Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 16 updates#62

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-e27b2859e1
Open

chore(deps): bump the npm-dependencies group across 1 directory with 16 updates#62
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-e27b2859e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 15 updates in the / directory:

Package From To
@clerk/nextjs 7.3.4 7.5.2
@clerk/ui 1.10.0 1.16.1
lucide-react 1.16.0 1.18.0
next 16.2.6 16.2.9
radix-ui 1.4.3 1.5.0
react 19.2.6 19.2.7
@types/react 19.2.14 19.2.17
react-dom 19.2.6 19.2.7
@biomejs/biome 2.4.15 2.5.0
@clerk/testing 2.0.28 2.1.1
@tailwindcss/postcss 4.3.0 4.3.1
@types/node 25.8.0 25.9.3
lefthook 2.1.6 2.1.9
shadcn 4.7.0 4.11.0
vitest 4.1.6 4.1.8

Updates @clerk/nextjs from 7.3.4 to 7.5.2

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.5.2

Patch Changes

@​clerk/nextjs@​7.5.1

Patch Changes

  • Updated dependencies [a5c7bc7]:
    • @​clerk/shared@​4.17.0
    • @​clerk/react@​6.9.0
    • @​clerk/backend@​3.6.1

@​clerk/nextjs@​7.5.0

Minor Changes

  • Remove the <ConfigureSSO /> component from the public API in favor of usage within OrganizationProfile (#8779) by @​LauraBeatris

    Removing these exports has no breaking changes impact on production applications, as was never released as a GA component

Patch Changes

  • Harden middleware debug log output: the formatter now recursively truncates known credential keys (sessionToken, tokenInHeader, sessionTokenInCookie, secretKey, jwtKey) at any nesting depth, so a bearer token can no longer reach the logs even if a debug producer nests one. This is a defense-in-depth backstop alongside the source-level redaction in @clerk/backend. (#8744) by @​jacekradko

  • Add and improve JSDoc comments across public types and methods to support generated reference documentation for the /objects docs section. Exports a few previously-internal types (OnEventListener, OffEventListener, ClerkOptionsNavigation) so they can be referenced from the generated docs. (#8276) by @​alexisintech

  • Updated dependencies [83f50f6, 2d6670c, e7cb503, 83f50f6, af706e3, 48b187d, 27c4d75, 955e998, 032632c, 0fece6f, b295af3, 0c854c3, 27c4d75, 8e1bd48]:

    • @​clerk/react@​6.8.0
    • @​clerk/shared@​4.16.0
    • @​clerk/backend@​3.6.0

@​clerk/nextjs@​7.4.3

Patch Changes

@​clerk/nextjs@​7.4.2

Patch Changes

... (truncated)

Changelog

Sourced from @​clerk/nextjs's changelog.

7.5.2

Patch Changes

7.5.1

Patch Changes

  • Updated dependencies [a5c7bc7]:
    • @​clerk/shared@​4.17.0
    • @​clerk/react@​6.9.0
    • @​clerk/backend@​3.6.1

7.5.0

Minor Changes

  • Remove the <ConfigureSSO /> component from the public API in favor of usage within OrganizationProfile (#8779) by @​LauraBeatris

    Removing these exports has no breaking changes impact on production applications, as was never released as a GA component

Patch Changes

  • Harden middleware debug log output: the formatter now recursively truncates known credential keys (sessionToken, tokenInHeader, sessionTokenInCookie, secretKey, jwtKey) at any nesting depth, so a bearer token can no longer reach the logs even if a debug producer nests one. This is a defense-in-depth backstop alongside the source-level redaction in @clerk/backend. (#8744) by @​jacekradko

  • Add and improve JSDoc comments across public types and methods to support generated reference documentation for the /objects docs section. Exports a few previously-internal types (OnEventListener, OffEventListener, ClerkOptionsNavigation) so they can be referenced from the generated docs. (#8276) by @​alexisintech

  • Updated dependencies [83f50f6, 2d6670c, e7cb503, 83f50f6, af706e3, 48b187d, 27c4d75, 955e998, 032632c, 0fece6f, b295af3, 0c854c3, 27c4d75, 8e1bd48]:

    • @​clerk/react@​6.8.0
    • @​clerk/shared@​4.16.0
    • @​clerk/backend@​3.6.0

7.4.3

Patch Changes

... (truncated)

Commits
  • 5ebed8b ci(repo): Version packages (#8810)
  • f046c49 chore(repo): Upgrade to TypeScript 6.0 (#8177)
  • 7cfd510 ci(repo): Version packages (#8803)
  • 1028d82 ci(repo): Version packages (#8735)
  • 2d6670c chore(ui,clerk-js,shared): Remove public export of ConfigureSSO (#8779)
  • 27c4d75 fix(backend): harden machine-token verification and redact debug-logged token...
  • 8e1bd48 docs(repo): Add typedoc comments; generate typedoc output for /objects docs (...
  • c9d9e6a ci(repo): Version packages (#8679)
  • 86fd38f fix(repo): harden keyless accountless requests (#8676)
  • bbbe654 ci(repo): Version packages (#8635)
  • Additional commits viewable in compare view

Updates @clerk/ui from 1.10.0 to 1.16.1

Release notes

Sourced from @​clerk/ui's releases.

@​clerk/ui@​1.16.1

Patch Changes

  • Fix checkout button label showing "Start free trial" when adding seats during a free trial period (#8829) by @​mauricioabreu

  • Migrate the build pipeline to tsdown and TypeScript 6.0. This is an internal tooling change with no intended changes to the public API or runtime behavior. (#8177) by @​dstaley

  • Updated dependencies [f046c49, b5fa9f6, 3d5b2fe]:

    • @​clerk/localizations@​4.8.1
    • @​clerk/shared@​4.17.1

@​clerk/ui@​1.16.0

Minor Changes

  • Add support for Clerk Billing plans with per-seat costs. (#8629) by @​dstaley
    • New invite-to-checkout flow when inviting members while on a plan that uses per-seat costs.
    • New localization values to support UI additions.
    • Support for the orgId and minSeats parameters to getPlans().
    • Support for the seatsQuantity and priceId parameters to checkout creation.
    • New totals field on payments.
    • New availablePrices field on plans.
    • New nextPayment field on subscription items.
    • New discounts field on checkouts.
    • Additional fields on nextPayment for more granularity.

Patch Changes

  • Display the scope description for user:org:read organization access in the OAuth Consent dialog so users understand organization membership information is being shared with the OAuth client. (#8798) by @​jfoshee

  • Fix alignment of the domain section subtitle in the organization profile to match the button above it. (#8795) by @​alexcarpenter

  • Updated dependencies [a5c7bc7]:

    • @​clerk/localizations@​4.8.0
    • @​clerk/shared@​4.17.0

@​clerk/ui@​1.15.1

Patch Changes

  • Fix Chrome-specific scroll jump when toggling the billing period switch on the pricing table. (#8742) by @​alexcarpenter

  • Fix a circular import in the styled-system that could crash module initialization under bundler configurations with tree-shaking disabled. (#8754) by @​jacekradko

  • Internal refactor for self-serve SSO wizard navigation to leverage a guard-based state machine. (#8715) by @​iagodahlem

    It makes the step navigation more predictable: the step you land on (including after a reload) and which steps you can move to are derived from the connection's state, the connection reset flow lands you on the right step.

  • Correctly display OAuth consent redirect domains for known multi-label public suffixes. (#8700) by @​wobsoriano

  • Fix modal backdrop appearing light in dark mode (#8743) by @​alexcarpenter

... (truncated)

Changelog

Sourced from @​clerk/ui's changelog.

1.16.1

Patch Changes

  • Fix checkout button label showing "Start free trial" when adding seats during a free trial period (#8829) by @​mauricioabreu

  • Migrate the build pipeline to tsdown and TypeScript 6.0. This is an internal tooling change with no intended changes to the public API or runtime behavior. (#8177) by @​dstaley

  • Updated dependencies [f046c49, b5fa9f6, 3d5b2fe]:

    • @​clerk/localizations@​4.8.1
    • @​clerk/shared@​4.17.1

1.16.0

Minor Changes

  • Add support for Clerk Billing plans with per-seat costs. (#8629) by @​dstaley
    • New invite-to-checkout flow when inviting members while on a plan that uses per-seat costs.
    • New localization values to support UI additions.
    • Support for the orgId and minSeats parameters to getPlans().
    • Support for the seatsQuantity and priceId parameters to checkout creation.
    • New totals field on payments.
    • New availablePrices field on plans.
    • New nextPayment field on subscription items.
    • New discounts field on checkouts.
    • Additional fields on nextPayment for more granularity.

Patch Changes

  • Display the scope description for user:org:read organization access in the OAuth Consent dialog so users understand organization membership information is being shared with the OAuth client. (#8798) by @​jfoshee

  • Fix alignment of the domain section subtitle in the organization profile to match the button above it. (#8795) by @​alexcarpenter

  • Updated dependencies [a5c7bc7]:

    • @​clerk/localizations@​4.8.0
    • @​clerk/shared@​4.17.0

1.15.1

Patch Changes

  • Fix Chrome-specific scroll jump when toggling the billing period switch on the pricing table. (#8742) by @​alexcarpenter

  • Fix a circular import in the styled-system that could crash module initialization under bundler configurations with tree-shaking disabled. (#8754) by @​jacekradko

  • Internal refactor for self-serve SSO wizard navigation to leverage a guard-based state machine. (#8715) by @​iagodahlem

    It makes the step navigation more predictable: the step you land on (including after a reload) and which steps you can move to are derived from the connection's state, the connection reset flow lands you on the right step.

  • Correctly display OAuth consent redirect domains for known multi-label public suffixes. (#8700) by @​wobsoriano

... (truncated)

Commits
  • 5ebed8b ci(repo): Version packages (#8810)
  • b151416 feat(ui,headless): mosaic dialog foundations (#8808)
  • d0ed42f fix(ui): checkout button label when adding seats to a free trial (#8829)
  • 5dc5cd4 feat(ui): add Mosaic hover, motionSafe, and alpha CSS utilities (#8817)
  • 0bc0dc5 feat(ui): Scaffold mosaic input component (#8814)
  • f046c49 chore(repo): Upgrade to TypeScript 6.0 (#8177)
  • 7cfd510 ci(repo): Version packages (#8803)
  • 81f7c65 feat(swingset): Scaffold component documentation package (#8797)
  • a5c7bc7 feat(*): Add support for per-seat costs (#8629)
  • df4619f fix(ui): show user:org:read scope in OAuth Consent list (#8798)
  • Additional commits viewable in compare view

Updates lucide-react from 1.16.0 to 1.18.0

Release notes

Sourced from lucide-react's releases.

Version 1.18.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.17.0...1.18.0

Version 1.17.0

What's Changed

Full Changelog: lucide-icons/lucide@1.16.0...1.17.0

Commits

Updates next from 16.2.6 to 16.2.9

Release notes

Sourced from next's releases.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Backport documentation fixes for v16.2 (#93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
  • [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
  • [backport] Propagate adapter preferred regions (#94200)
  • [16.2.x] Don't drop FormData entries (#94240)
  • [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

Commits
  • f37fad9 v16.2.9
  • d9aaaed [cd] Allow tagging semver-lower releases as @latest if @latest po… (#94627)
  • 6f16804 v16.2.8
  • 0dbc1d5 [16.2.x][cd] Ensure release can be triggered on old branches (#94598)
  • 90e3c81 [16.2.x] Align Actions dependencies with Canary (#94339)
  • 83f402c [16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)
  • 411c455 v16.2.7
  • c63224f [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...
  • 63115c7 [16.2.x] Don't drop FormData entries (#94240)
  • aef22fd [backport] Propagate adapter preferred regions (#94200)
  • Additional commits viewable in compare view

Updates radix-ui from 1.4.3 to 1.5.0

Changelog

Sourced from radix-ui's changelog.

1.5.0

Context Menu

  • Added support for a controlled open prop on ContextMenu.Root. This is intended for reading the open state and closing the menu programmatically, though we discourage opening the menu programmatically since opening the menu depends on user interaction to position the menu.

    function ControlledContextMenu() {
  const [open, setOpen] = React.useState(false);
  return (
    <ContextMenu.Root open={open} onOpenChange={setOpen}>
      <ContextMenu.Trigger>Open</ContextMenu.Trigger>
      <ContextMenu.Content>
        <button type="button" onClick={() => setOpen(false)}>
          Close me
        </button>
        <ContextMenu.Item>Item 1</ContextMenu.Item>
        <ContextMenu.Item>Item 2</ContextMenu.Item>
      </ContextMenu.Content>
    </ContextMenu.Root>
  );
}

  • Fixed a bug in where submenus remained expanded after re-opening on long-press touch events.

Dialog

  • Fixed a bug where iOS text selection and editing on HTML inputs within dialogs were broken.
  • Fixed a bug causing disabled pointer events in closed dialogs.

One-Time Password Field

  • Fixed pasting into One-Time Password Field in environments that do not support the legacy "Text" clipboard format by reading the pasted value as "text/plain".
  • Fixed issues with focus management in React 19.2+.
  • Fixed a bug to ensure that pasted values exceeding the field length are truncated.

Popper

  • Fixed a "Maximum update depth exceeded" bug for pages with a large number of popper instances.
  • Exposed data-side and data-align on PopperAnchor element

Presence

  • Fixed a "Maximum update depth exceeded" bug in React 19 that could occur when Presence was given a child with an unstable ref.

Radio Group

  • Added unstable RadioGroupItemProvider, RadioGroupItemTrigger and RadioGroupItemBubbleInput parts. These expose the previously internal composition of a radio item that included a visually hidden input so consumers can directly access and recompose them. The RadioGroupItem component continues to render them by default.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for radix-ui since your current version.


Updates react from 19.2.6 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 19.2.14 to 19.2.17

Commits

Updates react-dom from 19.2.6 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates @biomejs/biome from 2.4.15 to 2.5.0

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.0

2.5.0

Minor Changes

  • #9539 f0615fd Thanks @​ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:

    ! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.

  • #9495 2056b23 Thanks @​aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

    Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

    <!-- Invalid: no keyboard handler -->
<div onclick="handleClick()">Click me</div>
<!-- Valid: has keyboard handler -->
<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>
<!-- Valid: inherently keyboard-accessible -->
<button onclick="handleClick()">Submit</button>

  • #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

    <!-- .typo is used but never defined -->
<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>

  • #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.0

Minor Changes

  • #9539 f0615fd Thanks @​ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:

    ! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.

  • #9495 2056b23 Thanks @​aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

    Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

    <!-- Invalid: no keyboard handler -->
<div onclick="handleClick()">Click me</div>
<!-- Valid: has keyboard handler -->
<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>
<!-- Valid: inherently keyboard-accessible -->
<button onclick="handleClick()">Submit</button>

  • #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

    <!-- .typo is used but never defined -->
<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>

  • #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.

    /* styles.css — .ghost is never used in any importing file */

... (truncated)

Commits

Updates @clerk/testing from 2.0.28 to 2.1.1

Release notes

Sourced from @​clerk/testing's releases.

@​clerk/testing@​2.1.1

Patch Changes

  • Migrate the build pipeline to tsdown and TypeScript 6.0. This is an internal tooling change with no intended changes to the public API or runtime behavior. (#8177) by @​dstaley

  • Updated dependencies [cdb940a, b5fa9f6, f046c49,

@dependabot
chore(deps): bump the npm-dependencies group across 1 directory with …
bec2c52 
…16 updates

Bumps the npm-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.3.4` | `7.5.2` |
| [@clerk/ui](https://github.com/clerk/javascript/tree/HEAD/packages/ui) | `1.10.0` | `1.16.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.16.0` | `1.18.0` |
| [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.9` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.4.3` | `1.5.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.15` | `2.5.0` |
| [@clerk/testing](https://github.com/clerk/javascript/tree/HEAD/packages/testing) | `2.0.28` | `2.1.1` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.0` | `4.3.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.8.0` | `25.9.3` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.6` | `2.1.9` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.7.0` | `4.11.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.6` | `4.1.8` |



Updates `@clerk/nextjs` from 7.3.4 to 7.5.2
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.5.2/packages/nextjs)

Updates `@clerk/ui` from 1.10.0 to 1.16.1
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/ui/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/ui@1.16.1/packages/ui)

Updates `lucide-react` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.18.0/packages/lucide-react)

Updates `next` from 16.2.6 to 16.2.9
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.2.6...v16.2.9)

Updates `radix-ui` from 1.4.3 to 1.5.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui)

Updates `react` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@biomejs/biome` from 2.4.15 to 2.5.0
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.0/packages/@biomejs/biome)

Updates `@clerk/testing` from 2.0.28 to 2.1.1
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/testing/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/testing@2.1.1/packages/testing)

Updates `@tailwindcss/postcss` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@types/node` from 25.8.0 to 25.9.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `lefthook` from 2.1.6 to 2.1.9
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.6...v2.1.9)

Updates `shadcn` from 4.7.0 to 4.11.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.11.0/packages/shadcn)

Updates `tailwindcss` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss)

Updates `vitest` from 4.1.6 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@clerk/ui"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lucide-react
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: next
  dependency-version: 16.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: radix-ui
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@clerk/testing"
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: lefthook
  dependency-version: 2.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: shadcn
  dependency-version: 4.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 14, 2026
@vercel

vercel Bot commented Jun 14, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
devflow Ready Ready Preview, Comment Jun 14, 2026 6:56pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants