
3296de3 [drawer] Avoid retaining unmounted drawers in DrawerProvider (#5921)
69c33b4 [drawer] Fix deferred touch swipes leaving the popup (#5922)
51b70db [menu] Strip internal filter components from public types (#5923)
8d8b98c [menu] Ignore filter input edits while the menu animates out (#5911)
aeba3eb [combobox][menu][select] Revert highlightItem imperative action (#5910)
ec6bf32 [field][select][combobox][slider] Fall back to the owner document when lookin...
1f112a5 [popups] Avoid re-rendering inactive triggers on open and close (#5865)
bc53db6 [fieldset] Await render in Legend disabled-state test (#5909)
147092e [test] Strengthen tests, add test lint rules and share copied suites (#5892)
Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.32.1

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

1.32.1

What's Changed

[v1.x] docs: state the principles in CLAUDE.md by @claude[bot] in modelcontextprotocol/typescript-sdk#2939

[v1.x] docs: point the README at v2 and say what v1.x supports by @claude[bot] in modelcontextprotocol/typescript-sdk#2942

chore: bump version to 1.32.1 by @claude[bot] in modelcontextprotocol/typescript-sdk#2954

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.

New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

[v1.x] fix(client): follow redirects only within the endpoint's origin by @claude[bot] in modelcontextprotocol/typescript-sdk#2902

docs: point SECURITY.md at GitHub Security Advisories (v1.x) by @claude[bot] in modelcontextprotocol/typescript-sdk#2910

[v1.x] examples: close idle sessions and cap the session map by @maxisbey in modelcontextprotocol/typescript-sdk#2914

[v1.x] fix(tasks): keep tasks of the in-memory task store within the session that created them by @claude[bot] in modelcontextprotocol/typescript-sdk#2925

[v1.x] feat(server): add maxToolInputElements option to limit the number of elements in tool-call arguments by @claude[bot] in modelcontextprotocol/typescript-sdk#2927

[v1.x] fix(server): accept tools/call and prompts/get requests that omit arguments by @raashish1601 in modelcontextprotocol/typescript-sdk#2045

[v1.x] feat(auth): add expectedResource to requireBearerAuth by @claude[bot] in modelcontextprotocol/typescript-sdk#2930

[v1.x] test(e2e): cover tools/call and prompts/get without arguments by @claude[bot] in modelcontextprotocol/typescript-sdk#2931

chore: bump version to 1.32.0 by @claude[bot] in modelcontextprotocol/typescript-sdk#2935

New Contributors

@raashish1601 made their first contribution in modelcontextprotocol/typescript-sdk#2045

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

1.31.0

Upgrade notes

Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.

Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

[v1.x] Bind stored OAuth credentials to the authorization server that issued them by @maxisbey in modelcontextprotocol/typescript-sdk#2888

chore: bump version to 1.31.0 by @claude[bot] in modelcontextprotocol/typescript-sdk#2890

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by @maxisbey in modelcontextprotocol/typescript-sdk#2717

fix(auth): preserve resource URI without trailing slash (#1968) by @MukundaKatta in modelcontextprotocol/typescript-sdk#1972

chore: bump version to 1.30.1 by @claude[bot] in modelcontextprotocol/typescript-sdk#2848

New Contributors

@MukundaKatta made their first contribution in modelcontextprotocol/typescript-sdk#1972

... (truncated)

Commits

ff07b00 chore: bump version to 1.32.1 (#2954)
8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
32549b0 chore: bump version to 1.32.0 (#2935)
588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
Additional commits viewable in compare view

Updates drizzle-orm from 0.45.2 to 0.45.4

Release notes

Sourced from drizzle-orm's releases.

0.45.4

Fixed postgres-js not using prepared queries on explicit .prepare(name)

0.45.3 New Netlify DB Driver

Note: The Netlify DB driver is developed and maintained by the Netlify team.

Installation:

npm i @netlify/db

Usage example:

import { drizzle } from 'drizzle-orm/netlify-db';
// reads NETLIFY_DB_URL and NETLIFY_DB_DRIVER env vars
const db = drizzle();
const result = await db.execute('select 1');

import { drizzle } from 'drizzle-orm/netlify-db';
const db = drizzle(process.env.DATABASE_URL);
const result = await db.execute('select 1');

import { drizzle } from 'drizzle-orm/netlify-db';

// Explicit client — consumer controls the driver
const db = drizzle({ client: netlifyDbClient });

const result = await db.execute('select 1');

Commits

eab8bed Fixed postgres-js not using prepared queries on explicit .prepare(name) (...
15454db +
54e436f exclude gel from pull
0fd1cc6 remove gel
d028db7 skip gel
93dc01e [All-kit]: Warn when journal timestamps can cause migrations to be skipped (#...
b786252 Merge pull request #6049 from drizzle-team/drizzle-kit-announcements
f9fc5bf Add drizzle-kit announcement manifest and schema doc
9d64532 Merge pull request #6004 from drizzle-team/pin-npm-11-main
0af2f2e Pin the release npm self-update to major 11: the npm 12.0.0 tarball is missin...
Additional commits viewable in compare view

Updates lucide-react from 1.43.0 to 1.54.0

Release notes

Sourced from lucide-react's releases.

Version 1.54.0

What's Changed

feat(icons): added lens icon by @rrod497 in lucide-icons/lucide#4923

Full Changelog: lucide-icons/lucide@1.53.0...1.54.0

Version 1.53.0

What's Changed

chore(deps-dev): bump preact from 10.29.8 to 11.0.0 in the preact-deps group by @dependabot[bot] in lucide-icons/lucide#4961

chore(deps): bump vue from 3.5.42 to 3.5.43 in the vue-deps group by @dependabot[bot] in lucide-icons/lucide#4958

fix(site): Fix reset button and rename absolute stroke width to non-scaling stroke by @ericfennis in lucide-icons/lucide#4956

chore(deps-dev): bump simple-git from 3.36.0 to 4.0.1 by @dependabot[bot] in lucide-icons/lucide#4968

chore(deps-dev): bump the angular-deps group across 1 directory with 11 updates by @dependabot[bot] in lucide-icons/lucide#4960

chore(categories): Add description field to categories by @ericfennis in lucide-icons/lucide#4909

feat(icons): added groceries icon by @rrod497 in lucide-icons/lucide#4907

fix(icons): changed pen-tool icon by @karsa-mistmere in lucide-icons/lucide#4972

feat(icons): added new hiking-stick icon by @kamilasw in lucide-icons/lucide#4711

feat(icons): added scratch-blocks icon by @mc20000-01 in lucide-icons/lucide#4969

fix(icons): changed soup and salad icons by @karsa-mistmere in lucide-icons/lucide#4971

New Contributors

@mc20000-01 made their first contribution in lucide-icons/lucide#4969

Full Changelog: lucide-icons/lucide@1.52.0...1.53.0

Version 1.52.0

What's Changed

fix(icons): changed wifi-cog icon by @karsa-mistmere in lucide-icons/lucide#4952

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

fix(site): persist icon customizer by @karsa-mistmere in lucide-icons/lucide#4944

chore(deps): Upgrade to vite 8 by @ericfennis in lucide-icons/lucide#4950

feat(icons): added rugby-ball icon by @dev-mralph in lucide-icons/lucide#3496

chore(deps): bump the react-deps group across 1 directory with 3 updates by @dependabot[bot] in lucide-icons/lucide#4951

fix(react-native): stop forwarding arbitrary rest props to child shape elements by @cipherprofessor in lucide-icons/lucide#4903

test(lucide-solid): add Vite and SolidStart integration fixtures by @ericfennis in lucide-icons/lucide#4884

feat(icons): add door-closed-cog icon by @ajaxjiang96 in lucide-icons/lucide#4905

feat(icons): add text-align-justify-* icons by @HectorZaGa in lucide-icons/lucide#4942

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4939

chore(deps): Upgrade to vitest 5 by @ericfennis in lucide-icons/lucide#4953

feat(icons): added wind-arrow-up icon by @jamesgpearce in lucide-icons/lucide#4501

fix(github/actions): move to daily release flow by @karsa-mistmere in lucide-icons/lucide#4911

feat(@lucide/solid): Support for Solid 2.0 RC by @davedbase in lucide-icons/lucide#4751

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#4954

chore(deps): bump nuxt from 4.4.8 to 4.5.1 by @dependabot[bot] in lucide-icons/lucide#4949

... (truncated)

Commits

98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
See full diff in compare view

Updates next from 16.3.4 to 16.4.0

Release notes

Sourced from next's releases.

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

docs: improve clarity and punctuation in README: #86096

Fix debug build paths Pages Router support entries: #93529

bundle-analyzer: record historical snapshots on each analyze run: #93520

fix: detect proxy.ts correctly with compound pageExtensions: #93246

feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

docs: correction to dynamicParams migration: #96624

docs: proxy event argument: #96435

docs: remove experimental note from runtime prefetching: #96615

Preserve per-segment prefetching after dynamic navigation: #96583

Rename static generation stream option to waitForAllReady: #96564

Remove obsolete static generation plumbing: #96563

[turbopack] Drop dead writes to exports: #96381

[turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

[turbopack] Add test for sideEffects with optimizePackageImports: #96549

[turbopack] Strip leading BOM before parsing CSS: #96678

Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

docs: use relative doc links in instant-navigation error pages: #96672

Turbopack: terminate failed plugin worker threads: #96592

Fix HTML-limited bot matching in prerender bypass rules: #96584

[ci] Fix create_release_branch for new repo permissions: #96641

test: skip action module instance deploy test: #96629

docs: quote the dynamicParams build error in a blockquote: #96633

[react-sync] Open pull requests as the bot that authors the commits: #96682

[Bench] Fixes for pure Fizz bench: #96771

Derive foreground cache revalidation from the consumer: #96731

Fix race when navigating Back before hydration: #96252

docs: present each Skill as steps in the AI agents guide: #96751

Reuse completed cache entries for the rest of a request: #96727

Upgrade React from 7dfc7ccd-20260803 to 11eddecd-20260805: #96735

Remove WorkStore execution mode: #96674

Remove cache revalidation execution mode reads: #96670

Separate App Route render and prerender pipelines: #96662

Remove App Page execution mode reads: #96660

test: fix missing await in css-chunking test: #96725

docs (Skills): stop assuming app/ at the root and port 3000: #96696

Implement next/font BeforeResolvePlugins as ImportMappingReplacement: #95808

Use Tailwind Turbopack loader in create-next-app: #96606

docs: instant navigation quick start with an adoption prompt: #96663

Separate App Page render and prerender pipelines: #96659

Move App Router execution intent to entrypoints: #96640

... (truncated)

Commits

e273d5b v16.4.0
fdf41d6 [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...
c3e76ad v16.4.0-canary.63
47c6cc8 Document next analyze export in the package bundling guide (#99735)
5b10604 Revert stabilization of forbidden() and unauthorized() (#99734)
f3a6f97 Preserve configured output directories during static export (#99507)
b22e5a2 Rename skill to next-bundle-optimizer and document its usage (#99731)
74dc549 [turbo-tasks-backend] Clean up task state before publishing execution complet...
ccf8c15 v16.4.0-canary.62
b8c7c7f Improve static route error guidance (#99724)
Additional commits viewable in compare view

Updates posthog-js from 1.428.8 to 1.438.7

Release notes

Sourced from posthog-js's releases.

posthog-js@1.438.7

1.438.7

Patch Changes

#4990 a66cada Thanks @dustinbyrne! - Share browser logging across SDKs with consistent initialization and cleanup; captureLog and logger calls before logging setup are now dropped instead of buffered. (2026-10-09)

Updated dependencies [a66cada]:

@posthog/browser-common@0.9.4

posthog-js@1.438.6

1.438.6

Patch Changes

#5218 8bc2df6 Thanks @lucasheriques! - Skip WebMCP intent and model injection for schemas with constraints that the extra fields could break. (2026-10-09)

#5217 6af3aa8 Thanks @lucasheriques! - Export WebMCPExtensions from the slim extension-bundles entry point. (2026-10-09)

posthog-js@1.438.5

1.438.5

Patch Changes

#5258 429b5b2 Thanks @hpouillot! - Recognize native bundler debug IDs and build-time error tracking release IDs. (2026-10-09)

Updated dependencies [429b5b2]:

@posthog/core@1.57.4

posthog-js@1.438.4

1.438.4

Patch Changes

#5245 76b4402 Thanks @abrahamguo! - Fix type checking in posthog-js 1.438.2 by publishing the feature flag types it imports from @posthog/browser-common. (2026-10-09)

Updated dependencies [76b4402]:

@posthog/browser-common@0.9.3

posthog-js@1.438.3

1.438.3

Patch Changes

#5200 34cdfa6 Thanks @hpouillot! - fix(replay): add a private opt-in to preserve application stacks for failed fetch requests (2026-10-08)

Updated dependencies [34cdfa6]:

@posthog/types@1.415.2

... (truncated)

Commits

c86c1a9 chore: update versions and lockfile [version bump]
8751ab6 feat(browser-next): integrate dynamically loaded logs (#4991)
a66cada refactor(browser-common): extract logs extension (#4990)
953607d refactor(browser): make client adapters passive views (#5082)
6f5cc87 chore: update versions and lockfile [version bump]
8bc2df6 fix(browser): decide WebMCP schema injection from an allowlist of keys (#5218)
6af3aa8 fix(browser): export WebMCPExtensions from the slim entry (

…8 updates Bumps the minor-and-patch group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@auth0/nextjs-auth0](https://github.com/auth0/nextjs-auth0) | `4.29.0` | `4.31.1` | | [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.8.0` | `1.9.0` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.1` | | [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.4` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.43.0` | `1.54.0` | | [next](https://github.com/vercel/next.js) | `16.3.4` | `16.4.0` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.428.8` | `1.438.7` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.51.8` | `5.55.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.31.10` | `0.31.11` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.4` | `16.4.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.29` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | Updates `@auth0/nextjs-auth0` from 4.29.0 to 4.31.1 - [Release notes](https://github.com/auth0/nextjs-auth0/releases) - [Changelog](https://github.com/auth0/nextjs-auth0/blob/main/CHANGELOG.md) - [Commits](auth0/nextjs-auth0@v4.29.0...v4.31.1) Updates `@base-ui/react` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/mui/base-ui/releases) - [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/base-ui/commits/v1.9.0/packages/react) Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.32.1) Updates `drizzle-orm` from 0.45.2 to 0.45.4 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](drizzle-team/drizzle-orm@0.45.2...0.45.4) Updates `lucide-react` from 1.43.0 to 1.54.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.54.0/packages/lucide-react) Updates `next` from 16.3.4 to 16.4.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.4...v16.4.0) Updates `posthog-js` from 1.428.8 to 1.438.7 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.428.8...posthog-js@1.438.7) Updates `posthog-node` from 5.51.8 to 5.55.1 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.55.1/packages/node) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `drizzle-kit` from 0.31.10 to 0.31.11 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.10...drizzle-kit@0.31.11) Updates `eslint-config-next` from 16.3.4 to 16.4.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.0/packages/eslint-config-next) Updates `postcss` from 8.5.28 to 8.5.29 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.28...8.5.29) Updates `prettier` from 3.9.6 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.9) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) --- updated-dependencies: - dependency-name: "@auth0/nextjs-auth0" dependency-version: 4.31.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@base-ui/react" dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: drizzle-orm dependency-version: 0.45.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: posthog-js dependency-version: 1.438.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: posthog-node dependency-version: 5.55.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: drizzle-kit dependency-version: 0.31.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint-config-next dependency-version: 16.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: postcss dependency-version: 8.5.29 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-10-17T00:28:37Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
console	Ready	Preview	Oct 17, 2026 12:29am UTC

Copilot

🔵 Needs a closer look

Combined framework, React, and authentication upgrades need build and runtime compatibility validation before approval.

No open issues 🎉

What changed in this PR

Updates the console’s runtime dependencies and development tooling through grouped minor and patch upgrades.

Changes:

Upgrades Next.js, React, Auth0, and supporting libraries.
Updates development tools and refreshes locked dependencies.

File	Description
pnpm-lock.yaml	Refreshes resolved versions and dependency relationships.
package.json	Updates runtime and development dependency ranges.

_{Review effort: Balanced}

dependabot Bot requested a review from adamsoffer as a code owner October 17, 2026 00:28

Copilot AI balanced review requested due to automatic review settings October 17, 2026 00:28

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 17, 2026

Copilot started reviewing October 17, 2026 00:29

View session

vercel Bot deployed to Preview October 17, 2026 00:29

View deployment

Copilot AI reviewed Oct 17, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore(deps): bump the minor-and-patch group across 1 directory with 18 updates - #93

chore(deps): bump the minor-and-patch group across 1 directory with 18 updates#93
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-f7ef19b8bc

dependabot Bot commented on behalf of github Oct 17, 2026

Uh oh!

vercel Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 17, 2026

v4.31.1

Summary by CodeRabbit

v4.31.0

v4.30.0

Summary by CodeRabbit

v4.31.1 (2026-10-07)

v4.31.0 (2026-10-01)

v4.30.0 (2026-09-16)

v1.9.0

General changes

Accordion

Alert Dialog

Autocomplete

Checkbox

Collapsible

Combobox

Dialog

v1.9.0

General changes

Accordion

Alert Dialog

Autocomplete

Checkbox

Collapsible

Combobox

1.32.1

What's Changed

1.32.0

Upgrade notes

What's Changed

New Contributors

1.31.0

Upgrade notes

What's Changed

1.30.1

What's Changed

New Contributors

0.45.4

0.45.3

New Netlify DB Driver

Version 1.54.0

What's Changed

Version 1.53.0

What's Changed

New Contributors

Version 1.52.0

What's Changed

Version 1.51.0

What's Changed

v16.4.0

Core Changes

Misc Changes

posthog-js@1.438.7

1.438.7

Patch Changes

posthog-js@1.438.6

1.438.6

Patch Changes

posthog-js@1.438.5

1.438.5

Patch Changes

posthog-js@1.438.4

1.438.4

Patch Changes

posthog-js@1.438.3

1.438.3

Patch Changes

Uh oh!

vercel Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🔵 Needs a closer look

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

vercel Bot commented Oct 17, 2026 •

edited

Loading