chore(deps): bump the minor-and-patch group across 1 directory with 9 updates by dependabot[bot] · Pull Request #210 · tuirk/Kompl

dependabot · 2026-08-24T09:19:16Z

Bumps the minor-and-patch group with 8 updates in the /app directory:

Package	From	To
lucide-react	`1.24.0`	`1.33.0`
next	`16.2.11`	`16.3.1`
react	`19.2.7`	`19.2.8`
@types/react	`19.2.17`	`19.2.18`
react-dom	`19.2.7`	`19.2.8`
@types/react-dom	`19.2.3`	`19.2.4`
undici	`7.28.0`	`7.29.0`
@vitest/ui	`4.1.10`	`4.1.11`

Updates lucide-react from 1.24.0 to 1.33.0

Release notes

Sourced from lucide-react's releases.

Version 1.33.0

What's Changed

feat(icons): add list-clock icon by @lazerg in lucide-icons/lucide#4636

feat(icons): add square-dimensions by @samuelalake in lucide-icons/lucide#4547

feat(icons): added usb-c-port icon by @karsa-mistmere in lucide-icons/lucide#4556

docs(site): correct Vanilla icon import casing by @hugosmoreira in lucide-icons/lucide#4597

feat(icons): added audio-lines-off icon by @karsa-mistmere in lucide-icons/lucide#4589

chore(icon-discussions): add icon design template by @jguddas in lucide-icons/lucide#4691

feat(icons): added mop icon by @karsa-mistmere in lucide-icons/lucide#4682

chore(scripts): Potential fix for code scanning alert no. 31: Inefficient regular expression by @ericfennis in lucide-icons/lucide#4723

chore(deps-dev): bump the svelte-deps group with 3 updates by @dependabot[bot] in lucide-icons/lucide#4720

feat(icon-discussions): close discussions with banned phrases by @jguddas in lucide-icons/lucide#4692

feat(icons): added midi-port icon by @simoncoudeville in lucide-icons/lucide#3754

New Contributors

@hugosmoreira made their first contribution in lucide-icons/lucide#4597

@simoncoudeville made their first contribution in lucide-icons/lucide#3754

Full Changelog: lucide-icons/lucide@1.32.0...1.33.0

Version 1.32.0

What's Changed

feat(icons): added car-battery icon by @andreynaz4renko in lucide-icons/lucide#4088

fix(categories): fixes emoji.json by @karsa-mistmere in lucide-icons/lucide#4697

chore(deps): bump vue from 3.5.40 to 3.5.41 in the vue-deps group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4695

chore(dev): upgrade ESLint to latest compatible stack (v10) by @ericfennis with @Copilot in lucide-icons/lucide#4378

feat(icons): add square-text by @samuelalake in lucide-icons/lucide#4609

New Contributors

@andreynaz4renko made their first contribution in lucide-icons/lucide#4088

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Version 1.31.0

What's Changed

feat(icons): added mail-badge icon by @lazerg in lucide-icons/lucide#4638

feat(icons): add angle by @samuelalake in lucide-icons/lucide#4545

feat(icons): added eject icon by @ThibautMarechal in lucide-icons/lucide#4043

New Contributors

@lazerg made their first contribution in lucide-icons/lucide#4638

@ThibautMarechal made their first contribution in lucide-icons/lucide#4043

Full Changelog: lucide-icons/lucide@1.30.0...1.31.0

Version 1.30.0

What's Changed

chore(icons): refine & rename various emoji icons by @karsa-mistmere in lucide-icons/lucide#4606

fix(scripts): removed toBeRemovedInVersion from all scripts and tools by @karsa-mistmere in lucide-icons/lucide#4674

feat(icons): added audio-lines-x icon by @karsa-mistmere in lucide-icons/lucide#4590

... (truncated)

Commits

75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
f229f83 chore(depedencies): Update dependencies (#4553)
See full diff in compare view

Updates next from 16.2.11 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645

Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636

Turbopack: rename to use turbopack: no side effects: #94427

refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360

[PPF] unstable_navigation(): #96908

[PPF] Scaffold unstable_navigation(): #97236

docs: Explicit cache output description: #97548

Improve Cache Components sync IO migration guidance: #97572

[test] Use a non-native stub for the server externals list test: #97614

Avoid GitHub API rate limits for create-next-app examples: #97612

[test] Cover the prerender worker-thread backend with an addon we control: #97543

[test] Convert the prerender-native-module suite to local fixture packages: #97542

[test] Replace the turbopack-reports sqlite3 dependency with a local addon fixture: #97541

[test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540

[ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590

Remove HmrTarget: #97253

Keep HMR instructions typed until serialization: #96569

Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits

3d32eb8 v16.3.1
2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

See full diff in compare view

Updates undici from 7.28.0 to 7.29.0

Release notes

Sourced from undici's releases.

v7.29.0

⚠️ Security fixes

High severity

GHSA-4cwx-7wf7-3272: malformed qualified private Cache-Control directives could cause cross-user information disclosure in shared caches or a parse-time crash. The cache parser now treats empty qualified directives conservatively and safely handles mixed qualified and unqualified directives. Fixed by 9f10f1e9, with regression coverage in 466e99d1.

Medium severity

GHSA-m8rv-5g2x-5cg5: a malicious type property on a duck-typed blob-like HTTP/1.1 request body could inject CRLF sequences into the generated content-type header. Undici now coerces and validates the value before adding it to the request. Fixed by 33928bc2.

GHSA-jr45-8vmc-qm54: optional whitespace around = in qualified no-cache and private directives could bypass shared-cache restrictions and disclose authenticated data across users. Cache-Control parsing now normalizes these forms and applies conservative cache decisions. Fixed by 98011a86.

GHSA-8xcm-r25x-g524: the retry interceptor could expose a stale Content-Length after resuming a partial response, potentially causing downstream response desynchronization, hangs, or corruption. Undici now rejects partial responses whose Content-Length is inconsistent with Content-Range. Fixed by 1b5a5312, with corrected fixtures in 4a9dafb1.

GHSA-v3r7-h72x-cjcm: unsanitized domain and unparsed values passed to setCookie() could inject cookie attributes. Undici now validates cookie domains, paths, and unparsed attributes more strictly. Fixed by 3bf91ddb.

Full Changelog: nodejs/undici@v7.28.0...v7.29.0

Commits

9e38fc1 Bumped v7.29.0 (#5590)
d887e34 fix: validate coerced header values for CRLF (#5579)
33928bc fix: validate blob body content type
98011a8 fix(cache): harden cache directive parsing
4a9dafb test(retry): correct broken content-range fixtures in retry-handler.js
1b5a531 fix(retry): reject partial content length mismatch
466e99d test: cover crash on mixed unqualified and qualified private cache directives
9f10f1e fix: handle empty qualified private cache directive
3bf91dd fix: harden cookie domain, path, and unparsed attribute validation
See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

See full diff in compare view

Updates @vitest/ui from 4.1.10 to 4.1.11

Release notes

Sourced from @vitest/ui's releases.

v4.1.11

🐞 Bug Fixes

Revive global concurrency limit for test lifecycle [backport to v4] - by @sheremet-va and @hi-ogawa in vitest-dev/vitest#10992 (5146d)

browser:

Encode iframeId in tester iframe URL [backport to v4] - by @sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)

Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)

mocker:

Restrict redirect mocks to the fs allowlist [backport to v4] - by @sheremet-va in vitest-dev/vitest#10974 (fe5a1)

View changes on GitHub

Commits

9bd8d46 chore: release v4.1.11 (#10995)
See full diff in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

🐞 Bug Fixes

Revive global concurrency limit for test lifecycle [backport to v4] - by @sheremet-va and @hi-ogawa in vitest-dev/vitest#10992 (5146d)

browser:

Encode iframeId in tester iframe URL [backport to v4] - by @sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)

Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)

mocker:

Restrict redirect mocks to the fs allowlist [backport to v4] - by @sheremet-va in vitest-dev/vitest#10974 (fe5a1)

View changes on GitHub

Commits

9bd8d46 chore: release v4.1.11 (#10995)
9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
undici	[>= 8.a, < 9]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the minor-and-patch group with 8 updates in the /app directory: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.24.0` | `1.33.0` | | [next](https://github.com/vercel/next.js) | `16.2.11` | `16.3.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` | | [undici](https://github.com/nodejs/undici) | `7.28.0` | `7.29.0` | | [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.10` | `4.1.11` | Updates `lucide-react` from 1.24.0 to 1.33.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react) Updates `next` from 16.2.11 to 16.3.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.11...v16.3.1) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `@types/react` from 19.2.17 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `undici` from 7.28.0 to 7.29.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.28.0...v7.29.0) Updates `@types/react` from 19.2.17 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitest/ui` from 4.1.10 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/ui) Updates `vitest` from 4.1.10 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: undici dependency-version: 7.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@vitest/ui" dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026

dependabot Bot requested a review from tuirk as a code owner August 24, 2026 09:19

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026

Navigation Menu

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates - #210

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates#210
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/minor-and-patch-52cfec1b76

dependabot Bot commented on behalf of github Aug 24, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 1.33.0

What's Changed

New Contributors

Version 1.32.0

What's Changed

New Contributors

Version 1.31.0

What's Changed

New Contributors

Version 1.30.0

What's Changed

v16.3.1

What's Changed

v16.3.1-canary.26

Misc Changes

Credits

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

v7.29.0

⚠️ Security fixes

High severity

Medium severity

v4.1.11

🐞 Bug Fixes

View changes on GitHub

v4.1.11

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 24, 2026 •

edited

Loading