Skip to content

Bump the bun-dependencies group with 8 updates - #213

Merged
BaseMax merged 2 commits into
mainfrom
dependabot/bun/bun-dependencies-5ec57a4bf5
Nov 4, 2026
Merged

Bump the bun-dependencies group with 8 updates#213
BaseMax merged 2 commits into
mainfrom
dependabot/bun/bun-dependencies-5ec57a4bf5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the bun-dependencies group with 8 updates:

Package From To
@hookform/resolvers 6.0.0 6.0.2
autoprefixer 10.6.1 10.6.2
lucide-react 1.61.0 1.63.0
next 16.4.2 16.4.3
react-hook-form 7.90.0 7.91.0
react-resizable-panels 4.14.8 4.15.0
postcss 8.5.31 8.5.32
typescript-eslint 8.72.0 8.72.1

Updates @hookform/resolvers from 6.0.0 to 6.0.2

Release notes

Sourced from @​hookform/resolvers's releases.

v6.0.2

6.0.2 (2026-10-28)

Bug Fixes

  • typebox: preserve escaped field names in validation errors (#886) (813d0ea)

v6.0.1

6.0.1 (2026-10-27)

Bug Fixes

  • typeschema: drop @​typeschema/main from peerDependencies (#883) (0430340), closes #753 #882
Commits
  • 813d0ea fix(typebox): preserve escaped field names in validation errors (#886)
  • 511d7f6 ci: bump GitHub Actions to Node 24 compatible versions (#885)
  • 0430340 fix(typeschema): drop @​typeschema/main from peerDependencies (#883)
  • 3bcf122 update readme
  • See full diff in compare view

Updates autoprefixer from 10.6.1 to 10.6.2

Release notes

Sourced from autoprefixer's releases.

10.6.2

  • Added /* autoprefixer: ignore next warning */ (by @​dualfroz).
  • Fixed losing unprefixed selectors in old browsers in grouping (by @​ybai08).
  • Fixed selector duplicates on multiple Autoprefixer runs.
  • Fixed case-insensitive pseudo-selector prefixing (by @​jakezwang).
  • Fixed -webkit-cross-fade() for images with numbers (by @​mkantautas).
  • Fixed source maps for Grid prefixes (by @​dualfroz).
Changelog

Sourced from autoprefixer's changelog.

10.6.2

  • Added /* autoprefixer: ignore next warning */ (by @​dualfroz).
  • Fixed losing unprefixed selectors in old browsers in grouping (by @​ybai08).
  • Fixed selector duplicates on multiple Autoprefixer runs.
  • Fixed case-insensitive pseudo-selector prefixing (by @​jakezwang).
  • Fixed -webkit-cross-fade() for images with numbers (by @​mkantautas).
  • Fixed source maps for Grid prefixes (by @​dualfroz).
Commits
  • a7dbf4d Release 10.6.2 version
  • c3cd98d Fix selector duplicates on multiple Autoprefixer runs
  • 5ae399e Keep unprefixed selectors in prefixed grouping rules (#1561)
  • 50ca3e2 Fix -webkit-cross-fade() for images with numbers (#1562)
  • 0efb61b Add /* autoprefixer: ignore next warning */ control comment (#1560)
  • 7ca1fad Set source for Grid prefixes in source maps (#1559)
  • c6d89bc Fix case-insensitive pseudo-selector prefixing (#1558)
  • See full diff in compare view

Updates lucide-react from 1.61.0 to 1.63.0

Release notes

Sourced from lucide-react's releases.

Version 1.63.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.62.0...1.63.0

Version 1.62.0

What's Changed

New Contributors

... (truncated)

Commits
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • See full diff in compare view

Updates next from 16.4.2 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits
  • 29bbeab v16.4.3
  • 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
  • 37d603b [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #1...
  • cf9d27d [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (...
  • 3f6a632 [lts-active] test: Pin react-virtualized (#100545)
  • f715bba [lts-active][cd] Gate release bot credentials behind GitHub environments (#10...
  • c864c78 [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • f3ff943 [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • f697cf5 [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • See full diff in compare view

Updates react-hook-form from 7.90.0 to 7.91.0

Release notes

Sourced from react-hook-form's releases.

Version 7.91.0

🐞 Fixes

  • Fix useFieldArray not updating rows when using setValue or setValues (#13842, #13939)
  • Fix useFieldArray not unregistering values correctly on unmount (#13843)
  • Fix field registration without a value incorrectly adding array rows (#13846, #13849)
  • Fix useFieldArray reindexing fields incorrectly when array rules are registered (#13873)
  • Fix useFieldArray losing validation rules after reset() (#13940)
  • Fix stale field array validation results after array changes (#13888)
  • Fix useFieldArray validation after submission in onBlur mode (#13867)
  • Fix dirty state updates when setValues changes field arrays (#13870)
  • Fix stale asynchronous validation results after reset() and unregister() (#13908, #13912, #13934)
  • Fix Controller validation using stale DOM values (#13880)
  • Fix isValid not updating correctly after reset() and subsequent changes (#13847, #13930)
  • Fix handleSubmit leaving isSubmitting active when validation throws (#13905)
  • Fix empty validation message arrays being treated as errors (#13937)
  • Fix delayed validation errors not being flushed on blur (#13861)
  • Fix form state subscriptions and validity updates (#13866, #13877, #13906)
  • Fix dirty state tracking and resetField() with falsy values (#13868, #13900)
  • Fix unregister retaining validation rules when using keepValue (#13891)
  • Fix <Form /> handling of JSON, URL-encoded, multipart and plain-text submissions (#13848, #13854, #13874, #13893, #13907, #13915, #13926)
  • Fix useWatch not updating default values when the watched name changes (#13859)
  • Fix select options being lost before the form is ready (#13872)
  • Fix useForm retaining removed options and disabled state (#13882, #13883, #13889, #13898)
  • Fix progressive required attributes (#13924)
  • Fix numeric zero maxLength validation (#13851)
  • Fix object comparison for null-prototype objects and sparse arrays (#13853, #13855, #13857)
  • Fix cloneObject handling objects with a constructor key (#13875)
  • Fix setValue handling null-prototype objects (#13916)
  • Fix form-level validation error types (#13860)
  • Fix useForm mutating the externally provided errors object (#13896)
  • Fix stale NaN and invalid date validation results (#13910)

⚡ Performance Improvements

  • Avoid unnecessary copies when calling getValues() (#13894)
  • Reduce unnecessary <Form /> re-renders (#13899)

🧹 Refactors

  • Simplify multipart Content-Type handling (#13926)
  • Improve internal types and remove unnecessary type assertions (#13871, #13886)
  • Clean up memoized component display names (#13897)
  • Fix JSDoc examples (#13895)

🧪 Tests

  • Add coverage for disabled field array operations (#13841)
  • Expand regression coverage for useFieldArray, reset, validation and form state

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.91.0] - 2026-10-24

Changed

  • Improve performance of Form by reading control from context to avoid unnecessary re-renders
  • Improve performance of getValues by avoiding unnecessary shallow copies
  • Simplify multipart content-type header filtering
  • Align form-level validation error types

Fixed

  • useFieldArray not registering array rules again after reset
  • setValue not updating field array rows when a parent object is set
  • createFormControl keeping a newer change's error when an older isValid pass settles
  • validate treating an empty message array as valid
  • reset releasing keepIsValid on the next field change or field array operation
  • register only emitting the progressive required attribute when the rule is on
  • createFormControl dropping the async result of a field unregistered while it validates
  • createFormControl supporting null-prototype objects in setValue
  • Form handling case-insensitive and parameterized multipart encType
  • createFormControl ignoring a stale NaN or Invalid Date validation result
  • Settle submit state when validation throws
  • Form letting fetch set the multipart boundary for a multipart content-type header
  • createFormControl ignoring a stale built-in validity result after reset
  • useForm running the initial validity check when a child subscribed first
  • Form sending a text/plain body for a text/plain content type
  • createFormControl copying the errors prop instead of writing into it
  • useForm resetting resetOptions when removed from props
  • createFormControl handling falsy values correctly in _getDirty and resetField
  • unregister dropping the field's rules when keepValue keeps only its value
  • useForm clearing errors when the errors option is removed or set to undefined
  • useFieldArray dropping a validation result once the array has changed
  • reset keeping retained fields disabled
  • useForm re-enabling the form when the disabled option is removed
  • formState producing a new validatingFields reference when it changes
  • validateField validating the stored value of Controller fields with a DOM ref
  • useForm resetting progressive option when removed from props
  • cloneObject copying plain objects that have a constructor key
  • useFieldArray reindexing row fields when the array has rules
  • Form matching JSON content types case-insensitively
  • deepEqual comparing keys as own properties instead of via in
  • register keeping select options picked before the form is ready
  • Report isReady to useFormState mounted with the form
  • useFieldArray revalidating array operations after submit in onBlur mode
  • getDirtyFields handling null or undefined form values when clearing a field
  • setValue updating isDirty when shouldDirty fills a field array
  • delayError flushing the delayed error on blur when blur also validates
  • useWatch using the new defaultValue when the watched name changes
  • deepEqual comparing sparse array lengths
  • Form sending a url-encoded body for a url-encoded content type

... (truncated)

Commits
  • de3c946 7.91.0
  • da618cb Revert "🐞 fix(reset): keep mounted Controllers registered so submit still val...
  • e715d44 🧴 fix remove optional chain
  • eed8086 🐞 fix(useFieldArray): register the array rules again after reset (#13940)
  • fe960d4 🐞 fix(setValue): update field array rows when the parent object is set (#13939)
  • 0f3e977 🐞 fix(createFormControl): keep a newer change's error when an older isValid p...
  • 33f65e5 🐞 fix(getValidateError): treat an empty message array from validate as valid ...
  • a72bcd7 Revert "🐞 fix(objectHasFunction): check own properties to ignore Object.proto...
  • dee9424 🐞 fix(reset): release keepIsValid on the next field change or field array op ...
  • 76c0b3d 🐞 fix(reset): keep mounted Controllers registered so submit still validates t...
  • Additional commits viewable in compare view

Updates react-resizable-panels from 4.14.8 to 4.15.0

Release notes

Sourced from react-resizable-panels's releases.

4.15.0

  • Add useParentGroup, useParentPanel, and useParentGrid hooks. Components rendered within a Group, Panel, or Grid can use them to access the nearest one (including its imperative API) without passing refs down; they return null outside of a matching component. Within a Cell, useParentGroup returns the nearest Group outside of the Grid. - #775
  • Imperative Panel and GridTrack resize(), collapse(), and expand() calls (and double-clicking a separator to reset a panel's size) now take space from, or give it to, the nearest panels that can absorb it, on either side of the panel being resized. Previously only the panels on one side were used, starting with the adjacent panel, so these calls could silently do nothing (e.g. when the next panel was collapsed) or unexpectedly collapse or expand other panels. Changes that don't collapse or expand other panels are now preferred. - #774
  • expand() still restores a panel's most recent size, but if that would require collapsing another panel, it now expands to the largest size that fits instead (as long as that's at least its minSize). - #774
  • Fix releasing the pointer after dragging the boundary between panels that don't have a Separator "clicking" the element under the pointer (e.g. a button in a panel header). - #774
Changelog

Sourced from react-resizable-panels's changelog.

4.15.0

  • Add useParentGroup, useParentPanel, and useParentGrid hooks. Components rendered within a Group, Panel, or Grid can use them to access the nearest one (including its imperative API) without passing refs down; they return null outside of a matching component. Within a Cell, useParentGroup returns the nearest Group outside of the Grid. - #775
  • Imperative Panel and GridTrack resize(), collapse(), and expand() calls (and double-clicking a separator to reset a panel's size) now take space from, or give it to, the nearest panels that can absorb it, on either side of the panel being resized. Previously only the panels on one side were used, starting with the adjacent panel, so these calls could silently do nothing (e.g. when the next panel was collapsed) or unexpectedly collapse or expand other panels. Changes that don't collapse or expand other panels are now preferred. - #774
  • expand() still restores a panel's most recent size, but if that would require collapsing another panel, it now expands to the largest size that fits instead (as long as that's at least its minSize). - #774
  • Fix releasing the pointer after dragging the boundary between panels that don't have a Separator "clicking" the element under the pointer (e.g. a button in a panel header). - #774
Commits

Updates postcss from 8.5.31 to 8.5.32

Release notes

Sourced from postcss's releases.

8.5.32

  • Fixed Input#origin() without opts.from (by @​wleeaf).
  • Fixed final-word lookup without source offsets (by @​Don-Yin).
  • Fixed explicit start in Warning#toString() (by @​Don-Yin).
  • Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).
Changelog

Sourced from postcss's changelog.

8.5.32

  • Fixed Input#origin() without opts.from (by @​wleeaf).
  • Fixed final-word lookup without source offsets (by @​Don-Yin).
  • Fixed explicit start in Warning#toString() (by @​Don-Yin).
  • Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).
Commits

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the bun-dependencies group with 8 updates
a79a090 
Bumps the bun-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `6.0.0` | `6.0.2` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.6.1` | `10.6.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.61.0` | `1.63.0` |
| [next](https://github.com/vercel/next.js) | `16.4.2` | `16.4.3` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.90.0` | `7.91.0` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.14.8` | `4.15.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.31` | `8.5.32` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.72.0` | `8.72.1` |


Updates `@hookform/resolvers` from 6.0.0 to 6.0.2
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v6.0.0...v6.0.2)

Updates `autoprefixer` from 10.6.1 to 10.6.2
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.6.1...10.6.2)

Updates `lucide-react` from 1.61.0 to 1.63.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.63.0/packages/lucide-react)

Updates `next` from 16.4.2 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.2...v16.4.3)

Updates `react-hook-form` from 7.90.0 to 7.91.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.90.0...v7.91.0)

Updates `react-resizable-panels` from 4.14.8 to 4.15.0
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.14.8...4.15.0)

Updates `postcss` from 8.5.31 to 8.5.32
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.31...8.5.32)

Updates `typescript-eslint` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@hookform/resolvers"
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun-dependencies
- dependency-name: lucide-react
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun-dependencies
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.91.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun-dependencies
- dependency-name: react-resizable-panels
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun-dependencies
- dependency-name: postcss
  dependency-version: 8.5.32
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from BaseMax and jbampton as code owners November 4, 2026 16:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor labels Nov 4, 2026
@vercel

vercel Bot commented Nov 4, 2026

Copy link
Copy Markdown

Deployment failed for project metropolis-retro with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/salamlang?upgradeToPro=build-rate-limit

@github-actions

github-actions Bot commented Nov 4, 2026

Copy link
Copy Markdown

Thanks for your first pull request! We appreciate your contribution.

@socket-security

socket-security Bot commented Nov 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​next@​16.4.2 ⏵ 16.4.362 +110090 +19970
Updatednpm/​typescript-eslint@​8.72.0 ⏵ 8.72.11001007498100
Updatednpm/​lucide-react@​1.61.0 ⏵ 1.63.010010099 +29680
Updatednpm/​autoprefixer@​10.6.1 ⏵ 10.6.2100 +110089 +192100
Updatednpm/​react-hook-form@​7.90.0 ⏵ 7.91.0100 +1100100 +194 -1100
Updatednpm/​react-resizable-panels@​4.14.8 ⏵ 4.15.099 +1100100 +196 +1100
Updatednpm/​@​hookform/​resolvers@​6.0.0 ⏵ 6.0.298 +1100100 +197 +3100

View full report

@BaseMax
BaseMax merged commit 05efda1 into main Nov 4, 2026
8 of 15 checks passed
@BaseMax
BaseMax deleted the dependabot/bun/bun-dependencies-5ec57a4bf5 branch November 4, 2026 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@BaseMax BaseMax Awaiting requested review from BaseMax BaseMax is a code owner
@jbampton jbampton Awaiting requested review from jbampton jbampton is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@BaseMax