deps(deps): bump the production-dependencies group across 1 directory with 8 updates#1
Open
dependabot[bot] wants to merge 1 commit into
Conversation
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
✅ Deploy Preview for savio-financial-app ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
ritikadas98
pushed a commit
that referenced
this pull request
Jun 4, 2026
PR #4 (tailwindcss 3.4.19 → 4.3.0) broke `vite build` on the Netlify deploy preview while CI passed. Tailwind v4 is a rewrite — dropped the PostCSS plugin entry point, replaced `tailwind.config.ts` with CSS-first `@theme {…}` config, and made tailwindcss-animate incompatible. A real migration is ~2 hours and isn't in scope for the portfolio's maintenance phase. Added an `ignore` block scoped to semver-major bumps only, for the six dependencies most likely to require human migration work when they jump majors: tailwindcss v4 = rewrite (the one that just bit us) react / react-dom future v20 will be breaking vite vN majors often change config shape eslint flat-config era changes per major typescript pinned with `~` already; major bumps would still surface and require attention Minor + patch updates on all of these still come through normally, so security-relevant fixes aren't suppressed. PR #4 itself needs to be closed manually via the GitHub UI — Dependabot won't auto-close existing PRs after a config change, the ignore rule only prevents new ones. Other Dependabot PRs (#1 production minor/patch group, #2 dev minor/patch group, #3 @types/node 24→25) all pass CI and are safe to merge. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
… with 8 updates Bumps the production-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.2.2` | `5.4.0` | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.106.1` | `2.107.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.14.0` | `1.17.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.75.0` | `7.77.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.15.1` | `7.16.0` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.13` | `5.0.14` | Updates `@hookform/resolvers` from 5.2.2 to 5.4.0 - [Release notes](https://github.com/react-hook-form/resolvers/releases) - [Commits](react-hook-form/resolvers@v5.2.2...v5.4.0) Updates `@supabase/supabase-js` from 2.106.1 to 2.107.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.107.0/packages/core/supabase-js) Updates `lucide-react` from 1.14.0 to 1.17.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.17.0/packages/lucide-react) Updates `react` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `react-hook-form` from 7.75.0 to 7.77.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.75.0...v7.77.0) Updates `react-router-dom` from 7.15.1 to 7.16.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.16.0/packages/react-router-dom) Updates `zustand` from 5.0.13 to 5.0.14 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.13...v5.0.14) --- updated-dependencies: - dependency-name: "@hookform/resolvers" dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@supabase/supabase-js" dependency-version: 2.107.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-hook-form dependency-version: 7.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-router-dom dependency-version: 7.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zustand dependency-version: 5.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/production-dependencies-c3aad6a460
branch
from
f1d2ae6 to
476099c
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-dependencies group with 8 updates in the / directory:
5.2.25.4.02.106.12.107.01.14.01.17.019.2.619.2.719.2.619.2.77.75.07.77.07.15.17.16.05.0.135.0.14Updates
@hookform/resolversfrom 5.2.2 to 5.4.0Release notes
Sourced from @hookform/resolvers's releases.
Commits
3d29924feat: add guidance on passing context toyupResolver(useForm context) (#835)56b68f3feat: 5.3.0cf8562dupdate readme on ata-validator5e5b610fix issue with toNestErrors.ts (#848)72aacf8Revise supported versions in SECURITY.mdad89a20feat: add ata-validator resolver (#845)02286dbci: updated publish workflow to use node 24 (#838)2e9bc7cFix(zodResolver): error paths in complex unions #787 (#819)Updates
@supabase/supabase-jsfrom 2.106.1 to 2.107.0Release notes
Sourced from @supabase/supabase-js's releases.
... (truncated)
Changelog
Sourced from @supabase/supabase-js's changelog.
Commits
54ec2b6feat(auth): remove navigator.locks-based mutex; introduce commit guard + disp...3397c92feat(supabase): update X-Client-Info to structured metadata format (#2359)335207ffeat(realtime): allow httpSend to send binary payload (#2400)42f12dddocs(repo): ship per-package AGENTS.md and migrations via npm (#2397)b200b74chore(release): version 2.106.2 changelogs (#2396)a5f09cfchore(repo): adopt pnpm catalog and clean up devDeps (#2389)c72cc56fix(misc): add react-native export condition for Hermes-safe resolution (#2393)a7bdb23docs(supabase): expand tracePropagation tsdoc with examples (#2388)f4c149cchore(release): version 2.106.1 changelogs (#2384)Updates
lucide-reactfrom 1.14.0 to 1.17.0Release notes
Sourced from lucide-react's releases.
Commits
07c885efix(docs): fix zephyr-cloud URL in readmesUpdates
reactfrom 19.2.6 to 19.2.7Release notes
Sourced from react's releases.
Commits
6117d7cVersion 19.2.7 (#36591)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.
Updates
react-domfrom 19.2.6 to 19.2.7Release notes
Sourced from react-dom's releases.
Commits
6117d7cVersion 19.2.7 (#36591)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.
Updates
react-hook-formfrom 7.75.0 to 7.77.0Release notes
Sourced from react-hook-form's releases.
Changelog
Sourced from react-hook-form's changelog.
... (truncated)
Commits
5b207417.77.0f1a02d3🧪 add regression coverage for createFormControl + useController remount defau...ba88c3d📚 docs: fix JSDoc for UseFormWatch (#13486)54198d9🥡 feat: addresetDefaultValuesAPI (#13427)fe8276e📚 docs: fix duplicate "de" in es-ES README image alt text (#13481)6aa81f9🐚 hardenget()against prototype-path traversal (__proto__/ `constructor...645478b🐞 fix FieldArray errors overriding nested fields (#13476)889c752🧪 add regression coverage for dynamic nested names with useController and wat...581321c🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (#...f8eb2d7🌭 upgrade deps (#13470)Updates
react-router-domfrom 7.15.1 to 7.16.0Changelog
Sourced from react-router-dom's changelog.
Commits
8984d23Release v7.16.0 (#15105)3ed77afchore: formate96962bfix: remove stale unpkg field from react-router-dom (#15075)Updates
zustandfrom 5.0.13 to 5.0.14Release notes
Sourced from zustand's releases.
Commits
bfb2a9e5.0.1462b2affchore(deps): update dev dependencies (#3513)ad77bd3fix(devtools): improve type inference for Devtools initializer (#3511)8476d2cupdate pnpm etc (#3512)d690ec2docs(combine): add object constraints to T and U in signature (#3506)fd8c601docs(react): add Action constraint to redux middleware signature (#3492)2ce8226docs(immer): fix setPerson updater type in usage examples (#3502)038b938docs(updating-state): use curried create form with explicit state type (#3503)60a91b4docs(devtools): add missing devtools import to troubleshooting example (#3501)efad169Update FUNDING.json