build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates #8154

dependabot · 2025-09-30T01:20:28Z

Bumps the npm_and_yarn group with 2 updates in the / directory: vite and next.

Updates vite from 7.0.1 to 7.0.7

Release notes

v7.0.7

Please refer to CHANGELOG.md for details.

v7.0.6

Please refer to CHANGELOG.md for details.

v7.0.5

Please refer to CHANGELOG.md for details.

v7.0.4

Please refer to CHANGELOG.md for details.

v7.0.3

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.0.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.0.7 (2025-09-08)

Bug Fixes

apply fs.strict check to HTML files (#20736) (6f01ff4)

upgrade sirv to 3.0.2 (#20735) (63e2a5d)

Tests

detect ts support via process.features (#20544) (45fdb16)

7.0.6 (2025-07-24)

Bug Fixes

deps: update all non-major dependencies (#20442) (e49f505)

dev: incorrect sourcemap when optimized CJS is imported (#20458) (ead2dec)

module-runner: normalize file:// on windows (#20449) (1c9cb49)

respond with correct headers and status code for HEAD requests (#20421) (23d04fc)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20441) (f689d61)

remove some files from prettier ignore (#20459) (8403f69)

Code Refactoring

use environment transform request (#20430) (24e6a0c)

7.0.5 (2025-07-17)

Bug Fixes

deps: update all non-major dependencies (#20406) (1a1cc8a)

remove special handling for Accept: text/html (#20376) (c9614b9)

watch assets referenced by new URL(, import.meta.url) (#20382) (6bc8bf6)

Miscellaneous Chores

deps: update dependency rolldown to ^1.0.0-beta.27 (#20405) (1165667)

Code Refactoring

use foo.endsWith("bar") instead of /bar$/.test(foo) (#20413) (862e192)

7.0.4 (2025-07-10)

Bug Fixes

allow resolving bare specifiers to relative paths for entries (#20379) (324669c)

Build System

remove @oxc-project/runtime devDep (#20389) (5e29602)

... (truncated)

Commits

f88a1c0 release: v7.0.7
45fdb16 test: detect ts support via process.features (#20544)
63e2a5d fix: upgrade sirv to 3.0.2 (#20735)
6f01ff4 fix: apply fs.strict check to HTML files (#20736)
bdde0f9 release: v7.0.6
23d04fc fix: respond with correct headers and status code for HEAD requests (#20421)
ead2dec fix(dev): incorrect sourcemap when optimized CJS is imported (#20458)
e49f505 fix(deps): update all non-major dependencies (#20442)
f689d61 chore(deps): update rolldown-related dependencies (#20441)
8403f69 chore: remove some files from prettier ignore (#20459)
Additional commits viewable in compare view

Updates next from 15.3.5 to 15.4.7

Release notes

Sourced from next's releases.

v15.4.7

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

fix router handling when setting a location response header #82588

Credits

Huge thanks to @ztanner for helping!

v15.4.2-canary.56

Misc Changes

fix: remove a few old references to 'next lint': #82800

docs: fix TS error in Node.js runtime local assets example: #82672

docs: Route props helpers, typegen and next lint deprecation: #82784

Credits

Huge thanks to @bgub, @EAzZY-1wnL, and @icyJoseph for helping!

v15.4.2-canary.55

Core Changes

[Cache Components] Fix HMR for nested pages: #82776

Upgrade React from a96a0f39-20250815 to f508edc8-20250818: #82747

Avoid duplicate WebSocket connection for global error pages: #82788

Update linter options: #82266

React from f508edc8-20250818 to 0bdb9206-20250818: #82792

feat: stabilize experimental.typedRoutes flag: #82762

[Cache Components] Faster partial hydration in PPR resumes: #82742

Turbopack: Define built-in webpack conditions using an enum and typescript union: #82765

Turbopack: Remove beta warning: #82797

feat: add a codemod to migrate from the deprecated "next lint" command: #82685

fix: don't fail with amp config in JS: #82798

fix: possible null access: #82799

Misc Changes

Update Rspack production test manifest: #82771

Credits

Huge thanks to @unstubbable, @bgub, @vercel-release-bot, @lubieowoce, and @bgw for helping!

v15.4.2-canary.54

Core Changes

[Cache Components] Defer Request Data API resolution to another task in dev when it would suspend when prerendering: #82386

... (truncated)

Commits

f30d815 v15.4.7
1a026e3 fix router handling when setting a location response header (#82588)
be4aafd v15.4.6
91e5b6b Backport "fix: add ?dpl to fonts in /_next/static/media (#82384)" (#82421)
f1629d9 Backport "[Pages] fix: _error page's req.url can be overwritten t… (#82377)
b9aab5d v15.4.5
a8c93c4 Disable test new tests jobs
ed2a6c7 [backport]: fix(next/image): improve and simplify detect-content-type (#82118...
f00fcc9 [backport]: fix(next/image): fix image-optimizer.ts headers (#82114) (#82175)
55a7568 Backport: Turbopack: update mimalloc (#81993) (#82166)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

PR-Codex overview

This PR updates several package dependencies across multiple projects to their latest versions, primarily focusing on upgrading next from 15.3.5 to 15.4.7, and vite from 7.0.1 to 7.0.7, among others.

Detailed summary

Updated next version to 15.4.7 in multiple packages.
Updated vite version to 7.0.7 in the packages/thirdweb/package.json.
Updated zod version to 3.25.76.
Updated various other dependencies to their latest versions across multiple packages.

The following files were skipped due to too many changes: pnpm-lock.yaml

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

…dates Bumps the npm_and_yarn group with 2 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [next](https://github.com/vercel/next.js). Updates `vite` from 7.0.1 to 7.0.7 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.0.7/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.0.7/packages/vite) Updates `next` from 15.3.5 to 15.4.7 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.5...v15.4.7) --- updated-dependencies: - dependency-name: vite dependency-version: 7.0.7 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.7 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

changeset-bot · 2025-09-30T01:20:33Z

⚠️ No Changeset found

Latest commit: 1ad876c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2025-09-30T01:20:35Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
docs-v2	Ready	Preview	Comment	Sep 30, 2025 1:51am
nebula	Ready	Preview	Comment	Sep 30, 2025 1:51am
thirdweb_playground	Ready	Preview	Comment	Sep 30, 2025 1:51am
thirdweb-www	Ready	Preview	Comment	Sep 30, 2025 1:51am
wallet-ui	Ready	Preview	Comment	Sep 30, 2025 1:51am

graphite-app · 2025-09-30T01:20:36Z

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

merge-queue - adds this PR to the back of the merge queue
hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

_{An organization admin has enabled the Graphite Merge Queue in this repository.} _{Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.}

coderabbitai · 2025-09-30T01:20:40Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

socket-security · 2025-09-30T01:21:35Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite@7.0.7
	next@15.3.5 ⏵ 15.4.7	^-1	⁺¹²

View full report

dependabot · 2025-09-30T18:44:18Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 30, 2025

dependabot bot requested review from a team as code owners September 30, 2025 01:20

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 30, 2025

vercel bot deployed to Preview – nebula September 30, 2025 01:23 View deployment

vercel bot deployed to Preview – thirdweb-www September 30, 2025 01:30 View deployment

vercel bot deployed to Preview – thirdweb_playground September 30, 2025 01:37 View deployment

vercel bot deployed to Preview – wallet-ui September 30, 2025 01:38 View deployment

vercel bot deployed to Preview – docs-v2 September 30, 2025 01:51 View deployment

joaquim-verges closed this Sep 30, 2025

dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-e5258c42d6 branch September 30, 2025 18:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates #8154

build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates #8154

Uh oh!

dependabot bot commented on behalf of github Sep 30, 2025 •

edited by pr-codex bot

Loading

Uh oh!

changeset-bot bot commented Sep 30, 2025

Uh oh!

vercel bot commented Sep 30, 2025 •

edited

Loading

Uh oh!

graphite-app bot commented Sep 30, 2025

Uh oh!

coderabbitai bot commented Sep 30, 2025

Review skipped

Uh oh!

socket-security bot commented Sep 30, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates #8154

build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates #8154

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 30, 2025 • edited by pr-codex bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.0.7

v7.0.6

v7.0.5

v7.0.4

v7.0.3

[email protected]

v7.0.2

[email protected]

7.0.7 (2025-09-08)

Bug Fixes

Tests

7.0.6 (2025-07-24)

Bug Fixes

Miscellaneous Chores

Code Refactoring

7.0.5 (2025-07-17)

Bug Fixes

Miscellaneous Chores

Code Refactoring

7.0.4 (2025-07-10)

Bug Fixes

Build System

v15.4.7

Core Changes

Credits

v15.4.2-canary.56

Misc Changes

Credits

v15.4.2-canary.55

Core Changes

Misc Changes

Credits

v15.4.2-canary.54

Core Changes

PR-Codex overview

Detailed summary

Uh oh!

changeset-bot bot commented Sep 30, 2025

⚠️ No Changeset found

Uh oh!

vercel bot commented Sep 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

graphite-app bot commented Sep 30, 2025

How to use the Graphite Merge Queue

Uh oh!

coderabbitai bot commented Sep 30, 2025

Review skipped

Uh oh!

socket-security bot commented Sep 30, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Sep 30, 2025 •

edited by pr-codex bot

Loading

vercel bot commented Sep 30, 2025 •

edited

Loading