Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 6 updates - #185

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-25cec66378
Open

chore(deps): bump the production-dependencies group across 1 directory with 6 updates#185
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-25cec66378

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 6 updates in the / directory:

Package From To
@proj-airi/font-departure-mono 0.11.0 0.11.3
js-yaml 4.3.0 4.3.1
next 16.2.10 16.2.12
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
simple-icons 16.25.0 16.27.1

Updates @proj-airi/font-departure-mono from 0.11.0 to 0.11.3

Release notes

Sourced from @​proj-airi/font-departure-mono's releases.

v0.11.3 Highlights

New Contributors

Product Updates

Desktop Companion

  • You can now use voice input directly in the desktop companion. AIRI listens through the configured microphone, buffers short transcript fragments, and avoids feeding its own speech back into chat while it is talking.
  • You can now move the desktop window back to the center of the current display from the controls island or the desktop data settings. This helps recover AIRI when the window gets awkwardly positioned or ends up hard to reach.
  • Microphone permission handling is more reliable in the Electron app, while still limiting permission grants to AIRI-owned local pages.
  • Desktop sign-in is more robust. Invalid auth callbacks no longer consume the one-time login flow, and the standalone auth UI now accepts the newer AIRI backend origin.
  • Settings entry icons are now preserved in production builds, so settings navigation should no longer lose icons after bundling.

Character Cards And Models

  • Character cards can now be imported and exported as AIRI .zip packages.
  • Exported packages include the character card plus supported display model resources, so sharing a character can carry more of the setup with it.
  • Invalid or incomplete card packages now show clearer import errors.
  • Live2D model loading now handles non-ASCII file names inside restored model folders and avoids double-encoding already encoded paths.

Account And Cloud Reliability

  • AIRI now records AI generation, LLM usage, Stripe identity, and checkout-related analytics more consistently. This improves billing, support investigation, and product health tracking without changing the visible checkout flow.
  • PostHog event naming and forwarding were normalized across app and server surfaces, making account and usage events easier to correlate.

To Developers

  • @​proj-airi/pipelines-audio received stronger event typing, playback manager cleanup, ACT payload normalization, transcript buffering, and clearer error handling for speech and playback flows.
  • Chat/LLM runtime paths now carry usage metadata more consistently, including server-side OpenAI-compatible request handling and downstream analytics headers.
  • Auth callback handling now validates OIDC state inside the loopback server before resolving the login attempt.

To Contributors

  • Grafana server dashboards and related build tests were refreshed.
  • .env files are now ignored to reduce accidental credential leakage.
  • Nix Xorg attributes were updated for current package structure.
  • Claude Code dependencies, sponsor data, and generated translations were refreshed.
  • The release bumps AIRI packages and apps to 0.11.1.

Upgrade Notes

  • Character card import now expects AIRI .zip packages instead of raw .json card files.

... (truncated)

Commits

Updates js-yaml from 4.3.0 to 4.3.1

Changelog

Sourced from js-yaml's changelog.

4.3.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.
Commits

Updates next from 16.2.10 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Moderate:

Commits
  • 2234717 v16.2.12
  • 957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
  • b56eb16 Backport/docs fixes 16.2 - July round (#96031)
  • 9beca08 v16.2.11
  • 3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
  • ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
  • 9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
  • b512063 [16.x] Set correct origin for internal redirects in custom server
  • d303326 [16.x] Ensure exotic rewrite param values are properly encoded
  • 73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
  • Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates simple-icons from 16.25.0 to 16.27.1

Release notes

Sourced from simple-icons's releases.

Release 16.27.1

2 updated icons

Release 16.27.0

1 new icon

Release 16.26.0

2 new icons

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
f1e5e26 
…y with 6 updates

Bumps the production-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@proj-airi/font-departure-mono](https://github.com/moeru-ai/airi/tree/HEAD/packages/font-departure-mono) | `0.11.0` | `0.11.3` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.3.0` | `4.3.1` |
| [next](https://github.com/vercel/next.js) | `16.2.10` | `16.2.12` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [simple-icons](https://github.com/simple-icons/simple-icons) | `16.25.0` | `16.27.1` |



Updates `@proj-airi/font-departure-mono` from 0.11.0 to 0.11.3
- [Release notes](https://github.com/moeru-ai/airi/releases)
- [Commits](https://github.com/moeru-ai/airi/commits/v0.11.3/packages/font-departure-mono)

Updates `js-yaml` from 4.3.0 to 4.3.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...4.3.1)

Updates `next` from 16.2.10 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.10...v16.2.12)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `simple-icons` from 16.25.0 to 16.27.1
- [Release notes](https://github.com/simple-icons/simple-icons/releases)
- [Commits](simple-icons/simple-icons@16.25.0...16.27.1)

---
updated-dependencies:
- dependency-name: "@proj-airi/font-departure-mono"
  dependency-version: 0.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: simple-icons
  dependency-version: 16.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 4, 2026
@vercel

vercel Bot commented Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
portfolio-app Ready Ready Preview Aug 4, 2026 3:06pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants