Skip to content

chore(deps): bump the npm-dependencies group with 12 updates - #74

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-3a1cc06d1e
Closed

chore(deps): bump the npm-dependencies group with 12 updates#74
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-3a1cc06d1e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 12 updates:

Package From To
@electric-sql/pglite 0.5.11 0.5.13
altcha-lib 2.7.0 2.8.0
better-auth 1.7.12 1.7.14
lucide-react 1.61.0 1.64.0
next 16.4.2 16.4.3
nodemailer 10.2.1 10.3.1
@next/eslint-plugin-next 16.4.2 16.4.3
@secretlint/secretlint-rule-preset-recommend 13.0.7 13.1.0
autoprefixer 10.6.1 10.6.2
postcss 8.5.31 8.5.32
secretlint 13.0.7 13.1.0
typescript-eslint 8.72.0 8.72.1

Updates @electric-sql/pglite from 0.5.11 to 0.5.13

Release notes

Sourced from @​electric-sql/pglite's releases.

@​electric-sql/pglite-prepopulatedfs@​0.5.13

Patch Changes

  • Updated dependencies [c7dc39e]
  • Updated dependencies [8364675]
  • Updated dependencies [a4cfd4d]
  • Updated dependencies [2db5d2d]
    • @​electric-sql/pglite@​0.5.13

@​electric-sql/pglite@​0.5.13

Patch Changes

  • c7dc39e: close() now waits for queries, execs and transactions that were issued before it, so they complete instead of failing with Cannot read properties of undefined after teardown.
  • 8364675: Added support for node-postgres through createPgConfig()
  • a4cfd4d: Added MemfsFrontendFS which allows other filesystems be implemented on top of a MEMFS. Example: added Memfs2OpfsFS which is backed by an OPFS fs.
  • 2db5d2d: Upgrade emsdk to 6.0.5

@​electric-sql/pglite@​0.5.12

Patch Changes

  • 0641b37: Fix custom filesystems not receiving times set with FS.utime. Emscripten's FS.utime calls setattr with atime and mtime, but the BaseFilesystem bridge only handled the older timestamp field, so utimes was never called on OPFS AHP or any other BaseFilesystem. Files restored from a tarball kept the time they were written instead of the time stored in the tarball.
  • e752dbe: Run initdb with TZ=UTC, like the backend, so a new database gets timezone = 'UTC' in postgresql.conf. Before, initdb wrote the host's zone as a fixed offset without daylight saving (e.g. Etc/GMT+5 for America/New_York), so timestamptz input without an offset was stored at a different instant on each non-UTC machine.
  • c31130c: Start under the Node.js permission model (node --permission). Emscripten's NODEFS read the fs open flags with process.binding('constants'), which Node always denies in that mode, so new PGlite() threw ERR_ACCESS_DENIED even for memory://. The bundled build now reads them from require('fs').constants, which holds the same values.
  • 0641b37: Fix files restored from a tarball getting a January 1970 modification time. loadTar passed the tar header's time to Emscripten's FS.utime in seconds, but FS.utime takes milliseconds. This affected every new database (initdb's data dir is restored from a tarball) and every loadDataDir. With the Node filesystem the files on disk got those dates too.

@​electric-sql/pglite-prepopulatedfs@​0.5.12

Patch Changes

  • Updated dependencies [0641b37]
  • Updated dependencies [e752dbe]
  • Updated dependencies [c31130c]
  • Updated dependencies [0641b37]
    • @​electric-sql/pglite@​0.5.12
Changelog

Sourced from @​electric-sql/pglite's changelog.

0.5.13

Patch Changes

  • c7dc39e: close() now waits for queries, execs and transactions that were issued before it, so they complete instead of failing with Cannot read properties of undefined after teardown.
  • 8364675: Added support for node-postgres through createPgConfig()
  • a4cfd4d: Added MemfsFrontendFS which allows other filesystems be implemented on top of a MEMFS. Example: added Memfs2OpfsFS which is backed by an OPFS fs.
  • 2db5d2d: Upgrade emsdk to 6.0.5

0.5.12

Patch Changes

  • 0641b37: Fix custom filesystems not receiving times set with FS.utime. Emscripten's FS.utime calls setattr with atime and mtime, but the BaseFilesystem bridge only handled the older timestamp field, so utimes was never called on OPFS AHP or any other BaseFilesystem. Files restored from a tarball kept the time they were written instead of the time stored in the tarball.
  • e752dbe: Run initdb with TZ=UTC, like the backend, so a new database gets timezone = 'UTC' in postgresql.conf. Before, initdb wrote the host's zone as a fixed offset without daylight saving (e.g. Etc/GMT+5 for America/New_York), so timestamptz input without an offset was stored at a different instant on each non-UTC machine.
  • c31130c: Start under the Node.js permission model (node --permission). Emscripten's NODEFS read the fs open flags with process.binding('constants'), which Node always denies in that mode, so new PGlite() threw ERR_ACCESS_DENIED even for memory://. The bundled build now reads them from require('fs').constants, which holds the same values.
  • 0641b37: Fix files restored from a tarball getting a January 1970 modification time. loadTar passed the tar header's time to Emscripten's FS.utime in seconds, but FS.utime takes milliseconds. This affected every new database (initdb's data dir is restored from a tarball) and every loadDataDir. With the Node filesystem the files on disk got those dates too.
Commits

Updates altcha-lib from 2.7.0 to 2.8.0

Release notes

Sourced from altcha-lib's releases.

v2.8.0

This release adds support for Nuxt 4 (#22). The H3 plugin (altcha-lib/frameworks/h3) works with both h3 v1 (Nuxt 4, Nitro 2) and h3 v2 (Nitro 3). It no longer fails with event.req.headers.get is not a function in Nuxt 4 projects.

Compatibility: no changes to challenges, payloads or verification results. The H3 plugin's handlers have new TypeScript types, and its errors are no longer instances of h3's HTTPError class; see Upgrade notes. Other framework plugins are unchanged.

Fixes

  • Nuxt 4 / h3 v1 support. Nuxt 4 runs on h3 v1, but the plugin only supported h3 v2 and listed h3: ^2.0.0 as a peer dependency. Package managers such as pnpm therefore installed a second copy of h3 (v2) for altcha-lib. The plugin then used h3 v2 helpers on the h3 v1 events created by Nuxt, which failed. The plugin no longer imports h3 at runtime and handles both event formats itself, so it works whichever h3 version is installed for altcha-lib. The optional h3 peer dependency now accepts ^1.15.0 || ^2.0.0.
  • Request body stays readable. The middleware reads the payload without consuming the request body, so handlers that run after it can still call readBody. On h3 v1, the body is cached where h3 v1's own readBody looks for it. On h3 v2, the middleware reads from a clone of the request. Before, the middleware used up the body on h3 v2.
  • Errors are recognized by both h3 versions. Failed verification responds with 403, and an invalid JSON or form data body responds with 400. Both h3 v1 and v2 recognize these errors as HTTP errors. Before, h3 v1 treated them as unhandled errors: it logged them, and Nitro hid their message. An invalid multipart body used to cause an unhandled 500 error and now returns 400.
  • Nuxt docs. The example in docs/nuxt.md puts route files under server/routes/, which Nuxt registers automatically. It imports from ~~/server/utils/altcha, because ~ points to app/ in Nuxt 4, and uses createError, which works in h3 v1 and v2.

Changes

  • H3 handler types. challengeHandler, verifyHandler and the function returned by middleware() are plain async functions that take an H3EventLike (H3WebEvent | H3NodeEvent), all exported from altcha-lib/frameworks/h3. Before, they were typed as h3 v2's EventHandler. They can still be passed directly to h3 v1 and v2 routers and used as Nuxt or Nitro route handlers. getPayloadFromEvent also takes an H3EventLike.
  • TypeScript 6. The library is built with TypeScript 6. The CommonJS build keeps moduleResolution: "node", with ignoreDeprecations: "6.0" in tsconfig.cjs.json. The emitted .d.ts files use the same import paths as before.

Upgrade notes

Most deployments need no changes.

  • Nuxt 4. Upgrade altcha-lib. If you added h3@2 to your project, or an overrides/resolutions entry, to work around the error, remove it.
  • Checking errors with instanceof HTTPError. The plugin's errors are no longer created with h3's HTTPError. If your error handler checks error instanceof HTTPError, use HTTPError.isError(error) (h3 v2) or isError(error) (h3 v1) instead, or check error.statusCode. Both return true for the plugin's errors.

Full changelog: altcha-org/altcha-lib@v2.7.0...v2.8.0

Changelog

Sourced from altcha-lib's changelog.

[2.8.0] - 2026-10-24

Fixed

  • Nuxt 4 support: altcha-lib/frameworks/h3 works with h3 v1 (Nuxt 4, Nitro 2) as well as h3 v2 (Nitro 3), and the h3 peer dependency accepts ^1.15.0 || ^2.0.0 (#22). The plugin no longer imports h3 at runtime, so it no longer fails with event.req.headers.get is not a function when the package manager installs h3 v2 for altcha-lib next to Nuxt's h3 v1.
  • altcha-lib/frameworks/h3 middleware leaves the request body readable for later handlers on both h3 majors.
  • altcha-lib/frameworks/h3 errors (403 on failed verification, 400 on an invalid JSON or form data body) are recognized as HTTP errors by both h3 v1 and v2. h3 v1 previously treated them as unhandled errors.
  • docs/nuxt.md: route files live under server/routes/, imports use ~~/server/... (Nuxt 4's ~ points to app/), and the example uses createError, which exists in h3 v1 and v2.

Changed

  • The build uses TypeScript 6. tsconfig.cjs.json sets ignoreDeprecations: "6.0" to keep moduleResolution: "node" for the CommonJS build, which TypeScript 6 deprecates and TypeScript 7 removes.
Commits

Updates better-auth from 1.7.12 to 1.7.14

Release notes

Sourced from better-auth's releases.

v1.7.14

better-auth

Bug Fixes

  • Fixed two-factor TOTP to accept imported Base32 secrets stored as base32:<secret> (#12031)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed Kakao sign-in to forward loginHint so the Kakao Account login page opens with the ID field prefilled (#12045)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​honuuk

Full changelog: v1.7.13...v1.7.14

v1.7.13

better-auth

Bug Fixes

  • Fixed type declarations so type-only exports are no longer listed as values, making a value import fail type checking instead of failing at runtime (#11985)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added token endpoint authentication options to the Vercel social provider, including dynamic OIDC tokens and private key JWT client assertions, without replacing the built-in sign-in flow (#11948)

Bug Fixes

  • Added tokenEndpointAuth: { method } to the Cloudflare provider and deprecated tokenEndpointAuthMethod, which remains supported (#11997)

For detailed changes, see CHANGELOG

@better-auth/stripe

Features

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.14

Patch Changes

  • #12031 d2cb7f5 Thanks @​bytaesu! - Two-factor TOTP now accepts imported Base32 secrets stored as base32:<secret>.

  • Updated dependencies [2947ab7]:

    • @​better-auth/core@​1.7.14
    • @​better-auth/drizzle-adapter@​1.7.14
    • @​better-auth/kysely-adapter@​1.7.14
    • @​better-auth/memory-adapter@​1.7.14
    • @​better-auth/mongo-adapter@​1.7.14
    • @​better-auth/prisma-adapter@​1.7.14
    • @​better-auth/telemetry@​1.7.14

1.7.13

Patch Changes

  • #11985 9cb95fe Thanks @​bytaesu! - Type declarations no longer list type-only exports as values, so importing one as a value now fails type checking instead of failing at runtime.

  • Updated dependencies [2712441, 1cf4b2c]:

    • @​better-auth/core@​1.7.13
    • @​better-auth/drizzle-adapter@​1.7.13
    • @​better-auth/kysely-adapter@​1.7.13
    • @​better-auth/memory-adapter@​1.7.13
    • @​better-auth/mongo-adapter@​1.7.13
    • @​better-auth/prisma-adapter@​1.7.13
    • @​better-auth/telemetry@​1.7.13
Commits

Updates lucide-react from 1.61.0 to 1.64.0

Release notes

Sourced from lucide-react's releases.

Version 1.64.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Version 1.63.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.62.0...1.63.0

Version 1.62.0

What's Changed

... (truncated)

Commits
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • See full diff in compare view

Updates next from 16.4.2 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits
  • 29bbeab v16.4.3
  • 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
  • 37d603b [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #1...
  • cf9d27d [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (...
  • 3f6a632 [lts-active] test: Pin react-virtualized (#100545)
  • f715bba [lts-active][cd] Gate release bot credentials behind GitHub environments (#10...
  • c864c78 [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • f3ff943 [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • f697cf5 [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • See full diff in compare view

Updates nodemailer from 10.2.1 to 10.3.1

Release notes

Sourced from nodemailer's releases.

v10.3.1

10.3.1 (2026-10-29)

Bug Fixes

  • apply the otp option in MailComposer too (1d4087f)

v10.3.0

10.3.0 (2026-10-29)

Summary

This release adds support for the OTP-Token header from the IETF draft draft-goto-otp-token, which lets mail clients and browsers offer a one-time passcode for autofill on the site it belongs to. It also fixes how a Content-ID header is encoded.

Who should upgrade

  • Anyone sending one-time passcodes by email who wants them to be machine-readable.
  • Anyone already setting an OTP-Token header through headers: before this release it went out MIME encoded and could not be parsed.
  • Anyone embedding images with a cid that holds a non-ASCII character or a quote.

Highlights

  • New otp message option: otp: { code: '123456', origin: 'https://example.com' } adds OTP-Token: "123456"; origin="https://example.com". The origin is reduced to its canonical form, only https (or http on a loopback host) is accepted, and invalid values fail the send with the new EOTP error code. See Message configuration.
  • A custom OTP-Token header is no longer MIME word encoded. Line breaks and control characters are still removed.
  • OTP-Token is included in the DKIM signature by default.
  • A Content-ID header, from an attachment cid or set through headers, is now encoded as a message id rather than as text, so a cid with a non-ASCII character or a quote keeps matching the cid: URL in the HTML.
  • Groundmail added to the well-known services.

Features

  • add the otp option for the OTP-Token header (7789e15)

Bug Fixes

  • encode a Content-ID header as a message id (#1904) (47f2b25)
Changelog

Sourced from nodemailer's changelog.

10.3.1 (2026-10-29)

Bug Fixes

  • apply the otp option in MailComposer too (1d4087f)

10.3.0 (2026-10-29)

Features

  • add the otp option for the OTP-Token header (7789e15)

Bug Fixes

  • encode a Content-ID header as a message id (#1904) (47f2b25)
Commits
  • 26555d0 Merge pull request #1906 from nodemailer/release-please--branches--master--co...
  • 3e5bb55 chore(master): release 10.3.1
  • 1d4087f fix: apply the otp option in MailComposer too
  • 488ce9c chore(deps): update development dependencies
  • 41eda65 chore(deps): update development dependencies
  • 5de343d chore(master): release 10.3.0 (#1905)
  • 7789e15 feat: add the otp option for the OTP-Token header
  • 47f2b25 fix: encode a Content-ID header as a message id (#1904)
  • a6e7a70 chore(services): add Groundmail (#1903)
  • a0cea19 chore(deps): update development dependencies [skip ci]
  • Additional commits viewable in compare view

Updates @next/eslint-plugin-next from 16.4.2 to 16.4.3

Release notes

Sourced from @​next/eslint-plugin-next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits

Updates @secretlint/secretlint-rule-preset-recommend from 13.0.7 to 13.1.0

Release notes

Sourced from @​secretlint/secretlint-rule-preset-recommend's releases.

v13.1.0

What's Changed

Security Fixes

Features

Bug Fixes

CI

Dependency Updates

Full Changelog: secretlint/secretlint@v13.0.7...v13.1.0

Commits

Updates autoprefixer from 10.6.1 to 10.6.2

Release notes

Sourced from autoprefixer's releases.

10.6.2

  • Added /* autoprefixer: ignore next warning */ (by @​dualfroz).
  • Fixed losing unprefixed selectors in old browsers in grouping (by @​ybai08).
  • Fixed selector duplicates on multiple Autoprefixer runs.
  • Fixed case-insensitive pseudo-selector prefixing (by @​jakezwang).
  • Fixed -webkit-cross-fade() for images with numbers (by @​mkantautas).
  • Fixed source maps for Grid prefixes (by @​dualfroz).
Changelog

Sourced from autoprefixer's changelog.

10.6.2

  • Added /* autoprefixer: ignore next warning */ (by @​dualfroz).
  • Fixed losing unprefixed selectors in old browsers in grouping (by @​ybai08).
  • Fixed selector duplicates on multiple Autoprefixer runs.
  • Fixed case-insensitive pseudo-selector prefixing (by @​jakezwang).
  • Fixed -webkit-cross-fade() for images with numbers (by @​mkantautas).
  • Fixed source maps for Grid prefixes (by @​dualfroz).
Commits
  • a7dbf4d Release 10.6.2 version
  • c3cd98d Fix selector dupli...

    Description has been truncated

@dependabot
chore(deps): bump the npm-dependencies group with 12 updates
dd562dc 
Bumps the npm-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@electric-sql/pglite](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite) | `0.5.11` | `0.5.13` |
| [altcha-lib](https://github.com/altcha-org/altcha-lib) | `2.7.0` | `2.8.0` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.12` | `1.7.14` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.61.0` | `1.64.0` |
| [next](https://github.com/vercel/next.js) | `16.4.2` | `16.4.3` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.2.1` | `10.3.1` |
| [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) | `16.4.2` | `16.4.3` |
| [@secretlint/secretlint-rule-preset-recommend](https://github.com/secretlint/secretlint) | `13.0.7` | `13.1.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.6.1` | `10.6.2` |
| [postcss](https://github.com/postcss/postcss) | `8.5.31` | `8.5.32` |
| [secretlint](https://github.com/secretlint/secretlint) | `13.0.7` | `13.1.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.72.0` | `8.72.1` |


Updates `@electric-sql/pglite` from 0.5.11 to 0.5.13
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite@0.5.13/packages/pglite)

Updates `altcha-lib` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/altcha-org/altcha-lib/releases)
- [Changelog](https://github.com/altcha-org/altcha-lib/blob/main/CHANGELOG.md)
- [Commits](altcha-org/altcha-lib@v2.7.0...v2.8.0)

Updates `better-auth` from 1.7.12 to 1.7.14
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.14/packages/better-auth)

Updates `lucide-react` from 1.61.0 to 1.64.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.64.0/packages/lucide-react)

Updates `next` from 16.4.2 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.2...v16.4.3)

Updates `nodemailer` from 10.2.1 to 10.3.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.2.1...v10.3.1)

Updates `@next/eslint-plugin-next` from 16.4.2 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/eslint-plugin-next)

Updates `@secretlint/secretlint-rule-preset-recommend` from 13.0.7 to 13.1.0
- [Release notes](https://github.com/secretlint/secretlint/releases)
- [Commits](secretlint/secretlint@v13.0.7...v13.1.0)

Updates `autoprefixer` from 10.6.1 to 10.6.2
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.6.1...10.6.2)

Updates `postcss` from 8.5.31 to 8.5.32
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.31...8.5.32)

Updates `secretlint` from 13.0.7 to 13.1.0
- [Release notes](https://github.com/secretlint/secretlint/releases)
- [Commits](secretlint/secretlint@v13.0.7...v13.1.0)

Updates `typescript-eslint` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@electric-sql/pglite"
  dependency-version: 0.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: altcha-lib
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: better-auth
  dependency-version: 1.7.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: lucide-react
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: nodemailer
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@next/eslint-plugin-next"
  dependency-version: 16.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@secretlint/secretlint-rule-preset-recommend"
  dependency-version: 13.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: postcss
  dependency-version: 8.5.32
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: secretlint
  dependency-version: 13.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026
@dependabot
dependabot Bot requested a review from Ediminator as a code owner November 2, 2026 04:26
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Nov 2, 2026
@Ediminator

Ediminator commented Nov 4, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@Ediminator

Ediminator commented Nov 4, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 4, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-3a1cc06d1e branch November 4, 2026 22:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Ediminator Ediminator Ediminator approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Ediminator