Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 8 updates#30

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-464f68c8b4
Open

chore(deps): bump the production-dependencies group across 1 directory with 8 updates#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-464f68c8b4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 8 updates in the / directory:

Package From To
react 19.2.6 19.2.7
react-dom 19.2.6 19.2.7
@dnd-kit/dom 0.4.0 0.5.0
@dnd-kit/react 0.4.0 0.5.0
@dicebear/core 9.4.2 10.3.0
@dnd-kit/helpers 0.4.0 0.5.0
lucide-react 1.17.0 1.21.0
next 15.5.18 16.2.9

Updates react from 19.2.6 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates react-dom from 19.2.6 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates @dnd-kit/dom from 0.4.0 to 0.5.0

Release notes

Sourced from @​dnd-kit/dom's releases.

@​dnd-kit/dom@​0.5.0

Minor Changes

  • #2046 f23afe0 Thanks @​aidenfoxx! - Updated OptimisticSortingPlugin to support non-contiguous sortable indexes.

  • #2058 2dd8d0e Thanks @​timagixe! - Allow useSortable, createSortable and Sortable to disable dragging and dropping independently with a disabled object while preserving the existing boolean behavior.

Patch Changes

  • #2057 e25b1b1 Thanks @​timagixe! - Allow pointer dragging from descendants of interactive draggable elements, such as text inside sortable anchor elements.

  • #2020 00fd955 Thanks @​namgi2386! - Fix DragOverlay flickering after drop

  • #2079 e4792f3 Thanks @​silence717! - Fix TypeError: Cannot read properties of undefined (reading 'split') in parseScale/parseTranslate on browsers that do not support the individual scale/translate CSS transform properties (Chromium < 104), where getComputedStyle returns undefined instead of 'none'.

  • Updated dependencies [e4d1a7e]:

    • @​dnd-kit/abstract@​0.5.0
    • @​dnd-kit/collision@​0.5.0
    • @​dnd-kit/geometry@​0.5.0
    • @​dnd-kit/state@​0.5.0
Commits
  • cc98bdd Merge pull request #2022 from clauderic/changeset-release/main
  • f2b2135 Version Packages
  • 32d2c66 Merge pull request #2067 from Philipp91/patch-1
  • 8691737 Merge pull request #2074 from timagixe/issues/2065
  • c04d797 Merge pull request #2079 from silence717/fix/parse-transform-undefined
  • 051fec0 Merge pull request #2063 from albertonoys/fix/docs-navigation-links
  • e4792f3 fix(dom): guard parseScale/parseTranslate against undefined transform values
  • e4d1a7e Supply correct Options type in return type of plugin configurator()
  • 90ddfcd fix(helpers): support numeric group IDs in grouped move
  • 737d3e5 fix(docs): fix malformed navigation links in plugins and sensors section
  • Additional commits viewable in compare view

Updates @dnd-kit/react from 0.4.0 to 0.5.0

Release notes

Sourced from @​dnd-kit/react's releases.

@​dnd-kit/react@​0.5.0

Minor Changes

  • #2058 2dd8d0e Thanks @​timagixe! - Allow useSortable, createSortable and Sortable to disable dragging and dropping independently with a disabled object while preserving the existing boolean behavior.

Patch Changes

  • #2021 de5a0f4 Thanks @​lixiaoyan! - Fixed useDraggable and useSortable reassigning the underlying entity's sensors on every render when sensors was passed as an inline array. The sensors prop is now compared with deepEqual (matching the existing behavior of modifiers, plugins, and DragDropProvider), preventing unnecessary mutations to the plugin registry that could disrupt in-progress sensor activation.

  • #2043 a6bd445 Thanks @​clauderic! - Include sourcemap files in published packages. The build emits .map files alongside each entry point and writes //# sourceMappingURL=... comments into the bundles, but the files field in package.json did not list the maps, so they were excluded from the npm tarball. Bundlers attempting to load the referenced maps would fail with ENOENT, producing warnings (or build failures in strict CI setups).

  • Updated dependencies [e4d1a7e, e25b1b1, 00fd955, e4792f3, f23afe0, 2dd8d0e]:

    • @​dnd-kit/abstract@​0.5.0
    • @​dnd-kit/dom@​0.5.0
    • @​dnd-kit/state@​0.5.0
Commits
  • cc98bdd Merge pull request #2022 from clauderic/changeset-release/main
  • f2b2135 Version Packages
  • 32d2c66 Merge pull request #2067 from Philipp91/patch-1
  • 8691737 Merge pull request #2074 from timagixe/issues/2065
  • c04d797 Merge pull request #2079 from silence717/fix/parse-transform-undefined
  • 051fec0 Merge pull request #2063 from albertonoys/fix/docs-navigation-links
  • e4792f3 fix(dom): guard parseScale/parseTranslate against undefined transform values
  • e4d1a7e Supply correct Options type in return type of plugin configurator()
  • 90ddfcd fix(helpers): support numeric group IDs in grouped move
  • 737d3e5 fix(docs): fix malformed navigation links in plugins and sensors section
  • Additional commits viewable in compare view

Updates @dicebear/core from 9.4.2 to 10.3.0

Release notes

Sourced from @​dicebear/core's releases.

DiceBear 10.3 - Release Notes

For 10.3 we searched public code on GitHub to find which language was calling the DiceBear API the most without a native library of its own. The answer was Dart, mostly from Flutter apps: DiceBear now speaks Dart 🎯

That makes six official implementations: JavaScript, PHP, Python, Rust, Go, and now Dart. The API is the same in all of them, and the same seed and style definition produce byte-identical SVGs everywhere.

🎯 Dart Support

DiceBear is now available as a Dart package (Dart 3.4+), and it runs in Flutter apps too. As with the other languages, you need two packages: the core library dicebear_core and the avatar style definitions dicebear_styles. Each style is a string constant in its own library, so a compiled app only embeds the styles it actually imports.

Example:

dart pub add dicebear_core
dart pub add dicebear_styles
import 'package:dicebear_core/dicebear_core.dart';
import 'package:dicebear_styles/lorelei.dart';
final style = Style.parse(lorelei);
final avatar = Avatar(style, {
'seed': 'Felix',
// ... other options
});
final svg = avatar.svg;

🧩 The same Avatar(style, …) call everywhere

Dart, Rust, and Go already required you to wrap a definition in a Style before building an avatar. With this release the JavaScript, PHP, and Python libraries move the same way, so every port now constructs an avatar with the same Avatar(style, options) call.

Passing a raw style definition straight to Avatar is therefore deprecated in JavaScript, PHP, and Python. Wrap it in a Style first:

import { Style, Avatar } from '@dicebear/core';
import lorelei from '@dicebear/styles/lorelei.json' with { type: 'json' };
const style = new Style(lorelei);
const avatar = new Avatar(style, { seed: 'Felix' });

The old definition input still works and renders identically, but it now emits a deprecation warning (a one-time console.warn in JS, E_USER_DEPRECATED in PHP, DeprecationWarning in Python) and will be removed in v11. Building the Style once also lets you reuse it across many avatars instead of re-validating the definition every time.

... (truncated)

Changelog

Sourced from @​dicebear/core's changelog.

[10.3.0] - 2026-06-13

Added

  • Core: Every rendered SVG now starts with the generator comment <!-- Generated by DiceBear (https://dicebear.com) --> as the first child of the root <svg> element. The comment is byte-identical across the JavaScript, PHP, Python, Rust, Go, and Dart libraries. The byte output of every avatar changes as a result, including data URIs and content hashes, so consumers that compare rendered SVGs against stored snapshots need to update them. SVG optimizers that strip comments (e.g. SVGO with default settings) remove it again.
  • Dart library: A new Dart implementation (the dicebear_core package) that produces identical output to the JavaScript library when given the same styles and options. It validates style definitions and options against the shared schemas (via dicebear_schema) and pairs with the dicebear_styles package.
  • Core (PHP, Python): Added Style::fromJson() (PHP) and Style.from_json() (Python) to build a style from a raw JSON string without a separate json_decode(..., true) / json.loads(...) call. Malformed JSON raises the language's native parse error (JsonException / json.JSONDecodeError); an invalid definition raises the usual StyleValidationError. Mirrors Style::from_str (Rust) and Style.parse (Dart); the existing array/dict constructor is unchanged.

Deprecated

  • Core (JS, PHP, Python): Passing a raw style definition to Avatar is deprecated; pass a Style instead (new Avatar(new Style(definition), options)), which also lets you reuse one parsed style across many avatars. The definition still works for now and renders identically, but emits a deprecation warning (a one-time console.warn in JS, E_USER_DEPRECATED in PHP, DeprecationWarning in Python) and will be removed in v11. The Dart, Rust and Go libraries already require a Style, so this brings every port to the same Avatar(style, …) call.

[10.2.0] - 2026-06-10

Added

  • Go library: A new Go implementation (the github.com/dicebear/dicebear-go/v10 module) that produces identical output to the JavaScript library when given the same styles and options.

Fixed

  • Core: Color.luminance() now derives the sRGB linearization from a precomputed lookup table (one entry per 8-bit channel value) instead of calling pow at runtime. pow is not required to be correctly rounded and

... (truncated)

Commits
  • 19387fd v10.3.0
  • fa2d087 fix: keep the Dart and Python packages green on their CI lower bounds
  • 5b5aaff refactor: improve clarity and consistency in component descriptions and comments
  • 5f52e37 feat(core)!: require a Style when constructing an Avatar (deprecate raw defin...
  • c17bcb7 docs: construct an explicit Style in the JS examples
  • 56b7576 feat(core): add Style::fromJson (PHP) and Style.from_json (Python)
  • 8120316 feat(dart): add the Dart core port (dicebear_core)
  • 3b37bfe Add a DiceBear generator comment to rendered avatars
  • 00c0149 docs: update README
  • d0931c8 Polish docs wording and apply Prettier formatting
  • Additional commits viewable in compare view

Updates @dnd-kit/helpers from 0.4.0 to 0.5.0

Release notes

Sourced from @​dnd-kit/helpers's releases.

@​dnd-kit/helpers@​0.5.0

Patch Changes

  • #2074 90ddfcd Thanks @​timagixe! - Fix grouped record sorting with numeric group IDs

  • #2027 a7ee830 Thanks @​sourabh945! - fix a check for the 'id' in items that causing TypeError in SortableContext add the gaurdrail for chekcing the item is not null.

  • Updated dependencies [e4d1a7e]:

    • @​dnd-kit/abstract@​0.5.0
Commits
  • cc98bdd Merge pull request #2022 from clauderic/changeset-release/main
  • f2b2135 Version Packages
  • 32d2c66 Merge pull request #2067 from Philipp91/patch-1
  • 8691737 Merge pull request #2074 from timagixe/issues/2065
  • c04d797 Merge pull request #2079 from silence717/fix/parse-transform-undefined
  • 051fec0 Merge pull request #2063 from albertonoys/fix/docs-navigation-links
  • e4792f3 fix(dom): guard parseScale/parseTranslate against undefined transform values
  • e4d1a7e Supply correct Options type in return type of plugin configurator()
  • 90ddfcd fix(helpers): support numeric group IDs in grouped move
  • 737d3e5 fix(docs): fix malformed navigation links in plugins and sensors section
  • Additional commits viewable in compare view

Updates lucide-react from 1.17.0 to 1.21.0

Release notes

Sourced from lucide-react's releases.

Version 1.21.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.20.0...1.21.0

Version 1.20.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.19.0...1.20.0

Version 1.19.0

What's Changed

... (truncated)

Commits
  • 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
  • See full diff in compare view

Updates next from 15.5.18 to 16.2.9

Release notes

Sourced from next's releases.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Backport documentation fixes for v16.2 (#93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
  • [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
  • [backport] Propagate adapter preferred regions (#94200)
  • [16.2.x] Don't drop FormData entries (#94240)
  • [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

Moderate:

... (truncated)

Commits
  • f37fad9 v16.2.9
  • d9aaaed [cd] Allow tagging semver-lower releases as @latest if @latest po… (#94627)
  • 6f16804 v16.2.8
  • 0dbc1d5 [16.2.x][cd] Ensure release can be triggered on old branches (#94598)
  • 90e3c81 [16.2.x] Align Actions dependencies with Canary (#94339)
  • 83f402c [16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)
  • 411c455 v16.2.7
  • c63224f [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...
  • 63115c7 [16.2.x] Don't drop FormData entries (#94240)
  • aef22fd [backport] Propagate adapter preferred regions (#94200)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 14, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jun 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying snapgrid with  Cloudflare Pages  Cloudflare Pages

Latest commit: 127bbe3
Status:🚫  Build failed.

View logs

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
127bbe3 
…y with 8 updates

Bumps the production-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` |
| [@dnd-kit/dom](https://github.com/clauderic/dnd-kit) | `0.4.0` | `0.5.0` |
| [@dnd-kit/react](https://github.com/clauderic/dnd-kit) | `0.4.0` | `0.5.0` |
| [@dicebear/core](https://github.com/dicebear/dicebear) | `9.4.2` | `10.3.0` |
| [@dnd-kit/helpers](https://github.com/clauderic/dnd-kit) | `0.4.0` | `0.5.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.17.0` | `1.21.0` |
| [next](https://github.com/vercel/next.js) | `15.5.18` | `16.2.9` |



Updates `react` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-dom` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@dnd-kit/dom` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/clauderic/dnd-kit/releases)
- [Commits](https://github.com/clauderic/dnd-kit/compare/@dnd-kit/dom@0.4.0...@dnd-kit/dom@0.5.0)

Updates `@dnd-kit/react` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/clauderic/dnd-kit/releases)
- [Commits](https://github.com/clauderic/dnd-kit/compare/@dnd-kit/react@0.4.0...@dnd-kit/react@0.5.0)

Updates `@dicebear/core` from 9.4.2 to 10.3.0
- [Release notes](https://github.com/dicebear/dicebear/releases)
- [Changelog](https://github.com/dicebear/dicebear/blob/10.x/CHANGELOG.md)
- [Commits](dicebear/dicebear@v9.4.2...v10.3.0)

Updates `@dnd-kit/helpers` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/clauderic/dnd-kit/releases)
- [Commits](https://github.com/clauderic/dnd-kit/compare/@dnd-kit/helpers@0.4.0...@dnd-kit/helpers@0.5.0)

Updates `lucide-react` from 1.17.0 to 1.21.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.21.0/packages/lucide-react)

Updates `next` from 15.5.18 to 16.2.9
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.18...v16.2.9)

---
updated-dependencies:
- dependency-name: "@dicebear/core"
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@dnd-kit/dom"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@dnd-kit/helpers"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@dnd-kit/react"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.2.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-464f68c8b4 branch from 2659e31 to 127bbe3 Compare June 21, 2026 03:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants