chore(deps): bump the production-minor-patch group across 1 directory with 12 updates by dependabot[bot] · Pull Request #53 · podverse/metaboost

dependabot · 2026-08-17T13:10:13Z

Bumps the production-minor-patch group with 11 updates in the / directory:

Package	From	To
pg	`8.22.0`	`8.23.0`
express-rate-limit	`8.5.2`	`8.6.2`
ip-address	`10.2.0`	`10.5.0`
jose	`6.2.3`	`6.2.8`
fast-xml-parser	`5.9.3`	`5.10.1`
recharts	`3.9.0`	`3.10.1`
@fortawesome/fontawesome-free	`7.2.0`	`7.3.1`
next	`16.2.9`	`16.3.1`
next-intl	`4.13.0`	`4.13.6`
react-dom	`19.2.7`	`19.2.8`
nodemailer	`9.0.1`	`9.0.5`

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Add support for query pipelineing.

Commits

df274d1 Publish
eb19d0f Add opt-in query pipelining (#3652)
See full diff in compare view

Updates express-rate-limit from 8.5.2 to 8.6.2

Release notes

Sourced from express-rate-limit's releases.

v8.6.2

You can view the changelog here.

v8.6.1

You can view the changelog here.

v8.6.0

You can view the changelog here.

Commits

c416f78 8.6.2
defb334 v8.6.2 changelog
7dd82cf fix: key IPv4-in-IPv6 addresses by range, not notation (#667)
4e23dbb chore(deps): bump ip-address from 10.3.1 to 10.4.0 (#666)
607ef1f chore(deps): bump ip-address from 10.2.0 to 10.3.1 (#664)
d2370f6 chore(deps-dev): bump the development-dependencies group with 5 updates (#663)
c7fced5 8.6.1
b21110e chore: deprecate millisecond-based time constants (#662)
fad3d85 chore(deps-dev): bump the development-dependencies group with 4 updates (#660)
fffb3c4 8.6.0
Additional commits viewable in compare view

Updates ip-address from 10.2.0 to 10.5.0

Release notes

Sourced from ip-address's releases.

v10.5.0

What's Changed

Honor the fromURL graceful-failure contract for non-IPv6 hosts by @beaugunderson in beaugunderson/ip-address#218

Correct the documentation where it disagreed with the library by @beaugunderson in beaugunderson/ip-address#219

Full Changelog: beaugunderson/ip-address@v10.4.0...v10.5.0

v10.4.0

What's Changed

Add GitHub Actions CI by @beaugunderson in beaugunderson/ip-address#213

Keep the package loadable on node 12, and enforce it by @beaugunderson in beaugunderson/ip-address#216

Validate the byte arrays Address6 is given by @beaugunderson in beaugunderson/ip-address#217

Full Changelog: beaugunderson/ip-address@v10.3.1...v10.4.0

v10.3.1

Full Changelog: beaugunderson/ip-address@v10.3.0...v10.3.1

v10.3.0

Full Changelog: beaugunderson/ip-address@v10.2.2...v10.3.0

v10.2.2

Full Changelog: beaugunderson/ip-address@v10.2.1...v10.2.2

v10.2.1

Full Changelog: beaugunderson/ip-address@v10.2.0...v10.2.1

Commits

ef98e0a 10.5.0
9fd1110 Correct the documentation where it disagreed with the library (#219)
d478737 Honor the fromURL graceful-failure contract for non-IPv6 hosts (#218)
fbb8db2 10.4.0
45a2b11 Validate the byte arrays Address6 is given (#217)
bac8810 Keep the package loadable on node 12, and enforce it (#216)
9b3d848 Add a security policy and a README section on security posture
e84a7b3 Order the README API reference Address4, Address6, AddressError
015160b Collapse each class in the README API reference
34061a8 Pin checkout and setup-node to commits in the release job
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ip-address since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates jose from 6.2.3 to 6.2.8

Release notes

Sourced from jose's releases.

v6.2.8

Fixes

enforce a single recipient when decrypting dir and ECDH-ES (505c383)

reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

index the JWS and JWE registries without a wrapper (925f3bb)

name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Fixes

require own JOSE properties for presence checks (90ab09c)

Refactor

reduce bundle size (767d7f1)

v6.2.6

Fixes

types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Fixes

compare claim values for falsy validation options (eb86956)

forward key management parameters for a single JWE recipient (2d4f801)

handle a zero-length JWE additional authenticated data (16ca398)

reject a generateKeyPair crv option the algorithm does not imply (76364e9)

reject an unencoded payload in the JWS Compact Serialization (01d053f)

reject characters outside the Base64URL alphabet (0ebb971), references #879

reject duplicate "crit" values when producing (31d60e1)

reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)

reject truncated ASN.1 key data (7a16c66)

surface non-ASCII token segments as JOSE errors (194fe11)

types: correct JWK and CryptoKey types (62a196d)

types: correct key resolver and JWT header types (e95f8c4)

validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

correct subpaths and API documentation (2daec38)

document consumer-supplied type parameters (9e9f66c)

stop claiming the JWK "use" parameter is used during import (47a07b2)

update CHANGELOG.md (fc51bf5)

Refactor

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.8 (2026-08-03)

Fixes

enforce a single recipient when decrypting dir and ECDH-ES (505c383)

reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

index the JWS and JWE registries without a wrapper (925f3bb)

name the "alg" source in unsupported algorithm failures (1500459)

6.2.7 (2026-08-01)

Fixes

require own JOSE properties for presence checks (90ab09c)

Refactor

reduce bundle size (767d7f1)

6.2.6 (2026-07-31)

Fixes

types: accept host CryptoKey declarations (b48a15b)

6.2.5 (2026-07-29)

Fixes

compare claim values for falsy validation options (eb86956)

forward key management parameters for a single JWE recipient (2d4f801)

handle a zero-length JWE additional authenticated data (16ca398)

reject a generateKeyPair crv option the algorithm does not imply (76364e9)

reject an unencoded payload in the JWS Compact Serialization (01d053f)

reject characters outside the Base64URL alphabet (0ebb971), references #879

reject duplicate "crit" values when producing (31d60e1)

reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)

reject truncated ASN.1 key data (7a16c66)

surface non-ASCII token segments as JOSE errors (194fe11)

types: correct JWK and CryptoKey types (62a196d)

types: correct key resolver and JWT header types (e95f8c4)

validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

correct subpaths and API documentation (2daec38)

document consumer-supplied type parameters (9e9f66c)

... (truncated)

Commits

8b768eb chore(release): 6.2.8
1500459 refactor: name the "alg" source in unsupported algorithm failures
714f870 fix: reject a non-string "alg" in EmbeddedJWK
925f3bb refactor: index the JWS and JWE registries without a wrapper
505c383 fix: enforce a single recipient when decrypting dir and ECDH-ES
514831d chore(deps): bump the actions group with 3 updates
45965db chore: cleanup after release
60b941f chore(release): 6.2.7
90ab09c fix: require own JOSE properties for presence checks
767d7f1 refactor: reduce bundle size
Additional commits viewable in compare view

Updates fast-xml-parser from 5.9.3 to 5.10.1

Release notes

Sourced from fast-xml-parser's releases.

v5.10.1

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.10.0...v5.10.1

v5.10.0

What's Changed

Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#849

Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#848

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.3...v5.10.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.11.0 / 2026-08-16

feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]

fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]

fix: DOCTYPE to read SYSTEM/PUBLIC

deps: strnum v2.4.2

5.10.1 / 2026-07-17

fix: multiple DOCTYPE declarations.

deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

upgrade:

xml-naming v0.3.0: cache support

PEM v1.6.2: sibling bug fix

is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

update strnum

*5.9.2 / 2026-06-17

dummy release to test changes in github action

*5.9.1 / 2026-06-17

dummy release to test release from github action

*5.9.0 / 2026-06-15

update strnum to 2.3.0

you can set hex, binary, enotation, infinity, unicode

validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

*5.8.0 / 2026-05-12

integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)

This will consider xml-version as well. '1.0' is default

update strnum to 2.3.0

You can set octal and binary parsing which is bydeault off

update fast-xml-builder to 1.2.0

can sanitize tag names if found invalid

fix format output

5.7.3 / 2006-05-05

fix: alwaysCreateTextNode should create text node when attributes are present for self closing node

fix stop node expression when ns prefix is removed (found by iruizsalinas)

... (truncated)

Commits

2ce7191 5.10.1
4e1bb01 update for release
ffd1269 deps: @nodable/entities for treeshaking
4e546e0 fix: multiple DOCTYPE are not allowed
296b332 5.10.0
75f7565 update package guide
2d8d1d0 update details
e58e4dd upgrade: xml-naming v0.3.0, PEM v1.6.2, is-unsafe v2.0.0
545e491 Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#848)
5ea8aa1 Bump actions/checkout from 6.0.3 to 7.0.0 (#849)
See full diff in compare view

Updates recharts from 3.9.0 to 3.10.1

Release notes

Sourced from recharts's releases.

v3.10.1

What's Changed

fix(Pie): pass computed innerRadius/outerRadius to Label children via PolarLabelContextProvider by @0007aadil in recharts/recharts#7458

chore(deps): bump immer from 11.1.9 to 11.1.15 by @dependabot[bot] in recharts/recharts#7575

fix(tooltip): fall back to index-based search when label-based search returns undefined for allowDuplicatedCategory=false by @hxy-asdw in recharts/recharts#7573

fix(bar): keep barGap correct when maxBarSize clamps the bar width (#2774) by @sobol-sudo in recharts/recharts#7582

New Contributors

@0007aadil made their first contribution in recharts/recharts#7458

@hxy-asdw made their first contribution in recharts/recharts#7573

@sobol-sudo made their first contribution in recharts/recharts#7582

Full Changelog: recharts/recharts@v3.10.0...v3.10.1

v3.10.0

What's Changed

Legend position

Legend now supports position and offset props, same as Label and LabeList. This replaces the previous align and verticalAlign for a more convenient positioning, and fixes couple visual bugs too. See https://recharts.github.io/en-US/examples/LegendPosition/

Legend position and offset by @PavelVanecek in recharts/recharts#7564

XAxis auto height

XAxis now supports height="auto" prop, similar to YAxis width="auto".

feat(XAxis): support height="auto" to size the axis to its tick labels by @kimlj in recharts/recharts#7570

Other features

feat(Sankey): support accessibilityLayer, title and desc props by @MahinAnowar in recharts/recharts#7546

Bugfixes

fix: clear stale active bar layer state by @pupuking723 in recharts/recharts#7547

fix(Brush): slide snaps back to original position on mouseup when start/endIndex are controlled by @MaksZhukov in recharts/recharts#7542

fix(Tooltip): find the active sector in the angle-axis wrap-around gap by @MahinAnowar in recharts/recharts#7550

fix(Brush): keep controlled startIndex/endIndex on data updates by @momomuchu in recharts/recharts#7530

Fix Legend type by @PavelVanecek in recharts/recharts#7560

fix(Label): pass computed position attributes to custom label content by @MahinAnowar in recharts/recharts#7549

fix(CartesianAxis): skip renderedTicks dispatch when tick values are unchanged by @kimlj in recharts/recharts#7565

fix: prevent getBandSizeOfAxis from collapsing band size due to floating-point tick gaps by @xianjianlf2 in recharts/recharts#7556

fix(Area): connectNulls connects across stacked points where every series is null by @kimlj in recharts/recharts#7566

New Contributors

@MahinAnowar made their first contribution in recharts/recharts#7546

@MaksZhukov made their first contribution in recharts/recharts#7542

@momomuchu made their first contribution in recharts/recharts#7530

@kimlj made their first contribution in recharts/recharts#7565

... (truncated)

Commits

ffb9187 3.10.1
411b6f2 fix(bar): keep barGap correct when maxBarSize clamps the bar width (#2774) (#...
58c321b chore(deps-dev): bump postcss from 8.5.10 to 8.5.22 (#7581)
f08972b chore(deps-dev): bump the storybook group with 8 updates (#7578)
89599d0 chore(deps-dev): bump chromatic from 11.29.0 to 18.1.0 (#7579)
3da7d87 chore(deps-dev): bump typescript-eslint from 8.64.0 to 8.65.0 in the typescri...
9764273 chore(deps-dev): bump marked from 18.0.5 to 18.0.7 (#7577)
a5d7737 fix(tooltip): fall back to index-based search when label-based search returns...
497e8df chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 (#7576)
0776eb0 chore(deps): bump immer from 11.1.9 to 11.1.15 (#7575)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for recharts since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @fortawesome/fontawesome-free from 7.2.0 to 7.3.1

Release notes

Sourced from @fortawesome/fontawesome-free's releases.

Release 7.3.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

14c65a3 Release 7.3.1 (#21630)
70fb2dd Release 7.3.0 (#21612)
See full diff in compare view

Maintainer changes

This version was pushed to npm by fortawesome-admin, a new releaser for @fortawesome/fontawesome-free since your current version.

Updates next from 16.2.9 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.21

Misc Changes

Anchor the async local storage instances to global symbols: #97255

test: deflake use-cache-size-zero warm reload: #97421

Scaffolding for concurrentRouterQueue flag: #97413

Reorganize client router modules: #97402

Credits

Huge thanks to @unstubbable, @gnoff, and @acdlite for helping!

v16.3.1-canary.20

Misc Changes

Wait for back-before-hydration recoveries in the browser: #97321

Extract metadata resolution primitives: #97388

test: update React 18 redbox snapshot: #97415

Turbopack: retain conditions when replacing resolve request keys: #97372

Remove server route matcher stack: #94157

Credits

Huge thanks to @gaearon, @gnoff, @timneutkens, and @mischnic for helping!

... (truncated)

Commits

3d32eb8 v16.3.1
2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
Additional commits viewable in compare view

Updates next-intl from 4.13.0 to 4.13.6

Release notes

Sourced from next-intl's releases.

v4.13.6

4.13.6 (2026-08-10)

Bug Fixes

Deprecate requestLocale param of getRequestConfig (#2380) (ae770af) – by @amannn

See the blog post on next/root-params.

v4.13.5

4.13.5 (2026-08-04)

Bug Fixes

Deprecate setRequestLocale and add blog post on next/root-params (#1632) – by @amannn

v4.13.4

4.13.4 (2026-07-23)

Bug Fixes

Avoid usePathname() reads for non-locale-switching links, avoiding unnecessary <Suspense> wrappers with partial prefetching (#2362) (82de47f) – by @ceolinwill

v4.13.3

4.13.3 (2026-07-21)

Bug Fixes

Next.js 16.3 compatibility preparation (only update locale cookie for document requests and not prefetches) (#2355) (0555ace) – by @amannn

v4.13.2

4.13.2 (2026-07-10)

Bug Fixes

Correctly format plural/select branches that are only # or empty (#2356) (cc34d9a) – by @spokodev

v4.13.1

4.13.1 (2026-06-30)

Bug Fixes

Handle ICU escape sequences around < consistently in dev and production (#2352) (4025d1f) – by @amannn

Changelog

Sourced from next-intl's changelog.

4.13.6 (2026-08-10)

Bug Fixes

Deprecate requestLocale param of getRequestConfig (#2380) (ae770af) – by @amannn

4.13.5 (2026-08-04)

Bug Fixes

Deprecate setRequestLocale and add blog post on next/root-params (#1632) (1446d0d) – by @amannn

4.13.4 (2026-07-23)

Bug Fixes

Avoid usePathname() reads for non-locale-switching links, avoiding unnecessary <Suspense> wrappers with partial prefetching (#2362) (82de47f) – by @ceolinwill

4.13.3 (2026-07-21)

Bug Fixes

Next.js 16.3 compatibility preparation (only update locale cookie for document requests and not prefetches) (#2355) (0555ace) – by @amannn

4.13.2 (2026-07-10)

Bug Fixes

Correctly format plural/select branches that are only # or empty (#2356) (cc34d9a) – by @spokodev

4.13.1 (2026-06-30)

Bug Fixes

Handle ICU escape sequences around < consistently in dev and production (#2352) (4025d1f) – by @amannn

Commits

41e027b v4.13.6
ae770af fix: Deprecate requestLocale param of getRequestConfig (#2380)
729233f docs: Use "CLI" as label for eloqnt links (#2378)
caab5da docs: Mention planned Route Handler and Server Action support for root params...
4a98b12 docs: Hide precompilation blog post from sidebar navigation (#2374)
0b25236 docs: Link to Next.js bind docs in root params blog post (#2375)
44f29f5 docs: Upgrade examples and e2e apps to Next.js 16.3 (#2354)
904d5e2 docs: Fix typo in blog post
01bd54c docs: Migrate examples to next/root-params (#2327)
8392dd9 docs: Fix blog post publish date
Additional commits viewable in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates nodemailer from 9.0.1 to 9.0.5

Release notes

Sourced from nodemailer's releases.

v9.0.5

9.0.5 (2026-08-07)

Bug Fixes

ci: retrigger the workflows dropped during the Actions outage (85d16c1)

mailer: escape specials in List-* header comments (#1842) (75913bb)

mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)

mime-node: keep control chars out of header values and msg-id headers (15cf6d1)

mime: encode DEL in header parameters and List-* comments (cf69430)

mime: keep control chars out of the remaining header positions (5ed9d26)

mime: normalize an address parsed out of a string as well (63685f7)

mime: normalize an address so header and envelope agree (a9343b4)

mime: stop a header key callback and the dkim tags from injecting (b7d772e)

v9.0.4

9.0.4 (2026-08-04)

Bug Fixes

mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)

mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)

mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)

mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)

mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)

v9.0.3

9.0.3 (2026-06-30)

Bug Fixes

smtp-connection: harden STARTTLS upgrade and secure socket handling (#1835) (07d8253)

v9.0.2

9.0.2 (2026-06-29)

Bug Fixes

addressparser: keep operator chars inside an address-literal as text (#1829) (9ba1064)

harden smtp-connection low-severity issues (22ddcea)

harden smtp-connection response parsing and socket lifecycle (68860b9)

prevent SES transport callback double-invocation and hang on sync errors (#1831) (9517bc5)

reject CRLF in HTTP proxy CONNECT destination to prevent request injection (6347b47)

Changelog

Sourced from nodemailer's changelog.

9.0.5 (2026-08-07)

Bug Fixes

ci: retrigger the workflows dropped during the Actions outage (85d16c1)

mailer: escape specials in List-* header comments (#1842) (75913bb)

mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)

mime-node: keep control chars out of header values and msg-...
Description has been truncated

… with 12 updates Bumps the production-minor-patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.2` | `8.6.2` | | [ip-address](https://github.com/beaugunderson/ip-address) | `10.2.0` | `10.5.0` | | [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.8` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.9.3` | `5.10.1` | | [recharts](https://github.com/recharts/recharts) | `3.9.0` | `3.10.1` | | [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) | `7.2.0` | `7.3.1` | | [next](https://github.com/vercel/next.js) | `16.2.9` | `16.3.1` | | [next-intl](https://github.com/amannn/next-intl) | `4.13.0` | `4.13.6` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.1` | `9.0.5` | Updates `pg` from 8.22.0 to 8.23.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg) Updates `express-rate-limit` from 8.5.2 to 8.6.2 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.6.2) Updates `ip-address` from 10.2.0 to 10.5.0 - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](beaugunderson/ip-address@v10.2.0...v10.5.0) Updates `jose` from 6.2.3 to 6.2.8 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.3...v6.2.8) Updates `fast-xml-parser` from 5.9.3 to 5.10.1 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.9.3...v5.10.1) Updates `recharts` from 3.9.0 to 3.10.1 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.9.0...v3.10.1) Updates `@fortawesome/fontawesome-free` from 7.2.0 to 7.3.1 - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.1) Updates `next` from 16.2.9 to 16.3.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.9...v16.3.1) Updates `next-intl` from 4.13.0 to 4.13.6 - [Release notes](https://github.com/amannn/next-intl/releases) - [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md) - [Commits](amannn/next-intl@v4.13.0...v4.13.6) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `nodemailer` from 9.0.1 to 9.0.5 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v9.0.1...v9.0.5) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) --- updated-dependencies: - dependency-name: pg dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: express-rate-limit dependency-version: 8.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: ip-address dependency-version: 10.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: jose dependency-version: 6.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: fast-xml-parser dependency-version: 5.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: recharts dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@fortawesome/fontawesome-free" dependency-version: 7.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: next dependency-version: 16.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: next-intl dependency-version: 4.13.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: nodemailer dependency-version: 9.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-24T13:10:03Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Dependency updates and security issues label Aug 17, 2026

github-actions Bot added apps Changes to apps/ packages Changes to packages/ labels Aug 17, 2026

dependabot Bot closed this Aug 24, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/develop/production-minor-patch-ff3c6360a7 branch August 24, 2026 13:10

Navigation Menu

Uh oh!

chore(deps): bump the production-minor-patch group across 1 directory with 12 updates - #53

chore(deps): bump the production-minor-patch group across 1 directory with 12 updates#53
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/production-minor-patch-ff3c6360a7

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

pg@8.23.0

v8.6.2

v8.6.1

v8.6.0

v10.5.0

What's Changed

v10.4.0

What's Changed

v10.3.1

v10.3.0

v10.2.2

v10.2.1

v6.2.8

Fixes

Refactor

v6.2.7

Fixes

Refactor

v6.2.6

Fixes

v6.2.5

Fixes

Documentation

Refactor

6.2.8 (2026-08-03)

Fixes

Refactor

6.2.7 (2026-08-01)

Fixes

Refactor

6.2.6 (2026-07-31)

Fixes

6.2.5 (2026-07-29)

Fixes

Documentation

v5.10.1

v5.10.0

What's Changed

v3.10.1

What's Changed

New Contributors

v3.10.0

What's Changed

Legend position

XAxis auto height

Other features

Bugfixes

New Contributors

Release 7.3.1

Release 7.3.0

v16.3.1

What's Changed

v16.3.1-canary.21

Misc Changes

Credits

v16.3.1-canary.20

Misc Changes

Credits

v4.13.6

4.13.6 (2026-08-10)

Bug Fixes

v4.13.5

4.13.5 (2026-08-04)

Bug Fixes

v4.13.4

4.13.4 (2026-07-23)

Bug Fixes

v4.13.3

4.13.3 (2026-07-21)

Bug Fixes

v4.13.2

4.13.2 (2026-07-10)

Bug Fixes

v4.13.1

4.13.1 (2026-06-30)

Bug Fixes

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading