Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 6, 2026

Bumps the npm_and_yarn group with 7 updates in the /examples/user-management/nextjs-user-management directory:

Package From To
next 14.2.3 14.2.35
@supabase/auth-js 2.64.2 2.89.0
js-yaml 4.1.0 4.1.1
brace-expansion 1.1.11 1.1.12
braces 3.0.2 3.0.3
cookie 0.6.0 1.1.1
nanoid 3.3.7 3.3.11

Bumps the npm_and_yarn group with 7 updates in the / directory:

Package From To
next 14.2.21 14.2.35
@supabase/auth-js 2.64.2 2.69.1
@vercel/flags 2.6.0 3.1.1
ai 3.4.33 5.0.52
js-yaml 3.14.1 3.14.2
katex 0.16.10 0.16.21
vitest 1.6.0 1.6.1

Bumps the npm_and_yarn group with 1 update in the /packages/ui-patterns directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/common directory: @vercel/flags.
Bumps the npm_and_yarn group with 2 updates in the /packages/ai-commands directory: ai and vitest.
Bumps the npm_and_yarn group with 4 updates in the /examples/with-cloudflare-workers directory: braces, cookie, wrangler and es5-ext.
Bumps the npm_and_yarn group with 2 updates in the /examples/user-management/vue3-user-management directory: postcss and es5-ext.
Bumps the npm_and_yarn group with 6 updates in the /examples/user-management/sveltekit-user-management directory:

Package From To
@supabase/auth-js 2.64.2 2.89.0
brace-expansion 1.1.11 1.1.12
braces 3.0.2 3.0.3
esbuild 0.19.11 0.27.2
@sveltejs/kit 2.5.18 2.49.3
vite 5.3.3 7.3.0

Updates next from 14.2.3 to 14.2.35

Release notes

Sourced from next's releases.

v14.2.35

Please see the Next.js Security Update for information about this security patch.

Commits

Updates @supabase/auth-js from 2.64.2 to 2.89.0

Release notes

Sourced from @​supabase/auth-js's releases.

v2.89.0

2.89.0 (2025-12-18)

🚀 Features

  • auth: add X (OAuth 2.0) provider (#1960)
  • auth: add string array support for AMR claims (#1967)
  • supabase: export DatabaseWithoutInternals utility type (#1935)

❤️ Thank You

v2.88.1-canary.2

2.88.1-canary.2 (2025-12-18)

🚀 Features

  • supabase: export DatabaseWithoutInternals utility type (#1935)

❤️ Thank You

v2.88.1-canary.1

2.88.1-canary.1 (2025-12-17)

🚀 Features

  • auth: add string array support for AMR claims (#1967)

❤️ Thank You

v2.88.1-canary.0

2.88.1-canary.0 (2025-12-17)

🚀 Features

  • auth: add X (OAuth 2.0) provider (#1960)

❤️ Thank You

v2.88.0

2.88.0 (2025-12-16)

... (truncated)

Changelog

Sourced from @​supabase/auth-js's changelog.

2.89.0 (2025-12-18)

🚀 Features

  • auth: add string array support for AMR claims (#1967)
  • auth: add X (OAuth 2.0) provider (#1960)

❤️ Thank You

2.88.0 (2025-12-16)

🚀 Features

  • auth: allow custom predicate for detectSessionInUrl option (#1958)

❤️ Thank You

2.87.3 (2025-12-15)

This was a version bump only for @​supabase/auth-js to align it with other projects, there were no code changes.

2.87.2 (2025-12-15)

🩹 Fixes

  • auth: add helpful error when PKCE code verifier is missing (#1931)

❤️ Thank You

2.87.1 (2025-12-09)

🩹 Fixes

  • auth: skip navigator lock when persistSession is false (#1928)

❤️ Thank You

2.87.0 (2025-12-08)

This was a version bump only for @​supabase/auth-js to align it with other projects, there were no code changes.

... (truncated)

Commits
  • efca12c feat(auth): add string array support for AMR claims (#1967)
  • 281070a feat(auth): add X (OAuth 2.0) provider (#1960)
  • ba17c2f chore(release): version 2.88.0 changelogs (#1965)
  • f346169 feat(auth): allow custom predicate for detectSessionInUrl option (#1958)
  • f57b882 chore(release): version 2.87.3 changelogs (#1954)
  • a660d29 chore(release): version 2.87.2 changelogs (#1952)
  • 9c73572 chore(auth): typo in error message (#1944)
  • 32d2187 fix(auth): add helpful error when PKCE code verifier is missing (#1931)
  • 13af49b chore(release): version 2.87.1 changelogs (#1934)
  • eae712d fix(auth): skip navigator lock when persistSession is false (#1928)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​supabase/auth-js since your current version.


Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates brace-expansion from 1.1.11 to 1.1.12

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Updates braces from 3.0.2 to 3.0.3

Commits

Updates cookie from 0.6.0 to 1.1.1

Release notes

Sourced from cookie's releases.

v1.1.1

Fixed

  • Overwrite value in passed in options (#253) c66147c
    • When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

jshttp/cookie@v1.1.0...v1.1.1

v1.1.0

Added:

  • Add stringifyCookie and parseSetCookie methods (#244, #214)
  • Rename existing methods for clarity (old method names remain for backward compatibility)
    • parseparseCookie
    • serializestringifySetCookie
  • Add side effects field (#245) 00b0327

jshttp/cookie@v1.0.2...v1.1.0

v1.0.2

Fixed

  • Loosen cookie name/value validation (#210)
  • fix: options.priority used incorrect fallback (#207) by @​jonchurch

Added

jshttp/cookie@v1.0.1...v1.0.2

v1.0.1

Added

jshttp/cookie@v1.0.0...v1.0.1

v1.0.0

Breaking changes

  • Use modern JS features, ship TypeScript definition (#175) 1cc64ff
    • Adds __esModule marker, imports need to use import { parse, serialize } or import * as cookie
  • Minimum node.js v18
  • Uses null prototype object for parse return value
  • Changes strict and priority to match the lower case strings (i.e. low, not LOW or Low)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates nanoid from 3.3.7 to 3.3.11

Release notes

Sourced from nanoid's releases.

3.3.11

  • Fixed React Native support.

3.3.10

3.3.9

  • Reduced npm package size.
Changelog

Sourced from nanoid's changelog.

3.3.11

  • Fixed React Native support.

3.3.10

3.3.9

  • Reduced npm package size.

3.3.8

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).
Commits

Updates next from 14.2.21 to 14.2.35

Release notes

Sourced from next's releases.

v14.2.35

Please see the Next.js Security Update for information about this security patch.

Commits

Updates @supabase/auth-js from 2.64.2 to 2.69.1

Release notes

Sourced from @​supabase/auth-js's releases.

v2.89.0

2.89.0 (2025-12-18)

🚀 Features

  • auth: add X (OAuth 2.0) provider (#1960)
  • auth: add string array support for AMR claims (#1967)
  • supabase: export DatabaseWithoutInternals utility type (#1935)

❤️ Thank You

v2.88.1-canary.2

2.88.1-canary.2 (2025-12-18)

🚀 Features

  • supabase: export DatabaseWithoutInternals utility type (#1935)

❤️ Thank You

v2.88.1-canary.1

2.88.1-canary.1 (2025-12-17)

🚀 Features

  • auth: add string array support for AMR claims (#1967)

❤️ Thank You

v2.88.1-canary.0

2.88.1-canary.0 (2025-12-17)

🚀 Features

  • auth: add X (OAuth 2.0) provider (#1960)

❤️ Thank You

v2.88.0

2.88.0 (2025-12-16)

... (truncated)

Changelog

Sourced from @​supabase/auth-js's changelog.

2.89.0 (2025-12-18)

🚀 Features

  • auth: add string array support for AMR claims (#1967)
  • auth: add X (OAuth 2.0) provider (#1960)

❤️ Thank You

2.88.0 (2025-12-16)

🚀 Features

  • auth: allow custom predicate for detectSessionInUrl option (#1958)

❤️ Thank You

2.87.3 (2025-12-15)

This was a version bump only for @​supabase/auth-js to align it with other projects, there were no code changes.

2.87.2 (2025-12-15)

🩹 Fixes

  • auth: add helpful error when PKCE code verifier is missing (#1931)

❤️ Thank You

2.87.1 (2025-12-09)

🩹 Fixes

  • auth: skip navigator lock when persistSession is false (#1928)

❤️ Thank You

2.87.0 (2025-12-08)

This was a version bump only for @​supabase/auth-js to align it with other projects, there were no code changes.

... (truncated)

Commits
  • efca12c feat(auth): add string array support for AMR claims (#1967)
  • 281070a feat(auth): add X (OAuth 2.0) provider (#1960)
  • ba17c2f chore(release): version 2.88.0 changelogs (#1965)
  • f346169 feat(auth): allow custom predicate for detectSessionInUrl option (#1958)
  • f57b882 chore(release): version 2.87.3 changelogs (#1954)
  • a660d29 chore(release): version 2.87.2 changelogs (#1952)
  • 9c73572 chore(auth): typo in error message (#1944)
  • 32d2187 fix(auth): add helpful error when PKCE code verifier is missing (#1931)
  • 13af49b chore(release): version 2.87.1 changelogs (#1934)
  • eae712d fix(auth): skip navigator lock when persistSession is false (#1928)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​supabase/auth-js since your current version.


Updates @vercel/flags from 2.6.0 to 3.1.1

Release notes

Sourced from @​vercel/flags's releases.

@​vercel/flags@​3.1.1

Patch Changes

  • 6955b68: emit reduced console info when falling back to defaultValue during development
  • cf532da: Update package.json and tsup.config.js for flags package

@​vercel/flags@​3.1.0

Minor Changes

  • 76feb16: Add mergeProviderData function to @vercel/flags.

    This function allows merging ProviderData from multiple sources.

    This is handy when you declare feature flags in code, and want to extend those definitions with data loaded from your feature flag provider.

    import { verifyAccess, mergeProviderData, type ApiData } from '@vercel/flags';
    import { getProviderData } from '@vercel/flags/next';
    import { NextResponse, type NextRequest } from 'next/server';
    import { getProviderData as getStatsigProviderData } from '@flags-sdk/statsig';
    import * as flagsA from '../../../../flags-a'; // your feature flags file(s)
    import * as flagsB from '../../../../flags-b'; // your feature flags file(s)
    export async function GET(request: NextRequest) {
    const access = await verifyAccess(request.headers.get('Authorization'));
    if (!access) return NextResponse.json(null, { status: 401 });
    const providerData = await mergeProviderData([
    // expose flags declared in code first
    getProviderData({ ...flagsA, ...flagsB }),
    // then enhance them with metadata from your flag provider
    getStatsigProviderData({ consoleApiKey: '', projectId: '' }),
    ]);
    return NextResponse.json<ApiData>(providerData);
    }

Patch Changes

  • 2713ea7: Handle undefined values

    • fix: Fall back to defaultValue when a feature flag returns undefined
    • fix: Throw error when a flag resolves to undefined and no defaultValue is present

    The value undefined can not be serialized so feature flags should never resolve to undefined. Use null instead.

    Fix exports

    • fix: Export Identify and Decide types

... (truncated)

Commits

Updates ai from 3.4.33 to 5.0.52

Commits
  • 63d5f66 Version Packages (#8895)
  • 930399b Backport: fix(ai): download files when intermediate file cannot be downloaded...
  • 7ca78f1 Backport: feat(provider/gateway): Add new Qwen models to Gateway model string...
  • 1cfc209 Backport: feat(provider/openai): OpenAILanguageModelOptions type (#8858)
  • 347b7ec ci: rename v5.0 branch to release-v*
  • 85909a9 Backport: chore(ai): update test message (#8875)
  • c56822d Backport: fix(ai): update uiMessageChunkSchema to satisfy the `UIMessageChu...
  • 1461adf Backport: chore(examples): remove redundant OpenAI reasoning examples (#8871)
  • 6bd07df Version Packages (#8853)
  • a45d61a ci(release): remove incorrect changeset bump for @ai-sdk/baseten
  • Additional commits viewable in compare view

Updates js-yaml from 3.14.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates katex from 0.16.10 to 0.16.21

Release notes

Sourced from katex's releases.

v0.16.21

0.16.21 (2025-01-17)

Bug Fixes

v0.16.20

0.16.20 (2025-01-12)

Bug Fixes

v0.16.19

0.16.19 (2024-12-29)

Bug Fixes

v0.16.18

0.16.18 (2024-12-18)

Bug Fixes

  • Actually publish TypeScript type definitions (#4008) (629b873)

v0.16.17

0.16.17 (2024-12-17)

Bug Fixes

  • MathML combines multidigit numbers with sup/subscript, comma separators, and multicharacter text when outputting to DOM (#3999) (7d79e22), closes #3995

v0.16.16

0.16.16 (2024-12-17)

Features

... (truncated)

Changelog

Sourced from katex's changelog.

0.16.21 (2025-01-17)

Bug Fixes

  • escape \htmlData attribute name (57914ad)

0.16.20 (2025-01-12)

Bug Fixes

0.16.19 (2024-12-29)

Bug Fixes

0.16.18 (2024-12-18)

Bug Fixes

  • Actually publish TypeScript type definitions (#4008) (629b873)

0.16.17 (2024-12-17)

Bug Fixes

  • MathML combines multidigit numbers with sup/subscript, comma separators, and multicharacter text when outputting to DOM (#3999) (7d79e22), closes #3995

0.16.16 (2024-12-17)

Features

0.16.15 (2024-12-09)

Features

  • italic sans-serif in math mode via \mathsfit command (#3998) (2218901)

0.16.14 (2024-12-08)

... (truncated)

Commits
  • 923f2aa chore(release): 0.16.21 [ci skip]
  • 57914ad fix: escape \htmlData attribute name
  • ff28995 Merge commit from fork
  • 28a0bf5 chore(release): 0.16.20 [ci skip]
  • 6d30fe4 fix: \providecommand does not overwrite existing macro (#4000)
  • 8f47dba chore(deps): update actions/upload-artifact to v4 (#4012)
  • 88b5056 chore(release): 0.16.19 [ci skip]
  • 4228b4e fix(types): improve strict function type (#4009)
  • f934646 chore(release): 0.16.18 [ci skip]
  • 629b873 fix: Actually publish TypeScript type definitions (#4008)
  • Additional commits viewable in compare view

Updates vitest from 1.6.0 to 1.6.1

Release notes

Sourced from vitest's releases.

v1.6.1

This release includes security patches for:

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @sentry/node from 8.34.0 to 10.32.1

Release notes

Sourced from @​sentry/node's releases.

10.32.1

  • fix(cloudflare): Add hono transaction name when error is thrown (#18529)
  • fix(ember): Make implementation field optional (hash routes) (#18564)
  • fix(vercelai): Fix input token count (#18574)
  • chore(lint): prefer 'unknown' to 'any', fix lint warnings
  • chore(test): Remove cloudflare-astro e2e test (#18567)

Bundle size 📦

Path Size
@​sentry/browser 24.24 KB
@​sentry/browser - with treeshaking flags 22.77 KB
@​sentry/browser (incl. Tracing) 40.62 KB
@​sentry/browser (incl. Tracing, Profiling) 45.12 KB
@​sentry/browser (incl. Tracing, Replay) 78.3 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 68.28 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 82.88 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 94.83 KB
@​sentry/browser (incl. Feedback) 40.57 KB
@​sentry/browser (incl. sendFeedback) 28.82 KB
@​sentry/browser (incl. FeedbackAsync) 33.7 KB
@​sentry/react 25.92 KB
@​sentry/react (incl. Tracing) 42.77 KB
@​sentry/vue 28.6 KB
@​sentry/vue (incl. Tracing) 42.39 KB
@​sentry/svelte 24.25 KB
CDN Bundle 26.62 KB
CDN Bundle (incl. Tracing) 41.25 KB
CDN Bundle (incl. Tracing, Replay) 77.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 82.44 KB
CDN Bundle - uncompressed 78.18 KB
CDN Bundle (incl. Tracing) - uncompressed 122.47 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 236.27 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 248.74 KB
@​sentry/nextjs (client) 44.94 KB
@​sentry/sveltekit (client) 40.98 KB
@​sentry/node-core 50.4 KB
@​sentry/node 157.73 KB
@​sentry/node - without tracing 90.87 KB
@​sentry/aws-serverless 106.02 KB

10.32.0

Important Changes

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.32.1

  • fix(cloudflare): Add hono transaction name when error is thrown (#18529)
  • fix(ember): Make implementation field optional (hash routes) (#18564)
  • fix(vercelai): Fix input token count (#18574)
  • chore(lint): prefer 'unknown' to 'any', fix lint warnings
  • chore(test): Remove cloudflare-astro e2e test (#18567)

10.32.0

Important Changes

  • feat(core): Apply scope attributes to logs (#18184)

    You can now set attributes on the SDK's scopes which will be applied to all logs as long as the respective scopes are active. For the time being, only string, number and boolean attribute values are supported.

    Sentry.geGlobalScope().setAttributes({ is_admin: true, auth_provider: 'google' });
    Sentry.withScope(scope => {
    scope.setAttribute('step', 'authentication');
    // scope attributes is_admin, auth_provider and step are added
    Sentry.logger.info(user ${user.id} logged in, { activeSince: 100 });
    Sentry.logger.info(updated ${user.id} last activity);
    });
    // scope attributes is_admin and auth_provider are added
    Sentry.logger.warn('stale website version, reloading page');

  • feat(replay): Add Request body with attachRawBodyFromRequest option (#18501)

    To attach the raw request body (from Request objects passed as the first fetch argument) to replay events, you can now use the attachRawBodyFromRequest option in the Replay integration:

    Sentry.init({
      integrations: [
        Sentry.replayIntegration({
          attachRawBodyFromRequest: true,
        }),
      ],
    });

... (truncated)

Commits
  • 528ade2 release: 10.32.1
  • 25f695d Merge pull request #18578 from getsentry/prepare-release/10.32.1
  • a981a3d meta(changelog): Update changelog for 10.32.1
  • 0d8547c fix(vercelai): Fix input token count (#18574)
  • 71384a2 chore(lint): prefer 'unknown' to 'any', fix lint warnings
  • d1dd308 chore(test): Remove cloudflare-astro e2e test (#18567)
  • 12f3007 fix(ember): Make implementation field optional (hash routes) (#18564)
  • 3fda84d fix(cloudflare): Add hono transaction name when error is thrown (#18529)
  • a538901 Merge pull request #18563 from getsentry/master
  • 063c4dc Merge pull request #18562 from getsentry/ab/skip-ci-when-no-code-changes
  • Additional commits viewable in compare view

Updates vite from 5.2.14 to 5.4.21

Release notes

Sourced from vite's releases.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

v7.2.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to Description has been truncated

… updates

Bumps the npm_and_yarn group with 7 updates in the /examples/user-management/nextjs-user-management directory:

| Package | From | To |
| --- | --- | --- |
| [next](https://github.com/vercel/next.js) | `14.2.3` | `14.2.35` |
| [@supabase/auth-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/auth-js) | `2.64.2` | `2.89.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [cookie](https://github.com/jshttp/cookie) | `0.6.0` | `1.1.1` |
| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.11` |

Bumps the npm_and_yarn group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [next](https://github.com/vercel/next.js) | `14.2.21` | `14.2.35` |
| [@supabase/auth-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/auth-js) | `2.64.2` | `2.69.1` |
| [@vercel/flags](https://github.com/vercel/flags) | `2.6.0` | `3.1.1` |
| [ai](https://github.com/vercel/ai) | `3.4.33` | `5.0.52` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.10` | `0.16.21` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.0` | `1.6.1` |

Bumps the npm_and_yarn group with 1 update in the /packages/ui-patterns directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).
Bumps the npm_and_yarn group with 1 update in the /packages/common directory: [@vercel/flags](https://github.com/vercel/flags).
Bumps the npm_and_yarn group with 2 updates in the /packages/ai-commands directory: [ai](https://github.com/vercel/ai) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).
Bumps the npm_and_yarn group with 4 updates in the /examples/with-cloudflare-workers directory: [braces](https://github.com/micromatch/braces), [cookie](https://github.com/jshttp/cookie), [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) and [es5-ext](https://github.com/medikoo/es5-ext).
Bumps the npm_and_yarn group with 2 updates in the /examples/user-management/vue3-user-management directory: [postcss](https://github.com/postcss/postcss) and [es5-ext](https://github.com/medikoo/es5-ext).
Bumps the npm_and_yarn group with 6 updates in the /examples/user-management/sveltekit-user-management directory:

| Package | From | To |
| --- | --- | --- |
| [@supabase/auth-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/auth-js) | `2.64.2` | `2.89.0` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [esbuild](https://github.com/evanw/esbuild) | `0.19.11` | `0.27.2` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.5.18` | `2.49.3` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.3.3` | `7.3.0` |



Updates `next` from 14.2.3 to 14.2.35
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.3...v14.2.35)

Updates `@supabase/auth-js` from 2.64.2 to 2.89.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/auth-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.89.0/packages/core/auth-js)

Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cookie` from 0.6.0 to 1.1.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.6.0...v1.1.1)

Updates `nanoid` from 3.3.7 to 3.3.11
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.11)

Updates `next` from 14.2.21 to 14.2.35
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.3...v14.2.35)

Updates `@supabase/auth-js` from 2.64.2 to 2.69.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/auth-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.89.0/packages/core/auth-js)

Updates `@vercel/flags` from 2.6.0 to 3.1.1
- [Release notes](https://github.com/vercel/flags/releases)
- [Commits](https://github.com/vercel/flags/commits/@vercel/[email protected])

Updates `ai` from 3.4.33 to 5.0.52
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/[email protected]@5.0.52)

Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `katex` from 0.16.10 to 0.16.21
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.10...v0.16.21)

Updates `vitest` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v1.6.1/packages/vitest)

Updates `@sentry/node` from 8.34.0 to 10.32.1
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@8.34.0...10.32.1)

Updates `vite` from 5.2.14 to 5.4.21
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite)

Updates `vitest` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v1.6.1/packages/vitest)

Updates `@vercel/flags` from 2.6.0 to 3.1.1
- [Release notes](https://github.com/vercel/flags/releases)
- [Commits](https://github.com/vercel/flags/commits/@vercel/[email protected])

Updates `ai` from 3.4.33 to 5.0.52
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/[email protected]@5.0.52)

Updates `vitest` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v1.6.1/packages/vitest)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cookie` from 0.4.2 to 1.1.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.6.0...v1.1.1)

Updates `wrangler` from 2.20.1 to 4.54.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler)

Updates `esbuild` from 0.16.3 to 0.19.11
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.19.11...v0.27.2)

Updates `nanoid` from 3.3.4 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.11)

Updates `undici` from 5.20.0 to 5.28.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.20.0...v5.28.4)

Updates `wrangler` from 2.20.1 to 4.54.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler)

Updates `es5-ext` from 0.10.62 to 0.10.64
- [Release notes](https://github.com/medikoo/es5-ext/releases)
- [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md)
- [Commits](medikoo/es5-ext@v0.10.62...v0.10.64)

Updates `postcss` from 8.4.18 to 8.5.6
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.18...8.5.6)

Updates `esbuild` from 0.15.11 to 0.18.20
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.19.11...v0.27.2)

Updates `nanoid` from 3.3.4 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.11)

Updates `rollup` from 2.79.1 to 3.29.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG-2.md)
- [Commits](rollup/rollup@v2.79.1...v3.29.5)

Updates `vite` from 3.2.7 to 4.5.14
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite)

Updates `es5-ext` from 0.10.62 to 0.10.64
- [Release notes](https://github.com/medikoo/es5-ext/releases)
- [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md)
- [Commits](medikoo/es5-ext@v0.10.62...v0.10.64)

Updates `@supabase/auth-js` from 2.64.2 to 2.89.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/auth-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.89.0/packages/core/auth-js)

Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `esbuild` from 0.19.11 to 0.27.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.19.11...v0.27.2)

Updates `@sveltejs/kit` from 2.5.18 to 2.49.3
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit)

Updates `vite` from 5.3.3 to 7.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite)

Updates `nanoid` from 3.3.7 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.11)

Updates `vite` from 5.3.3 to 7.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite)

Updates `@sveltejs/kit` from 2.5.18 to 2.49.3
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit)

Updates `devalue` from 5.0.0 to 5.6.1
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](sveltejs/devalue@v5.0.0...v5.6.1)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 14.2.35
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@supabase/auth-js"
  dependency-version: 2.89.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 1.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 3.3.11
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 14.2.35
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@supabase/auth-js"
  dependency-version: 2.69.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@vercel/flags"
  dependency-version: 3.1.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ai
  dependency-version: 5.0.52
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: katex
  dependency-version: 0.16.21
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: vitest
  dependency-version: 1.6.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/node"
  dependency-version: 10.32.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vitest
  dependency-version: 1.6.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@vercel/flags"
  dependency-version: 3.1.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ai
  dependency-version: 5.0.52
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: vitest
  dependency-version: 1.6.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 1.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: wrangler
  dependency-version: 4.54.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.19.11
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 3.3.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 5.28.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: wrangler
  dependency-version: 4.54.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: es5-ext
  dependency-version: 0.10.64
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.18.20
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 3.3.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-version: 3.29.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 4.5.14
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: es5-ext
  dependency-version: 0.10.64
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@supabase/auth-js"
  dependency-version: 2.89.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.27.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.49.3
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.3.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 3.3.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.3.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.49.3
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: devalue
  dependency-version: 5.6.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant