Skip to content

Bump the npm-production group across 1 directory with 19 updates - #323

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-25f3d256eb
Closed

Bump the npm-production group across 1 directory with 19 updates#323
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-25f3d256eb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown

Bumps the npm-production group with 19 updates in the / directory:

Package From To
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
@codemirror/commands 6.10.4 6.11.0
@codemirror/lang-markdown 6.5.1 6.5.2
@codemirror/view 6.43.7 6.43.9
@tanstack/react-virtual 3.14.9 3.14.10
@noble/hashes 2.2.0 2.3.0
@fastify/formbody 8.0.2 9.0.0
@fastify/helmet 13.1.0 13.1.1
@fastify/rate-limit 11.1.0 11.2.0
@modelcontextprotocol/sdk 1.29.0 1.30.0
fastify 5.10.0 5.12.1
pg 8.22.0 8.23.0
@fastify/static 10.1.2 10.1.3
@node-rs/argon2 2.0.2 2.1.0
fastify-raw-body 5.0.0 6.0.1
google-auth-library 10.9.0 11.0.2
svix 1.99.1 2.1.0
ws 8.21.1 8.21.3

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @codemirror/commands from 6.10.4 to 6.11.0

Commits

Updates @codemirror/lang-markdown from 6.5.1 to 6.5.2

Commits

Updates @codemirror/view from 6.43.7 to 6.43.9

Commits

Updates @tanstack/react-virtual from 3.14.9 to 3.14.10

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.10

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.10

Patch Changes

Commits

Updates @noble/hashes from 2.2.0 to 2.3.0

Release notes

Sourced from @​noble/hashes's releases.

2.3.0

Improve speed:

  • +10-45% 32b inputs across all hashes
  • +40% SHA-3 / SHAKE, +50% 1mb KT128 / KT256 / TurboSHAKE, +20% kmac
  • 2.2x argon
  • +20% pbkdf2 and hkdf

Other changes:

  • Better error messages and stricter type checks everywhere
  • Bugfix: HMAC _cloneInto now preserves canXOF (#134, ChALkeR); Argon2d typo rename (#135).
  • blake2.compress renamed to _compress (marked internal).
  • Reduce on-disk unpacked size 869kb → 665kb (-204kb) by disabling source maps (they became less relevant).

Full Changelog: paulmillr/noble-hashes@2.2.0...2.3.0

Changelog

Sourced from @​noble/hashes's changelog.

2.3.0 (2026-08-06)

Performance

  • Improved 32-byte input performance across all hashes by 10–45%.
  • Improved SHA-3 and SHAKE by 40%, one-megabyte KangarooTwelve, MarsupilamiFourteen, and TurboSHAKE by 50%, and KMAC by 20%.
  • Improved Argon2 performance by 2.2×.
  • Improved PBKDF2 and HKDF performance by 20%.

Other changes

  • Added better error messages and stricter type checks throughout the package.
  • Fixed HMAC._cloneInto so it preserves canXOF in issue #134, reported by @​ChALkeR, and corrected an Argon2d typo in issue #135.
  • Renamed blake2.compress to the internal _compress method.
  • Reduced unpacked on-disk size from 869 KB to 665 KB by disabling less-relevant source maps.
Commits

Updates @fastify/formbody from 8.0.2 to 9.0.0

Release notes

Sourced from @​fastify/formbody's releases.

v9.0.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-formbody@v8.0.2...v9.0.0

Commits
  • b65c99c Bumped v9.0.0
  • 911d7dc chore(.npmrc): add min-release-age
  • da419bd chore: bump c8 from 11.0.0 to 12.0.0 (#202)
  • a6e08a5 ci: pin actions to commit-hash
  • 09adf4d chore: bump @​types/node in the dev-dependencies-typescript group (#200)
  • 591e569 chore(package.json): use https for repo url
  • 6dc5d47 chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#197)
  • 0452500 chore: update depedabot setting
  • 83d0bc0 refactor(types): migrate from tsd to tstyche and others updated
  • d4e232e ci: add lock-threads workflow (#192)
  • Additional commits viewable in compare view

Updates @fastify/helmet from 13.1.0 to 13.1.1

Release notes

Sourced from @​fastify/helmet's releases.

v13.1.1

What's Changed

Full Changelog: fastify/fastify-helmet@v13.1.0...v13.1.1

Commits
Maintainer changes

This version was pushed to npm by tony133, a new releaser for @​fastify/helmet since your current version.


Updates @fastify/rate-limit from 11.1.0 to 11.2.0

Release notes

Sourced from @​fastify/rate-limit's releases.

v11.2.0

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-rate-limit@v11.1.0...v11.2.0

Commits

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates fastify from 5.10.0 to 5.12.1

Release notes

Sourced from fastify's releases.

v5.12.1

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

Full Changelog: fastify/fastify@v5.11.3...v5.12.0

v5.11.3

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

... (truncated)

Commits

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Commits

Updates @fastify/static from 10.1.2 to 10.1.3

Release notes

Sourced from @​fastify/static's releases.

v10.1.3

What's Changed

Full Changelog: fastify/fastify-static@v10.1.2...v10.1.3

Commits

Updates @node-rs/argon2 from 2.0.2 to 2.1.0

Commits
  • 3b28965 chore(release): publish
  • 64b9227 chore(deps): lock file maintenance (#1182)
  • b0ea4a0 perf(argon2): simdutf8, crate PHC decode, argon2-rust 1.1 (#1189)
  • 2b8b617 feat(argon2): switch backend to argon2-rust (#1188)
  • 05156db chore(deps): update rust crate jsonwebtoken to v11 (#1177)
  • 1933745 chore: upgrade all npm deps (#1187)
  • 317e00e chore(deps): update cross-platform-actions/action action to v1.4.0 (#1185)
  • 284ee70 chore(deps): update dependency oxfmt to ^0.63.0 (#1186)
  • 54d5564 chore(deps): update dependency oxfmt to ^0.62.0 (#1183)
  • 23aad38 chore(deps): update yarn to v4.18.0 (#1180)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​node-rs/argon2 since your current version.


Updates fastify-raw-body from 5.0.0 to 6.0.1

Release notes

Sourced from fastify-raw-body's releases.

v6.0.1

Full Changelog: Eomm/fastify-raw-body@v6.0.0...v6.0.1

v6.0.0

What's Changed

Full Changelog: Eomm/fastify-raw-body@v5.0.0...v6.0.0

Commits
  • 7c3a537 Bumped v6.0.1
  • 6ad6d81 fix(ci): GH release
  • 4f726e2 fix(ci): release cleanup
  • be244e2 Bumped v6.0.0
  • 6eff229 feat(ci): release automation
  • ad4458c chore(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#95)
  • 9977e1f chore(deps): bump actions/setup-node from 6 to 7 (#94)
  • 0273e94 chore(deps): bump actions/checkout from 6 to 7 (#92)
  • e99ee06 chore(deps-dev): bump @​types/node from 25.9.4 to 26.0.0 (#91)
  • 030517b chore(deps): bump fastify-plugin from 5.1.0 to 6.0.0 (#90)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fastify-raw-body since your current version.


Updates google-auth-library from 10.9.0 to 11.0.2

Release notes

Sourced from google-auth-library's releases.

google-auth-library: v11.0.2

11.0.2 (2026-08-12)

Bug Fixes

  • Ensure node 22 dependencies are up to date so they get the latest patches for core and handwritten libraries (#9116) (fad57ff)

google-auth-library: v11.0.1

11.0.1 (2026-08-10)

Bug Fixes

  • Upgrade all node core library dependencies to their latest node 22 version (#9084) (af8074c)
Changelog

Sourced from google-auth-library's changelog.

11.0.2 (2026-08-12)

Bug Fixes

  • Ensure node 22 dependencies are up to date so they get the latest patches for core and handwritten libraries (#9116) (fad57ff)

11.0.1 (2026-08-10)

Bug Fixes

  • Upgrade all node core library dependencies to their latest node 22 version (#9084) (af8074c)

11.0.0 (2026-07-29)

⚠ BREAKING CHANGES

  • Update google-auth-library-nodejs to minimum Node version of 22. (#8995)

Features

  • Update google-auth-library-nodejs to minimum Node version of 22. (#8995) (152f686), refs #8985

10.9.1 (2026-07-23)

Bug Fixes

  • auth: Add GOOGLE_APPLICATION_CREDENTIALS context to credential load errors (#8800) (829990f), refs #8799
  • auth: Honor CLOUDSDK_CONFIG when locating the ADC well-known file (#8798) (6e912cf), refs #8797
Commits
  • 1c40473 chore: release main (#9125)
  • fad57ff fix: Ensure node 22 dependencies are up to date so they get the latest patche...
  • f5ab609 chore: release main (#9110)
  • af8074c fix: upgrade all node core library dependencies to their latest node 22 versi...
  • ad53939 chore: release main (#9012)
  • 152f686 feat!: Update...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@dependabot
dependabot Bot requested a review from callumalpass as a code owner August 24, 2026 21:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@dependabot dependabot Bot changed the title Bump the npm-production group with 19 updates Bump the npm-production group across 1 directory with 19 updates Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-25f3d256eb branch 2 times, most recently from f0ff3cc to 3b69b6a Compare August 29, 2026 07:02
Bumps the npm-production group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.4` | `6.11.0` |
| [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.1` | `6.5.2` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.7` | `6.43.9` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.9` | `3.14.10` |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.2.0` | `2.3.0` |
| [@fastify/formbody](https://github.com/fastify/fastify-formbody) | `8.0.2` | `9.0.0` |
| [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.1.0` | `13.1.1` |
| [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit) | `11.1.0` | `11.2.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.12.1` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `10.1.2` | `10.1.3` |
| [@node-rs/argon2](https://github.com/napi-rs/node-rs) | `2.0.2` | `2.1.0` |
| [fastify-raw-body](https://github.com/Eomm/fastify-raw-body) | `5.0.0` | `6.0.1` |
| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.9.0` | `11.0.2` |
| [svix](https://github.com/svix/svix-webhooks) | `1.99.1` | `2.1.0` |
| [ws](https://github.com/websockets/ws) | `8.21.1` | `8.21.3` |



Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@codemirror/commands` from 6.10.4 to 6.11.0
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/lang-markdown` from 6.5.1 to 6.5.2
- [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-markdown/commits)

Updates `@codemirror/view` from 6.43.7 to 6.43.9
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@tanstack/react-virtual` from 3.14.9 to 3.14.10
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.10/packages/react-virtual)

Updates `@noble/hashes` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Changelog](https://github.com/paulmillr/noble-hashes/blob/main/CHANGELOG.md)
- [Commits](paulmillr/noble-hashes@2.2.0...2.3.0)

Updates `@fastify/formbody` from 8.0.2 to 9.0.0
- [Release notes](https://github.com/fastify/fastify-formbody/releases)
- [Commits](fastify/fastify-formbody@v8.0.2...v9.0.0)

Updates `@fastify/helmet` from 13.1.0 to 13.1.1
- [Release notes](https://github.com/fastify/fastify-helmet/releases)
- [Commits](fastify/fastify-helmet@v13.1.0...v13.1.1)

Updates `@fastify/rate-limit` from 11.1.0 to 11.2.0
- [Release notes](https://github.com/fastify/fastify-rate-limit/releases)
- [Commits](fastify/fastify-rate-limit@v11.1.0...v11.2.0)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `fastify` from 5.10.0 to 5.12.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.10.0...v5.12.1)

Updates `pg` from 8.22.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `@fastify/static` from 10.1.2 to 10.1.3
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.2...v10.1.3)

Updates `@node-rs/argon2` from 2.0.2 to 2.1.0
- [Release notes](https://github.com/napi-rs/node-rs/releases)
- [Commits](https://github.com/napi-rs/node-rs/compare/@node-rs/argon2@2.0.2...@node-rs/argon2@2.1.0)

Updates `fastify-raw-body` from 5.0.0 to 6.0.1
- [Release notes](https://github.com/Eomm/fastify-raw-body/releases)
- [Commits](Eomm/fastify-raw-body@v5.0.0...v6.0.1)

Updates `google-auth-library` from 10.9.0 to 11.0.2
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v11.0.2/core/packages/google-auth-library-nodejs)

Updates `svix` from 1.99.1 to 2.1.0
- [Release notes](https://github.com/svix/svix-webhooks/releases)
- [Changelog](https://github.com/svix/svix-webhooks/blob/main/ChangeLog.md)
- [Commits](svix/svix-webhooks@v1.99.1...v2.1.0)

Updates `ws` from 8.21.1 to 8.21.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.1...8.21.3)

---
updated-dependencies:
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@codemirror/lang-markdown"
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@fastify/formbody"
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: "@fastify/helmet"
  dependency-version: 13.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@fastify/rate-limit"
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@fastify/static"
  dependency-version: 10.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@noble/hashes"
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@node-rs/argon2"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: fastify
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: fastify-raw-body
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: google-auth-library
  dependency-version: 11.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: svix
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: ws
  dependency-version: 8.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-25f3d256eb branch from 3b69b6a to 471b84c Compare August 29, 2026 13:32
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 31, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-production-25f3d256eb branch August 31, 2026 21:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants