Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 23 updates - #53

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-fa53f28a9a
Closed

chore(deps): bump the minor-and-patch group across 1 directory with 23 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-fa53f28a9a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 23 updates in the / directory:

Package From To
lucide-react 1.31.0 1.66.0
next 16.4.2 16.4.3
globals 17.13.0 17.14.0
pm2 7.0.4 7.1.1
typescript-eslint 8.71.2 8.72.1
@fastify/cookie 11.1.3 11.1.5
@fastify/cors 11.3.1 11.4.0
@fastify/multipart 10.1.4 10.1.7
@fastify/swagger 9.9.2 9.9.3
@opentelemetry/api 1.9.1 1.10.0
@opentelemetry/exporter-trace-otlp-http 0.223.0 0.300.0
@opentelemetry/instrumentation-http 0.223.0 0.300.0
@opentelemetry/sdk-node 0.223.0 0.300.0
@opentelemetry/semantic-conventions 1.43.0 1.44.0
bullmq 6.3.15 6.5.3
fastify 5.12.7 5.12.8
jose 6.2.12 6.2.15
@animate-ui/react 2.2.1 2.4.1
cn 0.4.0 0.5.2
eslint-config-next 16.4.2 16.4.4
shadcn 4.21.5 4.23.0
@aws-sdk/client-s3 3.1152.0 3.1161.0
@aws-sdk/s3-request-presigner 3.1152.0 3.1161.0

Updates lucide-react from 1.31.0 to 1.66.0

Release notes

Sourced from lucide-react's releases.

Version 1.66.0

What's Changed

Full Changelog: lucide-icons/lucide@1.65.0...1.66.0

Version 1.65.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.64.0...1.65.0

Version 1.64.0

What's Changed

... (truncated)

Commits
  • 1668a0c chore(deps): bump rollup to 4.65.1 and keep typescript on v6 (#5110)
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • 3f1255e chore(deps-dev): bump @​vitejs/plugin-react (#4995)
  • 949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
  • 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
  • 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
  • Additional commits viewable in compare view

Updates next from 16.4.2 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits
  • 29bbeab v16.4.3
  • 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
  • 37d603b [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #1...
  • cf9d27d [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (...
  • 3f6a632 [lts-active] test: Pin react-virtualized (#100545)
  • f715bba [lts-active][cd] Gate release bot credentials behind GitHub environments (#10...
  • c864c78 [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • f3ff943 [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • f697cf5 [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • See full diff in compare view

Updates globals from 17.13.0 to 17.14.0

Release notes

Sourced from globals's releases.

v17.14.0

  • Update globals (2026-11-01) (#355) 7abfb5d

sindresorhus/globals@v17.13.0...v17.14.0

Commits

Updates pm2 from 7.0.4 to 7.1.1

Release notes

Sourced from pm2's releases.

v7.1.1

7.1.1

Bug Fixes

  • Windows: memory is reported again when pm2 runs as a service (pidusage 4.1.0, wmic is used again when available) #6173
  • Linux: overlapping monitoring calls no longer leak a /proc/<pid>/stat fd per new pid in the daemon (grew with every restart)
  • pm2.connect() right after pm2.disconnect() no longer crashes with Cannot read properties of null (reading 'sock') #6002

v7.1.0

7.1.0

Features

  • pm2 monit / pm2 dash now preload the last 200 lines (out + err merged) of every process from its log files, most recent first; --lines <n> to display more #5187
  • pm2 monit: Ctrl+Up / Ctrl+Down (and PageUp / PageDown) scroll the focused log pane page by page

Bug Fixes

  • Shell environment variables named like a PM2 option (name, namespace, cron_restart, instances...) no longer override the app configuration #6006 #6016 #5747 #5622 #5030 #5032 #4943 #4778 #4821 #3210
  • Variables declared in env: and named like a PM2 option (env: { port: 3000 }, time, watch...) still reach the app: only the ambient shell environment is filtered, not what the user declares
  • Cluster mode: the pid list of the previous kill (_tree_pids, since 7.0.0) no longer leaks into the app's process.env after a restart, nor gets reused as the pid list of a later kill
  • pm2 monit: align the Custom Metrics pane in columns (value right-aligned, fixed unit column, numbers rounded to 2 decimals) and shorten long metric names instead of pushing values out of the pane
  • pm2 monit: the footer no longer overlaps the bottom border of the Custom Metrics / Metadata panes
  • pm2 monit: logs, metrics and metadata panes update instantly when the selected process changes (no longer wait for the next refresh tick)
  • pm2 monit: characters of old log lines no longer stay stuck on screen — emoji are now measured as 2 cells, and \r, cursor escape sequences, control chars and {tags} in logs are sanitized #5397
  • @pm2/blessed is now vendored in modules/blessed (one less npm dependency)
  • chokidar 3.6.0 is now vendored in modules/chokidar with a bounded brace expansion, dropping the vulnerable braces dependency (GHSA-vfj7-8cjw-p6xm, no patched version)
  • Logs: no more lost lines in fork mode with --time / log_date_format when an app writes more than 64KB at once (partial line at a pipe chunk boundary was dropped) #6125
  • Logs: in cluster mode with --time, every line of a multi-line write is now date-prefixed (not only the first)
  • pm2 logs "/regex/" --lines 0 now streams matching apps (regex was ignored in stream-only mode); regexes with an inner / are no longer mangled, apps started after pm2 logs are picked up, and only one bus subscription is opened #5196
  • pm2 reloadLogs no longer crashes the app in fork mode when out_file/error_file are NULL and only log_file is set #5509

... (truncated)

Changelog

Sourced from pm2's changelog.

7.1.1

Bug Fixes

  • Windows: memory is reported again when pm2 runs as a service (pidusage 4.1.0, wmic is used again when available) #6173
  • Linux: overlapping monitoring calls no longer leak a /proc/<pid>/stat fd per new pid in the daemon (grew with every restart)
  • pm2.connect() right after pm2.disconnect() no longer crashes with Cannot read properties of null (reading 'sock') #6002

7.1.0

Features

  • pm2 monit / pm2 dash now preload the last 200 lines (out + err merged) of every process from its log files, most recent first; --lines <n> to display more #5187
  • pm2 monit: Ctrl+Up / Ctrl+Down (and PageUp / PageDown) scroll the focused log pane page by page

Bug Fixes

  • Shell environment variables named like a PM2 option (name, namespace, cron_restart, instances...) no longer override the app configuration #6006 #6016 #5747 #5622 #5030 #5032 #4943 #4778 #4821 #3210
  • Variables declared in env: and named like a PM2 option (env: { port: 3000 }, time, watch...) still reach the app: only the ambient shell environment is filtered, not what the user declares
  • Cluster mode: the pid list of the previous kill (_tree_pids, since 7.0.0) no longer leaks into the app's process.env after a restart, nor gets reused as the pid list of a later kill
  • pm2 monit: align the Custom Metrics pane in columns (value right-aligned, fixed unit column, numbers rounded to 2 decimals) and shorten long metric names instead of pushing values out of the pane
  • pm2 monit: the footer no longer overlaps the bottom border of the Custom Metrics / Metadata panes
  • pm2 monit: logs, metrics and metadata panes update instantly when the selected process changes (no longer wait for the next refresh tick)
  • pm2 monit: characters of old log lines no longer stay stuck on screen — emoji are now measured as 2 cells, and \r, cursor escape sequences, control chars and {tags} in logs are sanitized #5397
  • @pm2/blessed is now vendored in modules/blessed (one less npm dependency)
  • chokidar 3.6.0 is now vendored in modules/chokidar with a bounded brace expansion, dropping the vulnerable braces dependency (GHSA-vfj7-8cjw-p6xm, no patched version)
  • Logs: no more lost lines in fork mode with --time / log_date_format when an app writes more than 64KB at once (partial line at a pipe chunk boundary was dropped) #6125
  • Logs: in cluster mode with --time, every line of a multi-line write is now date-prefixed (not only the first)
  • pm2 logs "/regex/" --lines 0 now streams matching apps (regex was ignored in stream-only mode); regexes with an inner / are no longer mangled, apps started after pm2 logs are picked up, and only one bus subscription is opened #5196
  • pm2 reloadLogs no longer crashes the app in fork mode when out_file/error_file are NULL and only log_file is set #5509
  • Logs: log streams are now flushed (end()) instead of destroyed on pm2 reloadLogs / app exit, so buffered data is no longer truncated
  • pm2 serve: a request with a malformed percent-escape (GET /%) no longer crashes the server (answers 400); handler exceptions answer 500 instead of killing the process
  • Logs: in cluster mode, output that bypasses process.stdout.write (pino/sonic-boom, npm start, children spawned with stdio inherit) no longer ends up in pm2.log — workers get piped stdio and the daemon routes it to the app log files and pm2 logs #3675 #4719 #4872 #4916 #4953 #5633 #4816
  • Logs: in cluster mode, the worker's stdout/stderr pipes are made blocking so a raw write bigger than the pipe buffer (fs.writeSync(1, ...), native addons) is no longer silently truncated at 64 KB #4044 #4872
  • exec_mode: cluster on a non Node.js/Bun script (bash, python, binary) now falls back to fork mode with a warning instead of crashing with SyntaxError: Invalid or unexpected token (ELF) #4775
  • Node.js/Bun interpreter detection now accepts atypical binary names (node.exe, node64.exe, nodejs, node18, node@18, bun.exe), so cluster mode and the fork-mode wrapper are no longer skipped for them
  • Restart/stop on systems without ps (slim Docker images) no longer starts the app twice and crashes the daemon with Callback was already called #6171
  • TreeKill: no ps under Bun (synchronous spawn throw) falls back to killing the root pid
  • An online process without a pid (e.g. failed spawn) no longer makes pidusage fail for every app (One of the pids provided is invalid spam) #6134 #6135
  • Cluster mode with uid/gid: log files created by a root daemon are chowned to the app user (no more EACCES crash loop)
  • pm2 reloadLogs no longer crashes the daemon (ERR_IPC_CHANNEL_CLOSED) nor leaks fds when a cluster app is stopped, nor on concurrent calls
  • Explicit exec_mode: cluster is kept for JS/TS apps run by a custom interpreter (tsx, ts-node); fork fallback only for binaries and non-JS scripts/interpreters #4775
  • pm2 serve: null bytes answer 400 (--spa no longer crashes on GET /x/%2500), errors in async file handlers answer 500
  • Fork/cluster: log files are closed once the app stdout/stderr pipes are closed, no longer on the ChildProcess close that sometimes never comes on Linux (2 fds leaked per app stop/restart/delete)
  • Stale _tree_pids from a 7.0.0-7.0.4 dump no longer leaks into the app env nor gets an unrelated pid SIGKILLed on stop
  • PM2.io agent: PM2_PROXY support removed with the proxy-agent dependency (unused, broken since 7.0.0 with ProxyAgent is not a constructor; drops the vulnerable get-uri/basic-ftp chain)
  • Behavior change: shell variables named like a PM2 option (port, time, watch...) are no longer forwarded to fork mode apps; declare them in env:
  • pm2 ls host metrics: virtual interfaces and read-only mounts are hidden
Commits

Updates typescript-eslint from 8.71.2 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @fastify/cookie from 11.1.3 to 11.1.5

Release notes

Sourced from @​fastify/cookie's releases.

v11.1.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.4...v11.1.5

v11.1.4

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.3...v11.1.4

Commits
  • a96460b Bumped v11.1.5
  • 7f9551e fix: forward custom encode option to cookie serializer (#377)
  • 4f47cf1 Bumped v11.1.4
  • c07e472 fix: forward encode option to cookie serializer (#374)
  • d27beb4 perf(signer): add early delimiter check in unsign to avoid redundant HMAC com...
  • See full diff in compare view

Updates @fastify/cors from 11.3.1 to 11.4.0

Release notes

Sourced from @​fastify/cors's releases.

v11.4.0

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-cors@v11.3.1...v11.4.0

Commits
  • a84d816 Bumped v11.4.0
  • 32cf1c2 Merge commit from fork
  • d1dfe62 docs: clarify that RegExp origins are not anchored (#424)
  • 94eba39 chore: bump fastify/workflows/.github/workflows/reusable-release.yml
  • See full diff in compare view

Updates @fastify/multipart from 10.1.4 to 10.1.7

Release notes

Sourced from @​fastify/multipart's releases.

v10.1.7

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fastify-multipart@v10.1.6...v10.1.7

v10.1.6

What's Changed

New Contributors

Full Changelog: fastify/fastify-multipart@v10.1.5...v10.1.6

v10.1.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-multipart@v10.1.4...v10.1.5

Commits
  • 3978273 Bumped v10.1.7
  • 437d3e7 Merge commit from fork
  • a3d5814 chore: bump fastify/workflows/.github/workflows/reusable-release.yml
  • 39d1579 docs: clarify multipart array validation (#627)
  • 81443ed Bumped v10.1.6
  • 7afc28d chore: merge ajvFilePlugin type tests into one file
  • da8fee4 fix: correct ajvFilePlugin type to be compatible with Fastify ajv.plugins (#606)
  • 18d9795 Bumped v10.1.5
  • 8fec686 fix: type decoded file values assigned in onFile (#624)
  • See full diff in compare view

Updates @fastify/swagger from 9.9.2 to 9.9.3

Release notes

Sourced from @​fastify/swagger's releases.

v9.9.3

What's Changed

Full Changelog: fastify/fastify-swagger@v9.9.2...v9.9.3

Commits
  • 5a553c2 Bumped v9.9.3
  • 2ef6f87 fix: emit the schemas with an nested in the route schemas (#956)
  • 9847ca8 chore: bump fastify/workflows/.github/workflows/reusable-release.yml
  • See full diff in compare view

Updates @opentelemetry/api from 1.9.1 to 1.10.0

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.10.0

1.10.0

🚀 Features

  • feat(api): integrate the Logs API into @opentelemetry/api #4862 @​hectorhdzg
  • feat(api): add imperative context.attach() for setting context across callback boundaries that with() cannot wrap. #6845 @​pichlermarc
    • attach() returns a Token whose dispose() method restores the previous context. Use token.dispose() to detach.
    • attach is an optional method on the ContextManager interface; when the active context manager does not implement it, context.attach() logs a warning and returns a no-op token.
  • feat(api): add AnyValue type (of type unknown) and extend Attributes type values to use AnyValue #6780 @​trentm
    • This is part of supporting OTEP 4485.
    • This is a breaking change for SDK implementations, in that they may need to support more attribute types for any APIs that accept Attributes or AnyValue. Implementors should refer to the OTEP 4485 link above for "MUST / SHOULD" requirements for complex attributes handling. See also the attributes-handling utilities provided by @opentelemetry/core to help. For example, cleanSimpleAttributes() can be used to limit user-provided attributes to the set of value types supported in earlier @opentelemetry/api versions.
    • This change is typically not a breaking change for users of @opentelemetry/api. There is one possible breaking case: If a TypeScript user was using the Attributes type in their own code and using TypeScript Narrowing to reduce an attribute value to an expected type (example here). It is expected that this usage should be rare and, likely, limited to SDK implementations, if at all. (If this impacted your code, please let us know.)
    • Note for users of attributes: Simple attributes SHOULD be used whenever possible. Instrumentations SHOULD assume that backends do not index individual properties of complex attributes, that querying or aggregating on such properties is inefficient and complicated, and that reporting complex attributes carries higher performance overhead.

🐛 Bug Fixes

  • fix(api): cap tracestate list-members and total length in the deprecated TraceState.set() so it stays in step with TraceState from @opentelemetry/core #6964 @​Zuhef
  • fix: resolve the ESM build through the default export condition instead of import, so a resolver that activates neither import nor require still finds an entry point #7132 @​overbalance

📚 Documentation

  • docs(api): complete @since annotations for the public API #7023 @​nabeelamjadsheikh
    • Adds the three missing exported-type annotations and the member-level annotations for methods and properties introduced after their enclosing type.
    • Corrects Attributes, AttributeValue and TracerOptions from 1.3.0 to 1.1.0; all three were already importable in 1.1.0 via wildcard re-export.

🏠 Internal

  • build: migrate the package build from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory #6293 @​overbalance
    • The public entry points are unchanged: @opentelemetry/api and @opentelemetry/api/experimental. This package already declared an exports map, so deep imports such as @opentelemetry/api/build/src/... were rejected before this change and continue to be.
    • The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations. The non-standard esnext condition has been dropped in favour of the standard import/require conditions.
  • perf(api): add getGlobal fast-path #6956 @​legendecas
  • chore: remove the redundant module field from package.json; bundlers resolve the ESM build through the exports map #7130 @​overbalance
Changelog

Sourced from @​opentelemetry/api's changelog.

1.10.0

🚀 (Enhancement)

  • feat(resource): create sync resource with some attributes that resolve asynchronously #3460 @​samimusallam
  • feat: collect host id for non-cloud environments #3575 @​mwear
  • feat (api-logs): separate Events API into its own package 3550 @​martinkuba
  • feat(sdk-metrics): apply binary search in histogram recording #3539 @​legendecas
  • perf(propagator-jaeger): improve deserializeSpanContext performance #3541...

    Description has been truncated

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 2…
b3518c4 
…3 updates

Bumps the minor-and-patch group with 23 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.66.0` |
| [next](https://github.com/vercel/next.js) | `16.4.2` | `16.4.3` |
| [globals](https://github.com/sindresorhus/globals) | `17.13.0` | `17.14.0` |
| [pm2](https://github.com/Unitech/pm2) | `7.0.4` | `7.1.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.2` | `8.72.1` |
| [@fastify/cookie](https://github.com/fastify/fastify-cookie) | `11.1.3` | `11.1.5` |
| [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.3.1` | `11.4.0` |
| [@fastify/multipart](https://github.com/fastify/fastify-multipart) | `10.1.4` | `10.1.7` |
| [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.9.2` | `9.9.3` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.1` | `1.10.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.43.0` | `1.44.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `6.3.15` | `6.5.3` |
| [fastify](https://github.com/fastify/fastify) | `5.12.7` | `5.12.8` |
| [jose](https://github.com/panva/jose) | `6.2.12` | `6.2.15` |
| [@animate-ui/react](https://github.com/imskyleen/animate-ui/tree/HEAD/packages/react) | `2.2.1` | `2.4.1` |
| [cn](https://github.com/shadcn-ui/cn/tree/HEAD/packages/cn) | `0.4.0` | `0.5.2` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.4.2` | `16.4.4` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.5` | `4.23.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1152.0` | `3.1161.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1152.0` | `3.1161.0` |



Updates `lucide-react` from 1.31.0 to 1.66.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.66.0/packages/lucide-react)

Updates `next` from 16.4.2 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.2...v16.4.3)

Updates `globals` from 17.13.0 to 17.14.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.13.0...v17.14.0)

Updates `pm2` from 7.0.4 to 7.1.1
- [Release notes](https://github.com/Unitech/pm2/releases)
- [Changelog](https://github.com/Unitech/pm2/blob/master/CHANGELOG.md)
- [Commits](Unitech/pm2@v7.0.4...v7.1.1)

Updates `typescript-eslint` from 8.71.2 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

Updates `@fastify/cookie` from 11.1.3 to 11.1.5
- [Release notes](https://github.com/fastify/fastify-cookie/releases)
- [Commits](fastify/fastify-cookie@v11.1.3...v11.1.5)

Updates `@fastify/cors` from 11.3.1 to 11.4.0
- [Release notes](https://github.com/fastify/fastify-cors/releases)
- [Commits](fastify/fastify-cors@v11.3.1...v11.4.0)

Updates `@fastify/multipart` from 10.1.4 to 10.1.7
- [Release notes](https://github.com/fastify/fastify-multipart/releases)
- [Commits](fastify/fastify-multipart@v10.1.4...v10.1.7)

Updates `@fastify/swagger` from 9.9.2 to 9.9.3
- [Release notes](https://github.com/fastify/fastify-swagger/releases)
- [Commits](fastify/fastify-swagger@v9.9.2...v9.9.3)

Updates `@opentelemetry/api` from 1.9.1 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.1...v1.10.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `@opentelemetry/instrumentation-http` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `@opentelemetry/sdk-node` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `@opentelemetry/semantic-conventions` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.43.0...semconv/v1.44.0)

Updates `bullmq` from 6.3.15 to 6.5.3
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v6.3.15...v6.5.3)

Updates `fastify` from 5.12.7 to 5.12.8
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.7...v5.12.8)

Updates `jose` from 6.2.12 to 6.2.15
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.12...v6.2.15)

Updates `@animate-ui/react` from 2.2.1 to 2.4.1
- [Release notes](https://github.com/imskyleen/animate-ui/releases)
- [Commits](https://github.com/imskyleen/animate-ui/commits/v2.4.1/packages/react)

Updates `cn` from 0.4.0 to 0.5.2
- [Release notes](https://github.com/shadcn-ui/cn/releases)
- [Changelog](https://github.com/shadcn-ui/cn/blob/main/packages/cn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/cn/commits/cn@0.5.2/packages/cn)

Updates `eslint-config-next` from 16.4.2 to 16.4.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.4/packages/eslint-config-next)

Updates `shadcn` from 4.21.5 to 4.23.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.23.0/packages/shadcn)

Updates `@aws-sdk/client-s3` from 3.1152.0 to 3.1161.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1161.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1152.0 to 3.1161.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1161.0/packages/s3-request-presigner)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 1.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: globals
  dependency-version: 17.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pm2
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@fastify/cookie"
  dependency-version: 11.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@fastify/cors"
  dependency-version: 11.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@fastify/multipart"
  dependency-version: 10.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@fastify/swagger"
  dependency-version: 9.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation-http"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: bullmq
  dependency-version: 6.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fastify
  dependency-version: 5.12.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@animate-ui/react"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: cn
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: shadcn
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1161.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1161.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 5, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-fa53f28a9a branch November 5, 2026 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants