Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 21 updates#99

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-3a255d2aab
Open

chore(deps): bump the production-dependencies group across 1 directory with 21 updates#99
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-3a255d2aab

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Bumps the production-dependencies group with 21 updates in the / directory:

Package From To
@langchain/community 1.1.27 1.1.28
@langchain/core 1.1.41 1.1.45
@langchain/openai 1.4.4 1.4.5
@mixedbread/sdk 0.62.0 0.65.0
@sentry/nextjs 10.50.0 10.52.0
@tavily/core 0.7.2 0.7.3
express-rate-limit 8.4.1 8.5.1
inngest 4.2.4 4.3.0
langchain 1.3.4 1.4.0
lucide-react 1.11.0 1.14.0
mongoose 9.5.0 9.6.2
next 16.2.4 16.2.6
npm 11.13.0 11.14.1
posthog-js 1.372.1 1.372.10
react 19.2.5 19.2.6
react-day-picker 9.14.0 10.0.0
react-dom 19.2.5 19.2.6
react-hook-form 7.74.0 7.75.0
react-resizable-panels 4.10.0 4.11.0
tailwind-merge 3.5.0 3.6.0
zod 4.3.6 4.4.3

Updates @langchain/community from 1.1.27 to 1.1.28

Release notes

Sourced from @​langchain/community's releases.

@​langchain/community@​1.1.28

Patch Changes

  • #44 f9a922e Thanks @​dependabot! - chore(deps): bump fast-xml-parser from 5.5.9 to 5.7.0

  • #30 9cd006c Thanks @​christian-bromann! - fix(pdf-loader): support both pdf-parse v1 and v2

  • #36 1e2e4bf Thanks @​hntrl! - Fix Milvus collection loading before delete operations (#9749) and partition name handling in search/delete (#9748)

    • Added loadCollectionSync() call in the delete() method to ensure collection is loaded before delete operations
    • Added partition_names parameter to search() call in similaritySearchVectorWithScore()
    • Added partition_name parameter to both deleteEntities() and delete() calls
    • Updated error message in delete method from "before search" to "before deletion"

  • #41 5bd4246 Thanks @​RaschidJFR! - Expose basePath option in VoyageEmbeddings class

  • #43 b835751 Thanks @​jkennedyvz! - chore(deps): bump transitive dependencies to patch 6 security alerts

    Updates pnpm overrides to resolve critical and high severity Dependabot alerts in transitive dependencies reached via optional peerDependencies and dev tooling:

    No workspace package has these as direct dependencies; overrides affect the monorepo lockfile only and do not change published package contents.

  • #42 3657e90 Thanks @​RaschidJFR! - surface Voyage AI API errors in VoyageEmbeddings

Commits

Updates @langchain/core from 1.1.41 to 1.1.45

Commits

Updates @langchain/openai from 1.4.4 to 1.4.5

Commits

Updates @mixedbread/sdk from 0.62.0 to 0.65.0

Release notes

Sourced from @​mixedbread/sdk's releases.

v0.65.0

0.65.0 (2026-05-08)

Full Changelog: v0.64.0...v0.65.0

Features

Chores

  • format: run eslint and prettier separately (6e4a29d)
  • redact api-key headers in debug logs (8768041)

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website 📚 Read the docs 🙋 Reach out for help or questions

v0.64.0

0.64.0 (2026-04-29)

Full Changelog: v0.63.0...v0.64.0

Features

v0.63.0

0.63.0 (2026-04-28)

Full Changelog: v0.62.0...v0.63.0

Features

  • support setting headers via env (9f574b1)

Chores

  • internal: codegen related update (15ef319)
Changelog

Sourced from @​mixedbread/sdk's changelog.

0.65.0 (2026-05-08)

Full Changelog: v0.64.0...v0.65.0

Features

Chores

  • format: run eslint and prettier separately (6e4a29d)
  • redact api-key headers in debug logs (8768041)

0.64.0 (2026-04-29)

Full Changelog: v0.63.0...v0.64.0

Features

0.63.0 (2026-04-28)

Full Changelog: v0.62.0...v0.63.0

Features

  • support setting headers via env (9f574b1)

Chores

  • internal: codegen related update (15ef319)
Commits

Updates @sentry/nextjs from 10.50.0 to 10.52.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.52.0

Important Changes

  • Beta release of the official Hono Sentry SDK

    This release marks the beta release of the @sentry/hono Sentry SDK. For details on how to use it, check out the Sentry Hono SDK docs. Please reach out on GitHub if you have any feedback or concerns.

  • feat(browser): Add ingest_settings to v2 log envelope payload (#20453)

    Inference of user data (e.g. IP address, browser name/version) on log events is now gated behind the sendDefaultPii option. Previously, this data was always inferred by default.

Other Changes

  • docs(hono): Add new docs link and move to BETA release (#20666)
  • feat(browser): Add ingest_settings to v2 metrics envelope payload (#20454)
  • feat(browser): Migrate spotlight event processor to ignoreSpans (#20595)
  • feat(cloudflare): Capture request body via httpServerIntegration (#20614)
  • feat(cloudflare): Support rpc trace propagation for WorkerEntrypoint (#20523)
  • feat(cloudflare): Support tracing for queue producer (#20529)
  • feat(core): Apply request data to segment spans in span streaming (#20654)
  • feat(core): Migrate Vercel AI event processor to span streaming (#20608)
  • feat(deno): Add processSegmentSpan to Deno context integration (#20613)
  • feat(http): Portable node:http client instrumentation (#20393)
  • feat(nitro): Add unstorage tracing channel instrumentation (#20615)
  • feat(node-core): Add processSegmentSpan to node context integration (#20678)
  • feat(node): Use diagnostics_channel for redis >= 5.12.0 (#20573)
  • feat(node): Vendor ioredis, redis instrumentations (#20510)
  • feat(replay): Reset replay id from DSC on session expiry/refresh (#20129)
  • fix: Bump fast-xml-parser to fix vulnerability (#20644)
  • fix: Bump vite versions to fix vulnerability (#20646)
  • fix(core): Drain buffers in flush() when there is no transport (#20207)
  • fix(core): Guard against undefined chained in copyProps (#20637)
  • fix(deps): Bump rollup-plugin-license to fix lodash vulnerabilities (#20636)
  • fix(deps): Bump transitive deps for medium security fixes (#20683)
  • fix(hono): Do not capture 3xx and 4xx errors and add tests (#20640)
  • fix(nextjs): Skip build modification when SRI is enabled (#20694)
  • fix(opentelemetry): Respect OTEL_SERVICE_NAME, OTEL_RESOURCE_ATTRIBUTES (#20509)
  • chore: Remove bundle-analyzer-scenarios dev packages (#20680)
  • chore(deps): Bump @​hono/node-server from 1.19.10 to 1.19.13 (#20117)
  • chore(deps): Bump @​nestjs packages to fix path-to-regexp ReDoS (#20642)
  • chore(deps): Bump axios from 1.15.0 to 1.15.2 (#20665)
  • chore(deps): Bump ip-address from 10.1.0 to 10.2.0 (#20695)
  • chore(deps): Bump simple-git from 3.33.0 to 3.36.0 (#20696)
  • chore(deps): Bump vulnerable testem version (#20634)

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.52.0

Important Changes

  • Beta release of the official Hono Sentry SDK

    This release marks the beta release of the @sentry/hono Sentry SDK. For details on how to use it, check out the Sentry Hono SDK docs. Please reach out on GitHub if you have any feedback or concerns.

  • feat(browser): Add ingest_settings to v2 log envelope payload (#20453)

    Inference of user data (e.g. IP address, browser name/version) on log events is now gated behind the sendDefaultPii option. Previously, this data was always inferred by default.

Other Changes

  • docs(hono): Add new docs link and move to BETA release (#20666)
  • feat(browser): Add ingest_settings to v2 metrics envelope payload (#20454)
  • feat(browser): Migrate spotlight event processor to ignoreSpans (#20595)
  • feat(cloudflare): Capture request body via httpServerIntegration (#20614)
  • feat(cloudflare): Support rpc trace propagation for WorkerEntrypoint (#20523)
  • feat(cloudflare): Support tracing for queue producer (#20529)
  • feat(core): Apply request data to segment spans in span streaming (#20654)
  • feat(core): Migrate Vercel AI event processor to span streaming (#20608)
  • feat(deno): Add processSegmentSpan to Deno context integration (#20613)
  • feat(http): Portable node:http client instrumentation (#20393)
  • feat(nitro): Add unstorage tracing channel instrumentation (#20615)
  • feat(node-core): Add processSegmentSpan to node context integration (#20678)
  • feat(node): Use diagnostics_channel for redis >= 5.12.0 (#20573)
  • feat(node): Vendor ioredis, redis instrumentations (#20510)
  • feat(replay): Reset replay id from DSC on session expiry/refresh (#20129)
  • fix: Bump fast-xml-parser to fix vulnerability (#20644)
  • fix: Bump vite versions to fix vulnerability (#20646)
  • fix(core): Drain buffers in flush() when there is no transport (#20207)
  • fix(core): Guard against undefined chained in copyProps (#20637)
  • fix(deps): Bump rollup-plugin-license to fix lodash vulnerabilities (#20636)
  • fix(deps): Bump transitive deps for medium security fixes (#20683)
  • fix(hono): Do not capture 3xx and 4xx errors and add tests (#20640)
  • fix(nextjs): Skip build modification when SRI is enabled (#20694)
  • fix(opentelemetry): Respect OTEL_SERVICE_NAME, OTEL_RESOURCE_ATTRIBUTES (#20509)
  • chore: Remove bundle-analyzer-scenarios dev packages (#20680)
  • chore(deps): Bump @​hono/node-server from 1.19.10 to 1.19.13 (#20117)
  • chore(deps): Bump @​nestjs packages to fix path-to-regexp ReDoS (#20642)
  • chore(deps): Bump axios from 1.15.0 to 1.15.2 (#20665)
  • chore(deps): Bump ip-address from 10.1.0 to 10.2.0 (#20695)
  • chore(deps): Bump simple-git from 3.33.0 to 3.36.0 (#20696)

... (truncated)

Commits
  • 4b911e0 release: 10.52.0
  • 781f31c Merge pull request #20707 from getsentry/prepare-release/10.52.0
  • 11a64f6 meta(changelog): Update changelog for 10.52.0
  • e185818 feat(node-core): Add processSegmentSpan to node context integration (#20678)
  • 7e49571 feat(node): use diagnostics_channel for redis >= 5.12.0 (#20573)
  • a8ab715 feat(replay): Reset replay id from DSC on session expiry/refresh (#20129)
  • 7efc03f feat(core): Apply request data to segment spans in span streaming (#20654)
  • 01d0a70 feat(core): Migrate Vercel AI event processor to span streaming (#20608)
  • 12cd3e5 fix(nextjs): Skip build modification when SRI is enabled (#20694)
  • f1f534c fix(deps): Bump transitive deps for medium security fixes (#20683)
  • Additional commits viewable in compare view

Updates @tavily/core from 0.7.2 to 0.7.3

Commits
Maintainer changes

This version was pushed to npm by tomer-yaacoby, a new releaser for @​tavily/core since your current version.


Updates express-rate-limit from 8.4.1 to 8.5.1

Release notes

Sourced from express-rate-limit's releases.

v8.5.1

You can view the changelog here.

v8.5.0

You can view the changelog here.

Commits

Updates inngest from 4.2.4 to 4.3.0

Release notes

Sourced from inngest's releases.

inngest@4.3.0

Minor Changes

  • #1504 5c8f50e1 Thanks @​scottnuma! - Accept Temporal.Duration, Temporal.Instant, and Temporal.ZonedDateTime (and their *Like variants) wherever a timeout or sleep duration is taken: step.sleep(), step.waitForEvent(), step.waitForSignal(), step.invoke(), and function-level cancelOn timeouts. Durations are treated as relative waits; instants and zoned date-times as absolute deadlines.

Patch Changes

  • #1480 60cda73f Thanks @​mar-inngest! - Fix Connect shutdown getting stuck when a late lease-extension ACK recreates a stale in-flight lease entry after request completion or lease loss

inngest@4.2.6

Patch Changes

inngest@4.2.5

Patch Changes

  • #1479 6b9769ca Thanks @​scottnuma! - Fix step.sendSignal() return type to match runtime: Promise<InngestApi.SendSignalResponse> ({ runId: string | undefined }) instead of Promise<null>

  • #1483 d0a59629 Thanks @​Linell! - Fix run IDs not URL encoded in Durable Endpoints

  • #1481 970ded9b Thanks @​Linell! - Improves HMAC signature verification by using a constant-time comparison, which mitigates a potential timing-based signature-recovery attack against the request signature. Also improves handling of timestamps in signatures, including malformed or future-dated values.

  • #1472 9df36dee Thanks @​Linell! - Fix empty body on Vercel serverless Node handlers

  • #1482 e34972d3 Thanks @​Linell! - Hash the signing key used when exporting OTel traces

Changelog

Sourced from inngest's changelog.

4.3.0

Minor Changes

  • #1504 5c8f50e1 Thanks @​scottnuma! - Accept Temporal.Duration, Temporal.Instant, and Temporal.ZonedDateTime (and their *Like variants) wherever a timeout or sleep duration is taken: step.sleep(), step.waitForEvent(), step.waitForSignal(), step.invoke(), and function-level cancelOn timeouts. Durations are treated as relative waits; instants and zoned date-times as absolute deadlines.

Patch Changes

  • #1480 60cda73f Thanks @​mar-inngest! - Fix Connect shutdown getting stuck when a late lease-extension ACK recreates a stale in-flight lease entry after request completion or lease loss

4.2.6

Patch Changes

4.2.5

Patch Changes

  • #1479 6b9769ca Thanks @​scottnuma! - Fix step.sendSignal() return type to match runtime: Promise<InngestApi.SendSignalResponse> ({ runId: string | undefined }) instead of Promise<null>

  • #1483 d0a59629 Thanks @​Linell! - Fix run IDs not URL encoded in Durable Endpoints

  • #1481 970ded9b Thanks @​Linell! - Improves HMAC signature verification by using a constant-time comparison, which mitigates a potential timing-based signature-recovery attack against the request signature. Also improves handling of timestamps in signatures, including malformed or future-dated values.

  • #1472 9df36dee Thanks @​Linell! - Fix empty body on Vercel serverless Node handlers

  • #1482 e34972d3 Thanks @​Linell! - Hash the signing key used when exporting OTel traces

Commits

Updates langchain from 1.3.4 to 1.4.0

Commits
  • b57760c chore: version packages (#10516)
  • 6e2d29e tests(@​langchain/google): Lyria 3 (#10522)
  • 68e0a19 fix(langchain): revert zod import in utils.ts to fix v3/v4 interop (#10545)
  • 50d5f32 revert: Revert "feat(core): Add all chat model/llm invocation params to metad...
  • 8331833 fix(core): normalize single-block content in mergeContent (#10528)
  • 976d689 chore(deps): bump yaml from 2.8.2 to 2.8.3 (#10531)
  • 39cdf81 chore(deps): bump handlebars from 4.7.8 to 4.7.9 (#10530)
  • 5a7a079 chore(deps): bump yaml from 2.8.2 to 2.8.3
  • 7782d84 chore(deps): bump handlebars from 4.7.8 to 4.7.9
  • 3408008 fix(langchain): export createAgent and middleware from browser entry point (#...
  • Additional commits viewable in compare view

Updates lucide-react from 1.11.0 to 1.14.0

Release notes

Sourced from lucide-react's releases.

Version 1.14.0

What's Changed

Full Changelog: lucide-icons/lucide@1.13.0...1.14.0

Version 1.13.0

What's Changed

Full Changelog: lucide-icons/lucide@1.12.0...1.13.0

Version 1.12.0

What's Changed

Full Changelog: lucide-icons/lucide@1.10.0...1.12.0

Commits

Updates mongoose from 9.5.0 to 9.6.2

Release notes

Sourced from mongoose's releases.

9.6.2 / 2026-05-08

  • fix(document): correctly handle modified subpaths when parent path is unset after modifying #16271 #16252
  • types: handle compiling with exactOptionalPropertyTypes #16277 #16273
  • chore: align Node version docs and types #16270 AbdelrahmanHafez

9.6.1 / 2026-04-29

9.6.0 / 2026-04-28

  • feat: upgrade mongodb node driver to 7.2 #16245
  • feat(schematype): support allowNull option to disallow null values even if not required #16237 #15905
  • types(query): make QueryFilter respect string unions and enums #16242 #16240
  • types: export Projector and ArrayProjectionOperators #16243 #16235
Changelog

Sourced from mongoose's changelog.

9.6.2 / 2026-05-08

  • fix(document): correctly handle modified subpaths when parent path is unset after modifying #16271 #16252
  • types: handle compiling with exactOptionalPropertyTypes #16277 #16273
  • chore: align Node version docs and types #16270 AbdelrahmanHafez

9.6.1 / 2026-04-29

9.6.0 / 2026-04-28

  • feat: upgrade mongodb node driver to 7.2 #16245
  • feat(schematype): support allowNull option to disallow null values even if not required #16237 #15905
  • types(query): make QueryFilter respect string unions and enums #16242 #16240
  • types: export Projector and ArrayProjectionOperators #16243 #16235
Commits

Updates next from 16.2.4 to 16.2.6

Release notes

Sourced from next's releases.

v16.2.6

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

v16.2.5

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

Commits
  • ee6e79b v16.2.6
  • afa053d Turbopack: Match proxy matchers with webpack implementation (#93594)
  • 97a154e Turbopack: Fix middleware matcher suffix (#93590)
  • 83899bc [backport] Disable build caches for production/staging/force-preview deploys ...
  • 7b222b9 [backport][test] Pin package manager to patch versions (#93595)
  • a8dc24f [backport] Turbopack: more strict vergen setup (#93587)
  • 766148f v16.2.5
  • 0dd9483 fix: add explicit checks for RSC header (#83) (#98)
  • d166096 fix proxy matching for segment prefetch URLs (#89) (#96)
  • 9d50c0b Strip next-resume header from incoming requests (#92)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.


Updates npm from 11.13.0 to 11.14.1

Release notes

Sourced from npm's releases.

v11.14.1

11.14.1 (2026-05-08)

Bug Fixes

v11.14.0

11.14.0 (2026-05-06)

Features

Bug Fixes

Dependencies

Chores

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
d29cce6 
…y with 21 updates

Bumps the production-dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@langchain/community](https://github.com/langchain-ai/langchainjs-community) | `1.1.27` | `1.1.28` |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.41` | `1.1.45` |
| [@langchain/openai](https://github.com/langchain-ai/langchainjs) | `1.4.4` | `1.4.5` |
| [@mixedbread/sdk](https://github.com/mixedbread-ai/mixedbread-ts) | `0.62.0` | `0.65.0` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.50.0` | `10.52.0` |
| [@tavily/core](https://github.com/tavily-ai/tavily-js) | `0.7.2` | `0.7.3` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.4.1` | `8.5.1` |
| [inngest](https://github.com/inngest/inngest-js/tree/HEAD/packages/inngest) | `4.2.4` | `4.3.0` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.3.4` | `1.4.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.11.0` | `1.14.0` |
| [mongoose](https://github.com/Automattic/mongoose) | `9.5.0` | `9.6.2` |
| [next](https://github.com/vercel/next.js) | `16.2.4` | `16.2.6` |
| [npm](https://github.com/npm/cli) | `11.13.0` | `11.14.1` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.372.1` | `1.372.10` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.5` | `19.2.6` |
| [react-day-picker](https://github.com/gpbl/react-day-picker/tree/HEAD/packages/react-day-picker) | `9.14.0` | `10.0.0` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.2.6` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.74.0` | `7.75.0` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.10.0` | `4.11.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.5.0` | `3.6.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |



Updates `@langchain/community` from 1.1.27 to 1.1.28
- [Release notes](https://github.com/langchain-ai/langchainjs-community/releases)
- [Commits](https://github.com/langchain-ai/langchainjs-community/commits/@langchain/community@1.1.28)

Updates `@langchain/core` from 1.1.41 to 1.1.45
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/commits)

Updates `@langchain/openai` from 1.4.4 to 1.4.5
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/commits)

Updates `@mixedbread/sdk` from 0.62.0 to 0.65.0
- [Release notes](https://github.com/mixedbread-ai/mixedbread-ts/releases)
- [Changelog](https://github.com/mixedbread-ai/mixedbread-ts/blob/main/CHANGELOG.md)
- [Commits](mixedbread-ai/mixedbread-ts@v0.62.0...v0.65.0)

Updates `@sentry/nextjs` from 10.50.0 to 10.52.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.50.0...10.52.0)

Updates `@tavily/core` from 0.7.2 to 0.7.3
- [Commits](https://github.com/tavily-ai/tavily-js/commits)

Updates `express-rate-limit` from 8.4.1 to 8.5.1
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.4.1...v8.5.1)

Updates `inngest` from 4.2.4 to 4.3.0
- [Release notes](https://github.com/inngest/inngest-js/releases)
- [Changelog](https://github.com/inngest/inngest-js/blob/main/packages/inngest/CHANGELOG.md)
- [Commits](https://github.com/inngest/inngest-js/commits/inngest@4.3.0/packages/inngest)

Updates `langchain` from 1.3.4 to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.3.4...@langchain/openai@1.4.0)

Updates `lucide-react` from 1.11.0 to 1.14.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.14.0/packages/lucide-react)

Updates `mongoose` from 9.5.0 to 9.6.2
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@9.5.0...9.6.2)

Updates `next` from 16.2.4 to 16.2.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.2.4...v16.2.6)

Updates `npm` from 11.13.0 to 11.14.1
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/v11.14.1/CHANGELOG.md)
- [Commits](npm/cli@v11.13.0...v11.14.1)

Updates `posthog-js` from 1.372.1 to 1.372.10
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.372.1...posthog-js@1.372.10)

Updates `react` from 19.2.5 to 19.2.6
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react)

Updates `react-day-picker` from 9.14.0 to 10.0.0
- [Release notes](https://github.com/gpbl/react-day-picker/releases)
- [Changelog](https://github.com/gpbl/react-day-picker/blob/main/packages/react-day-picker/CHANGELOG.md)
- [Commits](https://github.com/gpbl/react-day-picker/commits/v10.0.0/packages/react-day-picker)

Updates `react-dom` from 19.2.5 to 19.2.6
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom)

Updates `react-hook-form` from 7.74.0 to 7.75.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.74.0...v7.75.0)

Updates `react-resizable-panels` from 4.10.0 to 4.11.0
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.10.0...4.11.0)

Updates `tailwind-merge` from 3.5.0 to 3.6.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.5.0...v3.6.0)

Updates `zod` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.3)

---
updated-dependencies:
- dependency-name: "@langchain/community"
  dependency-version: 1.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@langchain/core"
  dependency-version: 1.1.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@langchain/openai"
  dependency-version: 1.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@mixedbread/sdk"
  dependency-version: 0.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tavily/core"
  dependency-version: 0.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: express-rate-limit
  dependency-version: 8.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: inngest
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: langchain
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: mongoose
  dependency-version: 9.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: npm
  dependency-version: 11.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: posthog-js
  dependency-version: 1.372.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-day-picker
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-resizable-panels
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 11, 2026

Assignees

The following users could not be added as assignees: vectorMindsAI. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants