Skip to content

chore(deps): bump the sandbox group across 7 directories with 34 updates - #81

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/infra/containers/sandbox/app-generators/sandbox-5c5a4051ed
Open

chore(deps): bump the sandbox group across 7 directories with 34 updates#81
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/infra/containers/sandbox/app-generators/sandbox-5c5a4051ed

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the sandbox group with 1 update in the /infra/containers/sandbox/app-generators directory: create-next-app.
Bumps the sandbox group with 23 updates in the /infra/containers/sandbox/app-templates/expo directory:

Package From To
react-dom 19.2.3 19.2.8
react 19.2.3 19.2.8
@types/react 19.2.2 19.2.17
@expo/metro-runtime 57.0.3 57.0.7
@expo/ui 57.0.4 57.0.7
expo 57.0.4 57.0.8
expo-constants 57.0.3 57.0.7
expo-device 57.0.0 57.0.1
expo-font 57.0.0 57.0.1
expo-glass-effect 57.0.0 57.0.1
expo-image 57.0.0 57.0.1
expo-linking 57.0.2 57.0.4
expo-router 57.0.4 57.0.8
expo-splash-screen 57.0.2 57.0.5
expo-status-bar 57.0.0 57.0.1
expo-symbols 57.0.0 57.0.1
expo-system-ui 57.0.0 57.0.1
expo-web-browser 57.0.0 57.0.2
react-native-reanimated 4.5.0 4.5.3
react-native-safe-area-context 5.7.0 5.8.0
react-native-screens 4.25.2 4.26.2
react-native-web 0.21.0 0.21.2
react-native-worklets 0.10.0 0.11.3

Bumps the sandbox group with 6 updates in the /infra/containers/sandbox/app-templates/next directory:

Package From To
@biomejs/biome 2.5.4 2.5.5
@tailwindcss/postcss 4.3.2 4.3.3
next 16.2.11 16.2.12
react-dom 19.2.7 19.2.8
react 19.2.7 19.2.8
tailwindcss 4.3.2 4.3.3

Bumps the sandbox group with 2 updates in the /infra/containers/sandbox/browser-driver directory: @browserbasehq/stagehand and playwright-core.
Bumps the sandbox group with 3 updates in the /infra/containers/sandbox/doc-runtime directory: react-dom, react and recharts.
Bumps the sandbox group with 2 updates in the /infra/containers/sandbox/extension-overrides/parquet-viewer directory: thrift and ws.
Bumps the sandbox group with 1 update in the /infra/containers/sandbox/package-manager directory: pnpm.

Updates create-next-app from 16.2.11 to 16.2.12

Release notes

Sourced from create-next-app's releases.

v16.2.12

What's Changed

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

Commits

Updates react-dom from 19.2.3 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates react from 19.2.3 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 19.2.2 to 19.2.17

Commits

Updates @expo/metro-runtime from 57.0.3 to 57.0.7

Commits

Updates @expo/ui from 57.0.4 to 57.0.7

Commits

Updates expo from 57.0.4 to 57.0.8

Commits

Updates expo-constants from 57.0.3 to 57.0.7

Commits

Updates expo-device from 57.0.0 to 57.0.1

Changelog

Sourced from expo-device's changelog.

Changelog

This is the log of notable changes to the Expo client that are developer-facing. Package-specific changes not released in any SDK will be added here just before the release. Until then, you can find them in changelogs of the individual packages (see packages directory).

Unpublished

📚 3rd party library updates

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

Commits

Updates expo-font from 57.0.0 to 57.0.1

Changelog

Sourced from expo-font's changelog.

Changelog

This is the log of notable changes to the Expo client that are developer-facing. Package-specific changes not released in any SDK will be added here just before the release. Until then, you can find them in changelogs of the individual packages (see packages directory).

Unpublished

📚 3rd party library updates

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

Commits

Updates expo-glass-effect from 57.0.0 to 57.0.1

Changelog

Sourced from expo-glass-effect's changelog.

Changelog

This is the log of notable changes to the Expo client that are developer-facing. Package-specific changes not released in any SDK will be added here just before the release. Until then, you can find them in changelogs of the individual packages (see packages directory).

Unpublished

📚 3rd party library updates

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

Commits

Updates expo-image from 57.0.0 to 57.0.1

Changelog

Sourced from expo-image's changelog.

Changelog

This is the log of notable changes to the Expo client that are developer-facing. Package-specific changes not released in any SDK will be added here just before the release. Until then, you can find them in changelogs of the individual packages (see packages directory).

Unpublished

📚 3rd party library updates

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

Commits

Updates expo-linking from 57.0.2 to 57.0.4

Commits

Updates expo-router from 57.0.4 to 57.0.8

Commits

Updates expo-splash-screen from 57.0.2 to 57.0.5

Commits

Updates expo-status-bar from 57.0.0 to 57.0.1

Changelog

Sourced from expo-status-bar's changelog.

Changelog

This is the log of notable changes to the Expo client that are developer-facing. Package-specific changes not released in any SDK will be added here just before the release. Until then, you can find them in changelogs of the individual packages (see packages directory).

Unpublished

📚 3rd party library updates

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

Commits

Updates expo-symbols from 57.0.0 to 57.0.1

Changelog

Sourced from expo-symbols's changelog.

Changelog

This is the log of notable changes to the Expo client that are developer-facing. Package-specific changes not released in any SDK will be added here just before the release. Until then, you can find them in changelogs of the individual packages (see packages directory).

Unpublished

📚 3rd party library updates

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

Commits

Updates expo-system-ui from 57.0.0 to 57.0.1

Changelog

Sourced from expo-system-ui's changelog.

Changelog

This is the log of notable changes to the Expo client that are developer-facing. Package-specific changes not released in any SDK will be added here just before the release. Until then, you can find them in changelogs of the individual packages (see packages directory).

Unpublished

📚 3rd party library updates

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

Commits

Updates expo-web-browser from 57.0.0 to 57.0.2

Changelog

Sourced from expo-web-browser's changelog.

Changelog

This is the log of notable changes to the Expo client that are developer-facing. Package-specific changes not released in any SDK will be added here just before the release. Until then, you can find them in changelogs of the individual packages (see packages directory).

Unpublished

📚 3rd party library updates

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

Commits

Updates react-native-reanimated from 4.5.0 to 4.5.3

Release notes

Sourced from react-native-reanimated's releases.

Reanimated - 4.5.3

What's Changed

Full Changelog: software-mansion/react-native-reanimated@4.5.2...4.5.3

Reanimated - 4.5.2

What's Changed

Reanimated version supporting Worklets 0.11.

Full Changelog: software-mansion/react-native-reanimated@4.5.1...4.5.2

Reanimated - 4.5.1

What's Changed

Full Changelog: software-mansion/react-native-reanimated@4.5.0...4.5.1

Commits
  • 312aaff release(Reanimated): 4.5.1
  • 610f2d5 cherry-pick(4.5-stable): Prevent animated views from reverting to stale value...
  • 66859a1 cherry-pick(4.5-stable): Fix crash from withheld exiting layout animations in...
  • 55c6bcc release(Reanimated): 4.5.2
  • 04a7c40 release(Reanimated): 4.5.1 (#9834)
  • b8ea72a cherry-pick(4.5-stable): Android crash on empty CSS strokeDasharray from the ...
  • d58c7e2 cherry-pick(4.5-stable): prevent useAnimatedKeyboard crash "Can't change in...
  • b19e4ec cherry-pick(4.5-stable): restore opacity for flaky entering animations under ...
  • dfd49fa cherry-pick(4.5-stable): Pass -fno-pch-timestamp so ccache can reuse the Andr...
  • 726430d cherry-pick(4.5-stable): animate react-native-svg via CSS on web in minified ...
  • Additional commits viewable in compare view

Updates react-native-safe-area-context from 5.7.0 to 5.8.0

Release notes

Sourced from react-native-safe-area-context's releases.

Release 5.8.0

5.8.0 (2026-05-18)

Changes

  • remove UIImplementation usage from SafeAreaView (#730) (ef89f4d)
Commits

Updates react-native-screens from 4.25.2 to 4.26.2

Release notes

Sourced from react-native-screens's releases.

4.26.2

What's Changed

This patch release for 4.26.2 brings important stability improvements specifically for Android.

Key updates include preventing unexpected screen unmounting during fast navigation in Stack v5 by fixing transition finalization, as well as resolving a potential crash related to container state restoration in Tabs.

[!NOTE]

This version supports React Native 0.84+.

🐞 Bugfixes

  • fix(Android, Stack v5): Prevent screen unmounting on fast navigation (fix transition finalization) (#4342)
  • fix(Android, Tabs): fix potential crash with container state restoration (#4341)

Full Changelog: software-mansion/react-native-screens@4.26.1...4.26.2

4.26.1

What's Changed

This patch release for 4.26.1 brings a few targeted bug fixes for both iOS and Android, alongside a minor package configuration adjustment to improve dependency compatibility.

[!NOTE]

This version supports React Native 0.84+.

🐞 Bugfixes

  • fix(Android, Stack v4): default consume*Inset props to true (#4322)
  • fix(iOS, Split): Fix ShadowState inside SplitView columns after transition (#4309)

🔢 Misc

  • chore: remove explicit react-native peer dependency version from package config (#4328)
  • release: 4.26.1 (#4330)

Full Changelog: software-mansion/react-native-screens@4.26.0...4.26.1

4.26.0

What's Changed

This release brings a stable Tabs API along with numerous fixes, including improved coordination of FormSheet animations and keyboard interaction on Android, and fixed touch handling for Pressables in transparent headers on iOS.

We're also actively working on v5 of the library — this release adds an experimental standalone FormSheet component for both Android and iOS, and extends the menu API of the new Native Stack with several new features.

[!NOTE]

This version supports React Native 0.84+.

✅ Improvements

... (truncated)

Commits
  • 886754c release: 4.26.2
  • 7b280df fix(Android, Stack v5): Prevent screen unmounting on fast navigation (fix tra...
  • 970f950 fix(Android, Tabs): fix potential crash with container state restoration (#4341)
  • 7f2162b release: 4.26.1 (#4330)
  • 5767eff chore: remove explicit react-native peer dependency version from package conf...
  • f51e6eb fix(Android, Stack v4): default consume*Inset props to true (#4322)
  • fa041e7 fix(iOS, Split): Fix ShadowState inside SplitView columns after transition (#...
  • 7c1b491 release: 4.26.0 (#4304)
  • baeac78 fix(iOS): hide react symbols from swift (#4224)
  • 9d68e8f fix(iOS, Stack v4): fix header positioning in shadow tree (#4286)
  • Additional commits viewable in compare view

Updates react-native-web from 0.21.0 to 0.21.2

Release notes

Sourced from react-native-web's releases.

0.21.2

What's Changed

New Contributors

Full Changelog: necolas/react-native-web@0.21.1...0.21.2

0.21.1

Full Changelog: necolas/react-native-web@0.21.0...0.21.1

Commits
  • a9de220 0.21.2
  • a78ec28 feat(accessibility): add inert to forwardedProps
  • d902158 Fix memory leak in AnimatedProps constructor
  • ac73f24 Modal: Significantly improve animation
  • fb510d0 Fix benchmarks
  • 21342d4 Fix pointerEvents propagation
  • 2da322a 0.21.1
  • ae6ad8f Fix Animated.loop and Animated.sequence crash
  • e351aad Fix memory leak with Animated API
  • ef03bdd Add 'Version' to Platform
  • Additional commits viewable in compare view

Updates react-native-worklets from 0.10.0 to 0.11.3

Release notes

Sourced from react-native-worklets's releases.

Worklets - 0.11.3

What's Changed

Full Changelog: software-mansion/react-native-reanimated@worklets-0.11.2...worklets-0.11.3

Worklets - 0.11.2

What's Changed

Full Changelog: software-mansion/react-native-reanimated@worklets-0.11.1...worklets-0.11.2

Worklets - 0.11.1

What's Changed

Full Changelog: software-mansion/react-native-reanimated@worklets-0.11.0...worklets-0.11.1

Worklets - 0.11.0

Key changes

Experimental bytecode worklets in Legacy Eval Mode

Legacy Eval Mode can now optionally evaluate worklets from Hermes bytecode instead of plain code in production builds. This is an opt-in workaround for the Hermes V1 memory issue (software-mansion/react-native-reanimated#9650).

https://docs.swmansion.com/react-native-worklets/docs/worklets-babel-plugin/plugin-options

Other changes

New Contributors

... (truncated)

Commits
  • e5ccb1e release(Worklets): 0.11.3
  • 6a426b6 fix(Worklets): don't mutate shared Babel options in plugin (#10032)
  • 470d425 release(Worklets): 0.11.2
  • f20aaac fix(Worklets): networking in Bundle Mode on some setups (#9897)
  • c9c7c17 fix: Prevent crashes on empty worklet source maps in debug builds (#9920)
  • afa43be release(Worklets): 0.11.1
  • 338b87c Changed error to warning in createSerializable unserializable code branch
  • af8aa3c release(Worklets): 0.11.0
  • e919317 fix(Worklets): resolve @​babel/preset-typescript relative to react-native-work...
  • 2a9295b Fix: type safety in Android build configuration for React Native directory re...
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.4 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attrib...

    Description has been truncated

@dependabot
chore(deps): bump the sandbox group across 7 directories with 34 updates
0d26ab3 
Bumps the sandbox group with 1 update in the /infra/containers/sandbox/app-generators directory: [create-next-app](https://github.com/vercel/next.js/tree/HEAD/packages/create-next-app).
Bumps the sandbox group with 23 updates in the /infra/containers/sandbox/app-templates/expo directory:

| Package | From | To |
| --- | --- | --- |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.2.8` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.2` | `19.2.17` |
| [@expo/metro-runtime](https://github.com/expo/expo) | `57.0.3` | `57.0.7` |
| [@expo/ui](https://github.com/expo/expo/tree/HEAD/packages/expo-ui) | `57.0.4` | `57.0.7` |
| [expo](https://github.com/expo/expo/tree/HEAD/packages/expo) | `57.0.4` | `57.0.8` |
| [expo-constants](https://github.com/expo/expo/tree/HEAD/packages/expo-constants) | `57.0.3` | `57.0.7` |
| [expo-device](https://github.com/expo/expo/tree/HEAD/packages/expo-device) | `57.0.0` | `57.0.1` |
| [expo-font](https://github.com/expo/expo/tree/HEAD/packages/expo-font) | `57.0.0` | `57.0.1` |
| [expo-glass-effect](https://github.com/expo/expo/tree/HEAD/packages/expo-glass-effect) | `57.0.0` | `57.0.1` |
| [expo-image](https://github.com/expo/expo/tree/HEAD/packages/expo-image) | `57.0.0` | `57.0.1` |
| [expo-linking](https://github.com/expo/expo/tree/HEAD/packages/expo-linking) | `57.0.2` | `57.0.4` |
| [expo-router](https://github.com/expo/expo/tree/HEAD/packages/expo-router) | `57.0.4` | `57.0.8` |
| [expo-splash-screen](https://github.com/expo/expo/tree/HEAD/packages/expo-splash-screen) | `57.0.2` | `57.0.5` |
| [expo-status-bar](https://github.com/expo/expo/tree/HEAD/packages/expo-status-bar) | `57.0.0` | `57.0.1` |
| [expo-symbols](https://github.com/expo/expo/tree/HEAD/packages/expo-symbols) | `57.0.0` | `57.0.1` |
| [expo-system-ui](https://github.com/expo/expo/tree/HEAD/packages/expo-system-ui) | `57.0.0` | `57.0.1` |
| [expo-web-browser](https://github.com/expo/expo/tree/HEAD/packages/expo-web-browser) | `57.0.0` | `57.0.2` |
| [react-native-reanimated](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated) | `4.5.0` | `4.5.3` |
| [react-native-safe-area-context](https://github.com/AppAndFlow/react-native-safe-area-context) | `5.7.0` | `5.8.0` |
| [react-native-screens](https://github.com/software-mansion/react-native-screens) | `4.25.2` | `4.26.2` |
| [react-native-web](https://github.com/necolas/react-native-web) | `0.21.0` | `0.21.2` |
| [react-native-worklets](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-worklets) | `0.10.0` | `0.11.3` |

Bumps the sandbox group with 6 updates in the /infra/containers/sandbox/app-templates/next directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.4` | `2.5.5` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.2` | `4.3.3` |
| [next](https://github.com/vercel/next.js) | `16.2.11` | `16.2.12` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.2` | `4.3.3` |

Bumps the sandbox group with 2 updates in the /infra/containers/sandbox/browser-driver directory: [@browserbasehq/stagehand](https://github.com/browserbase/stagehand/tree/HEAD/packages/core) and [playwright-core](https://github.com/microsoft/playwright).
Bumps the sandbox group with 3 updates in the /infra/containers/sandbox/doc-runtime directory: [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom), [react](https://github.com/react/react/tree/HEAD/packages/react) and [recharts](https://github.com/recharts/recharts).
Bumps the sandbox group with 2 updates in the /infra/containers/sandbox/extension-overrides/parquet-viewer directory: [thrift](https://github.com/apache/thrift) and [ws](https://github.com/websockets/ws).
Bumps the sandbox group with 1 update in the /infra/containers/sandbox/package-manager directory: [pnpm](https://github.com/pnpm/pnpm/tree/HEAD/pnpm11/pnpm).


Updates `create-next-app` from 16.2.11 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.2.12/packages/create-next-app)

Updates `react-dom` from 19.2.3 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `react` from 19.2.3 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.2 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@expo/metro-runtime` from 57.0.3 to 57.0.7
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits)

Updates `@expo/ui` from 57.0.4 to 57.0.7
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-ui)

Updates `expo` from 57.0.4 to 57.0.8
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo)

Updates `expo-constants` from 57.0.3 to 57.0.7
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-constants)

Updates `expo-device` from 57.0.0 to 57.0.1
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-device)

Updates `expo-font` from 57.0.0 to 57.0.1
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-font)

Updates `expo-glass-effect` from 57.0.0 to 57.0.1
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-glass-effect)

Updates `expo-image` from 57.0.0 to 57.0.1
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-image)

Updates `expo-linking` from 57.0.2 to 57.0.4
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-linking)

Updates `expo-router` from 57.0.4 to 57.0.8
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-router)

Updates `expo-splash-screen` from 57.0.2 to 57.0.5
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-splash-screen)

Updates `expo-status-bar` from 57.0.0 to 57.0.1
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-status-bar)

Updates `expo-symbols` from 57.0.0 to 57.0.1
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-symbols)

Updates `expo-system-ui` from 57.0.0 to 57.0.1
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-system-ui)

Updates `expo-web-browser` from 57.0.0 to 57.0.2
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-web-browser)

Updates `react-native-reanimated` from 4.5.0 to 4.5.3
- [Release notes](https://github.com/software-mansion/react-native-reanimated/releases)
- [Changelog](https://github.com/software-mansion/react-native-reanimated/blob/main/packages/react-native-reanimated/RELEASE.md)
- [Commits](https://github.com/software-mansion/react-native-reanimated/commits/4.5.3/packages/react-native-reanimated)

Updates `react-native-safe-area-context` from 5.7.0 to 5.8.0
- [Release notes](https://github.com/AppAndFlow/react-native-safe-area-context/releases)
- [Commits](AppAndFlow/react-native-safe-area-context@v5.7.0...v5.8.0)

Updates `react-native-screens` from 4.25.2 to 4.26.2
- [Release notes](https://github.com/software-mansion/react-native-screens/releases)
- [Commits](software-mansion/react-native-screens@4.25.2...4.26.2)

Updates `react-native-web` from 0.21.0 to 0.21.2
- [Release notes](https://github.com/necolas/react-native-web/releases)
- [Commits](necolas/react-native-web@0.21.0...0.21.2)

Updates `react-native-worklets` from 0.10.0 to 0.11.3
- [Release notes](https://github.com/software-mansion/react-native-reanimated/releases)
- [Commits](https://github.com/software-mansion/react-native-reanimated/commits/worklets-0.11.3/packages/react-native-worklets)

Updates `@biomejs/biome` from 2.5.4 to 2.5.5
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.5/packages/@biomejs/biome)

Updates `@tailwindcss/postcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss)

Updates `next` from 16.2.11 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.2.12)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `tailwindcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `@browserbasehq/stagehand` from 3.7.0 to 3.7.1
- [Release notes](https://github.com/browserbase/stagehand/releases)
- [Changelog](https://github.com/browserbase/stagehand/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/browserbase/stagehand/commits/stagehand-server-v3/v3.7.1/packages/core)

Updates `playwright-core` from 1.61.1 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.0)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `recharts` from 3.2.1 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.2.1...v3.10.1)

Updates `thrift` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md)
- [Commits](apache/thrift@v0.23.0...v0.24.0)

Updates `ws` from 5.2.5 to 5.2.7
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@5.2.5...5.2.7)

Updates `pnpm` from 11.15.0 to 11.17.0
- [Release notes](https://github.com/pnpm/pnpm/releases)
- [Commits](https://github.com/pnpm/pnpm/commits/v11.17.0/pnpm11/pnpm)

---
updated-dependencies:
- dependency-name: create-next-app
  dependency-version: 16.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: "@expo/metro-runtime"
  dependency-version: 57.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: "@expo/ui"
  dependency-version: 57.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo
  dependency-version: 57.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-constants
  dependency-version: 57.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-device
  dependency-version: 57.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-font
  dependency-version: 57.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-glass-effect
  dependency-version: 57.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-image
  dependency-version: 57.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-linking
  dependency-version: 57.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-router
  dependency-version: 57.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-splash-screen
  dependency-version: 57.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-status-bar
  dependency-version: 57.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-symbols
  dependency-version: 57.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-system-ui
  dependency-version: 57.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: expo-web-browser
  dependency-version: 57.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: react-native-reanimated
  dependency-version: 4.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: react-native-safe-area-context
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sandbox
- dependency-name: react-native-screens
  dependency-version: 4.26.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sandbox
- dependency-name: react-native-web
  dependency-version: 0.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: react-native-worklets
  dependency-version: 0.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sandbox
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: next
  dependency-version: 16.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: "@browserbasehq/stagehand"
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: playwright-core
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sandbox
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sandbox
- dependency-name: thrift
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sandbox
- dependency-name: ws
  dependency-version: 5.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sandbox
- dependency-name: pnpm
  dependency-version: 11.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sandbox
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from iamjr15 as a code owner July 27, 2026 11:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment
@dependabot @github

dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@iamjr15 iamjr15 mentioned this pull request Jul 31, 2026
Merged
1 task
iamjr15 added a commit that referenced this pull request Jul 31, 2026
@iamjr15
ci: dependabot title exemption, dependency floors, masked account id (#…
9294a04 
…110)

Phase C of the OSS-ready program.

- **PR-title gate**: Conventional-Commits pattern still enforced for
all; the 72-char ceiling now exempts `dependabot[bot]` (titles are
machine-generated and unshortenable — #76/#78 fail today solely on
length; commitlint's own ceiling is 100).
- **Dependency floors**: `dompurify` → 3.4.12 (closes alert #5);
`body-parser` → 2.3.0 (resolved 2.2.2 was in-range via express + MCP-SDK
paths, closes alert #4).
- **`CLOUDFLARE_ACCOUNT_ID`** now read from secrets (masked in public
run logs; secret created beforehand; the variable is deleted after the
next validated dispatch — historical logs remain unredacted regardless).
- `build-snapshot` environment casing normalized to `Production`;
sandbox Dockerfile comment ties alerts #9/#8 to the existing overlay
mitigation.

## Verification notes

- [x] `pnpm lint` / `pnpm typecheck` / `pnpm turbo build --force` /
`pnpm deadcode` / `pnpm architecture:check` / `pnpm turbo skills:build`
— independent clean-install rerun
- Lockfile diff limited to the two override resolutions; `pnpm why
body-parser` single-resolves 2.3.0.
- Post-merge: rebase #76/#78 (title gate), re-run #96 (expired
quarantine), merge #81 after diff re-check; dispatch deploy to validate
the secret-backed account id; then delete the variable.
@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

1 similar comment
@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

16 similar comments
@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

8 similar comments
@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@iamjr15

iamjr15 commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@iamjr15 iamjr15 Awaiting requested review from iamjr15 iamjr15 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@iamjr15