chore(deps): bump the minor-and-patch group across 1 directory with 16 updates by dependabot[bot] · Pull Request #832 · chatman-media/lead-engine

dependabot · 2026-07-06T10:37:00Z

Bumps the minor-and-patch group with 15 updates in the / directory:

Package	From	To
@biomejs/biome	`2.5.0`	`2.5.2`
@semantic-release/github	`12.0.8`	`12.0.9`
@radix-ui/react-avatar	`1.2.0`	`1.2.1`
@radix-ui/react-dialog	`1.1.17`	`1.1.18`
@radix-ui/react-dropdown-menu	`2.1.18`	`2.1.19`
@radix-ui/react-label	`2.1.10`	`2.1.11`
@radix-ui/react-select	`2.3.1`	`2.3.2`
@radix-ui/react-switch	`1.3.1`	`1.3.2`
@radix-ui/react-tabs	`1.1.15`	`1.1.16`
@radix-ui/react-tooltip	`1.2.10`	`1.2.11`
@tailwindcss/vite	`4.3.1`	`4.3.2`
lucide-react	`1.21.0`	`1.23.0`
react-router-dom	`7.18.0`	`7.18.1`
@playwright/test	`1.61.0`	`1.61.1`
hono	`4.12.26`	`4.12.28`

Updates @biomejs/biome from 2.5.0 to 2.5.2

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.2

2.5.2

Patch Changes
#10595 f458028 Thanks @pkallos! - Added the option ignoreBooleanCoercion to useNullishCoalescing. When enabled, Biome ignores || and ||= used inside a Boolean() call, where coalescing on falsy values is intentional.

#10798 4a32b63 Thanks @pkallos! - Added the option ignorePrimitives to useNullishCoalescing. When enabled, Biome ignores ||, ||=, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use true to ignore all primitives, or an object selecting string, number, boolean, or bigint.
#10545 f3d4c00 Thanks @Mokto! - Added the new nursery rule noSvelteUnnecessaryStateWrap, which reports unnecessary $state() wrapping of classes from svelte/reactivity that are already reactive.
<script>
import { SvelteMap } from "svelte/reactivity";
const map = $state(new SvelteMap()); // redundant
</script>
#10752 f62fb8b Thanks @ematipico! - Fixed #10739. Now the rule useValidAutocomplete correctly flags the autoComplete attribute.

#10796 f1b3ab2 Thanks @ematipico! - Fixed #10768. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.
#10719 aa649b5 Thanks @minseong0324! - Fixed noMisleadingReturnType false positive on returns that use a widening type assertion: "a" as string is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as false as false, matching the existing as const behavior.
// No longer flagged (returns are `string`):
function getValue(b: boolean): string {
  if (b) return "a" as string;
  return "b" as string;
}
// Now also reported, like as const (returns false):
function isReady(): boolean {
return false as false;
}
#10678 8f073a7 Thanks @PranavAchar01! - Fixed #7718: Biome now correctly parses CSS nesting selectors when & appears as a trailing sub-selector after a type selector, e.g. h1& { color: red; }.
#10756 5ec965a Thanks @denbezrukov! - Fixed CSS formatter output for selector lists with allowWrongLineComments and // comments after a selector comma. Biome now keeps the selector before the line comment inline instead of breaking it across descendant combinators.
-.powerPathNavigator
-  .helm
-  button.pressedButton, // pressed
+.powerPathNavigator .helm button.pressedButton, // pressed
 .powerPathNavigator .helm button:active:not(.disabledButton) {
 }

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.2

Patch Changes
#10595 f458028 Thanks @pkallos! - Added the option ignoreBooleanCoercion to useNullishCoalescing. When enabled, Biome ignores || and ||= used inside a Boolean() call, where coalescing on falsy values is intentional.

#10798 4a32b63 Thanks @pkallos! - Added the option ignorePrimitives to useNullishCoalescing. When enabled, Biome ignores ||, ||=, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use true to ignore all primitives, or an object selecting string, number, boolean, or bigint.
#10545 f3d4c00 Thanks @Mokto! - Added the new nursery rule noSvelteUnnecessaryStateWrap, which reports unnecessary $state() wrapping of classes from svelte/reactivity that are already reactive.
<script>
import { SvelteMap } from "svelte/reactivity";
const map = $state(new SvelteMap()); // redundant
</script>
#10752 f62fb8b Thanks @ematipico! - Fixed #10739. Now the rule useValidAutocomplete correctly flags the autoComplete attribute.

#10796 f1b3ab2 Thanks @ematipico! - Fixed #10768. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.
#10719 aa649b5 Thanks @minseong0324! - Fixed noMisleadingReturnType false positive on returns that use a widening type assertion: "a" as string is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as false as false, matching the existing as const behavior.
// No longer flagged (returns are `string`):
function getValue(b: boolean): string {
  if (b) return "a" as string;
  return "b" as string;
}
// Now also reported, like as const (returns false):
function isReady(): boolean {
return false as false;
}
#10678 8f073a7 Thanks @PranavAchar01! - Fixed #7718: Biome now correctly parses CSS nesting selectors when & appears as a trailing sub-selector after a type selector, e.g. h1& { color: red; }.
#10756 5ec965a Thanks @denbezrukov! - Fixed CSS formatter output for selector lists with allowWrongLineComments and // comments after a selector comma. Biome now keeps the selector before the line comment inline instead of breaking it across descendant combinators.
-.powerPathNavigator
-  .helm
-  button.pressedButton, // pressed
+.powerPathNavigator .helm button.pressedButton, // pressed
 .powerPathNavigator .helm button:active:not(.disabledButton) {
 }
#10757 6232fcd Thanks @PranavAchar01! - Fixed #8269: the CSS parser now accepts Tailwind @variant and @utility names that start with a digit, such as the 2xl breakpoint.

... (truncated)

Commits

e649198 ci: release (#10747)
4a32b63 feat(lint): add ignorePrimitives option to useNullishCoalescing (#10798)
f3d4c00 feat(js/nursery): add noSvelteNoUnnecessaryStateWrap rule (#10545)
f458028 feat(lint): add ignoreBooleanCoercion option to useNullishCoalescing (#10595)
ffe7d33 chore: revert
564d660 chore: revert
0abf1a5 ci: release (#10627)
23814f1 chore(biome_configuration): add allowTrailingCommas to json-schema to make VS...
a0f197e chore: dead and old links (#10668)
See full diff in compare view

Updates @semantic-release/github from 12.0.8 to 12.0.9

Release notes

Sourced from @semantic-release/github's releases.

v12.0.9

12.0.9 (2026-07-01)

Bug Fixes

asset-upload: stop setting content-length header manually (241f966), closes #1224

local-undici: always use the locally installed undici instead of the node built-in version (40973e3), closes #1224

publish: handle content-length header properly for asset uploads (#1260) (28e3741), closes #1224 #1224

Commits

28e3741 fix(publish): handle content-length header properly for asset uploads (#1260)
241f966 fix(asset-upload): stop setting content-length header manually
40973e3 fix(local-undici): always use the locally installed undici instead of the nod...
8879ae4 chore(deps): update dependency prettier to v3.9.1 (#1259)
bf720e2 chore(deps): update dependency prettier to v3.9.0 (#1258)
b34e0ec chore(deps): update dependency prettier to v3.8.5 (#1257)
b445fa0 chore(deps): update dependency ls-engines to v0.10.1 (#1256)
4ca0ef4 chore(deps): lock file maintenance (#1255)
bb9fdb3 chore(deps): update dependency undici to v7.28.0 [security] (#1254)
059c6ce ci(action): update actions/checkout action to v7 (#1252)
Additional commits viewable in compare view

Updates @radix-ui/react-avatar from 1.2.0 to 1.2.1

Changelog

Sourced from @radix-ui/react-avatar's changelog.

1.2.1

Updated dependencies: @radix-ui/react-primitive@2.1.7

Commits

See full diff in compare view

Updates @radix-ui/react-dialog from 1.1.17 to 1.1.18

Changelog

Sourced from @radix-ui/react-dialog's changelog.

1.1.18

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-portal@1.1.13

Commits

See full diff in compare view

Updates @radix-ui/react-dropdown-menu from 2.1.18 to 2.1.19

Changelog

Sourced from @radix-ui/react-dropdown-menu's changelog.

2.1.19

Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.

Other updates

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-menu@2.1.19

Commits

See full diff in compare view

Updates @radix-ui/react-label from 2.1.10 to 2.1.11

Changelog

Sourced from @radix-ui/react-label's changelog.

2.1.11

Updated dependencies: @radix-ui/react-primitive@2.1.7

Commits

See full diff in compare view

Updates @radix-ui/react-select from 2.3.1 to 2.3.2

Changelog

Sourced from @radix-ui/react-select's changelog.

2.3.2

Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.

Other updates

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-collection@1.1.11, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

Commits

See full diff in compare view

Updates @radix-ui/react-switch from 1.3.1 to 1.3.2

Changelog

Sourced from @radix-ui/react-switch's changelog.

1.3.2

Updated dependencies: @radix-ui/react-primitive@2.1.7

Commits

See full diff in compare view

Updates @radix-ui/react-tabs from 1.1.15 to 1.1.16

Changelog

Sourced from @radix-ui/react-tabs's changelog.

1.1.16

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-roving-focus@1.1.14

Commits

See full diff in compare view

Updates @radix-ui/react-tooltip from 1.2.10 to 1.2.11

Changelog

Sourced from @radix-ui/react-tooltip's changelog.

1.2.11

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

Commits

See full diff in compare view

Updates @tailwindcss/vite from 4.3.1 to 4.3.2

Release notes

Sourced from @tailwindcss/vite's releases.

v4.3.2

Fixed

Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)

Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)

Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)

Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)

Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)

Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)

Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)

Prevent @source patterns from scanning unrelated sibling files and folders (#20263)

Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)

Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)

Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)

Support class suggestions for named opacity modifiers from --opacity theme values (#20287)

Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Changelog

Sourced from @tailwindcss/vite's changelog.

[4.3.2] - 2026-06-26

Fixed

Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)

Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)

Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)

Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)

Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)

Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)

Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)

Prevent @source patterns from scanning unrelated sibling files and folders (#20263)

Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)

Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)

Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)

Support class suggestions for named opacity modifiers from --opacity theme values (#20287)

Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Commits

056a155 4.3.2 (#20281)
bb6a109 use .ts instead of .css
See full diff in compare view

Updates lucide-react from 1.21.0 to 1.23.0

Release notes

Sourced from lucide-react's releases.

Version 1.23.0

What's Changed

fix(docs): prevent scrollbar layout shift on icons page by @g30r93g in lucide-icons/lucide#4500

chore(docs): Remove certificates banner by @ericfennis in lucide-icons/lucide#4504

ci(repo-journal.yml): GH copilot repo summary by @ericfennis in lucide-icons/lucide#4505

ci(repo-journal.yml): Small fix in the workflow by @ericfennis in lucide-icons/lucide#4508

ci(repo-journal.yml): Switch to token by @ericfennis in lucide-icons/lucide#4509

feat(icons): added paper-bag icon by @dkast in lucide-icons/lucide#4023

New Contributors

@g30r93g made their first contribution in lucide-icons/lucide#4500

@dkast made their first contribution in lucide-icons/lucide#4023

Full Changelog: lucide-icons/lucide@1.22.0...1.23.0

Version 1.22.0

What's Changed

feat(icons): add 6 database variant icons by @Barakudum in lucide-icons/lucide#4336

ci(release.yml): Remove concurrency field to prevent release mess by @ericfennis in lucide-icons/lucide#4485

fix(docs): fix color input clipping by @Hsiii in lucide-icons/lucide#4488

docs(site): add Deno to installation instructions by @bartlomieju in lucide-icons/lucide#4486

chore(deps): bump esbuild from 0.25.12 to 0.28.1 by @dependabot[bot] in lucide-icons/lucide#4459

fix(docs): prevent private analytics token from blocking local dev by @Hsiii in lucide-icons/lucide#4481

docs(installation.md): Remove outdate next tag in installation by @ericfennis in lucide-icons/lucide#4495

fix(lucide-react-native): Fix context provider export by @ericfennis in lucide-icons/lucide#4497

fix(astro): add Astro v7 compatibility by @iseraph-dev in lucide-icons/lucide#4491

fix(icons): changed carrot icon by @jguddas in lucide-icons/lucide#4010

fix(icons): changed ungroup icon by @jguddas in lucide-icons/lucide#3969

feat(icons): added phi icon also used as golden-ratio by @whoisBugsbunny in lucide-icons/lucide#4218

New Contributors

@bartlomieju made their first contribution in lucide-icons/lucide#4486

Full Changelog: lucide-icons/lucide@1.21.0...1.22.0

Commits

See full diff in compare view

Updates react-router-dom from 7.18.0 to 7.18.1

Changelog

Sourced from react-router-dom's changelog.

v7.18.1

Patch Changes

Fix incorrect package.json main field for CommonJS builds (#15238)

Updated dependencies:

react-router@7.18.1

Commits

afdf85d Release v7.18.1 (#15253)
2ecaa1d Fix react-router-dom main entry metadata (#15238)
See full diff in compare view

Updates tailwindcss from 4.3.1 to 4.3.2

Release notes

Sourced from tailwindcss's releases.

v4.3.2

Fixed

Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)

Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)

Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)

Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)

Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)

Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)

Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)

Prevent @source patterns from scanning unrelated sibling files and folders (#20263)

Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)

Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)

Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)

Support class suggestions for named opacity modifiers from --opacity theme values (#20287)

Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Changelog

Sourced from tailwindcss's changelog.

[4.3.2] - 2026-06-26

Fixed

Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)

Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)

Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)

Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)

Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)

Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)

Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)

Prevent @source patterns from scanning unrelated sibling files and folders (#20263)

Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)

Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)

Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)

Support class suggestions for named opacity modifiers from --opacity theme values (#20287)

Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Commits

056a155 4.3.2 (#20281)
c8b081d Add suggestions for named opacity modifiers (#20287)
c46f654 Ensure --alpha(…) is seen as a color, and --spacing(…) is seen as a `le...
5e9f66e Ensure @variant can be used in JS based APIs (#20252)
707c23b Ensure custom variants can be used via @variant in addBase (#20247)
127d170 Add bare value support for auto-rows-* and auto-cols-* (#20229)
See full diff in compare view

Updates @playwright/test from 1.61.0 to 1.61.1

Release notes

Sourced from @playwright/test's releases.

v1.61.1

Bug Fixes

#41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher

#41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)

#41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000

#41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15

#41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

Commits

39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
4328122 chore: mark v1.61.1 (#41404)
2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
b5a3175 cherry-pick(#41319): fix(loader): support other node versions
d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
See full diff in compare view

Updates hono from 4.12.26 to 4.12.28

Release notes

Sourced from hono's releases.

v4.12.28

What's Changed

fix(serve-static): treat empty string content as found by @yusukebe in honojs/hono#5062

docs(MIGRATION): fix req.raw.headers reference (property, not method) by @EduardF1 in honojs/hono#5047

chore: don't publish *.tsbuildinfo by @yusukebe in honojs/hono#5066

fix(utils/body,validator): normalize Content-Type media type for case-insensitive matching by @yusukebe in honojs/hono#5067

fix: avoid circular dependency between body.ts and request.ts by @usualoma in honojs/hono#5071

fix(bun): report the requested subprotocol on WSContext.protocol by @greymoth-jp in honojs/hono#5059

chore: bump devDependencies by @yusukebe in honojs/hono#5085

fix(aws-lambda): detect V2 events by request context, not rawPath alone by @VihaanAgarwal in honojs/hono#5033

docs(context-storage): fix JSDoc by @yusukebe in honojs/hono#5086

New Contributors

@EduardF1 made their first contribution in honojs/hono#5047

@greymoth-jp made their first contribution in honojs/hono#5059

@VihaanAgarwal made their first contribution in honojs/hono#5033

Full Changelog: honojs/hono@v4.12.27...v4.12.28

v4.12.27

Security fixes

This release includes fixes for the following security issues:

hono/jsx does not isolate context per request

Affects: hono/jsx, hono/jsx-renderer. During SSR, context was stored process-wide instead of per request, so useContext()/useRequestContext() read after an await in an async component could return another concurrent request's value — leading to cross-request data disclosure or authorization checks against the wrong request. GHSA-hvrm-45r6-mjfj

Server-Side XSS via JSX escaping bypass in cx()

Affects: hono/css. cx() marked its composed class name as already-escaped without escaping the input, so untrusted input passed as a class name could break out of the JSX class attribute during SSR and inject markup (XSS). GHSA-w62v-xxxg-mg59

API Gateway v1 adapter can drop a repeated request header value

Affects: hono/aws-lambda. The API Gateway v1 (and VPC Lattice) adapter de-duplicated repeated header values by substring instead of exact match, dropping a value that is a substring of another (e.g. 203.0.113.1 dropped when 203.0.113.10 is present) — affecting logic such as X-Forwarded-For-based IP restriction. GHSA-xgm2-5f3f-mvvc

Users of hono/jsx/hono/jsx-renderer, hono/css (cx()), or the hono/aws-lambda API Gateway v1 / VPC Lattice adapters are encouraged to upgrade.

Commits

626b185 4.12.28
d6b1d32 docs(context-storage): fix JSDoc (#5086)
45b081b fix(aws-lambda): detect V2 events by request context, not rawPath alone (#5033)
a05813c chore: bump devDependencies (#5085)
872997d fix(bun): report the requested subprotocol on WSContext.protocol (#5059)
82b321b fix: avoid circular dependency between body.ts and request.ts (#5071)
b20d422 fix(utils/body,validator): normalize Content-Type media type for case-insensi...
9728702 chore: don't publish *.tsbuildinfo (#5066)
ed8795e docs(MIGRATION): fix req.raw.headers reference (property, not method) (#5047)
03a9416 fix(serve-static): treat empty string content as found (#5062)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…6 updates Bumps the minor-and-patch group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.0` | `2.5.2` | | [@semantic-release/github](https://github.com/semantic-release/github) | `12.0.8` | `12.0.9` | | [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar) | `1.2.0` | `1.2.1` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.17` | `1.1.18` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.18` | `2.1.19` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.10` | `2.1.11` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.1` | `2.3.2` | | [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.1` | `1.3.2` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.15` | `1.1.16` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.10` | `1.2.11` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.1` | `4.3.2` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.21.0` | `1.23.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.0` | `7.18.1` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.61.0` | `1.61.1` | | [hono](https://github.com/honojs/hono) | `4.12.26` | `4.12.28` | Updates `@biomejs/biome` from 2.5.0 to 2.5.2 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.2/packages/@biomejs/biome) Updates `@semantic-release/github` from 12.0.8 to 12.0.9 - [Release notes](https://github.com/semantic-release/github/releases) - [Commits](semantic-release/github@v12.0.8...v12.0.9) Updates `@radix-ui/react-avatar` from 1.2.0 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar) Updates `@radix-ui/react-dialog` from 1.1.17 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.18 to 2.1.19 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-label` from 2.1.10 to 2.1.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-select` from 2.3.1 to 2.3.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-switch` from 1.3.1 to 1.3.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch) Updates `@radix-ui/react-tabs` from 1.1.15 to 1.1.16 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-tooltip` from 1.2.10 to 1.2.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `@tailwindcss/vite` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-vite) Updates `lucide-react` from 1.21.0 to 1.23.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.23.0/packages/lucide-react) Updates `react-router-dom` from 7.18.0 to 7.18.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom) Updates `tailwindcss` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/tailwindcss) Updates `@playwright/test` from 1.61.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.0...v1.61.1) Updates `hono` from 4.12.26 to 4.12.28 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.26...v4.12.28) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@semantic-release/github" dependency-version: 12.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-avatar" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.1.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-select" dependency-version: 2.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-switch" dependency-version: 1.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react-router-dom dependency-version: 7.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tailwindcss dependency-version: 4.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@playwright/test" dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: hono dependency-version: 4.12.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2026-07-06T10:40:14Z

Bundle Report

Changes will increase total bundle size by 300 bytes (0.01%) ⬆️. This is within the configured threshold ✅

Detailed changes

Bundle name	Size	Change
admin-ui-esm	1.54MB	300 bytes (0.02%) ⬆️

Affected Assets, Files, and Routes:

view changes for bundle: admin-ui-esm

Assets Changed:

Asset Name	Size Change	Total Size	Change (%)
`assets/index-*.js`	300 bytes	1.42MB	0.02%

codecov · 2026-07-06T10:40:35Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.20%. Comparing base (3ee6fe2) to head (d77e782).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #832   +/-   ##
=======================================
  Coverage   99.20%   99.20%           
=======================================
  Files         345      345           
  Lines       40420    40420           
=======================================
  Hits        40098    40098           
  Misses        322      322

Components	Coverage Δ
apps/api	`98.45% <ø> (ø)`
apps/worker	`99.91% <ø> (ø)`
apps/vertical-*	`100.00% <ø> (ø)`
kb	`100.00% <ø> (ø)`
sales	`100.00% <ø> (ø)`
conversation-engine	`98.88% <ø> (ø)`
llm-router	`100.00% <ø> (ø)`
storage	`99.91% <ø> (ø)`
verticals	`100.00% <ø> (ø)`
channels (telegram/whatsapp/facebook/web/core)	`99.95% <ø> (ø)`
observability	`100.00% <ø> (ø)`

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

dependabot · 2026-07-13T10:36:44Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 6, 2026

dependabot Bot closed this Jul 13, 2026

dependabot Bot deleted the dependabot/bun/minor-and-patch-3d40f90c9a branch July 13, 2026 10:36

Navigation Menu

chore(deps): bump the minor-and-patch group across 1 directory with 16 updates - #832

chore(deps): bump the minor-and-patch group across 1 directory with 16 updates#832
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-3d40f90c9a

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Jul 6, 2026 •

edited

Loading

Assets Changed:

Uh oh!

codecov Bot commented Jul 6, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.2

2.5.2

Patch Changes

2.5.2

Patch Changes

v12.0.9

12.0.9 (2026-07-01)

Bug Fixes

1.2.1

1.1.18

2.1.19

Other updates

2.1.11

2.3.2

Other updates

1.3.2

1.1.16

1.2.11

v4.3.2

Fixed

[4.3.2] - 2026-06-26

Fixed

Version 1.23.0

What's Changed

New Contributors

Version 1.22.0

What's Changed

New Contributors

v7.18.1

Patch Changes

v4.3.2

Fixed

[4.3.2] - 2026-06-26

Fixed

v1.61.1

Bug Fixes

v4.12.28

What's Changed

New Contributors

v4.12.27

Security fixes

hono/jsx does not isolate context per request

Server-Side XSS via JSX escaping bypass in cx()

API Gateway v1 adapter can drop a repeated request header value

Uh oh!

codecov Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bundle Report

Affected Assets, Files, and Routes:

Assets Changed:

Uh oh!

codecov Bot commented Jul 6, 2026

Codecov Report

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited

Loading

codecov Bot commented Jul 6, 2026 •

edited

Loading