chore(deps): bump the production-dependencies group across 1 directory with 19 updates by dependabot[bot] · Pull Request #247 · spiritledsoftware/caplets

dependabot · 2026-07-27T09:33:21Z

Bumps the production-dependencies group with 19 updates in the / directory:

Package	From	To
typescript	`6.0.3`	`7.0.2`
@sentry/browser	`10.67.0`	`10.68.0`
@tanstack/virtual-core	`3.17.5`	`3.17.6`
posthog-js	`1.405.3`	`1.407.3`
tailwind-variants	`3.2.2`	`3.3.0`
@tanstack/react-virtual	`3.14.7`	`3.14.8`
lucide-react	`1.25.0`	`1.27.0`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
shadcn	`4.13.1`	`4.15.0`
@astrojs/starlight	`0.41.3`	`0.41.4`
@aws-sdk/client-s3	`3.1091.0`	`3.1095.0`
@hono/node-server	`2.0.11`	`2.0.12`
@sentry/bun	`10.67.0`	`10.68.0`
@sentry/node	`10.67.0`	`10.68.0`
add-mcp	`1.13.0`	`2.0.0`
hono	`4.12.31`	`4.12.32`
posthog-node	`5.46.0`	`5.46.1`
@astrojs/language-server	`2.16.12`	`2.16.13`

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates @sentry/browser from 10.67.0 to 10.68.0

Release notes

Sourced from @sentry/browser's releases.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @sentry/browser's changelog.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

Commits

b4396c3 release: 10.68.0
be21e8c meta(changelog): Update changelog for 10.68.0 (#22566)
fb0987f feat(v10): Add http.route attribute to http.server spans with parameteriz...
f7bd901 feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
ed3a8c8 feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
20227f9 feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
3e5625e feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
d924551 test(v10/cloudflare): Add Vite-build support to the integration-test runner (...
11fed03 feat(v10/cloudflare): Read wrangler config and resolve the Sentry options mod...
a540764 feat(v10): Add url.full and url.path to http.server spans (#22533)
Additional commits viewable in compare view

Updates @tanstack/virtual-core from 3.17.5 to 3.17.6

Release notes

Sourced from @tanstack/virtual-core's releases.

@tanstack/virtual-core@3.17.6

Patch Changes

#1236 7ae32b5 - Stop the default scroll-adjustment heuristic from drifting the viewport when a viewport-spanning item grows. Previously any item whose top sat above the fold (itemStart < scrollOffset) had its size delta compensated on every re-measure — including a streaming chat message that spans the fold and grows at its bottom, dragging scrollTop downward token by token (#1218). Re-measurements now only compensate items that are entirely above the fold (itemStart + itemSize <= scrollOffset); growth below the anchor point leaves the scroll position untouched. First measurements (estimate→actual) still compensate any above-fold item, and a custom shouldAdjustScrollPositionOnItemSizeChange still overrides the default.

Changelog

Sourced from @tanstack/virtual-core's changelog.

3.17.6

Patch Changes

#1236 7ae32b5 - Stop the default scroll-adjustment heuristic from drifting the viewport when a viewport-spanning item grows. Previously any item whose top sat above the fold (itemStart < scrollOffset) had its size delta compensated on every re-measure — including a streaming chat message that spans the fold and grows at its bottom, dragging scrollTop downward token by token (#1218). Re-measurements now only compensate items that are entirely above the fold (itemStart + itemSize <= scrollOffset); growth below the anchor point leaves the scroll position untouched. First measurements (estimate→actual) still compensate any above-fold item, and a custom shouldAdjustScrollPositionOnItemSizeChange still overrides the default.

Commits

32b2f2b ci: Version Packages (#1238)
ef6e92a docs(virtual-core): clarify shouldAdjustScrollPositionOnItemSizeChange usage ...
7ae32b5 fix(virtual-core): stop viewport-spanning item growth from drifting scroll (#...
See full diff in compare view

Updates posthog-js from 1.405.3 to 1.407.3

Release notes

Sourced from posthog-js's releases.

posthog-js@1.407.3

1.407.3

Patch Changes

#4214 f7399a0 Thanks @felipeatom! - Fix canRenderSurvey / canRenderSurveyAsync reporting a survey as renderable before its event/action activation trigger has fired. Surveys gated on a "User sends events" filter are now only eligible once the trigger event is received. (2026-07-27)

#4231 eabe2ef Thanks @marandaneto! - Send analytics request timestamps in capture bodies while retaining query timestamps for session recordings. (2026-07-27)

#4102 fa4844b Thanks @marandaneto! - Send SDK library identity in feature flag person properties instead of URL query parameters. (2026-07-27)

#4220 11330b3 Thanks @SegFaultZero! - fix(replay): prevent server timings from dropped ingestion requests causing an endless capture loop (2026-07-27)

Updated dependencies [7210789]:

@posthog/browser-common@0.2.2

posthog-js@1.407.2

1.407.2

Patch Changes

#4224 ba7042b Thanks @turnipdabeets! - Fix session replay recordings being unplayable after the session rotated in a tab with no user interaction. When a session expired and rotated (for example in a long-lived background tab), a recorder that had not yet seen user interaction kept attributing snapshots — including full snapshots — to the previous session, so the new session never received a playable full snapshot. The recorder now restarts on rotation in this state, re-syncs its session id from the session manager if they ever diverge, and flushes its buffer on the normal cadence before the first user interaction instead of holding data until the next rotation or page unload. (2026-07-23)

posthog-js@1.407.1

1.407.1

Patch Changes

#4218 33f0bd7 Thanks @marandaneto! - Send ISO feature flag timestamps in request bodies, use numeric sent_at query timestamps for capture POSTs, and preserve _ cache busting for dynamic GET requests. (2026-07-23)

posthog-js@1.407.0

1.407.0

Minor Changes

#4222 0f2407b Thanks @turnipdabeets! - feat: add a default-value option to isFeatureEnabled

isFeatureEnabled(key, { defaultValue: false }) now returns the given default when the flag has no value — flags not loaded yet, or no flag with that key — and the return type narrows to boolean. The option name is the same in posthog-js, posthog-js-lite, and posthog-react-native. Without defaultValue, behavior is unchanged: boolean | undefined. (2026-07-22)

Patch Changes

#4203 90e7483 Thanks @posthog! - fix(conversations): let users start a new conversation while a ticket is still open

The support widget now surfaces the ticket list navigation (and its "New conversation" button) whenever the user has any ticket, instead of only when they have multiple tickets

... (truncated)

Commits

0eb778b chore: update versions and lockfile [version bump]
3b2e68d fix: prevent Jest worker resource leaks (#4247)
7e0355a ci: isolate minimum TypeScript consumer tests (#4262)
b9232e9 chore: remove Node.js deprecation warnings (#4260)
a485eb5 chore: address priority dependency debt (#4258)
fa4844b fix(browser): send sdk identity in flags person properties (#4102)
2b948da ci: upgrade GitHub Actions to Node 24 (#4245)
ead5955 ci: refresh TypeScript compatibility matrix (#4261)
3791710 chore(tests): fail on unexpected console output (#4263)
70d8b1c ci: reduce duplicate browser work (#4257)
Additional commits viewable in compare view

Updates tailwind-variants from 3.2.2 to 3.3.0

Release notes

Sourced from tailwind-variants's releases.

v3.3.0

No significant changes

View changes on GitHub

Changelog

Sourced from tailwind-variants's changelog.

3.3.0 (2026-07-26)

Commits

9bf4fde chore: release v3.3.0
66f1a49 refactor: typescript (#301)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tailwind-variants since your current version.

Updates @tanstack/react-virtual from 3.14.7 to 3.14.8

Release notes

Sourced from @tanstack/react-virtual's releases.

@tanstack/react-virtual@3.14.8

Patch Changes

#1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

Updated dependencies [7ae32b5]:

@tanstack/virtual-core@3.17.6

Changelog

Sourced from @tanstack/react-virtual's changelog.

3.14.8

Patch Changes

#1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

Updated dependencies [7ae32b5]:

@tanstack/virtual-core@3.17.6

Commits

32b2f2b ci: Version Packages (#1238)
aa536e7 fix(react-virtual): grow size container before scroll sync on end-anchored pr...
See full diff in compare view

Updates lucide-react from 1.25.0 to 1.27.0

Release notes

Sourced from lucide-react's releases.

Version 1.27.0

What's Changed

feat(icons): removed brand names from tags & revised brand stopwords by @karsa-mistmere in lucide-icons/lucide#4575

fix(docs): Fix site build by @ericfennis in lucide-icons/lucide#4582

fix(icons): optimised square-scissors icons by @karsa-mistmere in lucide-icons/lucide#4581

fix(packages/angular): add more supported attributes for SVG nodes by @karsa-mistmere in lucide-icons/lucide#4570

feat(icons): added pending-cw icon by @NielsLazaroms in lucide-icons/lucide#4439

fix(icons): changed zap and zap-off icons by @kapowaz in lucide-icons/lucide#4536

feat(icons): add square-off icon by @october-learns in lucide-icons/lucide#4496

chore(deps-dev): bump astro from 6.4.8 to 7.1.0 by @dependabot[bot] in lucide-icons/lucide#4572

fix(icons): changed toolbox icon by @karsa-mistmere in lucide-icons/lucide#4571

feat(icons): add scan-square by @samuelalake in lucide-icons/lucide#4550

feat(icons): added user-shield icon by @MArtytraM99 in lucide-icons/lucide#3099

feat(icons): added mosque icon by @iskepr in lucide-icons/lucide#4494

fix(request-review): Remove pull_request_target by @ericfennis in lucide-icons/lucide#4593

fix(icons): changed feather icon by @karsa-mistmere in lucide-icons/lucide#4584

feat(ci): added custom prettier plugin for icon SVG files by @karsa-mistmere in lucide-icons/lucide#4576

ci(ci.yml): Remove concurrency in ci.yml by @ericfennis in lucide-icons/lucide#4595

fix(icons): changed barrel icon by @karsa-mistmere in lucide-icons/lucide#4592

feat(lab): Migrate lab to main repo. by @ericfennis in lucide-icons/lucide#4521

fix(icons): changed trophy icon by @karsa-mistmere in lucide-icons/lucide#4591

feat(analytics): add utm source and medium by @jguddas in lucide-icons/lucide#4596

feat(docs): Add lab requirement in pull_request_template.md by @danielbayley in lucide-icons/lucide#3651

feat(icons): replaces podcast icon with new mic-* icons by @karsa-mistmere in lucide-icons/lucide#4583

feat(icons): add layout-freeform by @samuelalake in lucide-icons/lucide#4543

New Contributors

@NielsLazaroms made their first contribution in lucide-icons/lucide#4439

@kapowaz made their first contribution in lucide-icons/lucide#4536

@october-learns made their first contribution in lucide-icons/lucide#4496

@samuelalake made their first contribution in lucide-icons/lucide#4550

@iskepr made their first contribution in lucide-icons/lucide#4494

Full Changelog: lucide-icons/lucide@1.26.0...1.27.0

Version 1.26.0

What's Changed

fix(docs): fix home page package links & accessible labels by @karsa-mistmere in lucide-icons/lucide#4540

fix(icons): changed columns-3-cog icon by @kamilasw in lucide-icons/lucide#4578

fix(icons): extended metadata of ad icon by @karsa-mistmere in lucide-icons/lucide#4579

fix(icons): changed book-open icons by @karsa-mistmere in lucide-icons/lucide#4565

feat(icons): added shield-keyhole icon by @karsa-mistmere in lucide-icons/lucide#4580

New Contributors

@kamilasw made their first contribution in lucide-icons/lucide#4578

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Commits

See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates shadcn from 4.13.1 to 4.15.0

Release notes

Sourced from shadcn's releases.

shadcn@4.15.0

Minor Changes

#11276 7d90dfc0a5ec70cdc3bd08b741a42440041907ac Thanks @cmpadden! - Add a public addRegistryItems API for installing registry items programmatically without invoking the CLI.

shadcn@4.14.1

Patch Changes

#11266 6cd3f4c65c361ab6554e06a77e6a0af9cf8b6e37 Thanks @shadcn! - Add Base UI Toast support.

shadcn@4.14.0

Minor Changes

#11241 3c26ee2dbd3a772c1cddc2c76249cc1cb0a250d5 Thanks @shadcn! - add support for icon migration

Changelog

Sourced from shadcn's changelog.

4.15.0

Minor Changes

#11276 7d90dfc0a5ec70cdc3bd08b741a42440041907ac Thanks @cmpadden! - Add a public addRegistryItems API for installing registry items programmatically without invoking the CLI.

4.14.1

Patch Changes

#11266 6cd3f4c65c361ab6554e06a77e6a0af9cf8b6e37 Thanks @shadcn! - Add Base UI Toast support.

4.14.0

Minor Changes

#11241 3c26ee2dbd3a772c1cddc2c76249cc1cb0a250d5 Thanks @shadcn! - add support for icon migration

Commits

234633c chore(release): version packages (#11286)
a767577 fix(registry): harden programmatic install API (#11285)
7d90dfc feat(registry): add programmatic install API (#11276)
9caf1d1 chore(release): version packages (#11267)
6cd3f4c feat: add Base UI toast (#11266)
91f21df test(shadcn): consolidate test suite and cover untested modules (#11247)
3f47b91 chore(release): version packages (#11244)
3c26ee2 feat(shadcn): migrate icons between any icon libraries (#11241)
See full diff in compare view

Updates @astrojs/starlight from 0.41.3 to 0.41.4

Release notes

Sourced from @astrojs/starlight's releases.

@astrojs/starlight@0.41.4

Patch Changes

#3936 712eedd Thanks @miichom! - Fixes support for modifying Zod enums when passing an extend option to Starlight’s docsSchema()

#4092 0896b91 Thanks @delucis! - Fixes support for links containing a protocol like mailto: in the sidebar

#4088 4486ba4 Thanks @delucis! - Simplifies Starlight’s client-side sidebar state persistence script slightly

Changelog

Sourced from @astrojs/starlight's changelog.

0.41.4

Patch Changes

#3936 712eedd Thanks @miichom! - Fixes support for modifying Zod enums when passing an extend option to Starlight’s docsSchema()

#4092 0896b91 Thanks @delucis! - Fixes support for links containing a protocol like mailto: in the sidebar

#4088 4486ba4 Thanks @delucis! - Simplifies Starlight’s client-side sidebar state persistence script slightly

Commits

ab2792b [ci] release (#4090)
712eedd fix: invalid option error when modifying enums in docsSchema's extend (#3936)
0896b91 Support links with any protocol in sidebars (#4092)
4486ba4 Remove pagehide event from sidebar persistence script (#4088)
See full diff in compare view

Updates @aws-sdk/client-s3 from 3.1091.0 to 3.1095.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores

codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)

core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)

Documentation Changes

client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)

New Features

clients: update client endpoints as of 2026-07-24 (f84113a7)

client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)

client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)

client-dynamodb: Endpoint test standardizations (2e9ccdb4)

client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)

client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)

client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)

core: update clock skew detection threshold and configs (#8189) (a2773d56)

Bug Fixes

core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)

Tests

core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features

client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)

client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)

client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)

client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)

client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)

client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)

client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)

client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)

client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @aws-sdk/client-s3

3.1094.0 (2026-07-23)

Note: Version bump only for package @aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @aws-sdk/client-s3

3.1092.0 (2026-07-21)

Note: Version bump only for package @aws-sdk/client-s3

CommitsDescription has been truncated

…y with 19 updates Bumps the production-dependencies group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.68.0` | | [@tanstack/virtual-core](https://github.com/TanStack/virtual/tree/HEAD/packages/virtual-core) | `3.17.5` | `3.17.6` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.405.3` | `1.407.3` | | [tailwind-variants](https://github.com/heroui-inc/tailwind-variants) | `3.2.2` | `3.3.0` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.7` | `3.14.8` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.27.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.13.1` | `4.15.0` | | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.3` | `0.41.4` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1091.0` | `3.1095.0` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.11` | `2.0.12` | | [@sentry/bun](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.68.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.68.0` | | [add-mcp](https://github.com/neon-solutions/add-mcp) | `1.13.0` | `2.0.0` | | [hono](https://github.com/honojs/hono) | `4.12.31` | `4.12.32` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.46.0` | `5.46.1` | | [@astrojs/language-server](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/language-server) | `2.16.12` | `2.16.13` | Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `@sentry/browser` from 10.67.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.68.0) Updates `@tanstack/virtual-core` from 3.17.5 to 3.17.6 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/virtual-core/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/virtual-core@3.17.6/packages/virtual-core) Updates `posthog-js` from 1.405.3 to 1.407.3 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.405.3...posthog-js@1.407.3) Updates `tailwind-variants` from 3.2.2 to 3.3.0 - [Release notes](https://github.com/heroui-inc/tailwind-variants/releases) - [Changelog](https://github.com/heroui-inc/tailwind-variants/blob/main/CHANGELOG.md) - [Commits](heroui-inc/tailwind-variants@v3.2.2...v3.3.0) Updates `@tanstack/react-virtual` from 3.14.7 to 3.14.8 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.8/packages/react-virtual) Updates `lucide-react` from 1.25.0 to 1.27.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `shadcn` from 4.13.1 to 4.15.0 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.15.0/packages/shadcn) Updates `@astrojs/starlight` from 0.41.3 to 0.41.4 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.41.4/packages/starlight) Updates `@aws-sdk/client-s3` from 3.1091.0 to 3.1095.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-s3) Updates `@hono/node-server` from 2.0.11 to 2.0.12 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.11...v2.0.12) Updates `@sentry/bun` from 10.67.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.68.0) Updates `@sentry/node` from 10.67.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.68.0) Updates `add-mcp` from 1.13.0 to 2.0.0 - [Release notes](https://github.com/neon-solutions/add-mcp/releases) - [Changelog](https://github.com/neon-solutions/add-mcp/blob/main/CHANGELOG.md) - [Commits](neon-solutions/add-mcp@v1.13.0...v2.0.0) Updates `hono` from 4.12.31 to 4.12.32 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.31...v4.12.32) Updates `posthog-node` from 5.46.0 to 5.46.1 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.46.1/packages/node) Updates `@astrojs/language-server` from 2.16.12 to 2.16.13 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/language-server/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/language-server@2.16.13/packages/language-tools/language-server) --- updated-dependencies: - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@sentry/browser" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/virtual-core" dependency-version: 3.17.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: posthog-js dependency-version: 1.407.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: tailwind-variants dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: shadcn dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@astrojs/starlight" dependency-version: 0.41.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1095.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@hono/node-server" dependency-version: 2.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@sentry/bun" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/node" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: add-mcp dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.12.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: posthog-node dependency-version: 5.46.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@astrojs/language-server" dependency-version: 2.16.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

greptile-apps · 2026-07-27T09:33:24Z

PR author is in the excluded authors list.

socket-security · 2026-07-27T09:34:01Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	posthog-js@1.407.3
	@tanstack/react-virtual@3.14.8
	posthog-node@5.46.1
	@tanstack/virtual-core@3.17.6
	add-mcp@2.0.0
	@sentry/browser@10.68.0
	@astrojs/language-server@2.16.13
	lucide-react@1.27.0
	react@19.2.8
	@astrojs/starlight@0.41.4
	@sentry/bun@10.68.0
	tailwind-variants@3.3.0
	shadcn@4.15.0
	react-dom@19.2.8
	@sentry/node@10.68.0
	@hono/node-server@2.0.12
	hono@4.12.32
	@aws-sdk/client-s3@3.1095.0

View full report

socket-security · 2026-07-27T09:34:03Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@sentry/node-core` is 60.0% likely obfuscated Confidence: 0.60 Location: Package overview From: pnpm-lock.yaml → `npm/@sentry/node@10.68.0` → `npm/@sentry/node-core@10.68.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@sentry/node-core@10.68.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the production-dependencies group across 1 directory with 19 updates - #247

chore(deps): bump the production-dependencies group across 1 directory with 19 updates#247
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-b853b6f698

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

greptile-apps Bot commented Jul 27, 2026

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

10.68.0

Bundle size 📦

10.68.0

@​tanstack/virtual-core@​3.17.6

Patch Changes

3.17.6

Patch Changes

posthog-js@1.407.3

1.407.3

Patch Changes

posthog-js@1.407.2

1.407.2

Patch Changes

posthog-js@1.407.1

1.407.1

Patch Changes

posthog-js@1.407.0

1.407.0

Minor Changes

Patch Changes

v3.3.0

View changes on GitHub

3.3.0 (2026-07-26)

@​tanstack/react-virtual@​3.14.8

Patch Changes

3.14.8

Patch Changes

Version 1.27.0

What's Changed

New Contributors

Version 1.26.0

What's Changed

New Contributors

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

shadcn@4.15.0

Minor Changes

shadcn@4.14.1

Patch Changes

shadcn@4.14.0

Minor Changes

4.15.0

Minor Changes

4.14.1

Patch Changes

4.14.0

Minor Changes

@​astrojs/starlight@​0.41.4

Patch Changes

0.41.4

Patch Changes

v3.1095.0

3.1095.0(2026-07-24)

Chores

Documentation Changes

New Features

Bug Fixes

Tests

v3.1094.0

3.1094.0(2026-07-23)

New Features

3.1095.0 (2026-07-24)

3.1094.0 (2026-07-23)

3.1093.0 (2026-07-22)

3.1092.0 (2026-07-21)

Uh oh!

greptile-apps Bot commented Jul 27, 2026

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

Reviewers

Assignees

`@tanstack/virtual-core@3`.17.6

`@tanstack/react-virtual@3`.14.8

`@astrojs/starlight@0`.41.4