chore(deps): bump the npm_and_yarn group across 3 directories with 5 updates - #76
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the npm_and_yarn group across 3 directories with 5 updates#76dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…updates Bumps the npm_and_yarn group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `15.5.18` | `15.5.21` | | [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.0` | | [hono](https://github.com/honojs/hono) | `4.12.25` | `4.12.27` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.1.2` | `3.1.4` | | [immutable](https://github.com/immutable-js/immutable-js) | `4.3.8` | `4.3.9` | Bumps the npm_and_yarn group with 1 update in the /packages/nextjs directory: [sharp](https://github.com/lovell/sharp). Bumps the npm_and_yarn group with 1 update in the /packages/ponder directory: [hono](https://github.com/honojs/hono). Updates `next` from 15.5.18 to 15.5.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.5.18...v15.5.21) Updates `sharp` from 0.34.5 to 0.35.0 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.0) Updates `hono` from 4.12.25 to 4.12.27 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.25...v4.12.27) Updates `fast-uri` from 3.1.2 to 3.1.4 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.2...v3.1.4) Updates `immutable` from 4.3.8 to 4.3.9 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v4.3.8...v4.3.9) Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.0) Updates `hono` from 4.12.25 to 4.12.27 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.25...v4.12.27) --- updated-dependencies: - dependency-name: next dependency-version: 15.5.21 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-version: 0.35.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: hono dependency-version: 4.12.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 4.3.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sharp dependency-version: 0.35.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: hono dependency-version: 4.12.27 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 2cc61fa7bf
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "framer-motion": "^12.29.2", | ||
| "gsap": "^3.14.2", | ||
| "next": "~15.5.18", | ||
| "next": "~16.2.12", |
There was a problem hiding this comment.
The committed yarn.lock workspace stanza still declares next: ~15.5.21 and sharp: ^0.35.0, resolving them to 15.5.21 and 0.35.0 respectively, while this manifest now requests ~16.2.12 and ^0.35.3. In the checked lint, static-analysis, unit-test, e2e, and publish workflows, installation runs with yarn install --immutable, so Yarn must reject this manifest/lockfile mismatch before any build or test can run; regenerate and commit the lockfile for these exact ranges (or restore the ranges used to generate it).
Useful? React with 👍 / 👎.
Noc2
approved these changes
Jul 26, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 5 updates in the / directory:
15.5.1815.5.210.34.50.35.04.12.254.12.273.1.23.1.44.3.84.3.9Bumps the npm_and_yarn group with 1 update in the /packages/nextjs directory: sharp.
Bumps the npm_and_yarn group with 1 update in the /packages/ponder directory: hono.
Updates
nextfrom 15.5.18 to 15.5.21Release notes
Sourced from next's releases.
Commits
e26f6ffv15.5.217f5deeb[15.x] Improve performance of checking valid MPA form submissions57c31f7[15.x] EnforceserverActions.bodySizeLimitfor Server Actions in Edge runtimee3e5666[15.x] Set correct origin for internal redirects in custom server35f5013[15.x] Ensure exotic rewrite param values are properly encoded062f667[15.x] fix(fetch-cache): key fetch(Request, init) by the effective request577c9dc[15.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies530d4fa[15.x] fix(next/image): improve performance of detectContentType()8fabaf3[15.x] Performance improvements when decoding React Server function payloadsff12a61[15.x] Validate server reference IDs during manifest lookupUpdates
sharpfrom 0.34.5 to 0.35.0Release notes
Sourced from sharp's releases.
... (truncated)
Commits
2ed5af4Release v0.35.04475cf1Tests: update locator hash for sharp-libvips v1.3.0deb22ddUpgrade to sharp-libvips v1.3.007f1be9Prerelease v0.35.0-rc.8df1109bPrerelease v0.35.0-rc.7aca49b3Upgrade to libvips v8.18.3e9e86f5Type-check density option before range validation (#4536)2f0bcf0Docs: update supported image formats98e03b8Revert "Guard heif bitdepth property for prebuilt binaries"e4ea2f3CI: Ignore package minimum age in smoke testsUpdates
honofrom 4.12.25 to 4.12.27Release notes
Sourced from hono's releases.
Commits
97c6fe14.12.27aa92177Merge commit from forkcd3f6f7Merge commit from forkd4853a8fix(jsx): make merged context-isolation tests pass tsc type check (#5037)6735feafix(jsx): cast awaitedFallback through unknown to fix Deno type check (#5036)fab3b13Merge commit from fork9f0dadfci: use npm Staged publishing (#5035)27b79924.12.26d29982cchore: replace arg and glob with Bun native APIs in build script16215d5chore: remove unused devcontainer and gitpod configs (#5029)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for hono since your current version.
Updates
fast-urifrom 3.1.2 to 3.1.4Release notes
Sourced from fast-uri's releases.
Commits
6aeece6Bumped v3.1.42d50fbafix: reject literal backslash in URI authority0549fe3Bumped v3.1.32a6d357Merge commit from forkUpdates
immutablefrom 4.3.8 to 4.3.9Release notes
Sourced from immutable's releases.
Changelog
Sourced from immutable's changelog.
... (truncated)
Commits
5da79194.3.9794a1a9Merge commit from fork3dd7e56perf(Map): index large hash-collision buckets for faster lookups62d0b58fix ts in tests8c0e5f8Merge commit from forkf0bc997Merge commit from fork8ac83f4change tagf7373e5use id-token to deploy 4.x version2f545adchangelogUpdates
sharpfrom 0.34.5 to 0.35.3Release notes
Sourced from sharp's releases.
... (truncated)
Commits
2ed5af4Release v0.35.04475cf1Tests: update locator hash for sharp-libvips v1.3.0deb22ddUpgrade to sharp-libvips v1.3.007f1be9Prerelease v0.35.0-rc.8df1109bPrerelease v0.35.0-rc.7aca49b3Upgrade to libvips v8.18.3e9e86f5Type-check density option before range validation (#4536)2f0bcf0Docs: update supported image formats98e03b8Revert "Guard heif bitdepth property for prebuilt binaries"e4ea2f3CI: Ignore package minimum age in smoke testsUpdates
honofrom 4.12.25 to 4.12.27Release notes
Sourced from hono's releases.
Commits
97c6fe14.12.27aa92177Merge commit from forkcd3f6f7Merge commit from forkd4853a8fix(jsx): make merged context-isolation tests pass tsc type check (#5037)6735feafix(jsx): cast awaitedFallback through unknown to fix Deno type check (#5036)fab3b13Merge commit from fork9f0dadfci: use npm Staged publishing (#5035)27b79924.12.26d29982cchore: replace arg and glob with Bun native APIs in build script16215d5chore: remove unused devcontainer and gitpod configs (#5029)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for hono since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.