Skip to content

chore(deps)(deps): bump the production-dependencies group with 5 updates#476

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-02385b1516
Closed

chore(deps)(deps): bump the production-dependencies group with 5 updates#476
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-02385b1516

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Bumps the production-dependencies group with 5 updates:

Package From To
lucide-react 0.562.0 0.563.0
hono 4.11.4 4.11.7
fumadocs-core 16.4.7 16.5.0
fumadocs-mdx 14.2.5 14.2.6
fumadocs-ui 16.4.7 16.5.0

Updates lucide-react from 0.562.0 to 0.563.0

Release notes

Sourced from lucide-react's releases.

Version 0.563.0

What's Changed

aria-hidden is by default added to icons components in all packages. This was already added to lucide-react before. Making icons accessible, you can add an aria-label or a title. See docs about accessibility.

All changes

New Contributors

Full Changelog: lucide-icons/lucide@0.562.0...0.563.0

Commits
  • 67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
  • b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
  • See full diff in compare view

Updates hono from 4.11.4 to 4.11.7

Release notes

Sourced from hono's releases.

v4.11.7

Security Release

This release includes security fixes for multiple vulnerabilities in Hono and related middleware. We recommend upgrading if you are using any of the affected components.

Components

IP Restriction Middleware

Fixed an IPv4 address validation bypass that could allow IP-based access control to be bypassed under certain configurations.

Cache Middleware

Fixed an issue where responses marked with Cache-Control: private or no-store could be cached, potentially leading to information disclosure on some runtimes.

Serve Static Middleware (Cloudflare Workers adapter)

Fixed an issue that could allow unintended access to internal asset keys when serving static files with user-controlled paths.

hono/jsx ErrorBoundary

Fixed a reflected Cross-Site Scripting (XSS) issue in the ErrorBoundary component that could occur when untrusted strings were rendered without proper escaping.

Recommendation

Users are encouraged to upgrade to this release, especially if they:

  • Use IP Restriction Middleware
  • Use Cache Middleware on Deno, Bun, or Node.js
  • Use Serve Static Middleware with user-controlled paths on Cloudflare Workers
  • Render untrusted data inside ErrorBoundary components

Security Advisories & CVEs

... (truncated)

Commits

Updates fumadocs-core from 16.4.7 to 16.5.0

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.5.0

Minor Changes

  • 9ba1250: Support Universal Shiki configuration

fumadocs-core@16.4.11

Patch Changes

  • a75a84d: fix duplicated transformer execution for fallback trees

fumadocs-core@16.4.10

Patch Changes

  • 099fde7: [Page Tree] Extract index page from folder
  • 6fd7e63: handle circular reference in page tree

fumadocs-core@16.4.9

Patch Changes

  • 48dd0c2: fix incorrect page tree output
Commits

Updates fumadocs-mdx from 14.2.5 to 14.2.6

Commits

Updates fumadocs-ui from 16.4.7 to 16.5.0

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.5.0

Minor Changes

  • 9ba1250: Support Universal Shiki configuration

Patch Changes

  • Updated dependencies [85cc22f]
  • Updated dependencies [9ba1250]
    • @​fumadocs/ui@​16.5.0
    • fumadocs-core@16.5.0

fumadocs-ui@16.4.11

Patch Changes

  • Updated dependencies [a75a84d]
    • fumadocs-core@16.4.11
    • @​fumadocs/ui@​16.4.11

fumadocs-ui@16.4.10

Patch Changes

  • 430a5f1: support on on docs layout
  • Updated dependencies [099fde7]
  • Updated dependencies [6fd7e63]
    • fumadocs-core@16.4.10
    • @​fumadocs/ui@​16.4.10

fumadocs-ui@16.4.9

Patch Changes

  • Updated dependencies [48dd0c2]
    • fumadocs-core@16.4.9
    • @​fumadocs/ui@​16.4.9
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 2, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Feb 2, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
spec Ready Ready Preview, Comment Feb 2, 2026 5:06pm

Request Review

@github-actions github-actions bot added documentation Improvements or additions to documentation size/s labels Feb 2, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-02385b1516 branch from 5157c19 to 7fab54f Compare February 2, 2026 10:22
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-02385b1516 branch from 7fab54f to db6f44d Compare February 2, 2026 16:56
Bumps the production-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.562.0` | `0.563.0` |
| [hono](https://github.com/honojs/hono) | `4.11.4` | `4.11.7` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.4.7` | `16.5.0` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `14.2.5` | `14.2.6` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.4.7` | `16.5.0` |


Updates `lucide-react` from 0.562.0 to 0.563.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.563.0/packages/lucide-react)

Updates `hono` from 4.11.4 to 4.11.7
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.11.4...v4.11.7)

Updates `fumadocs-core` from 16.4.7 to 16.5.0
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/commits/fumadocs-core@16.5.0)

Updates `fumadocs-mdx` from 14.2.5 to 14.2.6
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/commits)

Updates `fumadocs-ui` from 16.4.7 to 16.5.0
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/commits/fumadocs-ui@16.5.0)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 0.563.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: hono
  dependency-version: 4.11.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fumadocs-core
  dependency-version: 16.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: fumadocs-mdx
  dependency-version: 14.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fumadocs-ui
  dependency-version: 16.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-02385b1516 branch from db6f44d to 3fce297 Compare February 2, 2026 16:58
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Feb 2, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Feb 2, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-02385b1516 branch February 2, 2026 23:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation javascript Pull requests that update javascript code size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants