Skip to content

chore(deps): bump the frontend-all group in /frontend with 8 updates - #245

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-all-16d520b64a
Sep 7, 2026
Merged

chore(deps): bump the frontend-all group in /frontend with 8 updates#245
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-all-16d520b64a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-all group in /frontend with 8 updates:

Package From To
@astrojs/cloudflare 14.2.6 14.3.0
@astrojs/vercel 11.0.9 11.0.10
@types/react-dom 19.2.5 19.2.7
astro 7.2.10 7.3.1
hls.js 1.7.1 1.7.2
lucide-react 1.38.0 1.41.0
react-doctor 0.9.12 0.9.13
wrangler 4.127.1 4.129.0

Updates @astrojs/cloudflare from 14.2.6 to 14.3.0

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​14.3.0

Minor Changes

  • #17795 15e2deb Thanks @​matthewp! - Adds concurrent rendering support for experimental.incrementalBuild, including when using @astrojs/cloudflare

    Incremental builds no longer disable caching when build.concurrency is greater than 1. Projects that set build.concurrency: 1 to keep the cache enabled can remove that workaround. Cloudflare builds also reduce serialization overhead for large prerendered pages.

  • #17887 35aa62e Thanks @​matthewp! - Adds a Cloudflare finalize() response handler for custom request handlers

    Call finalize() to apply cookies and Cloudflare CDN cache defaults to the response from an astro/fetch pipeline:

    import { astro, FetchState } from 'astro/fetch';
import { cf, finalize } from '@astrojs/cloudflare/fetch';
export default {
async fetch(request: Request, env: Env, context: ExecutionContext) {
const state = new FetchState(request);
const asset = await cf(state, env, context);
if (asset) return asset;
return finalize(state, await astro(state));

},
};

    The @astrojs/cloudflare/hono middleware applies these response headers automatically. Cloudflare custom entrypoints also fall back to static assets when no Astro route matches and use the default server entrypoint when prerendering through workerd.

Patch Changes

  • #17895 41b88ac Thanks @​astro-factory! - Fixes cold astro dev crashes by adding astro/app/manifest and @astrojs/cloudflare/cache/provider to the optimizeDeps.include list

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.4
Changelog

Sourced from @​astrojs/cloudflare's changelog.

14.3.0

Minor Changes

  • #17795 15e2deb Thanks @​matthewp! - Adds concurrent rendering support for experimental.incrementalBuild, including when using @astrojs/cloudflare

    Incremental builds no longer disable caching when build.concurrency is greater than 1. Projects that set build.concurrency: 1 to keep the cache enabled can remove that workaround. Cloudflare builds also reduce serialization overhead for large prerendered pages.

  • #17887 35aa62e Thanks @​matthewp! - Adds a Cloudflare finalize() response handler for custom request handlers

    Call finalize() to apply cookies and Cloudflare CDN cache defaults to the response from an astro/fetch pipeline:

    import { astro, FetchState } from 'astro/fetch';
import { cf, finalize } from '@astrojs/cloudflare/fetch';
export default {
async fetch(request: Request, env: Env, context: ExecutionContext) {
const state = new FetchState(request);
const asset = await cf(state, env, context);
if (asset) return asset;
return finalize(state, await astro(state));

},
};

    The @astrojs/cloudflare/hono middleware applies these response headers automatically. Cloudflare custom entrypoints also fall back to static assets when no Astro route matches and use the default server entrypoint when prerendering through workerd.

Patch Changes

  • #17895 41b88ac Thanks @​astro-factory! - Fixes cold astro dev crashes by adding astro/app/manifest and @astrojs/cloudflare/cache/provider to the optimizeDeps.include list

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.4
Commits

Updates @astrojs/vercel from 11.0.9 to 11.0.10

Release notes

Sourced from @​astrojs/vercel's releases.

@​astrojs/vercel@​11.0.10

Patch Changes

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Updates the development image service to forward every argument it receives to Astro's Sharp service, including the new logger parameter
Changelog

Sourced from @​astrojs/vercel's changelog.

11.0.10

Patch Changes

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Updates the development image service to forward every argument it receives to Astro's Sharp service, including the new logger parameter
Commits

Updates @types/react-dom from 19.2.5 to 19.2.7

Commits

Updates astro from 7.2.10 to 7.3.1

Release notes

Sourced from astro's releases.

astro@7.3.1

Patch Changes

astro@7.3.0

Minor Changes

  • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

    Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize "${transform.src}". Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

    Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

    Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { CacheProvider } from 'astro';
const provider: CacheProvider = {
name: 'my-cache',
async onRequest({ request, url, logger }, next) {
logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
return next();
},
// ...
};

    Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

Patch Changes

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Updates Astro's remaining internal warnings and errors to be written through the configured logger instead of directly to the console, when possible

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.1

Patch Changes

7.3.0

Minor Changes

  • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

    Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize "${transform.src}". Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

    Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

    Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { CacheProvider } from 'astro';
const provider: CacheProvider = {
name: 'my-cache',
async onRequest({ request, url, logger }, next) {
logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
return next();
},
// ...
};

    Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

Patch Changes

... (truncated)

Commits

Updates hls.js from 1.7.1 to 1.7.2

Release notes

Sourced from hls.js's releases.

v1.7.2

Summary

HLS.js v1.7.2 includes bug fixes and improvements over the last release.

Changes Since The Last Release

video-dev/hls.js@v1.7.1...v1.7.2

  • Bundle externals in TypeScript type definitions (#8019) @​robwalch
  • Fix capLevelToPlayerSize with stable player size (#8011)
  • Prevent duration collapse on seek to gap at end-of-stream (#8027)
  • Fix blocking reload for MSN 0 (#8013) @​darfink
  • Process empty WebVTT parts with MAP segments (#8012)
  • Fix IMSC1 millisecond parsing (#8003) @​luantaraschi
  • Fix default the TTML tick rate for IMSC1 subtitles (#8024)
  • Fix HLS Variable Substitution after a Media Playlist parsing error (#7992) @​luantaraschi
  • Docs: add inspect.software health badge (#7989) @​Nayjest

Demo Page

https://e06ac3e1.hls-js-dev.pages.dev/demo/

Feedback

Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

Commits
  • dd669ec Do not mark end-of-stream on empty or GAP segments
  • 28aad06 fix(subtitles): process empty WebVTT parts
  • ded4e78 Default the TTML tick rate instead of dividing by zero
  • 971ffee Convert IMSC1 milliseconds to seconds instead of multiplying
  • f0b8f96 fix: enable blocking reload for MSN 0
  • d12d447 Bundle externals in type definitions (#8019)
  • bc96ed9 Fix capLevelToPlayerSize with stable player size
  • d80bc2f Merge pull request #8017 from video-dev/renovate/wrangler-4.x
  • dd8d2be Update dependency wrangler to v4.124.0
  • f9c3eb7 Merge pull request #8016 from video-dev/renovate/microsoft-api-extractor-7.x
  • Additional commits viewable in compare view

Updates lucide-react from 1.38.0 to 1.41.0

Release notes

Sourced from lucide-react's releases.

Version 1.41.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.40.0...1.41.0

Version 1.40.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.39.0...1.40.0

Version 1.39.0

What's Changed

Full Changelog: lucide-icons/lucide@1.38.0...1.39.0

Commits

Updates react-doctor from 0.9.12 to 0.9.13

Release notes

Sourced from react-doctor's releases.

react-doctor@0.9.13

Patch Changes

  • 28a1a9f Thanks @​aidenybai! - Add bippy as a runtime dependency.

  • #1695 ac87f7d Thanks @​skoshx! - Preserve plugin settings when React Doctor adopts an existing lint config.

  • #1651 ffc2d14 Thanks @​aidenybai! - Upgrade the Oxc parser and Oxlint runtime while preserving hard failures for broken JS plugins.

  • #1689 1d3e4a6 Thanks @​skoshx! - Use pnpm's strict dependency layout and declare the runtime dependencies that the CLI imports directly.

  • #1646 05ef989 Thanks @​aidenybai! - Keep the interactive score header intact in narrow split views and invalidate locally stale scan results when rule implementations change.

    Report standalone Three.js render loops that use requestAnimationFrame instead of the renderer-managed setAnimationLoop API.

    Include standalone Three.js, supported React framework, Remotion, and React Three Fiber ecosystem packages in automatic workspace project discovery.

  • #1714 013f737 Thanks @​aidenybai! - Clean leading npm messages from GitHub Action JSON reports before later steps read them.

  • #1697 0557145 Thanks @​skoshx! - Stop multi-project scans from recommending GitHub Actions when the root workflow is already configured.

  • #1730 adc3a91 Thanks @​skoshx! - Fix rn-no-raw-text false positives in components that return only direct <fbt> or <fbs> elements.

  • #1723 e1d4c51 Thanks @​skoshx! - Prevent rn-no-raw-text reports for <fbt> content passed through verified React Native text wrappers.

  • #1693 4e04921 Thanks @​skoshx! - Show an npm-native recovery command when an incomplete npx installation is missing Ajv meta-schema files.

  • #1734 025d69d Thanks @​skoshx! - Fix js-set-map-lookups false positives for substring checks on values returned by the global String constructor.

  • #1725 0f59a3b Thanks @​aidenybai! - Run test-noise rules in ambiguous product-named directories such as tools, demo, and migrations when they are below a recognized application source root. Explicit test surfaces and root-level tooling or example directories remain excluded.

  • #1688 72a4f46 Thanks @​skoshx! - Make generated GitHub workflows explain how to pin the action to an immutable commit SHA.

  • #1663 2b0f06e Thanks @​aidenybai! - Improve repeated effect analysis and deeply nested JSX performance, preserve derived-state detection through transparent TypeScript wrappers, and upgrade Oxc parser and linter dependencies.

  • #1650 0b670aa Thanks @​aidenybai! - Run installed Claude Code and Cursor hooks once at the end of an agent turn, include untracked files in the changed-file scan, and migrate existing per-tool React Doctor hooks automatically.

  • #1746 ca30808 Thanks @​aidenybai! - Accept source file paths as positional CLI arguments.

  • #1624 8c2f03a Thanks @​aidenybai! - Make React cleanup a first-class part of React Doctor with diagnostics for complex React functions and repeated JSX composition. Keep whole-project unused file, export, type, dependency, and import-cycle analysis as explicit opt-in rules while removing the separate Deslop packages, experimental language server, and IDE extensions.

  • #1653 1971506 Thanks @​aidenybai! - Add an interactive URL scan and /performance skill that record Chrome DevTools traces, flash live component render outlines, and return agent-readable React performance context.

  • #1654 6416370 Thanks @​aidenybai! - Add component-composition and correctness rules for shadcn, Radix UI, Base UI, React Aria, TanStack Table, and TanStack Virtual behind six new project capabilities (shadcn from components.json; the rest from their package dependencies). Dialog surfaces that render no title part and carry no accessible name are reported across all three libraries (shadcn DialogContent/SheetContent/AlertDialogContent/DrawerContent, Radix Dialog.Content and AlertDialog.Content, Base UI Dialog.Popup and AlertDialog.Popup). Icon-sized shadcn Buttons with no accessible name, shadcn FormItem fields wrapping a FormControl without a FormLabel, and Base UI Field.Root controls without a Field.Label are reported as unlabeled. Raw Input, Textarea, and Button controls placed directly inside shadcn InputGroup are reported in favor of its InputGroupInput, InputGroupTextarea, and InputGroupAddon parts, and presence-only data-[selected]: / data-[disabled]: Tailwind variants on command items are reported because cmdk renders both attributes as "true" or "false". TanStack Form submit handlers that call the form's handleSubmit without event.preventDefault() are reported because the browser still performs a native full-page submission. Tabs triggers provably inside the root without the list part are reported for shadcn, Radix, and Base UI; the existing shadcn-tabs-trigger-requires-list rule is now enabled by default for shadcn projects through the capability gate and no longer risks false positives on extracted trigger subcomponents. React Aria Dialogs without a Heading or aria-label are reported as unnamed. TanStack Table data/columns options that provably get a new array identity every render (inline literals, render-scoped const arrays, fresh ?? [] fallbacks, inline .filter()/.map() transforms) are reported for rebuilding row and column models each render and looping auto-reset features, and elements measured by TanStack Virtual's measureElement without a data-index attribute are reported because the virtualizer drops the measurement.

  • #1743 6f3dd03 Thanks @​aidenybai! - Normalize Oxlint file URLs before applying ignore patterns and writing report-relative diagnostic paths.

  • Updated dependencies [ffc2d14, f7efb7d, 05ef989, a04b933, adc3a91, 2c4560f, e1d4c51, 905607f, 17eeeb5, afa1780, 025d69d, 0f59a3b, 5bc88ae, 4bf7aff, bd08406, 2b0f06e, 8c2f03a, 6416370, 28d4343]:

    • oxlint-plugin-react-doctor@0.9.13
Changelog

Sourced from react-doctor's changelog.

0.9.13

Patch Changes

  • 28a1a9f Thanks @​aidenybai! - Add bippy as a runtime dependency.

  • #1695 ac87f7d Thanks @​skoshx! - Preserve plugin settings when React Doctor adopts an existing lint config.

  • #1651 ffc2d14 Thanks @​aidenybai! - Upgrade the Oxc parser and Oxlint runtime while preserving hard failures for broken JS plugins.

  • #1689 1d3e4a6 Thanks @​skoshx! - Use pnpm's strict dependency layout and declare the runtime dependencies that the CLI imports directly.

  • #1646 05ef989 Thanks @​aidenybai! - Keep the interactive score header intact in narrow split views and invalidate locally stale scan results when rule implementations change.

    Report standalone Three.js render loops that use requestAnimationFrame instead of the renderer-managed setAnimationLoop API.

    Include standalone Three.js, supported React framework, Remotion, and React Three Fiber ecosystem packages in automatic workspace project discovery.

  • #1714 013f737 Thanks @​aidenybai! - Clean leading npm messages from GitHub Action JSON reports before later steps read them.

  • #1697 0557145 Thanks @​skoshx! - Stop multi-project scans from recommending GitHub Actions when the root workflow is already configured.

  • #1730 adc3a91 Thanks @​skoshx! - Fix rn-no-raw-text false positives in components that return only direct <fbt> or <fbs> elements.

  • #1723 e1d4c51 Thanks @​skoshx! - Prevent rn-no-raw-text reports for <fbt> content passed through verified React Native text wrappers.

  • #1693 4e04921 Thanks @​skoshx! - Show an npm-native recovery command when an incomplete npx installation is missing Ajv meta-schema files.

  • #1734 025d69d Thanks @​skoshx! - Fix js-set-map-lookups false positives for substring checks on values returned by the global String constructor.

  • #1725 0f59a3b Thanks @​aidenybai! - Run test-noise rules in ambiguous product-named directories such as tools, demo, and migrations when they are below a recognized application source root. Explicit test surfaces and root-level tooling or example directories remain excluded.

  • #1688 72a4f46 Thanks @​skoshx! - Make generated GitHub workflows explain how to pin the action to an immutable commit SHA.

  • #1663 2b0f06e Thanks @​aidenybai! - Improve repeated effect analysis and deeply nested JSX performance, preserve derived-state detection through transparent TypeScript wrappers, and upgrade Oxc parser and linter dependencies.

  • #1650 0b670aa Thanks @​aidenybai! - Run installed Claude Code and Cursor hooks once at the end of an agent turn, include untracked files in the changed-file scan, and migrate existing per-tool React Doctor hooks automatically.

  • #1746 ca30808 Thanks @​aidenybai! - Accept source file paths as positional CLI arguments.

  • #1624 8c2f03a Thanks @​aidenybai! - Make React cleanup a first-class part of React Doctor with diagnostics for complex React functions and repeated JSX composition. Keep whole-project unused file, export, type, dependency, and import-cycle analysis as explicit opt-in rules while removing the separate Deslop packages, experimental language server, and IDE extensions.

  • #1653 1971506 Thanks @​aidenybai! - Add an interactive URL scan and /performance skill that record Chrome DevTools traces, flash live component render outlines, and return agent-readable React performance context.

  • #1654 6416370 Thanks @​aidenybai! - Add component-composition and correctness rules for shadcn, Radix UI, Base UI, React Aria, TanStack Table, and TanStack Virtual behind six new project capabilities (shadcn from components.json; the rest from their package dependencies). Dialog surfaces that render no title part and carry no accessible name are reported across all three libraries (shadcn DialogContent/SheetContent/AlertDialogContent/DrawerContent, Radix Dialog.Content and AlertDialog.Content, Base UI Dialog.Popup and AlertDialog.Popup). Icon-sized shadcn Buttons with no accessible name, shadcn FormItem fields wrapping a FormControl without a FormLabel, and Base UI Field.Root controls without a Field.Label are reported as unlabeled. Raw Input, Textarea, and Button controls placed directly inside shadcn InputGroup are reported in favor of its InputGroupInput, InputGroupTextarea, and InputGroupAddon parts, and presence-only data-[selected]: / data-[disabled]: Tailwind variants on command items are reported because cmdk renders both attributes as "true" or "false". TanStack Form submit handlers that call the form's handleSubmit without event.preventDefault() are reported because the browser still performs a native full-page submission. Tabs triggers provably inside the root without the list part are reported for shadcn, Radix, and Base UI; the existing shadcn-tabs-trigger-requires-list rule is now enabled by default for shadcn projects through the capability gate and no longer risks false positives on extracted trigger subcomponents. React Aria Dialogs without a Heading or aria-label are reported as unnamed. TanStack Table data/columns options that provably get a new array identity every render (inline literals, render-scoped const arrays, fresh ?? [] fallbacks, inline .filter()/.map() transforms) are reported for rebuilding row and column models each render and looping auto-reset features, and elements measured by TanStack Virtual's measureElement without a data-index attribute are reported because the virtualizer drops the measurement.

  • #1743 6f3dd03 Thanks @​aidenybai! - Normalize Oxlint file URLs before applying ignore patterns and writing report-relative diagnostic paths.

  • Updated dependencies [ffc2d14, f7efb7d, 05ef989, a04b933, adc3a91, 2c4560f, e1d4c51, 905607f, 17eeeb5, afa1780, 025d69d, 0f59a3b, 5bc88ae, 4bf7aff, bd08406, 2b0f06e, 8c2f03a, 6416370, 28d4343]:

    • oxlint-plugin-react-doctor@0.9.13
Commits

Updates wrangler from 4.127.1 to 4.129.0

Release notes

Sourced from wrangler's releases.

wrangler@4.129.0

Minor Changes

@dependabot
chore(deps): bump the frontend-all group in /frontend with 8 updates
99c79ed 
Bumps the frontend-all group in /frontend with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) | `14.2.6` | `14.3.0` |
| [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel) | `11.0.9` | `11.0.10` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.2.7` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.10` | `7.3.1` |
| [hls.js](https://github.com/video-dev/hls.js) | `1.7.1` | `1.7.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.38.0` | `1.41.0` |
| [react-doctor](https://github.com/millionco/react-doctor/tree/HEAD/packages/react-doctor) | `0.9.12` | `0.9.13` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.127.1` | `4.129.0` |


Updates `@astrojs/cloudflare` from 14.2.6 to 14.3.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@14.3.0/packages/integrations/cloudflare)

Updates `@astrojs/vercel` from 11.0.9 to 11.0.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vercel@11.0.10/packages/integrations/vercel)

Updates `@types/react-dom` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `astro` from 7.2.10 to 7.3.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.1/packages/astro)

Updates `hls.js` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/video-dev/hls.js/releases)
- [Changelog](https://github.com/video-dev/hls.js/blob/master/docs/release-process.md)
- [Commits](video-dev/hls.js@v1.7.1...v1.7.2)

Updates `lucide-react` from 1.38.0 to 1.41.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.41.0/packages/lucide-react)

Updates `react-doctor` from 0.9.12 to 0.9.13
- [Release notes](https://github.com/millionco/react-doctor/releases)
- [Changelog](https://github.com/millionco/react-doctor/blob/main/packages/react-doctor/CHANGELOG.md)
- [Commits](https://github.com/millionco/react-doctor/commits/react-doctor@0.9.13/packages/react-doctor)

Updates `wrangler` from 4.127.1 to 4.129.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.129.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@astrojs/cloudflare"
  dependency-version: 14.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-all
- dependency-name: "@astrojs/vercel"
  dependency-version: 11.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-all
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-all
- dependency-name: astro
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-all
- dependency-name: hls.js
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-all
- dependency-name: lucide-react
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-all
- dependency-name: react-doctor
  dependency-version: 0.9.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-all
- dependency-name: wrangler
  dependency-version: 4.129.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
project-web-media Ready Ready Preview Sep 7, 2026 3:57pm UTC

@github-actions
github-actions Bot merged commit 95fa2f7 into main Sep 7, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/frontend/frontend-all-16d520b64a branch September 7, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants