Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the prod-deps group with 14 updates in the / directory:

Package From To
@auth0/nextjs-auth0 3.7.0 4.14.0
@emotion/styled 11.14.0 11.14.1
@fontsource/roboto 5.2.5 5.2.9
@mui/material 6.4.8 7.3.6
@neondatabase/serverless 0.10.4 1.0.2
@next/mdx 16.1.0 16.1.1
@tanstack/react-table 8.21.2 8.21.3
@tanstack/table-core 8.21.2 8.21.3
dotenv 16.4.7 17.2.3
drizzle-orm 0.39.3 0.45.1
next 16.1.0 16.1.1
nodemailer 7.0.11 7.0.12
react-hotkeys-hook 4.6.1 5.2.1
ws 8.18.1 8.18.3

Updates @auth0/nextjs-auth0 from 3.7.0 to 4.14.0

Release notes

Sourced from @​auth0/nextjs-auth0's releases.

v4.14.0

v4.14.0 (2025-12-15)

Added

v4.13.3

v4.13.3 (2025-12-12)

Fixed

  • bugfix: session write not happening for pages router with chunked cookies #2447 (tusharpandey13)

Security

v4.13.2

Changed

  • Updated peer dependency
    • Next: ^14.2.25 || ~15.0.5 || ~15.1.9 || ~15.2.6 || ~15.3.6 || ~15.4.8 || ~15.5.7 || ^16.0.7
    • React: ^18.0.0 || ~19.0.1 || ~19.1.2 || ^19.2.1
    • React-DOM: ^18.0.0 || ~19.0.1 || ~19.1.2 || ^19.2.1

v4.13.1

Added

Fixed

v4.13.0

Added

Fixed

v4.12.1

Changed

  • Remove TokenRequestCache when calling getAccessToken

v4.12.0

Added

v4.11.2

Changed

  • Remove TokenRequestCache when calling getAccessToken

... (truncated)

Changelog

Sourced from @​auth0/nextjs-auth0's changelog.

v4.14.0 (2025-12-15)

Full Changelog

Added

v4.13.3 (2025-12-12)

Full Changelog

Fixed

  • bugfix: session write not happening for pages router with chunked cookies #2447 (tusharpandey13)

Security

v4.13.2 (2025-12-05)

Full Changelog

Changed

  • Updated peer dependency
    • Next: ^14.2.25 || ~15.0.5 || ~15.1.9 || ~15.2.6 || ~15.3.6 || ~15.4.8 || ~15.5.7 || ^16.0.7
    • React: ^18.0.0 || ~19.0.1 || ~19.1.2 || ^19.2.1
    • React-DOM: ^18.0.0 || ~19.0.1 || ~19.1.2 || ^19.2.1

v4.13.1 (2025-11-19)

Full Changelog

Added

Fixed

v4.13.0 (2025-11-17)

Full Changelog

Added

Fixed

v4.12.1 (2025-11-13)

Full Changelog

Changed

  • Remove TokenRequestCache when calling getAccessToken

... (truncated)

Commits

Updates @emotion/styled from 11.14.0 to 11.14.1

Release notes

Sourced from @​emotion/styled's releases.

@​emotion/styled@​11.14.1

Patch Changes

  • #3334 0facbe4 Thanks @​ZachRiegel! - Renamed default-exported variable in @emotion/styled to aid inferred import names in auto-import completions in IDEs
Commits

Updates @fontsource/roboto from 5.2.5 to 5.2.9

Commits

Updates @mui/material from 6.4.8 to 7.3.6

Release notes

Sourced from @​mui/material's releases.

v7.3.6

A big thanks to the 22 contributors who made this release possible.

@​mui/material@​7.3.6

@​mui/system@​7.3.6

@​mui/lab@​7.3.6

Docs

Core

... (truncated)

Changelog

Sourced from @​mui/material's changelog.

7.3.6

Dec 3, 2025

A big thanks to the 22 contributors who made this release possible.

@​mui/material@​7.3.6

@​mui/system@​7.3.6

@​mui/lab@​7.3.6

Docs

Core

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​mui/material since your current version.


Updates @neondatabase/serverless from 0.10.4 to 1.0.2

Changelog

Sourced from @​neondatabase/serverless's changelog.

1.0.2 (2025-09-30)

Update neon.tech references to neon.com domain.

1.0.1 (2025-06-06)

The package now prints a security warning to the console when a connection is made in a web browser. This behaviour can be suppressed with a new configuration option: disableWarningInBrowsers. There are a few other very minor fixes.

1.0.0 (2025-03-25)

Breaking change: the HTTP query template function can now only be called as a template function, not as a conventional function. This improves safety from accidental SQL-injection vulnerabilities. For example:

import { neon } from '@neondatabase/serverless';
const sql = neon(process.env.DATABASE_URL);
const id = 1;
// this is safe and convenient, as before
const result = await sqlSELECT * FROM table WHERE id = ${id};
// this looks very similar and was previously allowed, but was open to SQL
// injection attacks because it uses ordinary string interpolation -- it's now
// both a TypeScript type error and a runtime error
const throws = await sql(SELECT * FROM table WHERE id = ${id});

To fill the gap left by this change, the template function has two new properties: a query() function that allows manually parameterized queries, and an unsafe() function that lets you interpolate trusted arbitrary string values. For example:

// this was previously allowed, and was safe, but is now also an error so as to
// prevent the vulnerability seen above
const throws = await sql('SELECT * FROM table WHERE id = $1', [id]);
// the query() function is the new way to manually specify placeholders and
// values (the same way it's done by client.query() and pool.query())
const result = await sql.query('SELECT * FROM table WHERE id = $1', [id]);
// to interpolate strings like column or table names, only if you know
// they're safe, use the unsafe() function
const table = condition ? 'table1' : 'table2'; // known-safe string values
const result = await sqlSELECT * FROM ${sql.unsafe(table)} WHERE id = ${id};
// but in the above case, you might prefer to do this instead
const table = condition ? sqltable1 : sqltable2;
const result = await sqlSELECT * FROM ${table} WHERE id = ${id};

In addition, HTTP template queries are now fully composable, including those with parameters. For example:

</tr></table> 

... (truncated)

Commits

Updates @next/mdx from 16.1.0 to 16.1.1

Release notes

Sourced from @​next/mdx's releases.

v16.1.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Turbopack: Create junction points instead of symlinks on Windows (#87606)

Credits

Huge thanks to @​sokra and @​ztanner for helping!

v16.1.1-canary.10

Misc Changes

  • chore(turbo-tasks-malloc): replace mimalloc-rspack to mimalloc: #87815

Credits

Huge thanks to @​xusd320 for helping!

v16.1.1-canary.9

Core Changes

  • misc: fix type check log for CI envs: #87838

Misc Changes

  • Update Rspack production test manifest: #87889
  • Update Rspack development test manifest: #87888

Credits

Huge thanks to @​feedthejim and @​vercel-release-bot for helping!

v16.1.1-canary.8

Core Changes

  • [strict-route-types] Add experimental.strictRouteTypes config: #87378

Credits

Huge thanks to @​eps1lon for helping!

v16.1.1-canary.7

Core Changes

  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257

... (truncated)

Commits

Updates @tanstack/react-table from 8.21.2 to 8.21.3

Release notes

Sourced from @​tanstack/react-table's releases.

v8.21.3

Version 8.21.3 - 4/14/25, 8:19 PM

Changes

Fix

  • table-core: use right Document instance on getResizeHandler (column-sizing feature) (#5989) (54ce673) by @​riccardoperra

Docs

Packages

  • @​tanstack/table-core@​8.21.3
  • @​tanstack/angular-table@​8.21.3
  • @​tanstack/lit-table@​8.21.3
  • @​tanstack/qwik-table@​8.21.3
  • @​tanstack/react-table@​8.21.3
  • @​tanstack/solid-table@​8.21.3
  • @​tanstack/svelte-table@​8.21.3
  • @​tanstack/vue-table@​8.21.3
  • @​tanstack/react-table-devtools@​8.21.3
Commits

Updates @tanstack/table-core from 8.21.2 to 8.21.3

Release notes

Sourced from @​tanstack/table-core's releases.

v8.21.3

Version 8.21.3 - 4/14/25, 8:19 PM

Changes

Fix

  • table-core: use right Document instance on getResizeHandler (column-sizing feature) (#5989) (54ce673) by @​riccardoperra

Docs

Packages

  • @​tanstack/table-core@​8.21.3
  • @​tanstack/angular-table@​8.21.3
  • @​tanstack/lit-table@​8.21.3
  • @​tanstack/qwik-table@​8.21.3
  • @​tanstack/react-table@​8.21.3
  • @​tanstack/solid-table@​8.21.3
  • @​tanstack/svelte-table@​8.21.3
  • @​tanstack/vue-table@​8.21.3
  • @​tanstack/react-table-devtools@​8.21.3
Commits
  • f4dc742 release: v8.21.3
  • 54ce673 fix(table-core): use right Document instance on getResizeHandler (column-sizi...
  • See full diff in compare view

Updates dotenv from 16.4.7 to 17.2.3

Changelog

Sourced from dotenv's changelog.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

17.2.2 (2025-09-02)

Added

  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

  • Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

  • Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)
  • Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js

17.1.0 (2025-07-07)

Added

  • Add additional security and configuration tips to the runtime log (#884)
  • Dim the tips text from the main injection information text

... (truncated)

Commits

Updates drizzle-orm from 0.39.3 to 0.45.1

Release notes

Sourced from drizzle-orm's releases.

0.45.1

  • Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

  • Fixed pg-native Pool detection in node-postgres transactions
  • Allowed subqueries in select fields
  • Updated typo algorythm => algorithm
  • Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)
  • Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)

0.44.7

0.44.6

  • feat: add $replicas reference #4874

0.44.5

  • Fixed invalid usage of .one() in durable-sqlite session
  • Fixed spread operator related crash in sqlite blob columns
  • Better browser support for sqlite blob columns
  • Improved sqlite blob mapping

0.44.4

0.44.3

  • Fixed types of $client for clients created by drizzle function
await db.$client.[...]
  • Added the updated_at column to the neon_auth.users_sync table definition.

0.44.2

  • [BUG]: Fixed type issues with joins with certain variations of tsconfig: #4535, #4457

0.44.1

0.44.0

Error handling

Starting from this version, we’ve introduced a new DrizzleQueryError that wraps all errors from database drivers and provides a set of useful information:

  1. A proper stack trace to identify which exact Drizzle query failed
  2. The generated SQL string and its parameters
  3. The original stack trace from the driver that caused the DrizzleQueryError

Drizzle cache module

... (truncated)

Commits
  • a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
  • c445637 Merge pull request #5095 from drizzle-team/main-workflows
  • e7b3aaa Merge branch 'main' into main-workflows
  • 0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
  • 45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
  • 6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
  • 53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
  • ce88a18 Merge remote-tracking branch 'origin/ext-deps-kit' into main-workflows
  • 5c8a4c5 +
  • 73e2ea4 feat: Add release router workflow to manage feature and latest releases
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for drizzle-orm since your current version.


Updates next from 16.1.0 to 16.1.1

Release notes

Sourced from next's releases.

v16.1.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Turbopack: Create junction points instead of symlinks on Windows (#87606)

Credits

Huge thanks to @​sokra and @​ztanner for helping!

v16.1.1-canary.10

Misc Changes

  • chore(turbo-tasks-malloc): replace mimalloc-rspack to mimalloc: #87815

Credits

Huge thanks to @​xusd320 for helping!

v16.1.1-canary.9

Core Changes

  • misc: fix type check log for CI envs: #87838

Misc Changes

  • Update Rspack production test manifest: #87889
  • Update Rspack development test manifest: #87888

Credits

Huge thanks to @​feedthejim and @​vercel-release-bot for helping!

v16.1.1-canary.8

Core Changes

  • [strict-route-types] Add experimental.strictRouteTypes config: #87378

Credits

Huge thanks to @​eps1lon for helping!

v16.1.1-canary.7

Core Changes

  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257

... (truncated)

Commits

Updates nodemailer from 7.0.11 to 7.0.12

Release notes

Sourced from nodemailer's releases.

v7.0.12

7.0.12 (2025-12-22)

Bug Fixes

  • added support for REQUIRETLS (#1793) (053ce6a)
  • use 8bit encoding for message/rfc822 attachments (adf8611)
Changelog

Sourced from nodemailer's changelog.

7.0.12 (2025-12-22)

Bug Fixes

  • added support for REQUIRETLS (#1793) (053ce6a)
  • use 8bit encoding for message/rfc822 attachments (adf8611)
Commits

Updates react-hotkeys-hook from 4.6.1 to 5.2.1

Release notes

Sourced from react-hotkeys-hook's releases.

v5.2.1

  • fmt 73ea06f
  • remove unused script 160f872
  • fix dependencies 4c89bcb
  • Updated CHANGELOG.md ce7f732
  • Add sideEffects field to package.json f464e05

Full Changelog: JohannesKlauss/react-hotkeys-hook@v5.2.0...v5.2.1

v5.2.0

JohannesKlauss/react-hotkeys-hook@v5.1.0...v5.2.0

What's Changed

New Contributors

Full Changelog: JohannesKlauss/react-hotkeys-hook@v5.1.0...v5.2.0

v5.1.0

What's Changed

Bumps the prod-deps group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@auth0/nextjs-auth0](https://github.com/auth0/nextjs-auth0) | `3.7.0` | `4.14.0` |
| [@emotion/styled](https://github.com/emotion-js/emotion) | `11.14.0` | `11.14.1` |
| [@fontsource/roboto](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/roboto) | `5.2.5` | `5.2.9` |
| [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `6.4.8` | `7.3.6` |
| [@neondatabase/serverless](https://github.com/neondatabase/serverless) | `0.10.4` | `1.0.2` |
| [@next/mdx](https://github.com/vercel/next.js/tree/HEAD/packages/next-mdx) | `16.1.0` | `16.1.1` |
| [@tanstack/react-table](https://github.com/TanStack/table/tree/HEAD/packages/react-table) | `8.21.2` | `8.21.3` |
| [@tanstack/table-core](https://github.com/TanStack/table/tree/HEAD/packages/table-core) | `8.21.2` | `8.21.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.4.7` | `17.2.3` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.39.3` | `0.45.1` |
| [next](https://github.com/vercel/next.js) | `16.1.0` | `16.1.1` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `7.0.11` | `7.0.12` |
| [react-hotkeys-hook](https://github.com/JohannesKlauss/react-keymap-hook) | `4.6.1` | `5.2.1` |
| [ws](https://github.com/websockets/ws) | `8.18.1` | `8.18.3` |



Updates `@auth0/nextjs-auth0` from 3.7.0 to 4.14.0
- [Release notes](https://github.com/auth0/nextjs-auth0/releases)
- [Changelog](https://github.com/auth0/nextjs-auth0/blob/main/CHANGELOG.md)
- [Commits](auth0/nextjs-auth0@v3.7.0...v4.14.0)

Updates `@emotion/styled` from 11.14.0 to 11.14.1
- [Release notes](https://github.com/emotion-js/emotion/releases)
- [Changelog](https://github.com/emotion-js/emotion/blob/main/CHANGELOG.md)
- [Commits](https://github.com/emotion-js/emotion/compare/@emotion/[email protected]...@emotion/[email protected])

Updates `@fontsource/roboto` from 5.2.5 to 5.2.9
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/roboto)

Updates `@mui/material` from 6.4.8 to 7.3.6
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v7.3.6/packages/mui-material)

Updates `@neondatabase/serverless` from 0.10.4 to 1.0.2
- [Changelog](https://github.com/neondatabase/serverless/blob/main/CHANGELOG.md)
- [Commits](https://github.com/neondatabase/serverless/commits/v1.0.2)

Updates `@next/mdx` from 16.1.0 to 16.1.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.1.1/packages/next-mdx)

Updates `@tanstack/react-table` from 8.21.2 to 8.21.3
- [Release notes](https://github.com/TanStack/table/releases)
- [Commits](https://github.com/TanStack/table/commits/v8.21.3/packages/react-table)

Updates `@tanstack/table-core` from 8.21.2 to 8.21.3
- [Release notes](https://github.com/TanStack/table/releases)
- [Commits](https://github.com/TanStack/table/commits/v8.21.3/packages/table-core)

Updates `dotenv` from 16.4.7 to 17.2.3
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.7...v17.2.3)

Updates `drizzle-orm` from 0.39.3 to 0.45.1
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.39.3...0.45.1)

Updates `next` from 16.1.0 to 16.1.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.1.0...v16.1.1)

Updates `nodemailer` from 7.0.11 to 7.0.12
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v7.0.11...v7.0.12)

Updates `react-hotkeys-hook` from 4.6.1 to 5.2.1
- [Release notes](https://github.com/JohannesKlauss/react-keymap-hook/releases)
- [Changelog](https://github.com/JohannesKlauss/react-hotkeys-hook/blob/main/CHANGELOG.md)
- [Commits](JohannesKlauss/react-hotkeys-hook@v4.6.1...v5.2.1)

Updates `ws` from 8.18.1 to 8.18.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.18.1...8.18.3)

---
updated-dependencies:
- dependency-name: "@auth0/nextjs-auth0"
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@emotion/styled"
  dependency-version: 11.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@fontsource/roboto"
  dependency-version: 5.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@mui/material"
  dependency-version: 7.3.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@neondatabase/serverless"
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@next/mdx"
  dependency-version: 16.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@tanstack/react-table"
  dependency-version: 8.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@tanstack/table-core"
  dependency-version: 8.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: dotenv
  dependency-version: 17.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: drizzle-orm
  dependency-version: 0.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: next
  dependency-version: 16.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: nodemailer
  dependency-version: 7.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: react-hotkeys-hook
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: ws
  dependency-version: 8.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 1, 2026
@vercel
Copy link

vercel bot commented Jan 1, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
svw-web-app Error Error Jan 1, 2026 1:11pm

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 7, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/prod-deps-64949410fd branch January 7, 2026 06:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants