Skip to content

chore(deps): Bump the production-minor-patch group across 1 directory with 12 updates - #50

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-2e258db309
Open

chore(deps): Bump the production-minor-patch group across 1 directory with 12 updates#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-2e258db309

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 12 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.115.0 0.116.0
@aws-sdk/client-s3 3.1100.0 3.1106.0
@aws-sdk/s3-request-presigner 3.1100.0 3.1106.0
@hookform/resolvers 5.5.7 5.7.1
@vercel/blob 2.6.1 2.7.0
better-auth 1.6.25 1.6.26
cron-parser 5.6.2 5.7.0
dompurify 3.4.12 3.4.13
lucide-react 1.28.0 1.30.0
mermaid 11.16.0 11.16.1
next 16.2.12 16.3.0
react-hook-form 7.83.0 7.84.0

Updates @anthropic-ai/sdk from 0.115.0 to 0.116.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.116.0

0.116.0 (2026-08-07)

Full Changelog: sdk-v0.115.0...sdk-v0.116.0

Features

  • api: add mid-conversation-tool-changes-2026-07-01 beta (70e04f6)
  • api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (1336a4a)
  • tools: make bash timeout and abort errors matchable by class (#259) (201b12e)

Bug Fixes

  • client: use hardcoded User-Agent strings instead of constructor names (0b97f04)

Chores

  • api: remove retired Claude Opus 4.1 models (11b685c)
  • docs: small updates to descriptions (413cc5f)
  • docs: updates to a few documentation strings (c38a1de)
  • internal/deps: bump @​babel/core and @​babel/helpers to 7.29.7 (#261) (3164934)
  • internal/deps: install tsc-multi from the npm registry (#265) (c787f90)
  • internal: codegen related update (73b3d61)
Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.116.0 (2026-08-07)

Full Changelog: sdk-v0.115.0...sdk-v0.116.0

Features

  • api: add mid-conversation-tool-changes-2026-07-01 beta (70e04f6)
  • api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (1336a4a)
  • tools: make bash timeout and abort errors matchable by class (#259) (201b12e)

Bug Fixes

  • client: use hardcoded User-Agent strings instead of constructor names (0b97f04)

Chores

  • api: remove retired Claude Opus 4.1 models (11b685c)
  • docs: small updates to descriptions (413cc5f)
  • docs: updates to a few documentation strings (c38a1de)
  • internal/deps: bump @​babel/core and @​babel/helpers to 7.29.7 (#261) (3164934)
  • internal/deps: install tsc-multi from the npm registry (#265) (c787f90)
  • internal: codegen related update (73b3d61)
Commits
  • ed02a89 chore: release main
  • d72ff6a feat(api): add support for session budgets, advisor tool, pinned inference lo...
  • dbfed51 chore(internal/deps): refresh provider package dev tooling to mirror-availabl...
  • b7e95bf chore(docs): updates to a few documentation strings
  • 9efb7bd chore(api): remove retired Claude Opus 4.1 models
  • 342d422 chore(internal/deps): install tsc-multi from the npm registry (#265)
  • 501955c chore(internal/deps): bump @​babel/core and @​babel/helpers to 7.29.7 (#261)
  • 6641c5e feat(tools): make bash timeout and abort errors matchable by class (#259)
  • e421c43 chore(docs): small updates to descriptions
  • c0a963e feat(api): add mid-conversation-tool-changes-2026-07-01 beta
  • Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1100.0 to 3.1106.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1106.0

3.1106.0(2026-08-07)

New Features
  • clients: update client endpoints as of 2026-08-07 (c5d05426)
  • client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
  • client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
  • client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
  • client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
  • client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
  • client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
  • client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
  • client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores
  • lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)
New Features
  • clients: update client endpoints as of 2026-08-06 (e4f7b32f)
  • client-cloudwatch-logs: This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes. (e17fff6f)
  • client-socialmessaging: Add support for WhatsApp Conversions APIs. (5c29a869)
  • client-gamelift: Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes. (30dfd63a)
  • client-securityhub: Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features. (e44b3582)
  • client-bedrock-agentcore-control: Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances. (865d21ef)
  • client-device-farm: Adds support for service generated insights across runs, jobs, and tests. (6c601b71)
  • client-sagemaker: Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing. (14bd2ac7)
  • client-agent-registry-control: Agent Registry's Public Preview release (a137863d)
  • client-backup: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (636228a9)
  • client-mediatailor: AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls. (1cf61475)
  • client-marketplace-agreement: GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D"). (50b0d6d5)
  • client-agent-registry: Agent Registry's Public Preview release (632ae479)
  • client-kafka: MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you (b7e31937)
  • client-bedrock-agentcore: Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider. (bd301533)
  • client-auto-scaling: EC2 Auto Scaling now supports being managed by other AWS services via the operator field. (f5d54fce)
  • client-ec2: Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score. (43673842)
  • client-marketplace-discovery: GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples. (f4fd7ae7)
  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf65602)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1105.0 (2026-08-06)

Features

  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf6560)

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/client-s3

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/client-s3

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/client-s3

3.1101.0 (2026-07-31)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/s3-request-presigner from 3.1100.0 to 3.1106.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1106.0

3.1106.0(2026-08-07)

New Features
  • clients: update client endpoints as of 2026-08-07 (c5d05426)
  • client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
  • client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
  • client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
  • client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
  • client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
  • client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
  • client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
  • client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores
  • lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)
New Features
  • clients: update client endpoints as of 2026-08-06 (e4f7b32f)
  • client-cloudwatch-logs: This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes. (e17fff6f)
  • client-socialmessaging: Add support for WhatsApp Conversions APIs. (5c29a869)
  • client-gamelift: Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes. (30dfd63a)
  • client-securityhub: Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features. (e44b3582)
  • client-bedrock-agentcore-control: Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances. (865d21ef)
  • client-device-farm: Adds support for service generated insights across runs, jobs, and tests. (6c601b71)
  • client-sagemaker: Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing. (14bd2ac7)
  • client-agent-registry-control: Agent Registry's Public Preview release (a137863d)
  • client-backup: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (636228a9)
  • client-mediatailor: AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls. (1cf61475)
  • client-marketplace-agreement: GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D"). (50b0d6d5)
  • client-agent-registry: Agent Registry's Public Preview release (632ae479)
  • client-kafka: MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you (b7e31937)
  • client-bedrock-agentcore: Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider. (bd301533)
  • client-auto-scaling: EC2 Auto Scaling now supports being managed by other AWS services via the operator field. (f5d54fce)
  • client-ec2: Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score. (43673842)
  • client-marketplace-discovery: GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples. (f4fd7ae7)
  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf65602)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1105.0 (2026-08-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1101.0 (2026-07-31)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

Commits

Updates @hookform/resolvers from 5.5.7 to 5.7.1

Release notes

Sourced from @​hookform/resolvers's releases.

v5.7.1

5.7.1 (2026-08-02)

Bug Fixes

  • ata-validator peer dependency version (#871) (827f20b)

v5.7.0

5.7.0 (2026-08-02)

Features

v5.6.0

5.6.0 (2026-08-01)

Features

  • improve all resovlers drops validation errors for special root field names (b011a5f)

v5.5.8

5.5.8 (2026-08-01)

Bug Fixes

  • Zod resolver drops validation errors for special root field names (#869) (2f28787)
Commits
  • 827f20b fix: ata-validator peer dependency version (#871)
  • 4cfba18 feat: support vine v4 (#867)
  • 58d2e2d remove dead image
  • b011a5f feat: improve all resovlers drops validation errors for special root field names
  • 5483a03 improve all resolvers (#870)
  • 2f28787 fix: Zod resolver drops validation errors for special root field names (#869)
  • See full diff in compare view

Updates @vercel/blob from 2.6.1 to 2.7.0

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.7.0

Minor Changes

  • ad5a134: Add image optimization support: a new optimizeImage option on put and a new putFromUrl method. Both optimize the image through Vercel Image Optimization before storing it (only the optimized output is stored) and require OIDC authentication.

    const result = await put("avatars/foo.webp", body, {
  access: "public",
  optimizeImage: { width: 128, quality: 75, format: "webp" },
});
const result = await putFromUrl(
"avatars/foo.webp",
"https://example.com/photo.jpg",
{
access: "public",
optimizeImage: { width: 128, quality: 75, format: "webp" },
}
);

Changelog

Sourced from @​vercel/blob's changelog.

2.7.0

Minor Changes

  • ad5a134: Add image optimization support: a new optimizeImage option on put and a new putFromUrl method. Both optimize the image through Vercel Image Optimization before storing it (only the optimized output is stored) and require OIDC authentication.

    const result = await put("avatars/foo.webp", body, {
  access: "public",
  optimizeImage: { width: 128, quality: 75, format: "webp" },
});
const result = await putFromUrl(
"avatars/foo.webp",
"https://example.com/photo.jpg",
{
access: "public",
optimizeImage: { width: 128, quality: 75, format: "webp" },
}
);

Commits

Updates better-auth from 1.6.25 to 1.6.26

Release notes

Sourced from better-auth's releases.

v1.6.26

better-auth

Bug Fixes

  • Fixed session cleanup on user deletion to also remove sessions from secondary storage (#10520)
  • Fixed findSessions to skip invalid secondary-storage session entries without discarding other valid sessions (#10580)
  • Fixed email OTP sign-up to pass the verification type to custom OTP generators (#10608)
  • Fixed email OTP password reset to allow retrying after entering an invalid password (#10552)
  • Fixed email OTP verification to no longer reveal whether an email is registered before the OTP is verified (#10605)
  • Fixed jwtClient() collapsing createAuthClient type inference when combined with other client plugins (#10513)
  • Fixed JWT key minting inside database transactions to use the transaction-scoped adapter, preventing deadlocks on SQLite and ensuring keys commit with their surrounding transaction on Postgres and MySQL (#10623)
  • Fixed oAuthProxy to preserve Apple user data from form_post callbacks (#10599)
  • Fixed oneTapClient() collapsing createAuthClient type inference when combined with other client plugins (#10635)
  • Fixed database rate-limit cleanup to complete when no background task handler is configured (#10619)
  • Improved nextCookies performance in instrumented Next.js applications by reusing the next/headers import promise (#10467)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain (#10576)

For detailed changes, see CHANGELOG

@better-auth/redis-storage

Bug Fixes

  • Fixed listKeys() and clear() to use SCAN instead of KEYS so large keyspaces no longer block the Redis server (#10507)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​Emmaccen, @​gustavovalverde, @​jashkarangiya, @​jeroenvandermerwe, @​jlucaso1, @​krish-vachhani, @​mrosberghaus, @​XXMOHAMED012

Full changelog: v1.6.25...v1.6.26

Changelog

Sourced from better-auth's changelog.

1.6.26

Patch Changes

  • #10619 9ede805 Thanks @​jeroenvandermerwe! - Ensure database rate-limit cleanup completes when no background task handler is configured.

  • #10608 5a811f1 Thanks @​bytaesu! - Pass the email verification type to custom OTP generators after email sign-up.

  • #10605 d8327f1 Thanks @​XXMOHAMED012! - The email OTP verification check no longer reveals whether an email is registered before the OTP itself is verified.

  • #10513 e2c73fb Thanks @​mrosberghaus! - Fix jwtClient() collapsing createAuthClient type inference when combined with other client plugins such as inferAdditionalFields. Additional user fields (for example on updateUser) are preserved again.

  • #10635 af50c45 Thanks @​krish-vachhani! - Fix oneTapClient() collapsing createAuthClient type inference when combined with other client plugins. The oneTap action is available on the client again.

  • #10633 701cd43 Thanks @​gustavovalverde! - Minting or reading a JWKS signing key inside an active database transaction now uses the transaction-scoped adapter instead of the root connection. On a single-connection SQLite database with native transactions enabled, this no longer deadlocks, and on Postgres and MySQL the key commits with the surrounding transaction instead of independently of it.

  • #10599 e7b0eba Thanks @​bytaesu! - Preserve Apple user data from form_post callbacks when using oAuthProxy.

  • #10552 2b4a14f Thanks @​bytaesu! - Allow users to retry email OTP password resets after entering an invalid password.

  • #10467 7552a3b Thanks @​jlucaso1! - Improve nextCookies performance in instrumented Next.js applications.

  • #10580 ea38fca Thanks @​Emmaccen! - Skip invalid secondary-storage session entries without discarding other valid sessions.

  • #10520 a03e4c1 Thanks @​bytaesu! - Ensure deleting a user also removes their sessions from secondary storage.

  • Updated dependencies [a30e274]:

    • @​better-auth/core@​1.6.26
    • @​better-auth/drizzle-adapter@​1.6.26
    • @​better-auth/kysely-adapter@​1.6.26
    • @​better-auth/memory-adapter@​1.6.26
    • @​better-auth/mongo-adapter@​1.6.26
    • @​better-auth/prisma-adapter@​1.6.26
    • @​better-auth/telemetry@​1.6.26
Commits
  • a16b30e chore: release v1.6.26 (#10521)
  • 9ede805 fix(rate-limit): await database cleanup by default (#10619)
  • af50c45 fix(one-tap): preserve client plugin inference with oneTapClient (#10635)
  • 222facf fix(jwt): resolve the transaction-scoped adapter when signing (#10623)
  • d8327f1 fix(email-otp): verify OTP before revealing whether the email exists (#10605)
  • e7b0eba fix(oauth-proxy): preserve Apple user data (#10599)
  • 5a811f1 fix(email-otp): pass verification type on sign-up (#10608)
  • e18606b chore(deps): upgrade OpenTelemetry to v2 (#10601)
  • ea38fca fix(db): skip null-parsed session token in findSessions instead of returning ...
  • 7552a3b perf(next-js): reuse the next/headers import promise in production (#10467)
  • Additional commits viewable in compare view

Updates cron-parser from 5.6.2 to 5.7.0

Release notes

Sourced from cron-parser's releases.

v5.7.0

What's Changed

Full Changelog: harrisiirak/cron-parser@v5.6.1...v5.7.0

Changelog

Sourced from cron-parser's changelog.

v5.7.0 - 2026-08-01

What's Changed

Full Changelog: harrisiirak/cron-parser@v5.6.1...v5.7.0

Commits
  • ef5dd0c chore: bump version
  • 03f9d7c chore: publish coverage badges from CI, replace jest-coverage-badges (#429)
  • 92f19ab chore: update dev deps
  • e10ef26 fix: reject standalone L in day of week at construction (#428)
  • 5c01e1f fix: copy values array in CronField constructor (#427)
  • a551625 fix: escape hyphen in #parseNthDay character class (#426)
  • aeb2a15 chore: switch tsconfig to nodenext module resolution and remove ignoreDepreca...
  • See full diff in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates dompurify from 3.4.12 to 3.4.13

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.13

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible
Commits

Updates lucide-react from 1.28.0 to 1.30.0

Release notes

Sourced from lucide-react's releases.

Version 1.30.0

What's Changed

@dependabot
chore(deps): Bump the production-minor-patch group across 1 directory…
1cffabf 
… with 12 updates

Bumps the production-minor-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.115.0` | `0.116.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1100.0` | `3.1106.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1100.0` | `3.1106.0` |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.5.7` | `5.7.1` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.6.1` | `2.7.0` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.6.25` | `1.6.26` |
| [cron-parser](https://github.com/harrisiirak/cron-parser) | `5.6.2` | `5.7.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.13` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.30.0` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.0` | `11.16.1` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.83.0` | `7.84.0` |



Updates `@anthropic-ai/sdk` from 0.115.0 to 0.116.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.115.0...sdk-v0.116.0)

Updates `@aws-sdk/client-s3` from 3.1100.0 to 3.1106.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1106.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1100.0 to 3.1106.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1106.0/packages/s3-request-presigner)

Updates `@hookform/resolvers` from 5.5.7 to 5.7.1
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v5.5.7...v5.7.1)

Updates `@vercel/blob` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.7.0/packages/blob)

Updates `better-auth` from 1.6.25 to 1.6.26
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.6.26/packages/better-auth)

Updates `cron-parser` from 5.6.2 to 5.7.0
- [Release notes](https://github.com/harrisiirak/cron-parser/releases)
- [Changelog](https://github.com/harrisiirak/cron-parser/blob/master/CHANGELOG.md)
- [Commits](harrisiirak/cron-parser@v5.6.2...v5.7.0)

Updates `dompurify` from 3.4.12 to 3.4.13
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.12...3.4.13)

Updates `lucide-react` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react)

Updates `mermaid` from 11.16.0 to 11.16.1
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.0...mermaid@11.16.1)

Updates `next` from 16.2.12 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.0)

Updates `react-hook-form` from 7.83.0 to 7.84.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.83.0...v7.84.0)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.116.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1106.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1106.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@vercel/blob"
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: better-auth
  dependency-version: 1.6.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: cron-parser
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: mermaid
  dependency-version: 11.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: react-hook-form
  dependency-version: 7.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
hce-website Error Error Aug 10, 2026 8:34pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants