Skip to content

chore(deps): bump the web-runtime group across 1 directory with 11 updates - #2860

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/apps/web/develop/web-runtime-331bc95a1f
Open

chore(deps): bump the web-runtime group across 1 directory with 11 updates#2860
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/apps/web/develop/web-runtime-331bc95a1f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-runtime group with 10 updates in the /apps/web directory:

Package From To
@google/genai 2.18.0 2.20.0
@supabase/ssr 0.12.4 0.12.5
@tanstack/react-query 5.101.4 5.102.8
lucide-react 1.34.0 1.39.0
openai 7.5.0 7.8.0
react-error-boundary 6.1.3 6.1.4
react-hook-form 7.85.0 7.87.0
sharp 0.35.3 0.35.4
web-vitals 6.1.1 6.2.1
zod 4.4.3 4.5.4

Updates @google/genai from 2.18.0 to 2.20.0

Release notes

Sourced from @​google/genai's releases.

v2.20.0

2.20.0 (2026-08-31)

Features

  • Add support for the audio/webm MIME type. (b0e3c5f)
  • Add translation_config SDK support for GEAP. (3e1d923)
  • add Video Understanding support to the Interactions API (6ddbeba)

Bug Fixes

  • Don't set redundant Content-Length on file upload requests (2f5cc7a)
  • Don't set redundant Content-Length on file upload requests (2f5cc7a), refs #1718
  • expose ProcessingCallStep and ProcessingResultStep in Interactions SDK (b6f8db5)
  • Quote setupComplete key in LiveClientMessage (4467faf)

v2.19.0

2.19.0 (2026-08-25)

Features

  • Add AudioTranscriptionConfigMode (c0a37de)
  • add environment files support and scotty file download helper (0d6ee9d)
  • Add TYPE_JPEG2000 to VideoContent.MimeType enum (41da204)

Performance Improvements

  • Keep the Buffer in the Node tokenizer platform, ~2x faster model parse (11d804a)
Changelog

Sourced from @​google/genai's changelog.

2.20.0 (2026-08-31)

Features

  • Add support for the audio/webm MIME type. (b0e3c5f)
  • Add translation_config SDK support for GEAP. (3e1d923)
  • add Video Understanding support to the Interactions API (6ddbeba)

Bug Fixes

  • Don't set redundant Content-Length on file upload requests (2f5cc7a)
  • Don't set redundant Content-Length on file upload requests (2f5cc7a), refs #1718
  • expose ProcessingCallStep and ProcessingResultStep in Interactions SDK (b6f8db5)
  • Quote setupComplete key in LiveClientMessage (4467faf)

2.19.0 (2026-08-25)

Features

  • Add AudioTranscriptionConfigMode (c0a37de)
  • add environment files support and scotty file download helper (0d6ee9d)
  • Add TYPE_JPEG2000 to VideoContent.MimeType enum (41da204)

Performance Improvements

  • Keep the Buffer in the Node tokenizer platform, ~2x faster model parse (11d804a)
Commits
  • 7fe15a6 chore(main): release 2.20.0 (#1899)
  • b0e3c5f feat: Add support for the audio/webm MIME type.
  • 3e1d923 feat: Add translation_config SDK support for GEAP.
  • b6f8db5 fix: expose ProcessingCallStep and ProcessingResultStep in Interactions SDK
  • 4467faf fix: Quote setupComplete key in LiveClientMessage
  • 6ddbeba feat: add Video Understanding support to the Interactions API
  • 6a44ab0 chore: keep config as the last method parameter
  • 2f5cc7a fix: Don't set redundant Content-Length on file upload requests
  • ded792c chore(main): release 2.19.0 (#1876)
  • 4f37a10 build: Publish sourcemaps without sourcesContent, ~5.5 MB off the tarball
  • Additional commits viewable in compare view

Updates @supabase/ssr from 0.12.4 to 0.12.5

Release notes

Sourced from @​supabase/ssr's releases.

v0.12.5

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

v0.12.5-rc.154

What's Changed

New Contributors

Full Changelog: supabase/ssr@v0.12.4...v0.12.5-rc.154

Changelog

Sourced from @​supabase/ssr's changelog.

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142
Commits
  • c5310fd chore(main): release 0.12.5 (#286)
  • c1700f2 fix: warn when auth.storage is ignored by createBrowserClient/createServerCli...
  • b4797e3 chore: update @​supabase/supabase-js to v2.112.4 (#285)
  • 6f5bc21 chore: update @​supabase/supabase-js to v2.112.3 (#282)
  • 35187b2 build(deps): bump postcss from 8.5.15 to 8.5.25 in the npm_and_yarn group acr...
  • 1b761fd build(deps): bump pnpm/action-setup from 6.0.9 to 6.0.10 (#280)
  • 69a6209 docs: add React Router middleware example (#274)
  • See full diff in compare view

Updates @supabase/supabase-js from 2.112.3 to 2.112.4

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.4

2.112.4 (2026-08-24)

🩹 Fixes

  • auth: convert stolen-lock AbortError when acquireTimeout is 0 (#2616)
  • auth: warn on deprecated lock option and prevent unhandled refresh rejection (#2627)
  • postgrest: move override fixtures out of generated types, repair codegen (#2605)
  • realtime: respect custom logger for send() REST fallback warning (#2612)

❤️ Thank You

v2.112.4-canary.3

2.112.4-canary.3 (2026-08-24)

🩹 Fixes

  • auth: warn on deprecated lock option and prevent unhandled refresh rejection (#2627)

❤️ Thank You

v2.112.4-canary.2

2.112.4-canary.2 (2026-08-24)

🩹 Fixes

  • auth: convert stolen-lock AbortError when acquireTimeout is 0 (#2616)
  • realtime: respect custom logger for send() REST fallback warning (#2612)

❤️ Thank You

v2.112.4-canary.1

2.112.4-canary.1 (2026-08-12)

This was a version bump only, there were no code changes.

v2.112.4-canary.0

2.112.4-canary.0 (2026-08-11)

🩹 Fixes

  • postgrest: move override fixtures out of generated types, repair codegen (#2605)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.4 (2026-08-24)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

Commits

Updates @tanstack/react-query from 5.101.4 to 5.102.8

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-next-experimental@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query-persist-client@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.102.8
    • @​tanstack/react-query@​5.102.8

@​tanstack/react-query@​5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.8

@​tanstack/react-query-devtools@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-next-experimental@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query-persist-client@​5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.102.7
    • @​tanstack/react-query@​5.102.7

@​tanstack/react-query@​5.102.7

Patch Changes

  • Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.102.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.7

5.102.6

Patch Changes

  • #11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

  • Updated dependencies []:

    • @​tanstack/query-core@​5.102.6

5.102.5

Patch Changes

  • Updated dependencies [578e5c2]:
    • @​tanstack/query-core@​5.102.5

5.102.4

Patch Changes

  • Updated dependencies [a05df6a]:
    • @​tanstack/query-core@​5.102.4

5.102.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.102.3

5.102.2

Patch Changes

  • Updated dependencies [80fbf73]:
    • @​tanstack/query-core@​5.102.2

... (truncated)

Commits

Updates lucide-react from 1.34.0 to 1.39.0

Release notes

Sourced from lucide-react's releases.

Version 1.39.0

What's Changed

Full Changelog: lucide-icons/lucide@1.38.0...1.39.0

Version 1.38.0

What's Changed

Full Changelog: lucide-icons/lucide@1.36.0...1.38.0

Version 1.37.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.35.0...1.37.0

Version 1.36.0

What's Changed

... (truncated)

Commits

Updates openai from 7.5.0 to 7.8.0

Release notes

Sourced from openai's releases.

v7.8.0

7.8.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
  • api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

  • auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
  • auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
  • deps: harden dependency and release boundaries (#2484) (b21ff45)
  • events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
  • restore native browser ESM imports (#2495) (c8cab1e)
  • uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

v7.7.0

7.7.0 (2026-08-26)

Features

  • api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

  • streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

v7.6.0

7.6.0 (2026-08-26)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
  • api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
  • api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
  • auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
  • auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
  • auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
  • auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
  • support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

7.8.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#2505) (f9b1313)
  • api: add default WebSocket User-Agent and audit log events (#2504) (9b2f089)

Bug Fixes

  • auth: clamp the workload-identity refresh buffer to the token lifetime (#2490) (76b73a9)
  • auth: secure first-class X.509 workload credentials (#2479) (1b36c19)
  • deps: harden dependency and release boundaries (#2484) (b21ff45)
  • events: settle WebSocket waiters when listeners throw (#2491) (b5a13a7)
  • restore native browser ESM imports (#2495) (c8cab1e)
  • uploads: detect multipart bodies from own properties only (#2492) (559ffc8)

7.7.0 (2026-08-26)

Features

  • api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

  • streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

7.6.0 (2026-08-26)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
  • api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
  • api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
  • auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
  • auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
  • auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
  • auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
  • support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

  • [responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
  • assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
  • audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)

... (truncated)

Commits
  • 31fae53 release: 7.8.0 (#2493)
  • f9b1313 feat(api): add compute_units to Responses and Chat Completions usage (#2505)
  • b21ff45 fix(deps): harden dependency and release boundaries (#2484)
  • a4a80eb test: exercise direct browser imports without credentials (#2501)
  • c8cab1e fix: restore native browser ESM imports (#2495)
  • d691a10 test: execute webpack browser bundle without live credentials (#2498)
  • 7ef99c4 test: verify packed browser bundles target ES2020 (#2496)
  • b86efac ci: require keyless ecosystem checks on release PRs (#2497)
  • 08f201c ci: gate npm publication on browser-compatible imports (#2500)
  • 44af438 test: cover webpack ESM and CommonJS package entrypoints (#2499)
  • Additional commits viewable in compare view

Updates react-error-boundary from 6.1.3 to 6.1.4

Release notes

Sourced from react-error-boundary's releases.

6.1.4

  • 247: Edge case: Handle null as thrown value
Commits
  • 4e04da4 6.1.3 -> 6.1.4
  • 82dfebf fix(ErrorBoundary): reset when the thrown value is null (#247)
  • 7c625e0 docs: update eslint-react plugin links to npm (repo restructured) (#246)
  • See full diff in compare view

Updates react-hook-form from 7.85.0 to 7.87.0

Release notes

Sourced from react-hook-form's releases.

Version 7.87.0

✨ Features

  • Add shouldTouch option to trigger() ([#13671](react-hook-form/react-hook-form#13671))

    setValue already supported shouldTouch; trigger() now does too. This allows you to mark field(s) as touched after manual or programmatic validation, such as validate-on-mount or multi-step form navigation, without needing a setValue workaround:

    // Mark a single field as touched after validating it
    await trigger('firstName', { shouldTouch: true });
    // Mark every mounted field as touched after validating the whole form
    await trigger(undefined, { shouldTouch: true });

  • Add OpaqueTypes registry for opaque leaf types ([#13676](react-hook-form/react-hook-form#13676))

    Recursive type helpers (Path, DeepPartial, DeepRequired, FieldErrorsImpl, etc.) previously stopped only at Primitive | BrowserNativeObject. As a result, rich third-party value types such as Dayjs and Decimal could be recursively traversed member-by-member, potentially causing TypeScript to report "Excessive complexity" diagnostics on large form types.

    You can now register a type as an opaque leaf via declaration merging:

    import type { Dayjs } from 'dayjs';
    declare module 'react-hook-form' {
    interface OpaqueTypes {
    dayjs: Dayjs;
    }
    }

    While the registry is empty, types remain identical to the existing behavior. This is purely opt-in.

🐞 Fixes

❤️ Thank You

Thanks to @​giaBaoJS, @​dfedoryshchev, @​Alioth-91, @​Masatoshi0227, @​modosc, and @​bluebill1049 for their contributions! 🎉

Version 7.86.0

✨ Features

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.87.0] - 2026-08-30

Added

  • shouldTouch option for trigger()
  • OpaqueTypes registry for opaque leaf types

Fixed

  • Inconsistent behavior among useController().field.onChange()-like APIs
  • Controller under a null parent submitting undefined instead of a value
  • ERR_MODULE_NOT_FOUND resolving react-hook-form due to a react-server declaration (Next.js builds)
  • useWatch never reconciling when an Activity subtree is hidden on its first render
  • resetField not recomputing isValid for subscribe-only consumers
  • generateWatchOutput ignoring defaultValue for an array of names
  • useFormState never reconciling when an Activity subtree is hidden on its first render

[7.86.0] - 2026-08-22

Added

  • Type-safe getErrors method

Performance

  • Improve createFormControl
  • Improve clone object check
  • Avoid cloning values in unregister without subscribers

Fixed

  • Field array update leaving stale errors and touched state at the updated index
  • flatten discarding File and Blob values instead of treating them as leaf nodes
  • validateField not passing the field error to setCustomValidity when criteriaMode is all
  • hasValidation treating falsy but valid values (min: 0, max: 0, minLength: 0, maxLength: 0, required: '') as no validation
  • setValue targeting a nested leaf not notifying a Controller registered on a field array item root
  • setValues not updating fields registered under an object or array value
  • useWatch returning a stale value on name change when the new value is null
  • unregister inverting keepDirty when broadcasting isDirty
Commits
  • 29af888 7.87.0
  • 1eeab63 🐞 fix(useFormState): never reconciles when an Activity subtree is hidden on i...
  • 145441c 🐞 fix(generateWatchOutput): defaultValue is ignored for an array of names (#1...
  • 1fb065c 🐞 fix(resetField): isValid not recomputed for subscribe-only consumers (#13684)
  • 2f7380e 🧹refactor: use continue instead of return in setFieldValues' hasOwnProper...
  • 1b0a314 📖 remove comment
  • a457ca7 🐞 fix #13680: useWatch never reconciles when an Activity subtree is hidden on...
  • bb3360f 🐞 fix #13681 issue: ERR_MODULE_NOT_FOUND, Can't resolve react-hook-form due t...
  • f646948 🪅 feat: add OpaqueTypes registry for opaque leaf types (#13676)
  • e17a95c 🧇 chore: scope the lock workflow to issues so its scheduled run can finish (#...
  • Additional commits viewable in compare view

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

v0.35.4-rc.0

Commits
  • 7f1a0a2 Release v0.35.4
  • f927818 Upgrade to sharp-libvips v1.3.3
  • e802092 Prerelease v0.35.4-rc.0
  • e13eb2f CI: Fix wasm32 build (#4589)
  • a82a0b3 Upgrade to libvips v8.18.6
  • 8044fe4 Bound resize dimensions to coordinate limit
  • 147f859 Docs: changelog entries for #4578 #4584
  • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
  • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
  • Additional commits viewable in compare view

Updates web-vitals from 6.1.1 to 6.2.1
<de...

Description has been truncated

…dates

Bumps the web-runtime group with 10 updates in the /apps/web directory:

| Package | From | To |
| --- | --- | --- |
| [@google/genai](https://github.com/googleapis/js-genai) | `2.18.0` | `2.20.0` |
| [@supabase/ssr](https://github.com/supabase/ssr) | `0.12.4` | `0.12.5` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.4` | `5.102.8` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.34.0` | `1.39.0` |
| [openai](https://github.com/openai/openai-node) | `7.5.0` | `7.8.0` |
| [react-error-boundary](https://github.com/bvaughn/react-error-boundary) | `6.1.3` | `6.1.4` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.85.0` | `7.87.0` |
| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` |
| [web-vitals](https://github.com/GoogleChrome/web-vitals) | `6.1.1` | `6.2.1` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |



Updates `@google/genai` from 2.18.0 to 2.20.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v2.18.0...v2.20.0)

Updates `@supabase/ssr` from 0.12.4 to 0.12.5
- [Release notes](https://github.com/supabase/ssr/releases)
- [Changelog](https://github.com/supabase/ssr/blob/main/CHANGELOG.md)
- [Commits](supabase/ssr@v0.12.4...v0.12.5)

Updates `@supabase/supabase-js` from 2.112.3 to 2.112.4
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.4/packages/core/supabase-js)

Updates `@tanstack/react-query` from 5.101.4 to 5.102.8
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query)

Updates `lucide-react` from 1.34.0 to 1.39.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.39.0/packages/lucide-react)

Updates `openai` from 7.5.0 to 7.8.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.5.0...v7.8.0)

Updates `react-error-boundary` from 6.1.3 to 6.1.4
- [Release notes](https://github.com/bvaughn/react-error-boundary/releases)
- [Commits](bvaughn/react-error-boundary@6.1.3...6.1.4)

Updates `react-hook-form` from 7.85.0 to 7.87.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.85.0...v7.87.0)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `web-vitals` from 6.1.1 to 6.2.1
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](GoogleChrome/web-vitals@v6.1.1...v6.2.1)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

---
updated-dependencies:
- dependency-name: "@google/genai"
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-runtime
- dependency-name: "@supabase/ssr"
  dependency-version: 0.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-runtime
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-runtime
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.102.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-runtime
- dependency-name: lucide-react
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-runtime
- dependency-name: openai
  dependency-version: 7.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-runtime
- dependency-name: react-error-boundary
  dependency-version: 6.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-runtime
- dependency-name: react-hook-form
  dependency-version: 7.87.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-runtime
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-runtime
- dependency-name: web-vitals
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-runtime
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@vercel

vercel Bot commented Sep 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
tzudong Ignored Ignored Preview Sep 4, 2026 11:45pm UTC

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 00267f336e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread apps/web/package.json
"@ffmpeg/ffmpeg": "^0.12.15",
"@ffmpeg/util": "^0.12.2",
"@google/genai": "^2.18.0",
"@google/genai": "^2.20.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Regenerate bun.lock with the dependency bump

When this commit is installed through Bun, apps/web/bun.lock still records the old root constraints and resolutions (for example, @google/genai remains ^2.18.0/2.18.0 while this line requests ^2.20.0). The Ubuntu and Windows Bun jobs in .github/workflows/web-admin-ci.yml, plus the nightly workflows, run Bun 1.4.0 with bun install --frozen-lockfile; bun install --help defines that flag as “Disallow changes to lockfile,” so these jobs stop during installation rather than testing the bumped dependencies. Regenerate and commit the reconciled Bun lockfile with this manifest change.

AGENTS.md reference: AGENTS.md:L28-L28

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants