Skip to content

Bump lodash, @react-three/drei and three-stdlib#84

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-2c119d0833
Open

Bump lodash, @react-three/drei and three-stdlib#84
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-2c119d0833

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 22, 2026

Removes lodash. It's no longer used after updating ancestor dependencies lodash, @react-three/drei and three-stdlib. These dependencies need to be updated together.

Removes lodash

Updates @react-three/drei from 9.32.4 to 9.122.0

Release notes

Sourced from @​react-three/drei's releases.

v9.122.0

9.122.0 (2025-02-19)

Features

  • add MotionPathControls control via ref + add two properties (#2354) (c9d1463)

v9.121.6-rc.1

9.121.6-rc.1 (2025-02-18)

Bug Fixes

v9.121.5

9.121.5 (2025-02-13)

Bug Fixes

  • do not use getElapsedTime on the main state clock, it messes up the delta (#2341) (63d175f)

v9.121.4

9.121.4 (2025-01-27)

Bug Fixes

v9.121.3

9.121.3 (2025-01-20)

Bug Fixes

v9.121.3-canary-test01.1

9.121.3-canary-test01.1 (2025-01-16)

Bug Fixes

  • canary-test01 bump change (acceea2)

v9.121.2

... (truncated)

Commits
  • c9d1463 feat: add MotionPathControls control via ref + add two properties (#2354)
  • edf4e12 docs: fix typo to compare GPUTier to 0 instead of "0" (#2339)
  • 9fc4fd0 docs: update mesh-reflector-material.mdx (#2349)
  • 63d175f fix: do not use getElapsedTime on the main state clock, it messes up the delt...
  • d61c85c chore(CI): pin create vite workflow (#2351)
  • 39ef36b fix: apply billboard axis lock to right group (#2323)
  • 2943f59 fix: GizmoHelper rotations not respecting camera up (#2321) (#2322)
  • eb449ed fix: Outlines on meshes with morphTargets (#2317)
  • 10aa60f chore: on.push.branches[].rc
  • ef1e6a5 chore: rc branch
  • Additional commits viewable in compare view

Updates three-stdlib from 2.17.0 to 2.36.1

Release notes

Sourced from three-stdlib's releases.

v2.36.1

2.36.1 (2025-11-10)

Bug Fixes

  • lottie: harden SSR check to exclude react-native (#424) (f7fe1af)

v2.36.0

2.36.0 (2025-04-29)

Features

  • PointerLockControls: sensitivity const (#416) (e6653ce)

v2.35.16

2.35.16 (2025-04-23)

Bug Fixes

  • remove use of WebGL1 LuminanceFormat (#419) (e079bc8)

v2.35.15

2.35.15 (2025-04-05)

Bug Fixes

v2.35.14

2.35.14 (2025-02-20)

Bug Fixes

  • Fix alignment of integer vertex attributes (#408) (c122b5c)

v2.35.13

2.35.13 (2025-01-29)

Bug Fixes

v2.35.12

2.35.12 (2025-01-19)

... (truncated)

Commits
  • f7fe1af fix(lottie): harden SSR check to exclude react-native (#424)
  • e6653ce feat(PointerLockControls): sensitivity const (#416)
  • e079bc8 fix: remove use of WebGL1 LuminanceFormat (#419)
  • b51a7c9 fix(lottie-web): remove expressions eval (#415)
  • c122b5c fix: Fix alignment of integer vertex attributes (#408)
  • 12f00a3 fix: syntax errors in shaders (#405)
  • 6bed3f4 fix: revert TS mods (#403)
  • 5b1448e fix: error when used on server side via SVGRenderer (#398)
  • 1399589 fix: exclude globals
  • 646ba34 fix: harden type qualifier keywords
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [lodash](https://github.com/lodash/lodash). It's no longer used after updating ancestor dependencies [lodash](https://github.com/lodash/lodash), [@react-three/drei](https://github.com/pmndrs/drei) and [three-stdlib](https://github.com/pmndrs/three-stdlib). These dependencies need to be updated together.


Removes `lodash`

Updates `@react-three/drei` from 9.32.4 to 9.122.0
- [Release notes](https://github.com/pmndrs/drei/releases)
- [Changelog](https://github.com/pmndrs/drei/blob/master/release.config.js)
- [Commits](pmndrs/drei@v9.32.4...v9.122.0)

Updates `three-stdlib` from 2.17.0 to 2.36.1
- [Release notes](https://github.com/pmndrs/three-stdlib/releases)
- [Changelog](https://github.com/pmndrs/three-stdlib/blob/main/release.config.js)
- [Commits](pmndrs/three-stdlib@v2.17.0...v2.36.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@react-three/drei"
  dependency-version: 9.122.0
  dependency-type: direct:production
- dependency-name: three-stdlib
  dependency-version: 2.36.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 22, 2026
@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Jan 22, 2026

Deploying landing-next-trustauthx with  Cloudflare Pages  Cloudflare Pages

Latest commit: 1c61607
Status: ✅  Deploy successful!
Preview URL: https://b8c7e7d7.landing-next-trustauthx.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-mult-5srw.landing-next-trustauthx.pages.dev

View logs

@cla-bot cla-bot bot added the cla-signed label Jan 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants