chore(deps): bump the web-dependencies group in /apps/web with 15 updates - #234
Merged
ravirajsinh45 merged 1 commit intoAug 5, 2026
Conversation
Bumps the web-dependencies group in /apps/web with 15 updates: | Package | From | To | | --- | --- | --- | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.23` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.21` | `2.1.24` | | [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.19` | `1.1.23` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.4` | `1.3.3` | | [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.2.6` | `1.3.7` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.8` | `1.2.16` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.511.0` | `0.577.0` | | [swr](https://github.com/vercel/swr) | `2.4.1` | `2.4.2` | | [wavesurfer.js](https://github.com/katspaugh/wavesurfer.js) | `7.12.10` | `7.12.11` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.12` | `5.0.14` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.3` | `6.0.5` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.27` | `10.5.4` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `14.2.29` | `14.2.35` | | [jsdom](https://github.com/jsdom/jsdom) | `29.0.0` | `29.1.1` | | [postcss](https://github.com/postcss/postcss) | `8.5.8` | `8.5.25` | Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.21 to 2.1.24 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-popover` from 1.1.19 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover) Updates `@radix-ui/react-slot` from 1.2.4 to 1.3.3 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `@radix-ui/react-switch` from 1.2.6 to 1.3.7 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch) Updates `@radix-ui/react-tooltip` from 1.2.8 to 1.2.16 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `lucide-react` from 0.511.0 to 0.577.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react) Updates `swr` from 2.4.1 to 2.4.2 - [Release notes](https://github.com/vercel/swr/releases) - [Commits](vercel/swr@v2.4.1...v2.4.2) Updates `wavesurfer.js` from 7.12.10 to 7.12.11 - [Release notes](https://github.com/katspaugh/wavesurfer.js/releases) - [Changelog](https://github.com/katspaugh/wavesurfer.js/blob/main/CHANGELOG.md) - [Commits](katspaugh/wavesurfer.js@7.12.10...7.12.11) Updates `zustand` from 5.0.12 to 5.0.14 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.12...v5.0.14) Updates `@vitejs/plugin-react` from 6.0.3 to 6.0.5 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react) Updates `autoprefixer` from 10.4.27 to 10.5.4 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.27...10.5.4) Updates `eslint-config-next` from 14.2.29 to 14.2.35 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v14.2.35/packages/eslint-config-next) Updates `jsdom` from 29.0.0 to 29.1.1 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v29.0.0...v29.1.1) Updates `postcss` from 8.5.8 to 8.5.25 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.8...8.5.25) --- updated-dependencies: - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: "@radix-ui/react-popover" dependency-version: 1.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: "@radix-ui/react-slot" dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-dependencies - dependency-name: "@radix-ui/react-switch" dependency-version: 1.3.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-dependencies - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.2.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: lucide-react dependency-version: 0.577.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-dependencies - dependency-name: swr dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: wavesurfer.js dependency-version: 7.12.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: zustand dependency-version: 5.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: autoprefixer dependency-version: 10.5.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-dependencies - dependency-name: eslint-config-next dependency-version: 14.2.35 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies - dependency-name: jsdom dependency-version: 29.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-dependencies - dependency-name: postcss dependency-version: 8.5.25 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
ravirajsinh45
approved these changes
Aug 5, 2026
ravirajsinh45
left a comment
Contributor
There was a problem hiding this comment.
Merging for the postcss 8.5.8 to 8.5.25 bump in particular, which clears GHSA-r28c-9q8g-f849 and GHSA-6g55-p6wh-862q (both HIGH, arbitrary .map file disclosure via attacker-controlled sourceMappingURL) plus two medium advisories.
dependabot
Bot
deleted the
dependabot/npm_and_yarn/apps/web/web-dependencies-30fb58e421
branch
August 5, 2026 08:01
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the web-dependencies group in /apps/web with 15 updates:
1.1.151.1.232.1.212.1.241.1.191.1.231.2.41.3.31.2.61.3.71.2.81.2.160.511.00.577.02.4.12.4.27.12.107.12.115.0.125.0.146.0.36.0.510.4.2710.5.414.2.2914.2.3529.0.029.1.18.5.88.5.25Updates
@radix-ui/react-dialogfrom 1.1.15 to 1.1.23Changelog
Sourced from @radix-ui/react-dialog's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-dialogsince your current version.Updates
@radix-ui/react-dropdown-menufrom 2.1.21 to 2.1.24Changelog
Sourced from @radix-ui/react-dropdown-menu's changelog.
Commits
Updates
@radix-ui/react-popoverfrom 1.1.19 to 1.1.23Changelog
Sourced from @radix-ui/react-popover's changelog.
Commits
Updates
@radix-ui/react-slotfrom 1.2.4 to 1.3.3Changelog
Sourced from @radix-ui/react-slot's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-slotsince your current version.Updates
@radix-ui/react-switchfrom 1.2.6 to 1.3.7Changelog
Sourced from @radix-ui/react-switch's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-switchsince your current version.Updates
@radix-ui/react-tooltipfrom 1.2.8 to 1.2.16Changelog
Sourced from @radix-ui/react-tooltip's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-tooltipsince your current version.Updates
lucide-reactfrom 0.511.0 to 0.577.0Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
f6c0d06chore(deps): bump rollup from 4.53.3 to 4.59.0 (#4106)67c0485feat(scripts): added helper script to automatically update OpenCollective bac...b6ed43dfeat(packages): Added aria-hidden fallback for decorative icons to all packag...076e0bbchore(dependencies): Update dependencies (#3809)80d6f73fix(icons): Rename fingerprint icon to fingerprint-pattern (#3767)1cfb3ffchore(deps-dev): bump vite from 6.3.5 to 6.3.6 (#3611)e71198dchore: icon alias improvements (#2861)3e644fdchore(scripts): Refactor scripts to typescript (#3316)19fa01bbuild(deps-dev): bump vite from 6.3.2 to 6.3.4 (#3181)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for lucide-react since your current version.
Updates
swrfrom 2.4.1 to 2.4.2Release notes
Sourced from swr's releases.
Commits
f1c1fd82.4.2 (#4279)10b6b65ci: update release job (#4278)95592f3ci: remove registry url (#4277)11bbc8fci: switch npm publish to OIDC trusted publishing (#4274)a89bbe7Prevent resolved promise to suspend due to missing status (#4271)f8d4995chore: remove the axios examples (#4263)e384af7ci: update GitHub Actions for Node 24 (#4254)a376f88chore: pin pnpm 10.33.0 (#4258)c39d701fix: guard against double-unsubscribe removing wrong subscriber in cache.ts (...46f3954Security: Update axios versions in the examples (#4243)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for swr since your current version.
Updates
wavesurfer.jsfrom 7.12.10 to 7.12.11Release notes
Sourced from wavesurfer.js's releases.
Commits
ae8d3cd7.12.117590831fix(Decoder): avoid closing a closed AudioContext (#4336)2717152fix(regions): prune per-region subscriptions from plugin array on remove (#4339)49e7dfcfix(Spectrogram): prevent TypeError when plugin is destroyed during active re...ff3cf8fdocs: clarify left/right default plotting for stereo audio (#4338)7547192fix(Spectrogram): prevent dB-to-color mapping wraparound in high-energy regio...227c89bfix(Spectrogram): make the main-thread FFT fallback opt-out and re-create fai...d80093ffeat(Spectrogram): Praat-style display pre-emphasis and automatic gain (#4330)Updates
zustandfrom 5.0.12 to 5.0.14Release notes
Sourced from zustand's releases.
Commits
bfb2a9e5.0.1462b2affchore(deps): update dev dependencies (#3513)ad77bd3fix(devtools): improve type inference for Devtools initializer (#3511)8476d2cupdate pnpm etc (#3512)d690ec2docs(combine): add object constraints to T and U in signature (#3506)fd8c601docs(react): add Action constraint to redux middleware signature (#3492)2ce8226docs(immer): fix setPerson updater type in usage examples (#3502)038b938docs(updating-state): use curried create form with explicit state type (#3503)60a91b4docs(devtools): add missing devtools import to troubleshooting example (#3501)efad169Update FUNDING.jsonUpdates
@vitejs/plugin-reactfrom 6.0.3 to 6.0.5Release notes
Sourced from @vitejs/plugin-react's releases.
Changelog
Sourced from @vitejs/plugin-react's changelog.
Commits
68c0cb8release: plugin-react@6.0.5 (#1362)555cdbcfix(react): make the react compiler preset filter linear (#1353)a00a9f8fix(deps): update all non-major dependencies (#1327)f4b5498release: plugin-react@6.0.47a40659fix(react):$RefreshSig$ is not definedwith NODE_ENV=production vite dev ...98b32d4fix(deps): update react 19.2.8 (#1298)8ae5449fix: babel-plugin-react-compiler cannot be imported when used in a framework ...f09ea01fix(deps): update all non-major dependencies (#1282)Updates
autoprefixerfrom 10.4.27 to 10.5.4Release notes
Sourced from autoprefixer's releases.
Changelog
Sourced from autoprefixer's changelog.
Commits
4cad00fRelease 10.5.4 versione62a4b1Update CI configc8f0d0aUpdate dependenciescae3577Move back to latest pnpm 11fd31eb3Fix duplicated prefixed selectors on reformatted CSS (#1552)958d390Release 10.5.3 version21d2adbFix gradient parserf7ddae9Fix bracket parser10ea5e7Update dependencies and remove patchb6e8a2aUpdate Dev ContainerMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.
Updates
eslint-config-nextfrom 14.2.29 to 14.2.35Commits
7b940d9v14.2.35f307368v14.2.345a97b40v14.2.3389ee561v14.2.3255f7662v14.2.31243072bv14.2.30Updates
jsdomfrom 29.0.0 to 29.1.1Release notes
Sourced from jsdom's releases.
Commits
9b9ea7e29.1.107efb78Optimize computed style comparison5f66329Fix background-origin/background-clip in background shorthandad8af77Fix border shorthand handling5a3e88e29.1.073db204Update dependencies and dev dependenciesa7168a5Support ratio CSS unit type15346e0Fix style cache invalidation2a1e2cd29.0.24097d66Resolve computed CSS values lazily in CSSStyleDeclarationMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.
Updates
postcssfrom 8.5.8 to 8.5.25Release notes
Sourced from postcss's releases.