Skip to content

Bump the npm-minor-and-patch group in /assets with 15 updates#27

Merged
andreogle merged 1 commit into
mainfrom
dependabot/npm_and_yarn/assets/npm-minor-and-patch-dd17d1eb7f
Jul 16, 2026
Merged

Bump the npm-minor-and-patch group in /assets with 15 updates#27
andreogle merged 1 commit into
mainfrom
dependabot/npm_and_yarn/assets/npm-minor-and-patch-dd17d1eb7f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group in /assets with 15 updates:

Package From To
@inertiajs/react 3.6.0 3.6.1
@radix-ui/react-alert-dialog 1.1.18 1.1.19
@radix-ui/react-dropdown-menu 2.1.19 2.1.20
@radix-ui/react-popover 1.1.18 1.1.19
@radix-ui/react-select 2.3.2 2.3.3
@radix-ui/react-toast 1.2.18 1.2.19
@radix-ui/react-tooltip 1.2.11 1.2.12
@sentry/node 10.63.0 10.65.0
@sentry/react 10.63.0 10.65.0
i18next 26.3.4 26.3.6
lucide-react 1.23.0 1.24.0
phoenix 1.8.8 1.8.9
react-i18next 17.0.8 17.0.9
@biomejs/biome 2.5.2 2.5.3
@types/node 26.1.0 26.1.1

Updates @inertiajs/react from 3.6.0 to 3.6.1

Release notes

Sourced from @​inertiajs/react's releases.

v3.6.1

What's Changed

Full Changelog: inertiajs/inertia@v3.6.0...v3.6.1

Changelog

Sourced from @​inertiajs/react's changelog.

v3.6.1 - 2026-07-07

What's Changed

Full Changelog: inertiajs/inertia@v3.6.0...v3.6.1

Commits

Updates @radix-ui/react-alert-dialog from 1.1.18 to 1.1.19

Changelog

Sourced from @​radix-ui/react-alert-dialog's changelog.

1.1.19

  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-dialog@1.1.19
Commits

Updates @radix-ui/react-dropdown-menu from 2.1.19 to 2.1.20

Changelog

Sourced from @​radix-ui/react-dropdown-menu's changelog.

2.1.20

  • Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.
  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-menu@2.1.20
Commits

Updates @radix-ui/react-popover from 1.1.18 to 1.1.19

Changelog

Sourced from @​radix-ui/react-popover's changelog.

1.1.19

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3
Commits

Updates @radix-ui/react-select from 2.3.2 to 2.3.3

Changelog

Sourced from @​radix-ui/react-select's changelog.

2.3.3

  • Fixed a bug in form control components to ensure their values are updated when their associated form's is reset. This affects RadioGroup, Slider, Select, and Switch.
  • Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7, @radix-ui/react-collection@1.1.12, @radix-ui/react-popper@1.3.3
Commits

Updates @radix-ui/react-toast from 1.2.18 to 1.2.19

Changelog

Sourced from @​radix-ui/react-toast's changelog.

1.2.19

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7, @radix-ui/react-collection@1.1.12
Commits

Updates @radix-ui/react-tooltip from 1.2.11 to 1.2.12

Changelog

Sourced from @​radix-ui/react-tooltip's changelog.

1.2.12

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3
Commits

Updates @sentry/node from 10.63.0 to 10.65.0

Release notes

Sourced from @​sentry/node's releases.

10.65.0

  • feat(angular): Set url attributes on pageload and navigation spans (#21985)
  • feat(astro): Set url.template on pageload spans (#22011)
  • feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)
  • feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)
  • feat(bun): warn when externalizing instrumented deps (#21999)
  • feat(core): Require attributes on SerializedStreamedSpan (#22052)
  • feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)
  • feat(nextjs): Set url attributes on pageload and navigation spans (#22006)
  • feat(react): Set url.template, url.path and url.full on routing spans (#22087)
  • feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)
  • feat(remix): Set url.template on pageload and navigation spans (#22025)
  • feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)
  • feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)
  • feat(server-utils): Implement orchestrion-based express integration (#21889)
  • feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)
  • feat(solid): Set url attributes on solid router and tanstack router spans (#22090)
  • feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)
  • feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)
  • fix(browser): Send web vital span sentry.segment.name attribute (#22024)
  • fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)
  • fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)
  • fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)
  • fix(replay): Skip client reports for replay failures after stop (#22177)
  • perf(vite): add fast component annotation transform (#22089)
  • ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)
  • chore: Add external contributor to CHANGELOG.md (#22111)
  • chore: Reinstate changelog anchor (#22022)
  • chore(cloudflare): Ignore import patterns (#22008)
  • chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)
  • chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)
  • chore(opentelemetry): Add worker as export | sort exports (#21859)
  • chore(size-limit): weekly auto-bump (#21812)
  • ci: Only run cloudflare & bundler plugin tests when necessary (#22130)
  • ci(deps): bump actions/checkout from 6 to 7 (#21898)
  • ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)
  • ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)
  • ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)
  • ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)
  • feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)
  • feat(core): add uniq array util and consolidate call sites (#22152)
  • feat(deps): Bump @​growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)
  • feat(deps): Bump @​opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)
  • feat(deps): Bump dotenv from 16.0.3 to 17.4.2 (#22150)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.65.0

  • feat(angular): Set url attributes on pageload and navigation spans (#21985)
  • feat(astro): Set url.template on pageload spans (#22011)
  • feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)
  • feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)
  • feat(bun): warn when externalizing instrumented deps (#21999)
  • feat(core): Require attributes on SerializedStreamedSpan (#22052)
  • feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)
  • feat(nextjs): Set url attributes on pageload and navigation spans (#22006)
  • feat(react): Set url.template, url.path and url.full on routing spans (#22087)
  • feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)
  • feat(remix): Set url.template on pageload and navigation spans (#22025)
  • feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)
  • feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)
  • feat(server-utils): Implement orchestrion-based express integration (#21889)
  • feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)
  • feat(solid): Set url attributes on solid router and tanstack router spans (#22090)
  • feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)
  • feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)
  • fix(browser): Send web vital span sentry.segment.name attribute (#22024)
  • fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)
  • fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)
  • fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)
  • fix(replay): Skip client reports for replay failures after stop (#22177)
  • perf(vite): add fast component annotation transform (#22089)
  • ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)
  • chore: Add external contributor to CHANGELOG.md (#22111)
  • chore: Reinstate changelog anchor (#22022)
  • chore(cloudflare): Ignore import patterns (#22008)
  • chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)
  • chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)
  • chore(opentelemetry): Add worker as export | sort exports (#21859)
  • chore(size-limit): weekly auto-bump (#21812)
  • ci: Only run cloudflare & bundler plugin tests when necessary (#22130)
  • ci(deps): bump actions/checkout from 6 to 7 (#21898)
  • ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)
  • ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)
  • ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)
  • ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)
  • feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)
  • feat(core): add uniq array util and consolidate call sites (#22152)
  • feat(deps): Bump @​growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)
  • feat(deps): Bump @​opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)

... (truncated)

Commits
  • c66a815 release: 10.65.0
  • 018c570 Merge pull request #22179 from getsentry/prepare-release/10.65.0
  • 5a1e331 meta(changelog): Update changelog for 10.65.0
  • e934b44 feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • 04bbb79 fix(replay): Skip client reports for replay failures after stop (#22177)
  • cb77f42 test: Remove fixed container_name from node integration test docker-compose f...
  • a84cc9d test(node-integration-tests): Surface early scenario exit instead of hanging ...
  • 88e3b32 feat(core): add isObjectLike guard and consolidate non-null-object checks (#2...
  • 7565c90 ref(nitro, nuxt): inline == null checks for nullish detection (#22154)
  • 256b9b9 feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • Additional commits viewable in compare view

Updates @sentry/react from 10.63.0 to 10.65.0

Release notes

Sourced from @​sentry/react's releases.

10.65.0

  • feat(angular): Set url attributes on pageload and navigation spans (#21985)
  • feat(astro): Set url.template on pageload spans (#22011)
  • feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)
  • feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)
  • feat(bun): warn when externalizing instrumented deps (#21999)
  • feat(core): Require attributes on SerializedStreamedSpan (#22052)
  • feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)
  • feat(nextjs): Set url attributes on pageload and navigation spans (#22006)
  • feat(react): Set url.template, url.path and url.full on routing spans (#22087)
  • feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)
  • feat(remix): Set url.template on pageload and navigation spans (#22025)
  • feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)
  • feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)
  • feat(server-utils): Implement orchestrion-based express integration (#21889)
  • feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)
  • feat(solid): Set url attributes on solid router and tanstack router spans (#22090)
  • feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)
  • feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)
  • fix(browser): Send web vital span sentry.segment.name attribute (#22024)
  • fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)
  • fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)
  • fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)
  • fix(replay): Skip client reports for replay failures after stop (#22177)
  • perf(vite): add fast component annotation transform (#22089)
  • ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)
  • chore: Add external contributor to CHANGELOG.md (#22111)
  • chore: Reinstate changelog anchor (#22022)
  • chore(cloudflare): Ignore import patterns (#22008)
  • chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)
  • chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)
  • chore(opentelemetry): Add worker as export | sort exports (#21859)
  • chore(size-limit): weekly auto-bump (#21812)
  • ci: Only run cloudflare & bundler plugin tests when necessary (#22130)
  • ci(deps): bump actions/checkout from 6 to 7 (#21898)
  • ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)
  • ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)
  • ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)
  • ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)
  • feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)
  • feat(core): add uniq array util and consolidate call sites (#22152)
  • feat(deps): Bump @​growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)
  • feat(deps): Bump @​opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)
  • feat(deps): Bump dotenv from 16.0.3 to 17.4.2 (#22150)

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.65.0

  • feat(angular): Set url attributes on pageload and navigation spans (#21985)
  • feat(astro): Set url.template on pageload spans (#22011)
  • feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)
  • feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)
  • feat(bun): warn when externalizing instrumented deps (#21999)
  • feat(core): Require attributes on SerializedStreamedSpan (#22052)
  • feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)
  • feat(nextjs): Set url attributes on pageload and navigation spans (#22006)
  • feat(react): Set url.template, url.path and url.full on routing spans (#22087)
  • feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)
  • feat(remix): Set url.template on pageload and navigation spans (#22025)
  • feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)
  • feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)
  • feat(server-utils): Implement orchestrion-based express integration (#21889)
  • feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)
  • feat(solid): Set url attributes on solid router and tanstack router spans (#22090)
  • feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)
  • feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)
  • fix(browser): Send web vital span sentry.segment.name attribute (#22024)
  • fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)
  • fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)
  • fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)
  • fix(replay): Skip client reports for replay failures after stop (#22177)
  • perf(vite): add fast component annotation transform (#22089)
  • ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)
  • chore: Add external contributor to CHANGELOG.md (#22111)
  • chore: Reinstate changelog anchor (#22022)
  • chore(cloudflare): Ignore import patterns (#22008)
  • chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)
  • chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)
  • chore(opentelemetry): Add worker as export | sort exports (#21859)
  • chore(size-limit): weekly auto-bump (#21812)
  • ci: Only run cloudflare & bundler plugin tests when necessary (#22130)
  • ci(deps): bump actions/checkout from 6 to 7 (#21898)
  • ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)
  • ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)
  • ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)
  • ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)
  • feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)
  • feat(core): add uniq array util and consolidate call sites (#22152)
  • feat(deps): Bump @​growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)
  • feat(deps): Bump @​opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)

... (truncated)

Commits
  • c66a815 release: 10.65.0
  • 018c570 Merge pull request #22179 from getsentry/prepare-release/10.65.0
  • 5a1e331 meta(changelog): Update changelog for 10.65.0
  • e934b44 feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
  • 04bbb79 fix(replay): Skip client reports for replay failures after stop (#22177)
  • cb77f42 test: Remove fixed container_name from node integration test docker-compose f...
  • a84cc9d test(node-integration-tests): Surface early scenario exit instead of hanging ...
  • 88e3b32 feat(core): add isObjectLike guard and consolidate non-null-object checks (#2...
  • 7565c90 ref(nitro, nuxt): inline == null checks for nullish detection (#22154)
  • 256b9b9 feat(ember): Set url.template, url.path and url.full on router spans (#22095)
  • Additional commits viewable in compare view

Updates i18next from 26.3.4 to 26.3.6

Release notes

Sourced from i18next's releases.

v26.3.6

  • fix: allow TypeScript 7 in the optional typescript peer dependency range (^5 || ^6 || ^7). With typescript@7.0.2 in a project, npm install failed with an ERESOLVE peer conflict. The published types are TS7-compatible as-is: every test/typescript suite produces identical results under 6.0 and 7.0.2. Reported in react-i18next#1927, thanks @​andikapradanaarif.

v26.3.5

  • fix: $t() nesting options blocks that span multiple lines are now parsed. nest() decided where the nested key ends by testing match[1] with /{.*}/, whose dot does not cross line breaks — so a $t(key, { ... }) options object containing a newline was treated as having no options, mis-split as formatters, and the nested lookup ran without its options (placeholders stayed unresolved). The nesting regexp itself already matches newlines inside $t(...); adding the s (dotAll) flag makes multiline options behave like the single-line form. Thanks @​spokodev (#2440).
  • fix: getUsedParamsDetails (the returnDetails: true path) no longer mutates the passed replace object. It wrote count straight onto options.replace so the returned usedParams would include it — a caller reusing one replace object across t() calls then carried a stale count into later interpolations (e.g. a previous call's count: 5 rendered instead of the current call's value). The details are now built from a copy; usedParams still includes count. Thanks @​spokodev (#2441).
  • fix: with the default skipOnVariables: true + escapeValue: true, a {{placeholder}} carried inside an interpolated value now stays literal even when the value contains escapable characters. The skip logic advanced the regex lastIndex by the raw value length, but the escaped text written into the string is longer, so lastIndex landed inside the inserted value and a trailing {{placeholder}} in it got interpolated — leaking another in-scope variable that should have stayed literal (values without escapable characters were already skipped correctly). The advance now uses the escaped length that is actually written, and the regex-safe $-doubling is applied only at the String.replace call so it can't distort the length arithmetic. Thanks @​spokodev (#2442).
Changelog

Sourced from i18next's changelog.

26.3.6

  • fix: allow TypeScript 7 in the optional typescript peer dependency range (^5 || ^6 || ^7). With typescript@7.0.2 in a project, npm install failed with an ERESOLVE peer conflict. The published types are TS7-compatible as-is: every test/typescript suite produces identical results under 6.0 and 7.0.2. Reported in react-i18next#1927, thanks @​andikapradanaarif.

26.3.5

  • fix: $t() nesting options blocks that span multiple lines are now parsed. nest() decided where the nested key ends by testing match[1] with /{.*}/, whose dot does not cross line breaks — so a $t(key, { ... }) options object containing a newline was treated as having no options, mis-split as formatters, and the nested lookup ran without its options (placeholders stayed unresolved). The nesting regexp itself already matches newlines inside $t(...); adding the s (dotAll) flag makes multiline options behave like the single-line form. Thanks @​spokodev (#2440).
  • fix: getUsedParamsDetails (the returnDetails: true path) no longer mutates the passed replace object. It wrote count straight onto options.replace so the returned usedParams would include it — a caller reusing one replace object across t() calls then carried a stale count into later interpolations (e.g. a previous call's count: 5 rendered instead of the current call's value). The details are now built from a copy; usedParams still includes count. Thanks @​spokodev (#2441).
  • fix: with the default skipOnVariables: true + escapeValue: true, a {{placeholder}} carried inside an interpolated value now stays literal even when the value contains escapable characters. The skip logic advanced the regex lastIndex by the raw value length, but the escaped text written into the string is longer, so lastIndex landed inside the inserted value and a trailing {{placeholder}} in it got interpolated — leaking another in-scope variable that should have stayed literal (values without escapable characters were already skipped correctly). The advance now uses the escaped length that is actually written, and the regex-safe $-doubling is applied only at the String.replace call so it can't distort the length arithmetic. Thanks @​spokodev (#2442).
Commits
  • e1c60d4 26.3.6
  • 04da43e fix: allow typescript 7 in optional peerDependencies range (react-i18next#1927)
  • 8eed4ac build
  • 573ae73 26.3.5
  • cc54b05 docs(changelog): 26.3.5 — multiline $t() options, replace mutation, escaped-l...
  • 3180d67 fix: skip interpolation of placeholders inside escaped values (#2442)
  • d16f5a2 fix: stop mutating the passed replace object when returning details (#2441)
  • bed56c1 fix: parse $t() nesting options block that spans multiple lines (#2440)
  • c19e458 docs(changelog): link GHSA advisory for deepExtend fix
  • 7bb87d0 docs(changelog): reference security advisory for deepExtend fix
  • Additional commits viewable in compare view

Updates lucide-react from 1.23.0 to 1.24.0

Release notes

Sourced from lucide-react's releases.

Version 1.24.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Commits

Updates phoenix from 1.8.8 to 1.8.9

Changelog

Sourced from phoenix's changelog.

1.8.9 (2026-07-07)

Security fixes

  • CVE-2026-56811: Add a max_channels_per_transport option (defaulting to 100) to prevent a single client from spawning an unbounded number of channels (processes), eventually exhausting the server's memory or process limit.
  • CVE-2026-56812: Prevent presence keys from colliding with Object.prototype properties members, crashing the JS Presence client
  • Enforce longpoll batch size introduced in 1.8.6. This is additional hardening against CVE-2026-32689. If your application sends events with a very high frequency and uses long polling, such that a single longpoll request would exceed 100 events, you should update to 1.8.7 first.
Commits
  • 734c8d1 Release v1.8.9
  • beffc4d fix presence keys colliding with object prototype chain
  • 16e295d Limit the number of channels a single transport process can join
  • 211ff62 Allow authToken to be a function (#6751)
  • 6cb2a83 Enforce longpoll batch size
  • 5bf1ce6 Add missing test file
  • 046accc Normalize route verb while grouping

@dependabot
Bump the npm-minor-and-patch group in /assets with 15 updates
0c8ef35 
Bumps the npm-minor-and-patch group in /assets with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [@inertiajs/react](https://github.com/inertiajs/inertia/tree/HEAD/packages/react) | `3.6.0` | `3.6.1` |
| [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.18` | `1.1.19` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.19` | `2.1.20` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.18` | `1.1.19` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.2` | `2.3.3` |
| [@radix-ui/react-toast](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toast) | `1.2.18` | `1.2.19` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.11` | `1.2.12` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.63.0` | `10.65.0` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.63.0` | `10.65.0` |
| [i18next](https://github.com/i18next/i18next) | `26.3.4` | `26.3.6` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.23.0` | `1.24.0` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.8` | `1.8.9` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.8` | `17.0.9` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.2` | `2.5.3` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.1` |


Updates `@inertiajs/react` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/inertiajs/inertia/releases)
- [Changelog](https://github.com/inertiajs/inertia/blob/3.x/CHANGELOG.md)
- [Commits](https://github.com/inertiajs/inertia/commits/v3.6.1/packages/react)

Updates `@radix-ui/react-alert-dialog` from 1.1.18 to 1.1.19
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog)

Updates `@radix-ui/react-dropdown-menu` from 2.1.19 to 2.1.20
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu)

Updates `@radix-ui/react-popover` from 1.1.18 to 1.1.19
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@radix-ui/react-select` from 2.3.2 to 2.3.3
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select)

Updates `@radix-ui/react-toast` from 1.2.18 to 1.2.19
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/toast/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toast)

Updates `@radix-ui/react-tooltip` from 1.2.11 to 1.2.12
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip)

Updates `@sentry/node` from 10.63.0 to 10.65.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.63.0...10.65.0)

Updates `@sentry/react` from 10.63.0 to 10.65.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.63.0...10.65.0)

Updates `i18next` from 26.3.4 to 26.3.6
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.3.4...v26.3.6)

Updates `lucide-react` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.24.0/packages/lucide-react)

Updates `phoenix` from 1.8.8 to 1.8.9
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/v1.8.9/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.8.8...v1.8.9)

Updates `react-i18next` from 17.0.8 to 17.0.9
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.0.8...v17.0.9)

Updates `@biomejs/biome` from 2.5.2 to 2.5.3
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.3/packages/@biomejs/biome)

Updates `@types/node` from 26.1.0 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@inertiajs/react"
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@radix-ui/react-alert-dialog"
  dependency-version: 1.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@radix-ui/react-dropdown-menu"
  dependency-version: 2.1.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@radix-ui/react-select"
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@radix-ui/react-toast"
  dependency-version: 1.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@radix-ui/react-tooltip"
  dependency-version: 1.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@sentry/node"
  dependency-version: 10.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@sentry/react"
  dependency-version: 10.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: i18next
  dependency-version: 26.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: phoenix
  dependency-version: 1.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: react-i18next
  dependency-version: 17.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 16, 2026
@dependabot dependabot Bot requested a review from andreogle as a code owner July 16, 2026 11:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 16, 2026
@andreogle andreogle merged commit c5fe117 into main Jul 16, 2026
2 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/assets/npm-minor-and-patch-dd17d1eb7f branch July 16, 2026 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andreogle andreogle Awaiting requested review from andreogle andreogle is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@andreogle