Skip to content

chore(deps): bump the production-minor-and-patch group across 1 directory with 12 updates - #71

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-and-patch-94a6157c18
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-and-patch-94a6157c18

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown

Bumps the production-minor-and-patch group with 12 updates in the / directory:

Package From To
age-encryption 0.3.0 0.3.1
react 19.2.7 19.3.0
react-dom 19.2.7 19.3.0
@cloudflare/workers-oauth-provider 0.10.1 0.10.3
agents 0.20.1 0.24.0
hono 4.13.5 4.13.8
partyserver 0.3.2 0.5.10
y-partyserver 2.1.2 2.2.0
yjs 13.6.20 13.6.32
yaml 2.9.0 2.9.1
zod 4.4.3 4.6.5
y-codemirror.next 0.3.5 0.3.6

Updates age-encryption from 0.3.0 to 0.3.1

Release notes

Sourced from age-encryption's releases.

v0.3.1

Minor compatibility and usability fixes.

Commits
  • 38b8b10 v0.3.1
  • a410194 fido2prf: try built-in UV before requesting a PIN (#59)
  • 8138fb8 Explain how to use generated fido2prf identities (#58)
  • b2ca21a Support non-compliant PRF extension implementations (#50)
  • 4ddd194 Mark fido2prf recipients as post-quantum (#57)
  • 29cc34b Handle long Bech32 encodings with scure-base 2.4 (#55)
  • 4472215 Update sandboxed-step to v1.2.2 (#56)
  • 647b5bb Remove global type augmentation for WebAuthn credential hints
  • cc9b292 Allow slow types in JSR for now
  • See full diff in compare view

Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Commits

Updates react-dom from 19.2.7 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.3.0 (September 9, 2026)

New React Features

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@dependabot
dependabot Bot requested a review from msinclair25 as a code owner September 21, 2026 16:12
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-minor-and-patch-94a6157c18 branch 2 times, most recently from 76b5d8c to c3ab139 Compare September 22, 2026 10:28
…tory with 12 updates

Bumps the production-minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [age-encryption](https://github.com/FiloSottile/typage) | `0.3.0` | `0.3.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` |
| [@cloudflare/workers-oauth-provider](https://github.com/cloudflare/workers-oauth-provider) | `0.10.1` | `0.10.3` |
| [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents) | `0.20.1` | `0.24.0` |
| [hono](https://github.com/honojs/hono) | `4.13.5` | `4.13.8` |
| [partyserver](https://github.com/cloudflare/partykit) | `0.3.2` | `0.5.10` |
| [y-partyserver](https://github.com/cloudflare/partykit) | `2.1.2` | `2.2.0` |
| [yjs](https://github.com/yjs/yjs) | `13.6.20` | `13.6.32` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |
| [y-codemirror.next](https://github.com/yjs/y-codemirror.next) | `0.3.5` | `0.3.6` |



Updates `age-encryption` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/FiloSottile/typage/releases)
- [Commits](FiloSottile/typage@v0.3.0...v0.3.1)

Updates `react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@cloudflare/workers-oauth-provider` from 0.10.1 to 0.10.3
- [Release notes](https://github.com/cloudflare/workers-oauth-provider/releases)
- [Changelog](https://github.com/cloudflare/workers-oauth-provider/blob/main/CHANGELOG.md)
- [Commits](cloudflare/workers-oauth-provider@v0.10.1...v0.10.3)

Updates `agents` from 0.20.1 to 0.24.0
- [Release notes](https://github.com/cloudflare/agents/releases)
- [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/agents/commits/agents@0.24.0/packages/agents)

Updates `hono` from 4.13.5 to 4.13.8
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.5...v4.13.8)

Updates `partyserver` from 0.3.2 to 0.5.10
- [Release notes](https://github.com/cloudflare/partykit/releases)
- [Commits](https://github.com/cloudflare/partykit/compare/partyserver@0.3.2...partyserver@0.5.10)

Updates `y-partyserver` from 2.1.2 to 2.2.0
- [Release notes](https://github.com/cloudflare/partykit/releases)
- [Commits](https://github.com/cloudflare/partykit/compare/y-partyserver@2.1.2...y-partyserver@2.2.0)

Updates `yjs` from 13.6.20 to 13.6.32
- [Release notes](https://github.com/yjs/yjs/releases)
- [Commits](yjs/yjs@v13.6.20...v13.6.32)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

Updates `y-codemirror.next` from 0.3.5 to 0.3.6
- [Release notes](https://github.com/yjs/y-codemirror.next/releases)
- [Commits](yjs/y-codemirror.next@v0.3.5...v0.3.6)

---
updated-dependencies:
- dependency-name: "@cloudflare/workers-oauth-provider"
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: age-encryption
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: agents
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: hono
  dependency-version: 4.13.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: partyserver
  dependency-version: 0.5.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: y-codemirror.next
  dependency-version: 0.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: y-partyserver
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: yjs
  dependency-version: 13.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-minor-and-patch-94a6157c18 branch from c3ab139 to 6adf624 Compare September 24, 2026 21:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants