fix(deps): update production dependency minor updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@aws-sdk/client-s3 (source)	^3.1075.0 → ^3.1077.0
@aws-sdk/s3-presigned-post (source)	^3.1075.0 → ^3.1077.0
@aws-sdk/s3-request-presigner (source)	^3.1075.0 → ^3.1077.0
@nosecone/next (source)	1.4.0 → 1.6.1
@opencoredev/email-sdk (source)	^0.5.0 → ^0.6.5
fumadocs-core	16.9.3 → 16.10.7
fumadocs-ui	16.9.3 → 16.10.7
lucide-react (source)	^1.21.0 → ^1.22.0
nuqs (source)	^2.8.9 → ^2.9.0

---

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)

v3.1077.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1076.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

aws/aws-sdk-js-v3 (@​aws-sdk/s3-presigned-post)

v3.1077.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-presigned-post

v3.1076.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-presigned-post

aws/aws-sdk-js-v3 (@​aws-sdk/s3-request-presigner)

v3.1077.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-request-presigner

v3.1076.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-request-presigner

arcjet/arcjet-js (@​nosecone/next)

v1.6.1

Compare Source

🧹 Miscellaneous Chores

• @​nosecone/next: Synchronize arcjet-js versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • nosecone bumped from 1.6.0 to 1.6.1
  • devDependencies
    • @​arcjet/eslint-config bumped from 1.6.0 to 1.6.1
    • @​arcjet/rollup-config bumped from 1.6.0 to 1.6.1

v1.6.0

Compare Source

🚀 New Features

• nosecone-next: add nonce API to get the CSP nonce (#​6109) (165dc49)
• require Node.js >=22.21.0 and drop EOL Node.js 20 (#​6090) (d002118)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • nosecone bumped from 1.5.0 to 1.6.0
  • devDependencies
    • @​arcjet/eslint-config bumped from 1.5.0 to 1.6.0
    • @​arcjet/rollup-config bumped from 1.5.0 to 1.6.0

v1.5.0

Compare Source

🔨 Build System

• deps-dev: bump next from 16.2.4 to 16.2.6 (#​6029) (dcf85e1)
• deps-dev: bump next from 16.2.4 to 16.2.6 in /arcjet-next (#​6028) (082c20f)
• deps-dev: bump next from 16.2.4 to 16.2.6 in /nosecone-next (#​6027) (29f3de1)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • nosecone bumped from 1.4.0 to 1.5.0
  • devDependencies
    • @​arcjet/eslint-config bumped from 1.4.0 to 1.5.0
    • @​arcjet/rollup-config bumped from 1.4.0 to 1.5.0

opencoredev/email-sdk (@​opencoredev/email-sdk)

v0.6.5

Compare Source

Patch Changes

• 5614c4c: Add the Lettermint adapter (@opencoredev/email-sdk/lettermint) for Lettermint's European transactional email API. It posts the normalized EmailMessage to POST /v1/send over fetch, authenticates with the x-lettermint-token header, base64-encodes attachments, maps a single normalized tag plus string metadata, and forwards idempotencyKey as the Idempotency-Key header. An optional route targets a specific Lettermint route, and more than one tag fails fast with an EmailValidationError.

v0.6.4

Compare Source

Patch Changes

• 3ca47bb: Add the Primitive adapter (@opencoredev/email-sdk/primitive) for Primitive's email API for AI agents. It posts the normalized EmailMessage to POST /v1/send-mail over fetch, base64-encodes attachments, and forwards idempotencyKey as Primitive's Idempotency-Key header. Primitive's send API targets a single recipient and has no CC, BCC, reply-to, custom headers, tags, or metadata, so the adapter rejects those fields — and a second recipient — up front instead of silently dropping them, consistent with the SDK's fail-fast field support.

v0.6.3

Compare Source

Patch Changes

• 3c520c9: Add the JetEmail adapter (@opencoredev/email-sdk/jetemail) for the JetEmail transactional email API. It maps CC, BCC, reply-to, custom headers, and base64 attachments, forwards idempotencyKey as JetEmail's Idempotency-Key header, and fails fast with a clear error when from is missing a display name (JetEmail requires the "Name <email>" form). Tags and metadata are rejected before the request, consistent with the SDK's fail-fast field support.

v0.6.2

Compare Source

Patch Changes

• 9c8ff24: Reject SMTP envelope addresses and header names that contain control characters, whitespace, or angle brackets before connecting. This closes an SMTP command/header injection vector where a crafted recipient address or header name could smuggle extra SMTP commands or headers into the session.

v0.6.1

Compare Source

Patch Changes

• c80935f: Add the Convex Email component package with durable queued sends, retries, fallback adapters, idempotency, webhook ingestion, and test-mode delivery controls.

  Ship the component alongside a patch SDK release so the docs, package entrypoints, and provider surface move forward as 0.6.1 instead of a larger version jump.

v0.6.0

Compare Source

Minor Changes

• 4db1cd7: Add an official Iterable adapter for target campaign email sends.
• 2b1fbf1: Add the Sequenzy transactional email adapter, CLI support, docs, tests, and a local API-auth smoke check.

lucide-icons/lucide (lucide-react)

v1.22.0

Compare Source

47ng/nuqs (nuqs)

v2.9.0

Compare Source

Features

• #​1437 - add support for react-router v8, by @​franky47
• #​1451 - add history to adapters defaultOptions, by @​manojVivek

Bug fixes

• #​1318 - cross-page transitions in TanStack Router, by @​franky47 (closes #​1433)
• #​1334 - stale URL value when revisiting a page under Next.js cacheComponents, by @​franky47 (closes #​1273)
• #​1366 - prevent infinite re-renders with TSR viewport preloading, by @​franky47 (closes #​1363)
• #​1368 - wrong transient state in next/app when updating in useEffect, by @​franky47 (closes #​1365, #​1428)
• #​1445 - stale value under Activity, by @​franky47 (closes #​1444)
• #​1450 - stale search params leaking across React Router navigation, by @​franky47 (closes #​1358)

Documentation

• #​1222 - add registry metadata, by @​taro-yanagiya (closes #​1221)
• #​1256 - add changelog page, by @​rajanarahul93 (closes #​1251)
• #​1351 - strip Fumadocs inline code syntax highlighting hints from LLM markdown, by @​franky47
• #​1353 - update recharts & replace partialLine implementation, by @​franky47
• #​1356 - add Sentry and Syntax.fm as sponsors 💖, by @​franky47
• #​1357 - add 1771 Technologies as a sponsor 💖, by @​franky47
• #​1362 - update images alt attributes, by @​franky47
• #​1364 - extrapolate missing NPM stats data, by @​franky47
• #​1376 - add attribution footer in LLM docs, by @​franky47
• #​1383 - add 1771 Technologies as sidebar sponsor, by @​franky47
• #​1400 - add redirect from /changelog to /docs/changelog, by @​franky47
• #​1406 - add brand assets context menu, by @​TheOrcDev
• #​1409 - add TradingGoose as a sponsor 💖, by @​franky47
• #​1414 - add Upstash as a sponsor 💖, by @​mezotv
• #​1415 - add CodeRabbit as a sponsor 💖, by @​mezotv
• #​1416 - use www.usenotra.com for Notra sponsor link, by @​mezotv
• #​1418 - tighter sponsors grid, by @​franky47
• #​1432 - changelog reads DTO from releases, by @​franky47
• #​1438 - add Deno & other package managers to install instructions, by @​bartlomieju
• #​1441 - theme-aware shieldcn badges + wordmark header, by @​jal-co
• #​1447 - trim down llm content, by @​franky47
• #​1456 - add Loops as a sponsor 💖, by @​franky47
• #​1457 - strip unreleased headings from the production ToC, by @​franky47
• #​1461 - fix shallow updates "Invalid URL" crash, by @​franky47 (closes #​1460)
• 9cb051f - reorder & tweak readme badges, by François Best
• e9cd8f7 - fix contributors link in README, by François Best
• f48b390 - fix wordmark on npmx.dev & npmjs.com, by François Best
• 6722fe0 - fix react router logos in README, by François Best

Other changes

• #​1154 - add Knip for upkeeping, by @​franky47
• #​1176 - split debug logs to reduce bundle size, by @​franky47 (closes #​1149)
• #​1346 - add discussion participants to thanks section in release notes, by @​franky47
• #​1347 - bump actions/upload-artifact from 6.0.0 to 7.0.0, by @​dependabot
• #​1354 - disable pnpm cache in deployment job, by @​franky47
• #​1360 - upgrade vite to v8.0.0, by @​franky47
• #​1367 - reduce test verbosity for agents, by @​franky47
• #​1370 - history API updates location.search synchronously, by @​franky47
• #​1371 - update Next.js to 16.2.0, by @​franky47
• #​1372 - test docs against new versions of Next.js, by @​franky47
• #​1373 - bump effect from 3.19.15 to 3.20.0, by @​dependabot
• #​1379 - bump actions/setup-node from 6.2.0 to 6.3.0, by @​dependabot
• #​1386 - remove Sentry, by @​franky47
• #​1387 - harden Next.js canary test workflows, by @​franky47
• #​1390 - upgrade to knip 6, by @​franky47
• #​1393 - harden CI/CD workflow against supply-chain and injection vectors, by @​franky47
• #​1394 - fix npm pkg set command, by @​franky47
• #​1396 - bump actions/upload-artifact from 7.0.0 to 7.0.1, by @​dependabot
• #​1398 - update to pnpm 11, by @​franky47
• #​1403 - split CD step into publish + release notes generation, by @​franky47
• #​1405 - explictly no cache on publish job, by @​franky47
• #​1407 - don't persist credentials on checkout, by @​franky47
• #​1408 - bump turbo from 2.8.2 to 2.9.14, by @​dependabot
• #​1411 - apply minimumReleaseAgeExclude for next only where relevant, by @​franky47
• #​1412 - inline pre/post scripts, by @​franky47
• #​1413 - simplify knip config, by @​franky47
• #​1417 - npm staged publishing, by @​franky47
• #​1419 - bump next to 16.2.7, by @​franky47
• #​1420 - fix flaky #​1099 unit tests, by @​franky47
• #​1422 - update actions-slack-notify, by @​franky47
• #​1423 - add reproducible build tools for staged package review, by @​franky47
• #​1426 - finalize release, by @​franky47
• #​1427 - stop passing router hooks through context, by @​franky47
• #​1429 - remove dry-run rehearsal from release-draft, by @​franky47
• #​1430 - milestone automation - drop shipping next, automate backlog, by @​franky47
• #​1431 - bump react-router from 7.13.0 to 7.18.0, by @​dependabot
• #​1434 - don't run Lint PR Title on merged PRs and body-only edits, by @​franky47
• #​1435 - replace MailPace SDK with minimal implementation, by @​franky47
• #​1436 - pnpm dedupe, by @​franky47
• #​1439 - add invitation to try betas on release comments, by @​franky47
• #​1440 - verify production tags locally, by @​franky47
• #​1442 - allow finalize to comment on related discussions, by @​franky47
• #​1443 - split release notes gen from release draft, by @​franky47
• #​1446 - scope nullable useSearchParams defence to Next.js specific adapter, by @​franky47
• #​1452 - emit the release-notes multiline output from TypeScript, by @​franky47
• #​1453 - require sha512 integrity as the primary release-verification gate, by @​franky47
• #​1454 - unify the repo on the next branch, by @​franky47
• #​1455 - replace husky with native Git config hooks, by @​franky47
• #​1459 - refresh the docs on a GA release via ISR tag invalidation, by @​franky47
• d8dd8c7 - ignore local worktrees, by François Best
• 514ae3d - update funding options, by François Best
• e40d452 - disable ci-cd publishing steps, by François Best
• 66a7eba - try GitHub release notes generation, by François Best
• 0be5dca - always run release notes gen, by François Best
• 281a0f0 - keep npm --json stdout clean and harden stage-id parsing, by François Best
• 9a3e12b - surface staged tarball shasum & integrity in release summary, by François Best
• 0dd152a - fix executable bit for release-finalize.ts, by François Best
• fc1d1ee - add temporary manual trigger for release-finalize, by François Best
• 9a0a0ad - revert fc1d1ee, by François Best
• 44d31d7 - fix worktree directory reference in .gitignore, by François Best

Thanks

Huge thanks to @​AnthonyYashchuk, @​AyushNigam-1, @​bartlomieju, @​denexapp, @​jal-co, @​jaypalsapara, @​manojVivek, @​mezotv, @​mnlfischer, @​piskor-kuba, @​rajanarahul93, @​stefan-schubert-sbb, @​taro-yanagiya, @​TheOrcDev, @​tmkx, @​TudorGiuroiu, and @​webpro for helping!

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 9am every weekday,before 5am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vazen-docs	Ready	Preview, Comment	Jul 6, 2026 5:18am
vazen-web	Ready	Preview, Comment	Jul 6, 2026 5:18am