Skip to content

build(deps): bump the patch-updates group across 1 directory with 33 updates - #451

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-updates-6463729c5d
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-updates-6463729c5d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the patch-updates group with 33 updates in the / directory:

Package From To
@typescript-eslint/eslint-plugin 8.71.2 8.72.1
@typescript-eslint/parser 8.71.2 8.72.1
mailparser 3.9.39 3.12.4
smtp-server 3.19.22 3.21.1
@apollo/client 4.3.3 4.3.5
better-auth 1.7.10 1.7.13
react-hook-form 7.90.0 7.91.0
zustand 5.0.15 5.0.16
postcss 8.5.23 8.5.31
@ai-sdk/azure 4.0.103 4.0.110
@ai-sdk/openai 4.0.95 4.0.102
@ai-sdk/provider 4.0.28 4.0.34
@ai-sdk/provider-utils 5.0.61 5.0.68
@aws-sdk/client-s3 3.1152.0 3.1156.0
@aws-sdk/lib-storage 3.1152.0 3.1156.0
@aws-sdk/s3-request-presigner 3.1152.0 3.1156.0
@pdfme/common 6.2.5 6.2.8
@pdfme/generator 6.2.5 6.2.8
@pdfme/schemas 6.2.5 6.2.8
ai 7.0.142 7.0.153
countries-and-timezones 3.10.0 3.11.0
@ai-sdk/react 4.0.146 4.0.157
@azure/msal-browser 5.25.1 5.26.0
@dagrejs/dagre 3.1.1 3.1.3
@pdfme/ui 6.2.5 6.2.8
react-svg-worldmap 2.2.0 2.3.0
typescript-eslint 8.71.2 8.72.1
@oxc-parser/binding-darwin-arm64 0.154.0 0.155.0
@storybook/addon-links 10.6.2 10.6.4
@storybook/addon-onboarding 10.6.2 10.6.4
@storybook/react 10.6.2 10.6.4
@storybook/react-vite 10.6.2 10.6.4
storybook 10.6.2 10.6.4

Updates @typescript-eslint/eslint-plugin from 8.71.2 to 8.72.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • eslint-plugin: lazy load rules (#13010)

🩹 Fixes

  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 4ad6b75 chore(release): publish 8.72.1
  • 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
  • 1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
  • 2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
  • c49d287 chore: [ci] test on oldest supported TS version (#13024)
  • 594fe28 fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...
  • a4c2603 chore(release): publish 8.72.0
  • c6eb98c feat(eslint-plugin): [await-thenable] add allowMixedPromiseArrays option (#...
  • b382b74 fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...
  • 79edd89 fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.71.2 to 8.72.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates mailparser from 3.9.39 to 3.12.4

Changelog

Sourced from mailparser's changelog.

3.12.4 (2026-10-22)

Bug Fixes

3.12.3 (2026-10-22)

Bug Fixes

  • deps: bump mailsplit to 5.4.28 and libmime to 5.6.3 (996a18f)
  • deps: bump mailsplit to 5.4.29, which reads an RFC 2231 filename the same way (7ccd32b)
  • drop the comments of a Content-Type or Content-Disposition in the headers map (eaf345b)
  • tell an RFC 2231 parameter apart by what libmime decoded, not by a second scan of the header (eba8da2)

3.12.2 (2026-10-21)

Bug Fixes

  • the html and text forms parseAddressHeader() builds lazily can be assigned again (bc6c421)

3.12.1 (2026-10-21)

Bug Fixes

  • parseAddressHeader() builds the html and text forms only when they are read (e08de61)

3.12.0 (2026-10-21)

Features

  • parseAddressHeader() accepts decodePunycode: false to keep IDN domains in ASCII form (0652c3f)

3.11.0 (2026-10-21)

Features

  • accept checksumAlgo: false to skip hashing attachments (21f806c)
  • export parseAddressHeader() for parsing an address header value (8ac364e)

Bug Fixes

  • decode text bodies with libmime's decode stream (b9a5e41)

... (truncated)

Commits
  • 79bbbfc chore(master): release 3.12.4 [skip-ci] (#472)
  • fe3b459 fix: update dependencies
  • ff4188e chore(master): release 3.12.3 [skip-ci] (#471)
  • 7ccd32b fix(deps): bump mailsplit to 5.4.29, which reads an RFC 2231 filename the sam...
  • eba8da2 fix: tell an RFC 2231 parameter apart by what libmime decoded, not by a secon...
  • 13b05b6 refactor: loop the comment boundary cases and name why a DKIM-Signature keeps...
  • 996a18f fix(deps): bump mailsplit to 5.4.28 and libmime to 5.6.3
  • eaf345b fix: drop the comments of a Content-Type or Content-Disposition in the header...
  • 68490a3 chore(master): release 3.12.2 [skip-ci] (#470)
  • bc6c421 fix: the html and text forms parseAddressHeader() builds lazily can be assign...
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates smtp-server from 3.19.22 to 3.21.1

Changelog

Sourced from smtp-server's changelog.

3.21.1 (2026-10-22)

Bug Fixes

3.21.0 (2026-10-21)

Features

  • add rejectOversized option to answer oversized messages with 552 (afb7047)
  • allow disabling commands per session with session.disabledCommands (7f0635f)

3.20.2 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.7 (9d5d608)

3.20.1 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.6 (db10401)

3.20.0 (2026-10-18)

Features

  • migrate to TypeScript with ES module and CommonJS builds (aac648c)

Bug Fixes

  • bump nodemailer to 10.1.5 (5c7f785)
  • close the server side of a connection as soon as the client leaves after QUIT (251a538)
  • harden connection lifecycle, TLS timeouts and the DATA stream (be9377a)

3.19.24 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.4 (78965d6)

... (truncated)

Commits
  • 4363ca4 Merge pull request #291 from nodemailer/release-please--branches--master--com...
  • b0eb672 chore(master): release 3.21.1
  • d043d6f fix: update dependencies
  • 1f65d70 Merge pull request #290 from nodemailer/release-please--branches--master--com...
  • b20dc89 chore(master): release 3.21.0
  • 7f0635f feat: allow disabling commands per session with session.disabledCommands
  • afb7047 feat: add rejectOversized option to answer oversized messages with 552
  • ddef9cc ci: test on the latest Node.js release
  • 7c0d44e ci: guard the CommonJS dependency graph
  • e890724 docs: state the Node 20 and CommonJS platform constraints
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @apollo/client from 4.3.3 to 4.3.5

Release notes

Sourced from @​apollo/client's releases.

@​apollo/client@​4.3.5

Patch Changes

  • #13498 04b12e5 Thanks @​jerelmiller! - Fix an issue where custom scalar values that are not JSON-serializable caused errors. These values are properly serialized when used as input for variables or when used as a key field value so that cache writes and calls to cache.identify succeed.

  • #13500 a23ea85 Thanks @​jerelmiller! - Require the variables option in useFragment when the fragment has required variables. This matches the behavior of useSuspenseFragment and the query hooks.

  • #13501 303d80f Thanks @​kgssystem! - Parse custom scalar fields in subscription results when using the no-cache fetch policy.

@​apollo/client@​4.3.4

Patch Changes

  • #13497 41d604c Thanks @​jerelmiller! - Fix an issue where a list field selected more than once with different selection sets lost the fields that only one of the selections included while a @defer boundary elsewhere in the query was still pending when using the GraphQL17Alpha9Handler. The results of all selections of the list field are now merged.

  • #13457 22746bb Thanks @​phryneas! - Fixed a bug where streamFieldInfo might not have been passed into custom merge functions for @stream directives that had an aliased field in the path.

  • #13457 22746bb Thanks @​phryneas! - Fix Missing field errors being logged when writing @defer results where a parent field is selected both inside and outside of a deferred fragment. Fields whose @defer boundary has not been delivered from the network are no longer reported as missing.

  • #13453 9bb3a41 Thanks @​wassim-k! - Unregister the watch when an immediate cache.watch broadcast throws. Previously the watch was added to the cache before its first read, and a read that threw left the watch registered while the caller never received the unsubscribe function, so it could not be removed and every later broadcast ran into the same failing read.

  • #13457 22746bb Thanks @​phryneas! - Defer20220824Handler: fix a situation where dataState would show up as completed with incremental errors instead of staying streaming.

Changelog

Sourced from @​apollo/client's changelog.

4.3.5

Patch Changes

  • #13498 04b12e5 Thanks @​jerelmiller! - Fix an issue where custom scalar values that are not JSON-serializable caused errors. These values are properly serialized when used as input for variables or when used as a key field value so that cache writes and calls to cache.identify succeed.

  • #13500 a23ea85 Thanks @​jerelmiller! - Require the variables option in useFragment when the fragment has required variables. This matches the behavior of useSuspenseFragment and the query hooks.

  • #13501 303d80f Thanks @​kgssystem! - Parse custom scalar fields in subscription results when using the no-cache fetch policy.

4.3.4

Patch Changes

  • #13497 41d604c Thanks @​jerelmiller! - Fix an issue where a list field selected more than once with different selection sets lost the fields that only one of the selections included while a @defer boundary elsewhere in the query was still pending when using the GraphQL17Alpha9Handler. The results of all selections of the list field are now merged.

  • #13457 22746bb Thanks @​phryneas! - Fixed a bug where streamFieldInfo might not have been passed into custom merge functions for @stream directives that had an aliased field in the path.

  • #13457 22746bb Thanks @​phryneas! - Fix Missing field errors being logged when writing @defer results where a parent field is selected both inside and outside of a deferred fragment. Fields whose @defer boundary has not been delivered from the network are no longer reported as missing.

  • #13453 9bb3a41 Thanks @​wassim-k! - Unregister the watch when an immediate cache.watch broadcast throws. Previously the watch was added to the cache before its first read, and a read that threw left the watch registered while the caller never received the unsubscribe function, so it could not be removed and every later broadcast ran into the same failing read.

  • #13457 22746bb Thanks @​phryneas! - Defer20220824Handler: fix a situation where dataState would show up as completed with incremental errors instead of staying streaming.

Commits
  • f3d28a5 Version Packages (#13503)
  • c71e76c Avoid mutating the raw network result object when handling subscription resul...
  • 303d80f Parse custom scalars in subscriptions with no-cache fetch policy (#13501)
  • 04b12e5 Handle non-JSON-serializable scalar value in cache.identify and `cache.watc...
  • a23ea85 Make sure variables option is required for useFragment if it has required...
  • 91591db Version Packages (#13488)
  • 41d604c Fix an edge case where a pending @defer might lose data for fields in a lis...
  • 22746bb Prevent "missing field" error logging for overlapping nested deferred fields....
  • 335f1ea Improve documentation of cache redirects (#13496)
  • 946e3af chore(deps): update dependency vitest to v4 [security] (#13491)
  • Additional commits viewable in compare view

Updates better-auth from 1.7.10 to 1.7.13

Release notes

Sourced from better-auth's releases.

v1.7.13

better-auth

Bug Fixes

  • Fixed type declarations so type-only exports are no longer listed as values, making a value import fail type checking instead of failing at runtime (#11985)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added token endpoint authentication options to the Vercel social provider, including dynamic OIDC tokens and private key JWT client assertions, without replacing the built-in sign-in flow (#11948)

Bug Fixes

  • Added tokenEndpointAuth: { method } to the Cloudflare provider and deprecated tokenEndpointAuthMethod, which remains supported (#11997)

For detailed changes, see CHANGELOG

@better-auth/stripe

Features

  • Added support for Stripe SDK v23 in the Stripe plugin (#11954)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​allenzhou101, @​bytaesu, @​godwit-bo

Full changelog: v1.7.12...v1.7.13

v1.7.12

[!IMPORTANT] Action required

  • If you use ID token sign-in with a provider that has no clientId, set clientId to every client ID your apps sign in with. (#11931)

better-auth

Bug Fixes

  • Fixed the JWT plugin to verify JWTs and session cookie-cache JWTs with the stored key's algorithm instead of the token header's, and to warn when signing or verifying a JWT without an issuer or audience (#11925)
  • Fixed OAuth callbacks completed through the OAuth proxy to run the same checks as the standard OAuth callback, including issuer and ID token nonce validation (#11930)
  • Fixed auth.api.getSession() to keep the original database error as error.cause when the session lookup fails (#11924)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.13

Patch Changes

  • #11985 9cb95fe Thanks @​bytaesu! - Type declarations no longer list type-only exports as values, so importing one as a value now fails type checking instead of failing at runtime.

  • Updated dependencies [2712441, 1cf4b2c]:

    • @​better-auth/core@​1.7.13
    • @​better-auth/drizzle-adapter@​1.7.13
    • @​better-auth/kysely-adapter@​1.7.13
    • @​better-auth/memory-adapter@​1.7.13
    • @​better-auth/mongo-adapter@​1.7.13
    • @​better-auth/prisma-adapter@​1.7.13
    • @​better-auth/telemetry@​1.7.13

1.7.12

Patch Changes

  • #11925 fb48619 Thanks @​bytaesu! - The JWT plugin now verifies JWTs and session cookie-cache JWTs with the algorithm of the stored key instead of the one named in the token header, and logs a warning when it signs or verifies a JWT without an issuer or audience.

  • #11924 681aa5c Thanks @​bytaesu! - auth.api.getSession() now keeps the original database error as error.cause when the session lookup fails, so server code can tell a transient failure from a bug.

  • #11930 b18e3b8 Thanks @​bytaesu! - OAuth callbacks completed through the OAuth proxy now run the same checks as the standard OAuth callback, including issuer and ID token nonce validation.

  • Updated dependencies [681aa5c, 4bc78ba, 876608d, 083a743, 492134a]:

    • @​better-auth/core@​1.7.12
    • @​better-auth/drizzle-adapter@​1.7.12
    • @​better-auth/kysely-adapter@​1.7.12
    • @​better-auth/memory-adapter@​1.7.12
    • @​better-auth/mongo-adapter@​1.7.12
    • @​better-auth/prisma-adapter@​1.7.12
    • @​better-auth/telemetry@​1.7.12

1.7.11

Patch Changes

  • #10719 bd65db0 Thanks @​rendermani! - Recognize PostgreSQL int8 as a valid number type in migration diffs. Kysely's introspector reports pg_type.typname, so Better Auth's own bigint columns (such as the database-backed rate limiter's lastRequest) came back as int8 and were reported as a type mismatch on every run.

  • #11521 37a75c9 Thanks @​aryan1306! - Fix database-backed rate limiting returning an excessively large X-Retry-After header instead of the remaining seconds in the rate-limit window.

  • Updated dependencies [ce96569, 2f6ca3f, dfd8dd2]:

    • @​better-auth/core@​1.7.11
    • @​better-auth/drizzle-adapter@​1.7.11
    • @​better-auth/kysely-adapter@​1.7.11
    • @​better-auth/memory-adapter@​1.7.11
    • @​better-auth/mongo-adapter@​1.7.11
    • @​better-auth/prisma-adapter@​1.7.11
    • @​better-auth/telemetry@​1.7.11
Commits

Updates react-hook-form from 7.90.0 to 7.91.0

Release notes

Sourced from react-hook-form's releases.

Version 7.91.0

🐞 Fixes

  • Fix useFieldArray not updating rows when using setValue or setValues (#13842, #13939)
  • Fix useFieldArray not unregistering values correctly on unmount (#13843)
  • Fix field registration without a value incorrectly adding array rows (#13846, #13849)
  • Fix useFieldArray reindexing fields incorrectly when array rules are registered (#13873)
  • Fix useFieldArray losing validation rules after reset() (#13940)
  • Fix stale field array validation results after array changes (#13888)
  • Fix useFieldArray validation after submission in onBlur mode (#13867)
  • Fix dirty state updates when setValues changes field arrays (#13870)
  • Fix stale asynchronous validation results after reset() and unregister() (#13908, #13912, #13934)
  • Fix Controller validation using stale DOM values (#13880)
  • Fix isValid not updating correctly after reset() and subsequent changes (#13847, #13930)
  • Fix handleSubmit leaving isSubmitting active when validation throws (#13905)
  • Fix empty validation message arrays being treated as errors (#13937)
  • Fix delayed validation errors not being flushed on blur (#13861)
  • Fix form state subscriptions and validity updates (#13866, #13877, #13906)
  • Fix dirty state tracking and resetField() with falsy values (#13868, #13900)
  • Fix unregister retaining validation rules when using keepValue (#13891)
  • Fix <Form /> handling of JSON, URL-encoded, multipart and plain-text submissions (#13848, #13854, #13874, #13893, #13907, #13915, #13926)
  • Fix useWatch not updating default values when the watched name changes (#13859)
  • Fix select options being lost before the form is ready (#13872)
  • Fix useForm retaining removed options and disabled state (#13882, #13883, #13889, #13898)
  • Fix progressive required attributes (#13924)
  • Fix numeric zero maxLength validation (#13851)
  • Fix object comparison for null-prototype objects and sparse arrays (#13853, #13855, #13857)
  • Fix cloneObject handling objects with a constructor key (#13875)
  • Fix setValue handling null-prototype objects (#13916)
  • Fix form-level validation error types (#13860)
  • Fix Description has been truncated

…updates

Bumps the patch-updates group with 33 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.71.2` | `8.72.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.71.2` | `8.72.1` |
| [mailparser](https://github.com/nodemailer/mailparser) | `3.9.39` | `3.12.4` |
| [smtp-server](https://github.com/nodemailer/smtp-server) | `3.19.22` | `3.21.1` |
| [@apollo/client](https://github.com/apollographql/apollo-client) | `4.3.3` | `4.3.5` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.10` | `1.7.13` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.90.0` | `7.91.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.15` | `5.0.16` |
| [postcss](https://github.com/postcss/postcss) | `8.5.23` | `8.5.31` |
| [@ai-sdk/azure](https://github.com/vercel/ai/tree/HEAD/packages/azure) | `4.0.103` | `4.0.110` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.95` | `4.0.102` |
| [@ai-sdk/provider](https://github.com/vercel/ai/tree/HEAD/packages/provider) | `4.0.28` | `4.0.34` |
| [@ai-sdk/provider-utils](https://github.com/vercel/ai/tree/HEAD/packages/provider-utils) | `5.0.61` | `5.0.68` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1152.0` | `3.1156.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1152.0` | `3.1156.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1152.0` | `3.1156.0` |
| [@pdfme/common](https://github.com/pdfme/pdfme) | `6.2.5` | `6.2.8` |
| [@pdfme/generator](https://github.com/pdfme/pdfme) | `6.2.5` | `6.2.8` |
| [@pdfme/schemas](https://github.com/pdfme/pdfme) | `6.2.5` | `6.2.8` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.142` | `7.0.153` |
| [countries-and-timezones](https://github.com/manuelmhtr/countries-and-timezones) | `3.10.0` | `3.11.0` |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.146` | `4.0.157` |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.25.1` | `5.26.0` |
| [@dagrejs/dagre](https://github.com/dagrejs/dagre) | `3.1.1` | `3.1.3` |
| [@pdfme/ui](https://github.com/pdfme/pdfme) | `6.2.5` | `6.2.8` |
| [react-svg-worldmap](https://github.com/yanivam/react-svg-worldmap) | `2.2.0` | `2.3.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.2` | `8.72.1` |
| [@oxc-parser/binding-darwin-arm64](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.154.0` | `0.155.0` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `10.6.2` | `10.6.4` |
| [@storybook/addon-onboarding](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/onboarding) | `10.6.2` | `10.6.4` |
| [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react) | `10.6.2` | `10.6.4` |
| [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.6.2` | `10.6.4` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.6.2` | `10.6.4` |



Updates `@typescript-eslint/eslint-plugin` from 8.71.2 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.71.2 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/parser)

Updates `mailparser` from 3.9.39 to 3.12.4
- [Release notes](https://github.com/nodemailer/mailparser/releases)
- [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md)
- [Commits](nodemailer/mailparser@v3.9.39...v3.12.4)

Updates `smtp-server` from 3.19.22 to 3.21.1
- [Release notes](https://github.com/nodemailer/smtp-server/releases)
- [Changelog](https://github.com/nodemailer/smtp-server/blob/master/CHANGELOG.md)
- [Commits](nodemailer/smtp-server@v3.19.22...v3.21.1)

Updates `@apollo/client` from 4.3.3 to 4.3.5
- [Release notes](https://github.com/apollographql/apollo-client/releases)
- [Changelog](https://github.com/apollographql/apollo-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-client/compare/@apollo/client@4.3.3...@apollo/client@4.3.5)

Updates `better-auth` from 1.7.10 to 1.7.13
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.13/packages/better-auth)

Updates `react-hook-form` from 7.90.0 to 7.91.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.90.0...v7.91.0)

Updates `zustand` from 5.0.15 to 5.0.16
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.15...v5.0.16)

Updates `postcss` from 8.5.23 to 8.5.31
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.23...8.5.31)

Updates `@ai-sdk/azure` from 4.0.103 to 4.0.110
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/azure/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/azure@4.0.110/packages/azure)

Updates `@ai-sdk/openai` from 4.0.95 to 4.0.102
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.102/packages/openai)

Updates `@ai-sdk/provider` from 4.0.28 to 4.0.34
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/provider/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider@4.0.34/packages/provider)

Updates `@ai-sdk/provider-utils` from 5.0.61 to 5.0.68
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/provider-utils/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider-utils@5.0.68/packages/provider-utils)

Updates `@aws-sdk/client-s3` from 3.1152.0 to 3.1156.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1156.0/clients/client-s3)

Updates `@aws-sdk/lib-storage` from 3.1152.0 to 3.1156.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1156.0/lib/lib-storage)

Updates `@aws-sdk/s3-request-presigner` from 3.1152.0 to 3.1156.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1156.0/packages/s3-request-presigner)

Updates `@pdfme/common` from 6.2.5 to 6.2.8
- [Release notes](https://github.com/pdfme/pdfme/releases)
- [Changelog](https://github.com/pdfme/pdfme/blob/main/RELEASE.md)
- [Commits](pdfme/pdfme@6.2.5...6.2.8)

Updates `@pdfme/generator` from 6.2.5 to 6.2.8
- [Release notes](https://github.com/pdfme/pdfme/releases)
- [Changelog](https://github.com/pdfme/pdfme/blob/main/RELEASE.md)
- [Commits](pdfme/pdfme@6.2.5...6.2.8)

Updates `@pdfme/schemas` from 6.2.5 to 6.2.8
- [Release notes](https://github.com/pdfme/pdfme/releases)
- [Changelog](https://github.com/pdfme/pdfme/blob/main/RELEASE.md)
- [Commits](pdfme/pdfme@6.2.5...6.2.8)

Updates `ai` from 7.0.142 to 7.0.153
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.153/packages/ai)

Updates `countries-and-timezones` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/manuelmhtr/countries-and-timezones/releases)
- [Changelog](https://github.com/manuelmhtr/countries-and-timezones/blob/dev/CHANGELOG.md)
- [Commits](manuelmhtr/countries-and-timezones@v3.10.0...v3.11.0)

Updates `@ai-sdk/react` from 4.0.146 to 4.0.157
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.157/packages/react)

Updates `@azure/msal-browser` from 5.25.1 to 5.26.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.25.1...msal-browser-v5.26.0)

Updates `@dagrejs/dagre` from 3.1.1 to 3.1.3
- [Release notes](https://github.com/dagrejs/dagre/releases)
- [Changelog](https://github.com/dagrejs/dagre/blob/master/changelog.md)
- [Commits](dagrejs/dagre@v3.1.1...v3.1.3)

Updates `@pdfme/ui` from 6.2.5 to 6.2.8
- [Release notes](https://github.com/pdfme/pdfme/releases)
- [Changelog](https://github.com/pdfme/pdfme/blob/main/RELEASE.md)
- [Commits](pdfme/pdfme@6.2.5...6.2.8)

Updates `react-svg-worldmap` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/yanivam/react-svg-worldmap/releases)
- [Changelog](https://github.com/yanivam/react-svg-worldmap/blob/main/CHANGELOG.md)
- [Commits](yanivam/react-svg-worldmap@v2.2.0...v2.3.0)

Updates `typescript-eslint` from 8.71.2 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

Updates `@oxc-parser/binding-darwin-arm64` from 0.154.0 to 0.155.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.155.0/napi/parser)

Updates `@storybook/addon-links` from 10.6.2 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/addons/links)

Updates `@storybook/addon-onboarding` from 10.6.2 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/addons/onboarding)

Updates `@storybook/react` from 10.6.2 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/renderers/react)

Updates `@storybook/react-vite` from 10.6.2 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/frameworks/react-vite)

Updates `storybook` from 10.6.2 to 10.6.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.4/code/core)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: mailparser
  dependency-version: 3.12.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: smtp-server
  dependency-version: 3.21.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@apollo/client"
  dependency-version: 4.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: better-auth
  dependency-version: 1.7.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: react-hook-form
  dependency-version: 7.91.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: zustand
  dependency-version: 5.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: postcss
  dependency-version: 8.5.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@ai-sdk/azure"
  dependency-version: 4.0.110
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@ai-sdk/provider"
  dependency-version: 4.0.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@ai-sdk/provider-utils"
  dependency-version: 5.0.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1156.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1156.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1156.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@pdfme/common"
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@pdfme/generator"
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@pdfme/schemas"
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: ai
  dependency-version: 7.0.153
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: countries-and-timezones
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.157
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@dagrejs/dagre"
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@pdfme/ui"
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: react-svg-worldmap
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@oxc-parser/binding-darwin-arm64"
  dependency-version: 0.155.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@storybook/addon-links"
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@storybook/addon-onboarding"
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@storybook/react"
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@storybook/react-vite"
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: storybook
  dependency-version: 10.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 29, 2026
@coderabbitai

coderabbitai Bot commented Oct 29, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 2, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/patch-updates-6463729c5d branch November 2, 2026 01:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants