Skip to content

Repository navigation

build(deps): bump the prod-deps group across 1 directory with 17 updates - #127

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-deps-bf228b3511
Open

build(deps): bump the prod-deps group across 1 directory with 17 updates#127
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-deps-bf228b3511

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 17 updates in the / directory:

Package From To
@base-ui/react 1.6.0 1.8.0
@react-pdf/renderer 4.5.1 4.9.0
@rgrove/parse-xml 4.2.2 5.0.0
@tanstack/react-query 5.101.3 5.104.1
@trpc/client 11.18.0 11.19.0
@trpc/next 11.18.0 11.19.0
@trpc/react-query 11.18.0 11.19.0
@trpc/server 11.18.0 11.19.0
lucide-react 1.25.0 1.52.0
next 16.3.7 16.3.8
nodemailer 10.0.13 10.0.16
pino 10.3.1 10.4.0
react 19.2.7 19.3.0
react-dom 19.2.7 19.3.0
stripe 22.3.2 23.0.0
tailwind-merge 3.6.0 3.7.0
zod 4.4.3 4.6.5

Updates @base-ui/react from 1.6.0 to 1.8.0

Release notes

Sourced from @​base-ui/react's releases.

v1.8.0

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.8.0

Sep 4, 2026

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

... (truncated)

Commits
  • 47b4052 [release] v1.8.0 (#5609)
  • dd13809 [toast] Accept an updater function in the update method instead of on data (#...
  • 670e95c [docs] Update docs infra to restore generated types (#5616)
  • e8526f7 [utils] Restore frozen EMPTY_ARRAY (#5620)
  • b7f6683 [number field] Preserve consumer selection when focusing the input (#5619)
  • b8c5d78 [context menu] Correct generated API metadata (#5523)
  • 261d699 [combobox][autocomplete] Document that items must not contain nullish entries...
  • 0a6ff44 [toast] Replace custom data wholesale and accept a function to derive it (#5611)
  • 2e1bddd [combobox][select] Make the multiple selection anchor lookup linear (#5613)
  • ad83c8a [code-infra] Run TypeScript 7 alongside the TS6 JS API (#5603)
  • Additional commits viewable in compare view

Updates @react-pdf/renderer from 4.5.1 to 4.9.0

Release notes

Sourced from @​react-pdf/renderer's releases.

@​react-pdf/renderer@​4.9.0

Minor Changes

  • #3529 10d8365e2eb8fc3987cf94d4d61a7559f4ba1dfb Thanks @​diegomura! - feat: add conformance Document prop for PDF/A output

    Produces PDF/A-1/2/3 (b-level) output with XMP conformance metadata and an sRGB OutputIntent. pdfVersion defaults to what the chosen level requires. Fonts must be registered (not the built-in standard 14) to fully validate.

Patch Changes

@​react-pdf/renderer@​4.8.1

Patch Changes

@​react-pdf/renderer@​4.8.0

Minor Changes

Patch Changes

@​react-pdf/renderer@​4.7.0

Minor Changes

  • #3505 ae9a9983e8bd8b63c3873000531a8307e22c7bae Thanks @​diegomura! - Experimental pagination engine, opt-in per page

    A new pagination engine ships alongside the current one: content is measured once and packed into pages instead of relayouting on every split, making long documents paginate orders of magnitude faster (a 300-page document drops from ~40s to ~200ms).

    Opt in with <Page experimentalPagination> — any page opting in switches the whole document. The default behavior is unchanged.

... (truncated)

Changelog

Sourced from @​react-pdf/renderer's changelog.

4.9.0

Minor Changes

  • #3529 10d8365e2eb8fc3987cf94d4d61a7559f4ba1dfb Thanks @​diegomura! - feat: add conformance Document prop for PDF/A output

    Produces PDF/A-1/2/3 (b-level) output with XMP conformance metadata and an sRGB OutputIntent. pdfVersion defaults to what the chosen level requires. Fonts must be registered (not the built-in standard 14) to fully validate.

Patch Changes

4.8.1

Patch Changes

4.8.0

Minor Changes

Patch Changes

4.7.0

Minor Changes

  • #3505 ae9a9983e8bd8b63c3873000531a8307e22c7bae Thanks @​diegomura! - Experimental pagination engine, opt-in per page

    A new pagination engine ships alongside the current one: content is measured once and packed into pages instead of relayouting on every split, making long documents paginate orders of magnitude faster (a 300-page document drops from ~40s to ~200ms).

... (truncated)

Commits
  • 2c0b6d4 chore: release packages (#3530)
  • 10d8365 feat: add conformance Document prop for PDF/A output (#3529)
  • 8c047bd chore: release packages (#3525)
  • 1fe630e chore: release packages (#3507)
  • ab80c0a feat: shape-outside support for floats (#3514)
  • 533340e fix(textkit): align line widths with line rects when exclusions are present (...
  • 37a7a9f refactor: replace @​react-pdf/pdfkit fork with upstream pdfkit (#3509)
  • a568714 feat: wrapping text around floating box (#3286)
  • d5adf3d chore: release packages (#3493)
  • ae9a998 feat: experimentalPagination page prop — new engine opt-in per document (#3505)
  • Additional commits viewable in compare view

Updates @rgrove/parse-xml from 4.2.2 to 5.0.0

Release notes

Sourced from @​rgrove/parse-xml's releases.

v5.0.0

parse-xml is now an ES module. The API is completely unchanged, but the package format and the minimum supported Node.js version have changed. See below for details.

Breaking Changes

  • parse-xml is now an ES module. The package sets "type": "module" and ships ESM rather than CommonJS.

    If you already use import, you don't need to change anything:

    import { parseXml } from '@rgrove/parse-xml';

    Using require() also still works in Node.js 22+ thanks to require(esm):

    const { parseXml } = require('@rgrove/parse-xml');

    There are two cases that will require a change: bundlers or runtimes that can't resolve ESM at all will no longer work, and if your own project is CommonJS and written in TypeScript, you'll need TypeScript 5.8 or later with "module": "nodenext". Older versions of TypeScript and configs using "module": "node16" don't support require(esm) and will report an error.

  • Node.js 22.12.0 is now the minimum supported version (up from 14.0.0, which hadn't actually been tested in some time).

  • The package now has an exports map, so only its public API can be imported. The root entry and the Xml* node classes are unaffected:

    import { parseXml, XmlElement } from '@rgrove/parse-xml';
import { XmlElement } from '@rgrove/parse-xml/dist/lib/XmlElement.js';

    But Parser, StringScanner, syntax, and types are no longer importable. These were never documented as public or exported from the package's entry point so this is unlikely to affect most people.

  • The browser bundle at dist/browser.js is now ESM rather than CommonJS. This is the file bundlers pick up via the browser field, so it should be transparent. As an added bonus, it's also 1.1 KB smaller now.

    The minified global bundle at dist/global.min.js is unchanged, so loading parse-xml from a CDN with a <script> element and using the parseXml global works exactly as before.

Other Changes

  • The published npm package is about 40% smaller (48 KB packed, down from 82 KB in 4.2.3) because it no longer includes unnecessary sourcemaps that are only useful during development.

Full Changelog: rgrove/parse-xml@v4.2.3...v5.0.0

v4.2.3

Fixed

  • A document that starts with a valid processing instruction whose first characters are xml, such as <?xml-stylesheet ...?>, is no longer incorrectly rejected for having an invalid XML declaration. #47 (@​spokodev)

Full Changelog: rgrove/parse-xml@v4.2.2...v4.2.3

Changelog

Sourced from @​rgrove/parse-xml's changelog.

5.0.0 (2026-08-29)

parse-xml is now an ES module. The API is completely unchanged, but the package format and the minimum supported Node.js version have changed. See below for details.

Breaking Changes

  • parse-xml is now an ES module. The package sets "type": "module" and ships ESM rather than CommonJS.

    If you already use import, you don't need to change anything:

    import { parseXml } from '@rgrove/parse-xml';

    Using require() also still works in Node.js 22+ thanks to require(esm):

    const { parseXml } = require('@rgrove/parse-xml');

    There are two cases that will require a change: bundlers or runtimes that can't resolve ESM at all will no longer work, and if your own project is CommonJS and written in TypeScript, you'll need TypeScript 5.8 or later with "module": "nodenext". Older versions of TypeScript and configs using "module": "node16" don't support require(esm) and will report an error.

  • Node.js 22.12.0 is now the minimum supported version (up from 14.0.0, which hadn't actually been tested in some time).

  • The package now has an exports map, so only its public API can be imported. The root entry and the Xml* node classes are unaffected:

    import { parseXml, XmlElement } from '@rgrove/parse-xml';
import { XmlElement } from '@rgrove/parse-xml/dist/lib/XmlElement.js';

    But Parser, StringScanner, syntax, and types are no longer importable. These were never documented as public or exported from the package's entry point so this is unlikely to affect most people.

  • The browser bundle at dist/browser.js is now ESM rather than CommonJS. This is the file bundlers pick up via the browser field, so it should be transparent. As an added bonus, it's also 1.1 KB smaller now.

    The minified global bundle at dist/global.min.js is unchanged, so loading parse-xml from a CDN with a <script> element and using the parseXml global works exactly as before.

Other Changes

  • The published npm package is about 40% smaller (48 KB packed, down from 82 KB in 4.2.3) because it no longer includes unnecessary sourcemaps that are only useful during development.

4.2.3 (2026-07-26)

Fixed

  • A document that starts with a valid processing instruction whose first characters are xml, such as <?xml-stylesheet ...?>, is no longer incorrectly rejected for having an invalid XML declaration. #47 (@​spokodev)
Commits
  • b15e011 Release 5.0.0
  • 875aef7 Link to npmx.dev instead of npmjs.com
  • 71267a9 Update benchmark results
  • b76db17 Don't load conformance tests in the browser
  • 013cb3c Stop publishing unnecessary sourcemaps
  • 2370c48 Update TypeScript to 6.0.3
  • 96ea55f Use pnpm 11.25.0
  • 78c265b Bump the version and update the changelog and readme
  • b9888d4 Convert the package to ESM
  • 91fcb06 Replace nyc with c8 for coverage
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.3 to 5.104.1

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.1

Patch Changes

  • Updated dependencies [ec060b6]:
    • @​tanstack/query-devtools@​5.104.1
    • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-next-experimental@​5.104.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-persist-client@​5.104.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.104.1
    • @​tanstack/react-query@​5.104.1

@​tanstack/react-query@​5.104.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.104.1

@​tanstack/react-query-devtools@​5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/query-devtools@​5.104.0
    • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-next-experimental@​5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-persist-client@​5.104.0

Minor Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.104.1

5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/query-core@​5.104.0

5.103.3

Patch Changes

  • #11647 1c9693e - fix(codemods): avoid copying unnecessary files from codemods project
  • Updated dependencies []:
    • @​tanstack/query-core@​5.103.3

5.103.2

Patch Changes

  • Updated dependencies [8a28904]:
    • @​tanstack/query-core@​5.103.2

5.103.1

Patch Changes

5.103.0

Patch Changes

5.102.8

Patch Changes

... (truncated)

Commits
  • 29859ae ci: Version Packages (#11806)
  • 339e09f chore(*): manage 'react' eslint plugins with pnpm 'catalog' (#11781)
  • 0a57279 test({react,preact,solid,angular}-query/mutationOptions): fix 'mutationOpt1' ...
  • c51bb62 chore(*): declare '@​eslint-react/eslint-plugin' in the react packages and exa...
  • a914613 chore(*): declare 'eslint-plugin-react-hooks' in the react packages that use ...
  • d99c84b chore(*): update '@​eslint-react/eslint-plugin' to v5 and apply its 'recommend...
  • fd96529 chore(*): update 'eslint-plugin-react-hooks' to v7 and use its stable 'recomm...
  • e878990 chore(*): manage 'react' packages with pnpm 'catalog' (#11712)
  • 2e1ad64 chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...
  • c1de23a chore(*): manage 'typescript' with pnpm 'catalog' and declare it in each pack...
  • Additional commits viewable in compare view

Updates @trpc/client from 11.18.0 to 11.19.0

Release notes

Sourced from @​trpc/client's releases.

v11.19.0

What's Changed

New Contributors

... (truncated)

Commits

Updates @trpc/next from 11.18.0 to 11.19.0

Release notes

Sourced from @​trpc/next's releases.

v11.19.0

What's Changed

@dependabot
build(deps): bump the prod-deps group across 1 directory with 17 updates
064d069 
Bumps the prod-deps group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.8.0` |
| [@react-pdf/renderer](https://github.com/diegomura/react-pdf/tree/HEAD/packages/renderer) | `4.5.1` | `4.9.0` |
| [@rgrove/parse-xml](https://github.com/rgrove/parse-xml) | `4.2.2` | `5.0.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.3` | `5.104.1` |
| [@trpc/client](https://github.com/trpc/trpc/tree/HEAD/packages/client) | `11.18.0` | `11.19.0` |
| [@trpc/next](https://github.com/trpc/trpc/tree/HEAD/packages/next) | `11.18.0` | `11.19.0` |
| [@trpc/react-query](https://github.com/trpc/trpc/tree/HEAD/packages/react) | `11.18.0` | `11.19.0` |
| [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server) | `11.18.0` | `11.19.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.52.0` |
| [next](https://github.com/vercel/next.js) | `16.3.7` | `16.3.8` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.13` | `10.0.16` |
| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` |
| [stripe](https://github.com/stripe/stripe-node) | `22.3.2` | `23.0.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |



Updates `@base-ui/react` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.8.0/packages/react)

Updates `@react-pdf/renderer` from 4.5.1 to 4.9.0
- [Release notes](https://github.com/diegomura/react-pdf/releases)
- [Changelog](https://github.com/diegomura/react-pdf/blob/master/packages/renderer/CHANGELOG.md)
- [Commits](https://github.com/diegomura/react-pdf/commits/@react-pdf/renderer@4.9.0/packages/renderer)

Updates `@rgrove/parse-xml` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/rgrove/parse-xml/releases)
- [Changelog](https://github.com/rgrove/parse-xml/blob/main/CHANGELOG.md)
- [Commits](rgrove/parse-xml@v4.2.2...v5.0.0)

Updates `@tanstack/react-query` from 5.101.3 to 5.104.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.1/packages/react-query)

Updates `@trpc/client` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/client)

Updates `@trpc/next` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/next)

Updates `@trpc/react-query` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/react)

Updates `@trpc/server` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/server)

Updates `lucide-react` from 1.25.0 to 1.52.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.52.0/packages/lucide-react)

Updates `next` from 16.3.7 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.7...v16.3.8)

Updates `nodemailer` from 10.0.13 to 10.0.16
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.13...v10.0.16)

Updates `pino` from 10.3.1 to 10.4.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.1...v10.4.0)

Updates `react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `stripe` from 22.3.2 to 23.0.0
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.3.2...v23.0.0)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

---
updated-dependencies:
- dependency-name: "@base-ui/react"
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@react-pdf/renderer"
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@rgrove/parse-xml"
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@trpc/client"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@trpc/next"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@trpc/react-query"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@trpc/server"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: lucide-react
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: next
  dependency-version: 16.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: nodemailer
  dependency-version: 10.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: pino
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: stripe
  dependency-version: 23.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot mentioned this pull request Oct 12, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants