Skip to content

chore(deps): bump the npm-minor-and-patch group with 19 updates - #210

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-ebdbf9ef6e
Closed

chore(deps): bump the npm-minor-and-patch group with 19 updates#210
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-ebdbf9ef6e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 19 updates:

Package From To
supabase 2.101.0 2.109.1
turbo 2.10.0 2.10.4
@supabase/ssr 0.6.1 0.12.0
@supabase/supabase-js 2.106.1 2.110.2
@vercel/microfrontends 2.3.3 2.4.0
svelte 5.55.9 5.56.4
@playwright/test 1.59.1 1.61.1
@sveltejs/kit 2.61.1 2.69.2
@tailwindcss/vite 4.2.2 4.3.2
svelte-check 4.4.6 4.7.2
@crxjs/vite-plugin 2.4.0 2.7.1
@types/chrome 0.0.287 0.2.2
globals 17.4.0 17.7.0
prettier 3.8.1 3.9.5
tailwindcss 4.2.2 4.3.2
tsx 4.21.0 4.23.0
typescript-eslint 8.58.1 8.63.0
@sveltejs/package 2.5.7 2.5.8
svelte2tsx 0.7.54 0.7.57

Updates supabase from 2.101.0 to 2.109.1

Release notes

Sourced from supabase's releases.

v2.109.1

Supabase CLI v2.109.1 — 2026-07-07

This patch release includes bug fixes for database and sync operations, improvements to error messaging, and corrections to flag handling.

Bug fixes

  • db pull no longer hangs in non-interactive mode — fixed hang when using db pull without interactive prompts. (#5725)
  • CSV flag parsing for sso and postgres-config — flags now correctly split multiple values. (#5764)
  • Function deploy path resolution — fixed path handling in function deployments. (#5755)
  • db diff respects schema order — schema_paths order is now maintained in diff output. (#5706)
  • db unban-ip validation — project ref resolution now works correctly. (#5769)
  • Declarative sync hanging — fixed hang when edge-runtime container exits. (#5714)
  • Query command output formatting — fixed output formatting issues. (#5763)
  • Eszip bundling errors — improved error handling. (#5747)

Improvements

  • Error messages guide flag placement — the CLI suggests correct subcommand placement when flags are misplaced. (#5751)
  • Shell completion customization--no-descriptions flag suppresses descriptions in shell completions. (#5771)
  • Non-TypeScript type generationgen types now works for JavaScript and other languages. (#5622)
  • Custom image registry supportgen types respects the SUPABASE_INTERNAL_IMAGE_REGISTRY env var. (#5786)
  • Status command power-user flags — hidden --exclude and --ignore-health-check flags for advanced usage. (#5770)

TypeScript port progress

  • db pull — ported to use PostgreSQL's native pg_dump for faster, more reliable snapshots. Behavior matches the Go CLI. (#5725)

Plus internal improvements including service version alignment and experimental feature gating enhancements, plus dependency and Docker image updates.

Full changelog: supabase/cli@v2.109.0...v2.109.1

v2.109.1-beta.22

2.109.1-beta.22 (2026-07-07)

Bug Fixes

  • docker: bump supabase/postgres from 17.6.1.142 to 17.6.1.143 in /apps/cli-go/pkg/config/templates (#5807) (6d4c198)
  • docker: bump the docker-minor group in /apps/cli-go/pkg/config/templates with 3 updates (#5806) (1cbf45a)

v2.109.1-beta.21

2.109.1-beta.21 (2026-07-07)

Bug Fixes

  • deps: bump github.com/posthog/posthog-go from 1.16.2 to 1.17.2 in /apps/cli-go in the go-minor group across 1 directory (#5805) (60c2d17)

... (truncated)

Commits
  • 2b8eeea fix(deps): bump the npm-major group with 8 updates (#5808)
  • 1439680 fix(cli): honor SUPABASE_INTERNAL_IMAGE_REGISTRY in gen types (#5786)
  • 28b17f6 fix(cli): add hidden --exclude and --ignore-health-check flags to status (#5770)
  • f28efed fix(cli): run --experimental gate before storage's mutex check (#5768)
  • 4efa0df fix(cli): add --no-descriptions flag to completion subcommands (#5771)
  • c62b558 fix(cli): resolve network-bans project ref before validating --db-unban-ip (#...
  • 28cc844 fix(cli): wire --experimental gate into 7 ungated native leaves (#5766)
  • 31d6fb9 fix(cli): generate non-TypeScript types from project refs (#5622)
  • 5a0e4a9 fix(deps): bump the npm-major group with 3 updates (#5782)
  • 9bb97be fix(db): respect schema_paths order in diff (#5706)
  • Additional commits viewable in compare view

Updates turbo from 2.10.0 to 2.10.4

Release notes

Sourced from turbo's releases.

Turborepo v2.10.4

What's Changed

Changelog

... (truncated)

Commits
  • 1506a11 publish 2.10.4 to registry
  • 11a68c7 fix: Stop flagging relative imports that resolve into node_modules in boundar...
  • 947b478 fix: Raise the open-file soft limit at startup (#13282)
  • ddc584d feat: Make turbo prune Cargo-aware (#13281)
  • ff0d508 perf: Skip dependency-closure assembly for toolchains that derive nothing (#1...
  • 39d623e feat: Make turbo watch Cargo-aware (#13280)
  • af01fdf fix: Collapse nested package-manager fallback conditional (#13279)
  • 7e02f94 release(turborepo): 2.10.4-canary.2 (#13278)
  • 8e3a59f release(library): 0.0.1-canary.23 (#13276)
  • ce18f0a test: Add end-to-end coverage for Cargo workspaces (#13274)
  • Additional commits viewable in compare view

Updates @supabase/ssr from 0.6.1 to 0.12.0

Release notes

Sourced from @​supabase/ssr's releases.

v0.12.0

0.12.0 (2026-06-09)

Features

  • adds cookies.encode option allowing minimal cookie sizes (#126) (cf38b22)
  • bump cookie to 1.0.2 (#113) (b4a77b4)
  • cookies: add clearAuthCookiesAtScopes migration helper (#240) (4e47249)
  • full rewrite using getAll and setAll cookie methods (#1) (b6ae192)
  • improve cookie chunk handling via base64url+length encoding (#90) (6deb687)
  • pass cache headers to setAll to prevent CDN caching of auth responses (#176) (14962d2)
  • publish SSR under deprecated auth-helpers package names (#127) (e8b6102)
  • release workflow RC versioning and publish reliability (#164) (81e68f4)
  • update CI so it runs on release as well (#33) (4517996)
  • update supabase-js to latest (#133) (d65044d)
  • update supabase-js to latest (#145) (08bf7d6)
  • upgrade cookie dependency and cleanup imports (#77) (9524528)

Bug Fixes

  • add @​types/cookies to dependencies (#63) (47e5f16)
  • add create*Client string in x-client-info (#85) (f271acc)
  • allow cookies encode without getAll/setAll on browser client (#213) (89f3f28), closes #170
  • allow use of createBrowserClient without window present (#20) (27d868d)
  • auth: respect user-provided auth options in createBrowserClient (#167) (5f04837)
  • check chunkedCookie is string in server client (#57) (549fe62)
  • ci: remove packageManager field (#197) (6bf0226)
  • cookies console warnings (#136) (64ff6b3)
  • deprecate parse, serialize exports for more useful functions (#14) (0b5f881)
  • enable tree-shaking for browser bundles (#216) (f009d71)
  • fix createBrowserClient deprecation tsdoc (#17) (1df70ad)
  • force release (#98) (66710e8)
  • re-apply update CI so it runs on release as well (#49) (51d5a43)
  • release: pin npm to 11.5.2 so OIDC trusted publisher works (#249) (4af89f7)
  • remove optional dependencies (#41) (a48fe6f)
  • remove usage of internal type params (#123) (8f3e89e)
  • revert "update CI so it runs on release as well" (#44) (9d0e859)
  • revert: "feat: improve cookie chunk handling via base64url+length encoding (#90)" (#100) (2ea8e23)
  • set max-age default cookie option to 400 days (#54) (f4ed2e0)
  • set cookies for password recovery event (#32) (7dc1837)
  • set cookies when mfa challenge is verified (#27) (c217f53)
  • tsconfig: set explicit rootDir to silence TS6059 in consumer IDEs (#211) (a77ee8a), closes #209
  • update conventional commits ci to use main instead of master (#31) (bebce89)
  • update README session docs (#159) (b859905)
  • update type, remove unused imports, define AuthEvent type (#47) (4f4a375)
  • use skipAutoInitialize to prevent SSR token refresh race condition (#131) (0b7be28)
  • validate base64-prefixed chunked cookies decode to valid JSON (#210) (302cc0e)

... (truncated)

Changelog

Sourced from @​supabase/ssr's changelog.

0.12.0 (2026-06-09)

Features

  • adds cookies.encode option allowing minimal cookie sizes (#126) (cf38b22)
  • bump cookie to 1.0.2 (#113) (b4a77b4)
  • cookies: add clearAuthCookiesAtScopes migration helper (#240) (4e47249)
  • full rewrite using getAll and setAll cookie methods (#1) (b6ae192)
  • improve cookie chunk handling via base64url+length encoding (#90) (6deb687)
  • pass cache headers to setAll to prevent CDN caching of auth responses (#176) (14962d2)
  • publish SSR under deprecated auth-helpers package names (#127) (e8b6102)
  • release workflow RC versioning and publish reliability (#164) (81e68f4)
  • update CI so it runs on release as well (#33) (4517996)
  • update supabase-js to latest (#133) (d65044d)
  • update supabase-js to latest (#145) (08bf7d6)
  • upgrade cookie dependency and cleanup imports (#77) (9524528)

Bug Fixes

  • add @​types/cookies to dependencies (#63) (47e5f16)
  • add create*Client string in x-client-info (#85) (f271acc)
  • allow cookies encode without getAll/setAll on browser client (#213) (89f3f28), closes #170
  • allow use of createBrowserClient without window present (#20) (27d868d)
  • auth: respect user-provided auth options in createBrowserClient (#167) (5f04837)
  • check chunkedCookie is string in server client (#57) (549fe62)
  • ci: remove packageManager field (#197) (6bf0226)
  • cookies console warnings (#136) (64ff6b3)
  • deprecate parse, serialize exports for more useful functions (#14) (0b5f881)
  • enable tree-shaking for browser bundles (#216) (f009d71)
  • fix createBrowserClient deprecation tsdoc (#17) (1df70ad)
  • force release (#98) (66710e8)
  • re-apply update CI so it runs on release as well (#49) (51d5a43)
  • release: pin npm to 11.5.2 so OIDC trusted publisher works (#249) (4af89f7)
  • remove optional dependencies (#41) (a48fe6f)
  • remove usage of internal type params (#123) (8f3e89e)
  • revert "update CI so it runs on release as well" (#44) (9d0e859)
  • revert: "feat: improve cookie chunk handling via base64url+length encoding (#90)" (#100) (2ea8e23)
  • set max-age default cookie option to 400 days (#54) (f4ed2e0)
  • set cookies for password recovery event (#32) (7dc1837)
  • set cookies when mfa challenge is verified (#27) (c217f53)
  • tsconfig: set explicit rootDir to silence TS6059 in consumer IDEs (#211) (a77ee8a), closes #209
  • update conventional commits ci to use main instead of master (#31) (bebce89)
  • update README session docs (#159) (b859905)
  • update type, remove unused imports, define AuthEvent type (#47) (4f4a375)
  • use skipAutoInitialize to prevent SSR token refresh race condition (#131) (0b7be28)
  • validate base64-prefixed chunked cookies decode to valid JSON (#210) (302cc0e)

0.11.0 (2026-06-05)

... (truncated)

Commits
  • d8c9b60 chore(main): release 0.12.0 (#247)
  • 4af89f7 fix(release): pin npm to 11.5.2 so OIDC trusted publisher works (#249)
  • 164c7ab build(deps-dev): bump vitest from 1.6.1 to 4.1.0 in the npm_and_yarn group ac...
  • 2fd3333 chore: update @​supabase/supabase-js to v2.108.0 (#248)
  • dd766c4 chore(main): release 0.11.0 (#244)
  • 932931e build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#245)
  • 4e47249 feat(cookies): add clearAuthCookiesAtScopes migration helper (#240)
  • 34f2b6a chore: update @​supabase/supabase-js to v2.107.0 (#243)
  • 4292d04 chore: update @​supabase/supabase-js to v2.106.1 (#236)
  • a6896b1 chore: update @​supabase/supabase-js to v2.106.0 (#232)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​supabase/ssr since your current version.


Updates @supabase/supabase-js from 2.106.1 to 2.110.2

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.110.2

2.110.2 (2026-07-09)

🩹 Fixes

  • auth: clear local session on signout failures (#2504)

❤️ Thank You

  • Luc Peng

v2.110.2-canary.0

2.110.2-canary.0 (2026-07-07)

🩹 Fixes

  • auth: clear local session on signout failures (#2504)

❤️ Thank You

  • Luc Peng

v2.110.1

2.110.1 (2026-07-07)

🩹 Fixes

  • auth: defer init-time notifications until initializePromise resolves (#2498)
  • realtime: suppress disconnected status from onHeartbeat consumers (#2496)

❤️ Thank You

v2.110.1-canary.0

2.110.1-canary.0 (2026-07-07)

🩹 Fixes

  • auth: defer init-time notifications until initializePromise resolves (#2498)
  • realtime: suppress disconnected status from onHeartbeat consumers (#2496)

❤️ Thank You

v2.110.0

2.110.0 (2026-06-30)

🚀 Features

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.110.2 (2026-07-09)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.1 (2026-07-07)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.0 (2026-06-30)

🚀 Features

  • repo: drop Node.js 20 support (#2482)

❤️ Thank You

2.109.0 (2026-06-30)

🩹 Fixes

  • realtime: pin @​supabase/phoenix and browser test CDN deps (#2457)

❤️ Thank You

2.108.2 (2026-06-15)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.108.0 (2026-06-08)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.107.0 (2026-06-02)

🚀 Features

  • auth: remove navigator.locks-based mutex; introduce commit guard + dispose() (#2392)
  • supabase: update X-Client-Info to structured metadata format (#2359)
  • realtime: allow httpSend to send binary payload (#2400)

❤️ Thank You

  • Claude Sonnet 4.6
  • Eduardo Gurgel
  • Guilherme Souza
  • Katerina Skroumpelou @​mandarini

... (truncated)

Commits
  • 559dfb0 chore(release): version 2.110.1 changelogs (#2505)
  • b05dc29 docs(repo): register custom typedoc tags and clean up jsdoc warnings (#2500)
  • 291dfc8 chore(release): version 2.110.0 changelogs (#2483)
  • c3d5e6d feat(repo): drop Node.js 20 support (#2482)
  • b2e02b9 chore(release): version 2.109.0 changelogs (#2481)
  • dd2d4c2 fix(realtime): pin @​supabase/phoenix and browser test CDN deps (#2457)
  • a25062e chore(release): version 2.108.2 changelogs (#2449)
  • b3e5f2d chore(ci): unpin realtime version (#2432)
  • 76f3f02 test(auth): add passkey unit and e2e coverage (#2442)
  • 65fafe5 chore(release): version 2.108.0 changelogs (#2433)
  • Additional commits viewable in compare view

Updates @vercel/microfrontends from 2.3.3 to 2.4.0

Release notes

Sourced from @​vercel/microfrontends's releases.

@​vercel/microfrontends@​2.4.0

Minor Changes

  • 7a743be: Add an optional configured origin to the local development proxy via --origin <origin> or the MFE_LOCAL_PROXY_ORIGIN environment variable (for example https://web.localhost). When set, the proxy forwards that origin to your applications as x-forwarded-proto/x-forwarded-host/x-forwarded-port and rewrites fallback redirects onto it, so apps served behind a custom local hostname or a TLS terminator see the URL the browser actually used. When no origin is configured, inbound forwarded headers pass through unchanged.

@​vercel/microfrontends@​2.3.6

Patch Changes

  • e6deb57: Prevent the local development proxy from crashing on mid-stream upstream errors

    The HTTPS fallback path piped the upstream (production) response to the client without attaching an error handler. When that upstream connection reset mid-stream — common when many requests fan out to a production fallback — the unhandled error event surfaced as an uncaught exception and crashed the proxy process. The upstream response and client request/response streams now have error handlers that tear down the affected request instead of throwing.

@​vercel/microfrontends@​2.3.5

Patch Changes

  • 5fbc4e3: Preserve absolute URLs in query parameters when the local proxy normalizes request URLs and rewrites redirect Location headers.
  • 9a01e16: Route Vercel Toolbar well-known requests through the local proxy to the locally running application that served the page. This supports @vercel/toolbar@0.2.6+, which uses /.well-known/vercel-toolbar/* for local dev server access.

@​vercel/microfrontends@​2.3.4

Patch Changes

  • 7af3542: Prevent local proxy crashes when upstream errors occur after response headers have already been sent.
Changelog

Sourced from @​vercel/microfrontends's changelog.

2.4.0

Minor Changes

  • 7a743be: Add an optional configured origin to the local development proxy via --origin <origin> or the MFE_LOCAL_PROXY_ORIGIN environment variable (for example https://web.localhost). When set, the proxy forwards that origin to your applications as x-forwarded-proto/x-forwarded-host/x-forwarded-port and rewrites fallback redirects onto it, so apps served behind a custom local hostname or a TLS terminator see the URL the browser actually used. When no origin is configured, inbound forwarded headers pass through unchanged.

2.3.6

Patch Changes

  • e6deb57: Prevent the local development proxy from crashing on mid-stream upstream errors

    The HTTPS fallback path piped the upstream (production) response to the client without attaching an error handler. When that upstream connection reset mid-stream — common when many requests fan out to a production fallback — the unhandled error event surfaced as an uncaught exception and crashed the proxy process. The upstream response and client request/response streams now have error handlers that tear down the affected request instead of throwing.

2.3.5

Patch Changes

  • 5fbc4e3: Preserve absolute URLs in query parameters when the local proxy normalizes request URLs and rewrites redirect Location headers.
  • 9a01e16: Route Vercel Toolbar well-known requests through the local proxy to the locally running application that served the page. This supports @vercel/toolbar@0.2.6+, which uses /.well-known/vercel-toolbar/* for local dev server access.

2.3.4

Patch Changes

  • 7af3542: Prevent local proxy crashes when upstream errors occur after response headers have already been sent.
Commits
  • 4a8cb1f chore: update package versions (#65)
  • 7a743be feat(local-proxy): preserve the browser-facing origin behind the proxy (#64)
  • c541600 chore: update package versions (#63)
  • e6deb57 fix(local-proxy): handle mid-stream upstream errors to prevent crash (#62)
  • 6025fa0 chore: update package versions (#61)
  • 5fbc4e3 fix: preserve absolute URLs in local proxy query params (#60)
  • 9a01e16 fix: route toolbar well-known requests locally (#59)
  • 31dff1f chore: update package versions (#58)
  • 583a173 [microfrontends] Guard local proxy error responses after headers sent (#56)
  • See full diff in compare view

Updates svelte from 5.55.9 to 5.56.4

Release notes

Sourced from svelte's releases.

svelte@5.56.4

Patch Changes

  • fix: include wrapping parentheses in {@const} declarator end position (#18436)

  • fix: always unset reactivity context after restoring it (#18453)

  • fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

  • fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

svelte@5.56.3

Patch Changes

  • fix: ignore errors that occur in destroyed effects (#18384)

  • fix: type BigInts in $state.snapshot(...) return values (#18388)

svelte@5.56.2

Patch Changes

  • fix: properly track effect end node for async sibling component (#18371)

  • fix: prevent false-positive reactivity loss warning (#18373)

  • chore: bump esrap dependency (#18372)

  • fix: ignore declaration tags for animation directive (#18366)

  • fix: reject pending async deriveds on discard (#18308)

svelte@5.56.1

Patch Changes

  • fix: error at compile time on duplicate snippet/declaration tag definitions (#18351)

  • fix: parse declaration tag contents more robustly (#18353)

  • fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#18348)

  • fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#18348)

  • fix: tolerate whitespace before let/const in declaration tags (#18348)

  • fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#18350)

  • fix: more robust parsing of declaration tags with regards to type (

Bumps the npm-minor-and-patch group with 19 updates:

| Package | From | To |
| --- | --- | --- |
| [supabase](https://github.com/supabase/cli/tree/HEAD/apps/cli) | `2.101.0` | `2.109.1` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.0` | `2.10.4` |
| [@supabase/ssr](https://github.com/supabase/ssr) | `0.6.1` | `0.12.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.106.1` | `2.110.2` |
| [@vercel/microfrontends](https://github.com/vercel/microfrontends/tree/HEAD/packages/microfrontends) | `2.3.3` | `2.4.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.55.9` | `5.56.4` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.59.1` | `1.61.1` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.61.1` | `2.69.2` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.2.2` | `4.3.2` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.4.6` | `4.7.2` |
| [@crxjs/vite-plugin](https://github.com/crxjs/chrome-extension-tools/tree/HEAD/packages/vite-plugin) | `2.4.0` | `2.7.1` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.0.287` | `0.2.2` |
| [globals](https://github.com/sindresorhus/globals) | `17.4.0` | `17.7.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.5` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.2.2` | `4.3.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.58.1` | `8.63.0` |
| [@sveltejs/package](https://github.com/sveltejs/kit/tree/HEAD/packages/package) | `2.5.7` | `2.5.8` |
| [svelte2tsx](https://github.com/sveltejs/language-tools) | `0.7.54` | `0.7.57` |


Updates `supabase` from 2.101.0 to 2.109.1
- [Release notes](https://github.com/supabase/cli/releases)
- [Changelog](https://github.com/supabase/cli/blob/develop/apps/cli/docs/release-process.md)
- [Commits](https://github.com/supabase/cli/commits/v2.109.1/apps/cli)

Updates `turbo` from 2.10.0 to 2.10.4
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.0...v2.10.4)

Updates `@supabase/ssr` from 0.6.1 to 0.12.0
- [Release notes](https://github.com/supabase/ssr/releases)
- [Changelog](https://github.com/supabase/ssr/blob/main/CHANGELOG.md)
- [Commits](supabase/ssr@v0.6.1...v0.12.0)

Updates `@supabase/supabase-js` from 2.106.1 to 2.110.2
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.110.2/packages/core/supabase-js)

Updates `@vercel/microfrontends` from 2.3.3 to 2.4.0
- [Release notes](https://github.com/vercel/microfrontends/releases)
- [Changelog](https://github.com/vercel/microfrontends/blob/main/packages/microfrontends/CHANGELOG.md)
- [Commits](https://github.com/vercel/microfrontends/commits/@vercel/microfrontends@2.4.0/packages/microfrontends)

Updates `svelte` from 5.55.9 to 5.56.4
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.4/packages/svelte)

Updates `@playwright/test` from 1.59.1 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.59.1...v1.61.1)

Updates `@sveltejs/kit` from 2.61.1 to 2.69.2
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.69.2/packages/kit)

Updates `@tailwindcss/vite` from 4.2.2 to 4.3.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-vite)

Updates `svelte-check` from 4.4.6 to 4.7.2
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.4.6...svelte-check@4.7.2)

Updates `@crxjs/vite-plugin` from 2.4.0 to 2.7.1
- [Release notes](https://github.com/crxjs/chrome-extension-tools/releases)
- [Changelog](https://github.com/crxjs/chrome-extension-tools/blob/main/packages/vite-plugin/CHANGELOG.md)
- [Commits](https://github.com/crxjs/chrome-extension-tools/commits/HEAD/packages/vite-plugin)

Updates `@types/chrome` from 0.0.287 to 0.2.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `globals` from 17.4.0 to 17.7.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.4.0...v17.7.0)

Updates `prettier` from 3.8.1 to 3.9.5
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.9.5)

Updates `tailwindcss` from 4.2.2 to 4.3.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/tailwindcss)

Updates `tsx` from 4.21.0 to 4.23.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.0)

Updates `typescript-eslint` from 8.58.1 to 8.63.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/typescript-eslint)

Updates `@sveltejs/package` from 2.5.7 to 2.5.8
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/package/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/package@2.5.8/packages/package)

Updates `svelte2tsx` from 0.7.54 to 0.7.57
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte2tsx@0.7.54...svelte2tsx@0.7.57)

---
updated-dependencies:
- dependency-name: supabase
  dependency-version: 2.109.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: turbo
  dependency-version: 2.10.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@supabase/ssr"
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.110.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@vercel/microfrontends"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: svelte
  dependency-version: 5.56.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.69.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: svelte-check
  dependency-version: 4.7.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@crxjs/vite-plugin"
  dependency-version: 2.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/chrome"
  dependency-version: 0.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: globals
  dependency-version: 17.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@sveltejs/package"
  dependency-version: 2.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: svelte2tsx
  dependency-version: 0.7.57
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 10, 2026
@vercel

vercel Bot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pulse Ready Ready Preview, Comment Jul 10, 2026 4:22pm
pulse-dashboard Ready Ready Preview, Comment Jul 10, 2026 4:22pm

@dependabot @github

dependabot Bot commented on behalf of github Jul 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 12, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-ebdbf9ef6e branch July 12, 2026 09:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants