Skip to content

chore(deps)(deps): bump the production-dependencies group with 9 updates#955

Merged
hotlong merged 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-22ebd414d0
Mar 23, 2026
Merged

chore(deps)(deps): bump the production-dependencies group with 9 updates#955
hotlong merged 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-22ebd414d0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 23, 2026

Bumps the production-dependencies group with 9 updates:

Package From To
@oclif/core 4.9.0 4.10.2
msw 2.12.13 2.12.14
knex 3.1.0 3.2.3
better-auth 1.5.5 1.5.6
next 16.1.7 16.2.1
fumadocs-core 16.6.17 16.7.4
fumadocs-mdx 14.2.10 14.2.11
fumadocs-ui 16.6.17 16.7.4
react-resizable-panels 4.7.3 4.7.5

Updates @oclif/core from 4.9.0 to 4.10.2

Release notes

Sourced from @​oclif/core's releases.

4.10.2

Bug Fixes

  • deps: bump flatted from 3.3.2 to 3.4.2 (64f4b92)

4.10.1

Bug Fixes

4.10.0

Bug Fixes

  • include multiple property in cached arg metadata (32b4bb7)
  • provide clearer messages on invalid variadic args (454ae3d)

Features

  • add ArgDefinition overloads for variadic arg return types (6fea593)
  • add definition-time validation for variadic arg constraints (20d2543)
  • add multiple property to ArgProps interface (fb76263)
  • allow array of default values for varargs (da42b29)
  • implement variadic arg parsing with shift/pop algorithm (eba40b5)
  • show ... suffix for variadic args in help text (fc53652)
Changelog

Sourced from @​oclif/core's changelog.

4.10.2 (2026-03-21)

Bug Fixes

  • deps: bump flatted from 3.3.2 to 3.4.2 (64f4b92)

4.10.1 (2026-03-20)

Bug Fixes

4.10.0 (2026-03-19)

Bug Fixes

  • include multiple property in cached arg metadata (32b4bb7)
  • provide clearer messages on invalid variadic args (454ae3d)

Features

  • add ArgDefinition overloads for variadic arg return types (6fea593)
  • add definition-time validation for variadic arg constraints (20d2543)
  • add multiple property to ArgProps interface (fb76263)
  • allow array of default values for varargs (da42b29)
  • implement variadic arg parsing with shift/pop algorithm (eba40b5)
  • show ... suffix for variadic args in help text (fc53652)
Commits
  • 2a0dc8b chore(release): 4.10.2 [skip ci]
  • e78f752 Merge pull request #1560 from oclif/dependabot-npm_and_yarn-flatted-3.4.2
  • 64f4b92 fix(deps): bump flatted from 3.3.2 to 3.4.2
  • 958a98f chore(release): 4.10.1 [skip ci]
  • 9aac3dc Merge pull request #1559 from oclif/ew/deps
  • 745f56e fix: refresh yarn.lock
  • a5facdb chore(release): 4.10.0 [skip ci]
  • 4c6b3d7 Merge pull request #1554 from rexxars/feat/native-variadic-args
  • da42b29 feat: allow array of default values for varargs
  • 454ae3d fix: provide clearer messages on invalid variadic args
  • Additional commits viewable in compare view

Updates msw from 2.12.13 to 2.12.14

Release notes

Sourced from msw's releases.

v2.12.14 (2026-03-21)

Bug Fixes

Commits

Updates knex from 3.1.0 to 3.2.3

Release notes

Sourced from knex's releases.

3.2.3

What's Changed

Full Changelog: knex/knex@3.2.1...3.2.3

3.2.1

What's Changed

New Contributors

Full Changelog: knex/knex@3.2.0...3.2.1

3.2.0

What's Changed

... (truncated)

Changelog

Sourced from knex's changelog.

Master (Unreleased)

3.2.1 - 22 March, 2026

Bug fixes

  • Fix subpath imports broken by exports field added in 3.2.0. Packages relying on deep imports (e.g. knex/lib/dialects/sqlite3/index) were blocked by the restrictive exports map

Docs

  • Add VitePress blog with archive and UTC post dates (#6397)

3.2.0 - 22 March, 2026

New features

  • Add migration lifecycle hooks (#5541)
  • Add SIMILAR TO operator (#5303)
  • Add dropUniqueIfExists (#6069)
  • Add 'validate' pool option (#5120)
  • PostgreSQL: default datetime/timestamp precision setting added (#5311)
  • Better-SQLite3: Support defaultSafeIntegers option (#6320)
  • Better-SQLite3: Improve safeIntegers support (#6352)
  • SQLite: Refactor transactions to allow setting the foreign_keys pragma for a transaction (#6315)

Bug fixes

  • Fix where in query with raw column (#6323)
  • Fix migrate up with completed migration (#6342)
  • Fix ESM export and typings (#6227)
  • Fix migration CLI and cli tests (#6264)
  • Fix recover from broken connection (#5774)
  • Prevent unexpected combinations of statements and clauses groups from executing (#6314)
  • Improve CLI error reporting in some edge cases (#6265)
  • PostgreSQL: clearer error when pg-query-stream is missing (#6362)
  • PostgreSQL: Fix streaming compatibility with pg-query-stream 4.14+ (#6396)
  • MySQL: Fix the operator "<=>" is not permitted (#6158)
  • MSSQL: Optimize stream.write (#5693)
  • SQLite: Fix whereILike issue (#5687)

Types

  • Fix usage of object type that is too broad (#5373)
  • Fix pluck typing issue when CompositeTableType is used (#4609)
  • Make types no longer allow knex to be called without tablename (#6188)
  • Add missing type definition for orderBy with a raw column/expression (#5803)
  • Add additional typing for column.index (#5371)
  • Update typings for increment/decrement (#5674)
  • Use syntax import from instead of import = require() (#5258)
  • Import knex as type in TS seed template (#6094)

... (truncated)

Commits

Updates better-auth from 1.5.5 to 1.5.6

Release notes

Sourced from better-auth's releases.

v1.5.6

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 275ca46 fix(client): handle throw:true in session refresh (#8610)
  • 1ed4271 feat(core): add experimental opentelemetry instrumentation (#8027)
  • d4efa8e fix: prevent revoked sessions from being restored via database fallback (#8708)
  • 0cfd514 chore(deps): bump kysely from 0.28.11 to 0.28.12 (#8700)
  • a9f3497 chore: release v1.5.6
  • 1a4ddce chore(deps): bump next.js from 16.1.6 to 16.2.0 (#8682)
  • 9e3e8e6 fix(api): return Response for HTTP request contexts (#7521)
  • 98c8e4e feat(email-otp): add resendStrategy option to reuse existing OTP (#8560)
  • 4f41b62 feat(two-factor): add twoFactorPage in config (#5329)
  • a62cb04 fix(organization): filter null organizations in listUserInvitations (#8694)
  • Additional commits viewable in compare view

Updates next from 16.1.7 to 16.2.1

Release notes

Sourced from next's releases.

v16.2.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • docs: post release amends (#91715)
  • docs: fix broken Activity Patterns demo link in preserving UI state guide (#91698)
  • Fix adapter outputs for dynamic metadata routes (#91680)
  • Turbopack: fix webpack loader runner layer (#91727)
  • Fix server actions in standalone mode with cacheComponents (#91711)
  • turbo-persistence: remove Unmergeable mmap advice (#91713)
  • Fix layout segment optimization: move app-page imports to server-utility transition (#91701)
  • Turbopack: lazy require metadata and handle TLA (#91705)
  • [turbopack] Respect {eval:true} in worker_threads constructors (#91666)

Credits

Huge thanks to @​icyJoseph, @​abhishekmardiya, @​ijjk, @​mischnic, @​unstubbable, @​sokra, and @​lukesandberg for helping!

v16.2.1-canary.5

Misc Changes

  • docs: use ErrorInfo type consistently in catchError docs: #91744

Credits

Huge thanks to @​devjiwonchoi for helping!

v16.2.1-canary.4

Core Changes

  • Fix adapter outputs for dynamic metadata routes: #91680

Misc Changes

  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • Update Rspack development test manifest: #91695
  • [test] Unflake use-node-streams-env-precedence test: #91733
  • Update Rspack production test manifest: #91694
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477

Credits

Huge thanks to @​ijjk, @​mischnic, @​sokra, @​vercel-release-bot, @​unstubbable, and @​mmastrac for helping!

v16.2.1-canary.3

... (truncated)

Commits
  • ed7d2ce v16.2.1
  • 3e37bb4 docs: post release amends (#91715)
  • a15ec6e docs: fix broken Activity Patterns demo link in preserving UI state guide (#9...
  • 600cd2f Fix adapter outputs for dynamic metadata routes (#91680)
  • 27886d3 Turbopack: fix webpack loader runner layer (#91727)
  • 88fc430 Fix server actions in standalone mode with cacheComponents (#91711)
  • 37aed86 turbo-persistence: remove Unmergeable mmap advice (#91713)
  • d6195ec Fix layout segment optimization: move app-page imports to server-utility tran...
  • 6cb97d6 Turbopack: lazy require metadata and handle TLA (#91705)
  • e6b101a [turbopack] Respect {eval:true} in worker_threads constructors (#91666)
  • Additional commits viewable in compare view

Updates fumadocs-core from 16.6.17 to 16.7.4

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.7.4

No release notes provided.

fumadocs-core@16.7.3

No release notes provided.

fumadocs-core@16.7.2

No release notes provided.

fumadocs-core@16.7.1

No release notes provided.

fumadocs-core@16.7.0

Minor Changes

  • f45d703: stablize Shiki factory API

Patch Changes

  • 45aa454: Support placeholder() API in llms.txt generation
Commits

Updates fumadocs-mdx from 14.2.10 to 14.2.11

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@14.2.11

Patch Changes

  • 3144149: Fix dynamic index generation so generated dynamic.ts imports node:path and passes lazy entries to create.doc() / create.docs() as arrays.
  • Updated dependencies [f45d703]
  • Updated dependencies [45aa454]
    • fumadocs-core@16.7.0
Commits
  • faf02ff Chore: Bump deps
  • b38168d Version Packages
  • 0ddaa8a CLI: Preserve layout imports for slots
  • 42bf43e OpenAPI: Implement newer JSON Schema spec $ref resolution behaviour
  • 8c6fe9c Docs: rename sidebar tabs to layout tabs
  • 4fd51b7 UI: migrate Base UI
  • 67d6855 Docs: migrate
  • 0c3eda7 UI: clean code
  • 875d88a UI: forward hooks via slots
  • 484da08 UI: introduce slots system
  • Additional commits viewable in compare view

Updates fumadocs-ui from 16.6.17 to 16.7.4

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.7.4

Patch Changes

  • 57c83a5: fix toc
    • fumadocs-core@16.7.4

fumadocs-ui@16.7.3

Patch Changes

  • fumadocs-core@16.7.3

fumadocs-ui@16.7.2

Patch Changes

  • 652c725: Simplify internal types
    • fumadocs-core@16.7.2

fumadocs-ui@16.7.1

Patch Changes

  • 11b8691: hotfix
  • 75b0b94: Refactor TOC slot
    • fumadocs-core@16.7.1

fumadocs-ui@16.7.0

Minor Changes

  • 8bdee70: Implement renderer API for replacing layout components, deprecate old options
  • bdffeba: Improved defineI18nUI() usage: allow language translations to be defined at root config.
  • f45d703: stablize Shiki factory API

Patch Changes

  • 3d17757: Improve <GithubInfo /> component
  • Updated dependencies [f45d703]
  • Updated dependencies [45aa454]
    • fumadocs-core@16.7.0
Commits

Updates react-resizable-panels from 4.7.3 to 4.7.5

Release notes

Sourced from react-resizable-panels's releases.

4.7.5

  • 696: Improved server rendering support for defaultSize prop

4.7.4

  • 689: Fix edge case bug with pointer event capture
Changelog

Sourced from react-resizable-panels's changelog.

4.7.5

  • 696: Improved server rendering support for defaultSize prop

4.7.4

  • 689: Fix edge case bug with pointer event capture
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 23, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Mar 23, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
objectstack-play Ready Ready Preview, Comment Mar 23, 2026 7:13am
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
spec Ignored Ignored Mar 23, 2026 7:13am

Request Review

Bumps the production-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@oclif/core](https://github.com/oclif/core) | `4.9.0` | `4.10.2` |
| [msw](https://github.com/mswjs/msw) | `2.12.13` | `2.12.14` |
| [knex](https://github.com/knex/knex) | `3.1.0` | `3.2.3` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.5.5` | `1.5.6` |
| [next](https://github.com/vercel/next.js) | `16.1.7` | `16.2.1` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.6.17` | `16.7.4` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `14.2.10` | `14.2.11` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.6.17` | `16.7.4` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.7.3` | `4.7.5` |


Updates `@oclif/core` from 4.9.0 to 4.10.2
- [Release notes](https://github.com/oclif/core/releases)
- [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md)
- [Commits](oclif/core@4.9.0...4.10.2)

Updates `msw` from 2.12.13 to 2.12.14
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.12.13...v2.12.14)

Updates `knex` from 3.1.0 to 3.2.3
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](knex/knex@3.1.0...3.2.3)

Updates `better-auth` from 1.5.5 to 1.5.6
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.5.6/packages/better-auth)

Updates `next` from 16.1.7 to 16.2.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.1.7...v16.2.1)

Updates `fumadocs-core` from 16.6.17 to 16.7.4
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-core@16.6.17...fumadocs-core@16.7.4)

Updates `fumadocs-mdx` from 14.2.10 to 14.2.11
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@14.2.10...fumadocs-mdx@14.2.11)

Updates `fumadocs-ui` from 16.6.17 to 16.7.4
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@16.6.17...fumadocs-ui@16.7.4)

Updates `react-resizable-panels` from 4.7.3 to 4.7.5
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.7.3...4.7.5)

---
updated-dependencies:
- dependency-name: "@oclif/core"
  dependency-version: 4.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: msw
  dependency-version: 2.12.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: knex
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: better-auth
  dependency-version: 1.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: fumadocs-core
  dependency-version: 16.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: fumadocs-mdx
  dependency-version: 14.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fumadocs-ui
  dependency-version: 16.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-resizable-panels
  dependency-version: 4.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-22ebd414d0 branch from 573800c to 2adaeff Compare March 23, 2026 07:05
@hotlong hotlong merged commit 9f10eb1 into main Mar 23, 2026
11 of 14 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-22ebd414d0 branch March 23, 2026 10:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation javascript Pull requests that update javascript code size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant