chore: update npm dependencies (5 updates) #927

Merged

Wuast94 merged 1 commit from updatarr/npm-dependencies-bac734c5b3 into main 2026-09-30 19:11:49 +02:00

Conversation 0 Commits 1 Files changed 2 +23 -23

Wuast94 commented 2026-09-30 18:52:41 +02:00

Owner

• Copy link
• Copy Markdown

Updates npm dependencies.

Automerge: Enabled

Updates

Dependency	From	To	Type	Locations
daisyui	^5.7.46	^5.7.47	patch	[1] L39
dotenv	^18.0.4	^18.0.5	patch	[1] L21
eslint-config-next	^16.3.7	^16.3.8	patch	[1] L42
lucide-react	^1.48.0	^1.49.0	minor	[1] L25
next	^16.3.7	^16.3.8	patch	[1] L26

Files

• [1] package.json

Release notes

daisyui (^5.7.46 → ^5.7.47)

Source comparison unavailable: source refs for this transition are not known.

v5.7.47: v5.7.47

Source

Source ref: master

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.47

💚 Thank you for using daisyUI!

dotenv (^18.0.4 → ^18.0.5)

Source comparison unavailable: source refs for this transition are not known.

v18.0.5

Source

eslint-config-next (^16.3.7 → ^16.3.8)

Source comparison unavailable: source refs for this transition are not known.

v16.3.8: v16.3.8

Source

Source ref: canary

This release contains security fixes for the following advisories:

High:

• Server-Side Request Forgery in Image Optimization

Medium:

• Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass
• Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
• Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
• Pending use cache fill can leak Draft Mode content into regular responses and persisted pages
• Cache leak across root param values in nested 'use cache' functions

Low:

• Information disclosure in the Next.js development server's Model Context Protocol endpoint

lucide-react (^1.48.0 → ^1.49.0)

Source comparison unavailable: source refs for this transition are not known.

1.49.0: Version 1.49.0

Source

Source ref: main

What's Changed

• feat(icons): added letters icon by @karsa-mistmere in https://github.com/lucide-icons/lucide/pull/4779
• fix(packages): declare @types/react as an optional peer dependency by @unrevised6419 in https://github.com/lucide-icons/lucide/pull/4892
• feat(icons): added bangladeshi-taka icon by @TanvirMahin24 in https://github.com/lucide-icons/lucide/pull/4869
• feat(icons): added printer-3d icon by @Azuzula in https://github.com/lucide-icons/lucide/pull/4414

New Contributors

• @unrevised6419 made their first contribution in https://github.com/lucide-icons/lucide/pull/4892
• @TanvirMahin24 made their first contribution in https://github.com/lucide-icons/lucide/pull/4869
• @Azuzula made their first contribution in https://github.com/lucide-icons/lucide/pull/4414

Full Changelog: https://github.com/lucide-icons/lucide/compare/1.48.0...1.49.0

next (^16.3.7 → ^16.3.8)

Source comparison unavailable: source refs for this transition are not known.

v16.3.8: v16.3.8

Source

Source ref: canary

This release contains security fixes for the following advisories:

High:

• Server-Side Request Forgery in Image Optimization

Medium:

• Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass
• Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
• Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
• Pending use cache fill can leak Draft Mode content into regular responses and persisted pages
• Cache leak across root param values in nested 'use cache' functions

Low:

• Information disclosure in the Next.js development server's Model Context Protocol endpoint

Updates `npm dependencies`. Automerge: Enabled ### Updates | Dependency | From | To | Type | Locations | | --- | --- | --- | --- | --- | | <code>daisyui</code> | <code>^5.7.46</code> | <code>^5.7.47</code> | patch | [1] L39 | | <code>dotenv</code> | <code>^18.0.4</code> | <code>^18.0.5</code> | patch | [1] L21 | | <code>eslint-config-next</code> | <code>^16.3.7</code> | <code>^16.3.8</code> | patch | [1] L42 | | <code>lucide-react</code> | <code>^1.48.0</code> | <code>^1.49.0</code> | minor | [1] L25 | | <code>next</code> | <code>^16.3.7</code> | <code>^16.3.8</code> | patch | [1] L26 | ### Files - [1] <code>package.json</code> ### Release notes <details> <summary>daisyui (^5.7.46 → ^5.7.47)</summary> Source comparison unavailable: source refs for this transition are not known. ### [`v5.7.47`](https://github.com/saadeghi/daisyui/releases/tag/v5.7.47): v5.7.47 [Source](https://github.com/saadeghi/daisyui) Source ref: <code>master</code> 🌼 Read changelog: https://daisyui.com/docs/changelog/ 📦 Install this update: ```bash npm i -D daisyui@5.7.47 ``` 💚 Thank you for using daisyUI! </details> <details> <summary>dotenv (^18.0.4 → ^18.0.5)</summary> Source comparison unavailable: source refs for this transition are not known. ### [`v18.0.5`](https://github.com/motdotla/dotenv/tree/v18.0.5) [Source](https://github.com/motdotla/dotenv) </details> <details> <summary>eslint-config-next (^16.3.7 → ^16.3.8)</summary> Source comparison unavailable: source refs for this transition are not known. ### [`v16.3.8`](https://github.com/vercel/next.js/releases/tag/v16.3.8): v16.3.8 [Source](https://github.com/vercel/next.js) Source ref: <code>canary</code> This release contains security fixes for the following advisories: High: - [Server-Side Request Forgery in Image Optimization](https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4) Medium: - [Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass](https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x) - [Cache poisoning of SSG and ISR pages in self-hosted Next.js applications](https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676) - [Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service](https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p) - [Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages](https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7) - [Cache leak across root param values in nested 'use cache' functions](https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3) Low: - [Information disclosure in the Next.js development server's Model Context Protocol endpoint](https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv) </details> <details> <summary>lucide-react (^1.48.0 → ^1.49.0)</summary> Source comparison unavailable: source refs for this transition are not known. ### [`1.49.0`](https://github.com/lucide-icons/lucide/releases/tag/1.49.0): Version 1.49.0 [Source](https://github.com/lucide-icons/lucide) Source ref: <code>main</code> ## What's Changed * feat(icons): added `letters` icon by @karsa-mistmere in https://github.com/lucide-icons/lucide/pull/4779 * fix(packages): declare `@types/react` as an optional peer dependency by @unrevised6419 in https://github.com/lucide-icons/lucide/pull/4892 * feat(icons): added `bangladeshi-taka` icon by @TanvirMahin24 in https://github.com/lucide-icons/lucide/pull/4869 * feat(icons): added `printer-3d` icon by @Azuzula in https://github.com/lucide-icons/lucide/pull/4414 ## New Contributors * @unrevised6419 made their first contribution in https://github.com/lucide-icons/lucide/pull/4892 * @TanvirMahin24 made their first contribution in https://github.com/lucide-icons/lucide/pull/4869 * @Azuzula made their first contribution in https://github.com/lucide-icons/lucide/pull/4414 **Full Changelog**: https://github.com/lucide-icons/lucide/compare/1.48.0...1.49.0 </details> <details> <summary>next (^16.3.7 → ^16.3.8)</summary> Source comparison unavailable: source refs for this transition are not known. ### [`v16.3.8`](https://github.com/vercel/next.js/releases/tag/v16.3.8): v16.3.8 [Source](https://github.com/vercel/next.js) Source ref: <code>canary</code> This release contains security fixes for the following advisories: High: - [Server-Side Request Forgery in Image Optimization](https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4) Medium: - [Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass](https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x) - [Cache poisoning of SSG and ISR pages in self-hosted Next.js applications](https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676) - [Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service](https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p) - [Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages](https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7) - [Cache leak across root param values in nested 'use cache' functions](https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3) Low: - [Information disclosure in the Next.js development server's Model Context Protocol endpoint](https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv) </details>

Wuast94 added 1 commit 2026-09-30 18:52:42 +02:00

chore: update npm dependencies (5 updates) b8c69051b1

Wuast94 scheduled this pull request to auto merge when all checks succeed 2026-09-30 18:52:45 +02:00

Wuast94 merged commit d4be8fc7ea into main 2026-09-30 19:11:49 +02:00

Wuast94 referenced this pull request from a commit 2026-09-30 19:11:50 +02:00

Merge pull request 'chore: update npm dependencies (5 updates)' (#927) from updatarr/npm-dependencies-bac734c5b3 into main

Wuast94 deleted branch updatarr/npm-dependencies-bac734c5b3 2026-09-30 19:11:50 +02:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

vault/deltamon!927

No description provided.