Skip to content

Bump the bun-dependencies group with 7 updates - #202

Merged
BaseMax merged 1 commit into
mainfrom
dependabot/bun/bun-dependencies-380eecf8d0
Oct 7, 2026
Merged

BaseMax merged 1 commit into
mainfrom
dependabot/bun/bun-dependencies-380eecf8d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the bun-dependencies group with 7 updates:

Package From To
lucide-react 1.47.0 1.49.0
next 16.3.6 16.3.8
react-day-picker 10.0.1 10.0.2
react-hook-form 7.88.0 7.89.0
react-resizable-panels 4.13.2 4.14.1
@types/node 26.6.2 26.6.3
typescript-eslint 8.70.1 8.71.0

Updates lucide-react from 1.47.0 to 1.49.0

Release notes

Sourced from lucide-react's releases.

Version 1.49.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.48.0...1.49.0

Version 1.48.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Commits
  • e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
  • f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
  • See full diff in compare view

Updates next from 16.3.6 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Medium:

Low:

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @​lukesandberg for helping!

Commits
  • b0fad0d v16.3.8
  • 719e4c6 [lts-active] Scope response cache keys to their source route (#218)
  • e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
  • 40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
  • 2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
  • bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
  • 8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
  • e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
  • 4c20699 v16.3.7
  • 2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
  • See full diff in compare view

Updates react-day-picker from 10.0.1 to 10.0.2

Release notes

Sourced from react-day-picker's releases.

v10.0.2

What's Changed

react-day-picker

  • fix: preserve focus when controlled month changes replace the focused day. #3010 by @​gpbl
  • fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @​amanokh
  • fix: avoid loading all date-fns locales when importing a locale subpath. #3007 by @​huuyafwww

@​daypicker/react

  • fix: preserve focus when controlled month changes replace the focused day. #3010 by @​gpbl
  • fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @​amanokh
  • fix: avoid loading all date-fns locales when importing a locale subpath. #3007 by @​huuyafwww

@​daypicker/buddhist

  • fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @​amanokh

@​daypicker/ethiopic

  • fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @​amanokh

@​daypicker/hebrew

  • fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @​amanokh

@​daypicker/hijri

  • fix: import date-fns functions and DayPicker locales from their subpaths #3020 by @​amanokh
Changelog

Sourced from react-day-picker's changelog.

10.0.2

Patch Changes

DayPicker follows Semantic Versioning. See the Releases page on Github for the complete list of changes, diffs and contributors, or the list of versions published on npm.

Commits

Updates react-hook-form from 7.88.0 to 7.89.0

Release notes

Sourced from react-hook-form's releases.

Version 7.89.0

🐞 Fixes

  • Fix form state select option (#13784)
  • Remove duplicate default value field (#13783)
  • Fix validateField skipping refs without setCustomValidity under native validation (#13782)
  • Fix form-level validation using a stale validate function (#13777)
  • Fix useFieldArray touched fields handling (#13776)
  • Fix pending delayError timers for nested paths (#13775)
  • Fix getValues extracting unmarked field array entries (#13773)
  • Fix field array touched state not being re-indexed when unsubscribed (#13772)
  • Fix nested delayError timers remaining when a parent validates clean (#13771)
  • Fix nested delayError timers remaining after resetField() resets a parent (#13769)
  • Fix stale field array root errors after an operation satisfies the validation rule (#13767)
  • Fix setValue() not revalidating dependencies when shouldValidate is enabled (#13765)
  • Fix stale built-in validation results after reset() during handleSubmit() (#13761)
  • Fix stale form-level validation results after reset() (#13762)
  • Fix validation rules removed from register options at runtime remaining active (#13758)
  • Fix useController required validation not using the controlled value (#13756)
  • Fix stale form-level errors remaining after successful re-validation (#13755)
  • Fix useFieldArray marking the form dirty when the array default value is null (#13750)
  • Fix isValid not being recomputed when the errors prop is emptied (#13748)
  • Fix form-level validation running more than once per traversal (#13747)
  • Fix stale built-in validation results after reset() during onChange (#13745)
  • Fix stale resolver results after reset() during onChange (#13744)
  • Fix setValue() not triggering field array root validation when shouldValidate is enabled (#13743)
  • Fix getFieldState(name, formState) updates after reset() (#13741)
  • Fix dirty state remaining for rows removed from a field array (#13739)

🧹 Refactors

  • Replace rimraf cleanup with fs.rmSync (#13770)
  • Reduce bundle size (#13759)

📦 Dependencies

  • Add optional @types/react peer dependency (#13781)

❤️ Thank You

Changelog

Sourced from react-hook-form's changelog.

[7.89.0] - 2026-09-26

Changed

  • Add optional @types/react peer dependency

Fixed

  • validateField calling setCustomValidity on refs that don't implement it under native validation
  • Form-level validate running a stale function instead of the latest one
  • Form-level validation leaving stale errors after a successful re-validation
  • Form-level validation running more than once per traversal
  • Stale validation results (resolver, built-in, form-level validate) being applied after reset in onChange and handleSubmit
  • Pending delayError timers for nested paths not being cancelled when a parent validates clean or is reset via resetField
  • getValues(names, { dirtyFields }) returning every row of a field array instead of only the marked entries
  • Field array touched state not being re-indexed when touchedFields is not subscribed
  • useFieldArray emitting touchedFields in form state updates when unnecessary
  • Stale field array root error not clearing once an array operation satisfies the rule
  • useFieldArray marking the form dirty when the array default is null
  • Dirty state lingering for rows removed from a field array
  • setValue with shouldValidate not revalidating deps
  • setValue with shouldValidate not triggering validation for a field array root
  • Validation rules removed from register options at runtime still being applied
  • useController validating required against the input value instead of the controlled value
  • isValid not recomputing when the errors prop is emptied
  • getFieldState(name, formState) with a resolver after reset()
Commits
  • 4722d22 7.89.0
  • 72a4c98 👟 chore: correct form state select option (#13784)
  • 14c7bec 🕵🏻‍♂️ chore: remove duplicate default value field (#13783)
  • d9cab62 🤖 chore: add optional @​types/react peer dependency (#13781)
  • c12546c 🐞 fix(validateField): skip refs without setCustomValidity under native valida...
  • 5fd9ef6 🐞 fix(validate): run the latest form level validate function (#13777)
  • 7893230 🐞 fix(useFieldArray): improve touched fields handling and add tests (#13776)
  • ad8abf6 🐴 cancel pending delayError timers for nested paths (#13775)
  • eb159da 🐞 fix(getValues): extract only the marked entries of a field array (#13773)
  • 4647014 🐞 fix: re-index field array touched state when it is not subscribed (#13772)
  • Additional commits viewable in compare view

Updates react-resizable-panels from 4.13.2 to 4.14.1

Release notes

Sourced from react-resizable-panels's releases.

4.14.1

  • 720: Bugfix: Constraints applied because of a Group size change (e.g. a pixel-based minSize when the window is small) no longer permanently alter the layout; the requested layout is restored once the constraint no longer applies
    • onLayoutChanged meta includes a new requestedLayout attribute; useDefaultLayout and useDefaultGridLayout persist this value instead of the constrained layout

4.14.0

  • New Grid, Cell, and Gridline components for resizable two-dimensional layouts:
    • Columns and rows support the same size constraints as Panels (e.g. min/max size, collapsible)
    • Cells can span multiple columns and/or rows
    • Dragging where column and row boundaries intersect resizes both axes
    • Gridlines (optional, like Separators) can span a subset of tracks to avoid spanning cells
  • New useDefaultGridLayout, useGridRef, and useGridCallbackRef hooks

4.13.3

  • 755: Bugfix: Separator behind a modal <dialog> can no longer be dragged
Changelog

Sourced from react-resizable-panels's changelog.

4.14.1

  • 720: Bugfix: Constraints applied because of a Group size change (e.g. a pixel-based minSize when the window is small) no longer permanently alter the layout; the requested layout is restored once the constraint no longer applies
    • onLayoutChanged meta includes a new requestedLayout attribute; useDefaultLayout and useDefaultGridLayout persist this value instead of the constrained layout

4.14.0

  • New Grid, Cell, and Gridline components for resizable two-dimensional layouts:
    • Columns and rows support the same size constraints as Panels (e.g. min/max size, collapsible)
    • Cells can span multiple columns and/or rows
    • Dragging where column and row boundaries intersect resizes both axes
    • Gridlines (optional, like Separators) can span a subset of tracks to avoid spanning cells
  • New useDefaultGridLayout, useGridRef, and useGridCallbackRef hooks

4.13.3

  • 755: Bugfix: Separator behind a modal <dialog> can no longer be dragged
Commits

Updates @types/node from 26.6.2 to 26.6.3

Commits

Updates typescript-eslint from 8.70.1 to 8.71.0

Release notes

Sourced from typescript-eslint's releases.

v8.71.0

8.71.0 (2026-09-28)

🚀 Features

  • eslint-plugin: [no-unsafe-enum-assignment] add rule (#12732)

🩹 Fixes

  • eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#12885)
  • eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
  • eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#12832)
  • eslint-plugin: [no-misused-promises] handle a return outside of any function (#12912)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bun-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.47.0` | `1.49.0` |
| [next](https://github.com/vercel/next.js) | `16.3.6` | `16.3.8` |
| [react-day-picker](https://github.com/gpbl/react-day-picker/tree/HEAD/packages/react-day-picker) | `10.0.1` | `10.0.2` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.88.0` | `7.89.0` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.13.2` | `4.14.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.1` | `8.71.0` |


Updates `lucide-react` from 1.47.0 to 1.49.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react)

Updates `next` from 16.3.6 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.6...v16.3.8)

Updates `react-day-picker` from 10.0.1 to 10.0.2
- [Release notes](https://github.com/gpbl/react-day-picker/releases)
- [Changelog](https://github.com/gpbl/react-day-picker/blob/main/packages/react-day-picker/CHANGELOG.md)
- [Commits](https://github.com/gpbl/react-day-picker/commits/v10.0.2/packages/react-day-picker)

Updates `react-hook-form` from 7.88.0 to 7.89.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.88.0...v7.89.0)

Updates `react-resizable-panels` from 4.13.2 to 4.14.1
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.13.2...4.14.1)

Updates `@types/node` from 26.6.2 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `typescript-eslint` from 8.70.1 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun-dependencies
- dependency-name: next
  dependency-version: 16.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun-dependencies
- dependency-name: react-day-picker
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.89.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun-dependencies
- dependency-name: react-resizable-panels
  dependency-version: 4.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor labels Oct 7, 2026
@dependabot
dependabot Bot requested a review from BaseMax as a code owner October 7, 2026 16:14
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 7, 2026
@dependabot
dependabot Bot requested a review from jbampton as a code owner October 7, 2026 16:14
@dependabot dependabot Bot added the minor label Oct 7, 2026
@vercel

vercel Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
metropolis-retro Error Error Oct 7, 2026 4:15pm UTC

@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 7, 2026
@github-actions

github-actions Bot commented Oct 7, 2026

Copy link
Copy Markdown

Thanks for your first pull request! We appreciate your contribution.

@socket-security

Copy link
Copy Markdown

@BaseMax
BaseMax merged commit f025c30 into main Oct 7, 2026
11 of 18 checks passed
@BaseMax
BaseMax deleted the dependabot/bun/bun-dependencies-380eecf8d0 branch October 7, 2026 20:24

This branch had an error being deployed

1 failed deployment
Preview — e4722ecd Deployed Oct 7, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant