chore(deps): bump the frontend-patches group across 1 directory with 17 updates by dependabot[bot] · Pull Request #67 · Kenbak/cipherscan

dependabot · 2026-09-01T15:22:24Z

Bumps the frontend-patches group with 17 updates in the / directory:

Package	From	To
@react-three/drei	`10.7.7`	`10.7.8`
@react-three/fiber	`9.6.1`	`9.7.0`
@types/node	`22.18.13`	`22.20.1`
@types/three	`0.185.0`	`0.185.4`
@xyflow/react	`12.10.2`	`12.11.6`
geist	`1.7.0`	`1.7.2`
next	`16.3.0`	`16.3.4`
pg	`8.16.3`	`8.23.0`
@types/pg	`8.15.6`	`8.23.1`
postcss	`8.5.19`	`8.5.26`
react	`19.2.0`	`19.2.8`
@types/react	`19.2.2`	`19.2.18`
react-dom	`19.2.0`	`19.2.8`
@types/react-dom	`19.2.3`	`19.2.5`
recharts	`3.8.1`	`3.10.1`
redis	`5.10.0`	`5.12.1`
zod	`4.3.6`	`4.5.4`

Updates @react-three/drei from 10.7.7 to 10.7.8

Release notes

Sourced from @react-three/drei's releases.

v10.7.8

10.7.8 (2026-08-05)

Bug Fixes

Add Chromatic badge to introduction.md (bd7bad3)

ci: support npm trusted publishing (#2760) (ffa15b9)

ci: use repository Node version in tests (6fdcd73)

docs: do not override docker_tag (c9d3d0d)

docs: pmndrs/docs:3 (032f1d6)

MeshTransmissionMaterial: backside rendering and perf improvements (#2759) (ea128ae)

wrong branch name (a039007)

Commits

ffa15b9 fix(ci): support npm trusted publishing (#2760)
ea128ae fix(MeshTransmissionMaterial): backside rendering and perf improvements (#2759)
6a89ee3 chore(ci): remove CodeSandbox configuration
6fdcd73 fix(ci): use repository Node version in tests
c9d3d0d fix(docs): do not override docker_tag
a039007 fix: wrong branch name
032f1d6 fix(docs): pmndrs/docs:3
bd7bad3 fix: Add Chromatic badge to introduction.md
9cc32c4 chore: use trusted publisher (#2598)
563a6ce chore(storybook): upgrade to sb10 (#2594)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @react-three/drei since your current version.

Updates @react-three/fiber from 9.6.1 to 9.7.0

Release notes

Sourced from @react-three/fiber's releases.

v9.7.0

The headline updates for this release are the reconciler fixes. We did a pass to harden what is there against react-dom as the standard.

R3F's internal children were not being reordered correctly. Basically, if React reordered children, our internal map would drift out of sync and this would cause subtle bugs. This is now fixed. Thanks to @kvvasuu who reported it and @wanxiankai who offered a solution.

Pierced props now reset properly. We had a bug where if a pierce prop was unset, the reconciler would try to reset it to a default value. However, it would set it to the base object instead of the pierced prop. This is fixed now.
// Initial render
<mesh position-x={5} />
// Later render: prop removed
<mesh />
// bug: would set it to the base object
mesh.x = 0 // !!!
Host props now update properly. Host props are ones that we supply such as dispose and onUpdate. These now update properly. This also caused a subtle bug where imperatively updated values could get overwritten unexpectedly after unsetting the value in React. This is all fixed. Note: attach is fixed on first set and ignored if you try to dynamically update it.

Properly batch instance reconstruction. This one is pretty technical and if you are curious check out the test in the attached PR. Basically, there was an edge case where if two instances needed to reconstruct (because the args updated), one could be ignore if the other bailed out of updates because of a React.memo or similar. It is likely a problem you never had, but your agent would curse if you did.

Event priorities match react-dom. React allows for prioritizing events, for example continuous events like wheel get a higher priority over impulse events like pointer. We copy from the best here and use the same list react-dom does.

Support reconciler microtasks. The React reconciler has a cool feature where it can queue microtasks to defer work based on the priorities we set earlier.

What's Changed

chore: move eslint rules from parserOptions to top-level rules (#3706) by @in-ch in pmndrs/react-three-fiber#3707

docs: update useFrame hook description to specify that the clock delta is in seconds by @AJamesPhillips in pmndrs/react-three-fiber#3742

chore(CI): update test workflow actions to remove Node 20 deprecation warning by @Shushovan015 in pmndrs/react-three-fiber#3710

docs: fix FBXLoader naming in loading-models by @pavan-sh in pmndrs/react-three-fiber#3745

chore(docs): pmndrs/examples by @abernier in pmndrs/react-three-fiber#3639

fix: act import by @krispya in pmndrs/react-three-fiber#3807

fix: internal instance children synchronization after keyed reorder by @krispya in pmndrs/react-three-fiber#3808

chore: remove CodeSandbox CI by @krispya in pmndrs/react-three-fiber#3809

fix: Pierced prop reset by @krispya in pmndrs/react-three-fiber#3810

fix: Internal instance props sync by @krispya in pmndrs/react-three-fiber#3811

fix: Batch instance reconstruction hardening by @krispya in pmndrs/react-three-fiber#3812

feat: Match react-dom event priorities by @krispya in pmndrs/react-three-fiber#3815

feat: Support reconciler microtasks by @krispya in pmndrs/react-three-fiber#3816

New Contributors

@in-ch made their first contribution in pmndrs/react-three-fiber#3707

@AJamesPhillips made their first contribution in pmndrs/react-three-fiber#3742

@Shushovan015 made their first contribution in pmndrs/react-three-fiber#3710

@pavan-sh made their first contribution in pmndrs/react-three-fiber#3745

Full Changelog: pmndrs/react-three-fiber@v9.6.1...v9.7.0

Commits

0a10741 RELEASING: Releasing 2 package(s)
c340195 docs(changeset): prepare 9.7.0 and 9.1.1
ff52c35 feat: Support reconciler microtasks (#3816)
f1d5524 feat: match react-dom event priorities (#3815)
a421117 fix: Batch instance reconstruction hardening (#3812)
169845f fix: Internal instance props sync (#3811)
99a3248 fix: pierced prop reset (#3810)
1258702 chore: remove CodeSandbox CI (#3809)
87040cf fix: Internal instance children synchronization after keyed reorder (#3808)
69f37f7 Fix act import (#3807)
Additional commits viewable in compare view

Updates @types/node from 22.18.13 to 22.20.1

Commits

See full diff in compare view

Updates @types/three from 0.185.0 to 0.185.4

Commits

See full diff in compare view

Updates @xyflow/react from 12.10.2 to 12.11.6

Release notes

Sourced from @xyflow/react's releases.

@xyflow/react@12.11.6

Patch Changes

#5994 2350158 - Reset all properties in provider store when unmounting flow

#5997 0117cc9 - Prevent attribution warning when pane is not rendered either

Updated dependencies [0117cc9]:

@xyflow/system@0.0.82

@xyflow/react@12.11.5

Patch Changes

Updated dependencies [22e0be2]:

@xyflow/system@0.0.81

@xyflow/react@12.11.4

Patch Changes

#5974 8c42922 - Minimap still works after ReactFlow remounts

#5962 cbf40b9 - Show log if user hides attribution in development

#5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

#5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

@xyflow/react@12.11.3

Patch Changes

#5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

#5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

#5943 d1def59 - Invoke an error if handle can not be found

#5947 2ba040f - Use correct nodeExtent for internal setNodes.

#5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

#5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

... (truncated)

Changelog

Sourced from @xyflow/react's changelog.

12.11.6

Patch Changes

#5994 2350158 - Reset all properties in provider store when unmounting flow

#5997 0117cc9 - Prevent attribution warning when pane is not rendered either

Updated dependencies [0117cc9]:

@xyflow/system@0.0.82

12.11.5

Patch Changes

Updated dependencies [22e0be2]:

@xyflow/system@0.0.81

12.11.4

Patch Changes

#5974 8c42922 - Minimap still works after ReactFlow remounts

#5962 cbf40b9 - Show log if user hides attribution in development

#5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

#5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

12.11.3

Patch Changes

#5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

#5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

... (truncated)

Commits

9fd41fd chore(packages): bump
19f9c2a fix(react/store): reset defaultEdgeOptions
2acefb5 fix(react/store): reset functions #5991
8f0a5d6 chore(packages): bump
286816c chore(packages): bump
3319ef4 fix(react): keep minimap bounds at the viewport when all nodes are hidden
b7186f3 fix(react): minimap still works after reactflow remounts #5971
d8edc77 Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...
59b1a60 Simplify node click handling in MiniMap component
25869f2 chore(system): add attr warning handler
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @xyflow/react since your current version.

Updates geist from 1.7.0 to 1.7.2

Changelog

Sourced from geist's changelog.

1.7.2

Patch Changes

a4195ae: Update Geist Pixel webfonts with Google Fonts validation fixes.

Resyncs the published Geist Pixel static webfonts (Circle, Grid, Line, Square, Triangle) with the source build, picking up the non-visual fixes made for the Google Fonts release (#229): ligature caret anchors (fi, fl, f_i, A_I, U_I), a meta table with ScriptLangTags, line/paragraph separator glyphs and removal of the visible soft hyphen, and 1-unit on-curve point alignment fixes on e, eogonek, and hungarumlautcomb. No visible letterforms change.

1.7.1

Patch Changes

c8ed578: Fix Geist Mono rendering source-code text with unintended programming ligatures.

v1.7.0 unintentionally activated programming-ligature substitutions (-->, ==, !=, ..., --, etc.) under the liga (Standard Ligatures) OpenType feature, which is on by default in every renderer. As a result, text like --debug-prerender, [id...], [...id], or NODE_OPTIONS='--debug-prerender' node rendered with ligated glyphs and broke monospace alignment in code.

The source-level fix is in #217; this release ships the rebuilt binaries.

Commits

31b2359 Version Packages (#230)
a4195ae Geist Pixel on Google Fonts (#229)
8b8b75f fix(release): sync package.json version and unignore packages/**/package.json...
88309a4 Version Packages (#223)
6af2e7f ci: harden release workflow (#222)
c8ed578 chore: add changeset for geist@1.7.1 (Mono liga regression fix) (#221)
a0a06a3 make build
855f609 Fix broken link in README.md
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for geist since your current version.

Updates next from 16.3.0 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

... (truncated)

Commits

299180d v16.3.4
12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
d8f4560 [16.3.x] Fix build error when aliasing typescript to @typescript/typescript6 ...
656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
a9a1cb7 v16.3.3
968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
3a15b4a [16.3.x] [next/image]: disable avif image optimization
7378b51 Backport/docs fixes 16.3 (#97649)
Additional commits viewable in compare view

Updates pg from 8.16.3 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Add support for query pipelineing.

pg@8.22.0

Add support for sslnegotiation=direct for PostgreSQL 17+.

pg@8.21.0

Handle SASL SCRAM server error responses properly.

Add support for node@26.

Add scramMaxIterations config option.

Add client.getTransactionStatus() method.

pg@8.20.0

Add onConnect callback to pg.Pool constructor options allowing for async initialization of newly created & connected pooled clients.

pg@8.19.0

Deprecate interal query queue.

Pass connection parameters to password callback.

pg@8.18.0

Return the client instance as the result of calling connect (previously it was void).

pg@8.17.0

Throw correct error if database URL parsing fails.

pg@8.16.0

Add support for min connection pool size.

pg@8.15.0

Add support for esm importing. CommonJS importing is still also supported.

pg@8.14.0

Add support for SCRAM-SHA-256-PLUS, i.e. channel binding.

pg@8.13.0

Add ability to specify query timeout on per-query basis.

pg@8.12.0

... (truncated)

Commits

df274d1 Publish
eb19d0f Add opt-in query pipelining (#3652)
b617619 Publish
d80b261 Update docs & changelog
835fb83 Fix error handling for exceptions on values parsing. (#3574)
f49ab4a fix: correct spelling mistakes across codebase (#3692)
d7175a4 Expand CI matrix of PG versions and add direct SSL test (#3693)
882fc30 Add support for sslnegotiation=direct (PostgreSQL 17) (#3688)
544b1ce Publish
cc03fa5 Add scramMaxIterations option to limit SCRAM iteration count (#3677)
Additional commits viewable in compare view

Updates @types/pg from 8.15.6 to 8.23.1

Commits

See full diff in compare view

Updates postcss from 8.5.19 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

Changelog

Sourced from postcss's changelog.

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

Commits

07b2577 Release 8.5.26 version
47de6b9 Update CI
1493a83 Fix Rule#selectors losing the empty selector (#2129)
180db16 Typo
29e9e00 Resolve symlinks before the previous-source-map containment check (#2125)
3ba8f84 Update dependencies
87e72f6 Update lock file
caaeeb9 Upgrade nanoid to fix infinite loop on zero size (#2124)
3609b6f Explain how to type plugin options
fbad419 docs: show ESM and TypeScript plugin declaration (#2118)
Additional commits viewable in compare view

Updates react from 19.2.0 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (@gnoff, @lubieowoce, @sebmarkbage, @unstubbable #35632)

19.2.3 (Dec 11, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (Dec 11, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon #35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
23f4f9f 19.2.5
90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 19.2.2 to 19.2.18

Commits

See full diff in compare view

Updates react-dom from 19.2.0 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (@gnoff, @lubieowoce, @sebmarkbage, @unstubbable #35632)

19.2.3 (Dec 11, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (Dec 11, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon #35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
Description has been truncated

dependabot · 2026-09-01T15:22:25Z

Labels

The following labels could not be found: dependencies, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-09-01T15:22:27Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Updated
cipherscan	Error	Sep 5, 2026 5:19am UTC
cipherscan-a7os	Error	Sep 5, 2026 5:19am UTC
cipherscan-crosslink	Error	Sep 5, 2026 5:19am UTC
cipherscan-testnet	Error	Sep 5, 2026 5:19am UTC

netlify · 2026-09-01T15:22:30Z

❌ Deploy Preview for cipherscan-crosslink failed. Why did it fail? →

Name	Link
🔨 Latest commit	`582f561`
🔍 Latest deploy log	https://app.netlify.com/projects/cipherscan-crosslink/deploys/6a96edb49822710008b7dbe5

…17 updates Bumps the frontend-patches group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@react-three/drei](https://github.com/pmndrs/drei) | `10.7.7` | `10.7.8` | | [@react-three/fiber](https://github.com/pmndrs/react-three-fiber) | `9.6.1` | `9.7.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.18.13` | `22.20.1` | | [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.185.0` | `0.185.4` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.10.2` | `12.11.6` | | [geist](https://github.com/vercel/geist-font/tree/HEAD/packages/next) | `1.7.0` | `1.7.2` | | [next](https://github.com/vercel/next.js) | `16.3.0` | `16.3.4` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.16.3` | `8.23.0` | | [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.15.6` | `8.23.1` | | [postcss](https://github.com/postcss/postcss) | `8.5.19` | `8.5.26` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.8` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.2` | `19.2.18` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.8` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.5` | | [recharts](https://github.com/recharts/recharts) | `3.8.1` | `3.10.1` | | [redis](https://github.com/redis/node-redis) | `5.10.0` | `5.12.1` | | [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.5.4` | Updates `@react-three/drei` from 10.7.7 to 10.7.8 - [Release notes](https://github.com/pmndrs/drei/releases) - [Changelog](https://github.com/pmndrs/drei/blob/master/release.config.js) - [Commits](pmndrs/drei@v10.7.7...v10.7.8) Updates `@react-three/fiber` from 9.6.1 to 9.7.0 - [Release notes](https://github.com/pmndrs/react-three-fiber/releases) - [Commits](pmndrs/react-three-fiber@v9.6.1...v9.7.0) Updates `@types/node` from 22.18.13 to 22.20.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/three` from 0.185.0 to 0.185.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/three) Updates `@xyflow/react` from 12.10.2 to 12.11.6 - [Release notes](https://github.com/xyflow/xyflow/releases) - [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.6/packages/react) Updates `geist` from 1.7.0 to 1.7.2 - [Release notes](https://github.com/vercel/geist-font/releases) - [Changelog](https://github.com/vercel/geist-font/blob/main/packages/next/CHANGELOG.md) - [Commits](https://github.com/vercel/geist-font/commits/v1.7.2/packages/next) Updates `next` from 16.3.0 to 16.3.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.0...v16.3.4) Updates `pg` from 8.16.3 to 8.23.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg) Updates `@types/pg` from 8.15.6 to 8.23.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg) Updates `postcss` from 8.5.19 to 8.5.26 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.19...8.5.26) Updates `react` from 19.2.0 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `@types/react` from 19.2.2 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.0 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `recharts` from 3.8.1 to 3.10.1 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.8.1...v3.10.1) Updates `redis` from 5.10.0 to 5.12.1 - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/redis@5.10.0...redis@5.12.1) Updates `zod` from 4.3.6 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.3.6...v4.5.4) --- updated-dependencies: - dependency-name: "@react-three/drei" dependency-version: 10.7.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: "@react-three/fiber" dependency-version: 9.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-patches - dependency-name: "@types/node" dependency-version: 22.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-patches - dependency-name: "@types/pg" dependency-version: 8.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-patches - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: "@types/react-dom" dependency-version: 19.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: "@types/three" dependency-version: 0.185.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: "@xyflow/react" dependency-version: 12.11.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-patches - dependency-name: geist dependency-version: 1.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: next dependency-version: 16.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: pg dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-patches - dependency-name: postcss dependency-version: 8.5.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-patches - dependency-name: recharts dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-patches - dependency-name: redis dependency-version: 5.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-patches - dependency-name: zod dependency-version: 4.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-patches ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-09T07:46:45Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

vercel Bot had a problem deploying to Preview – cipherscan-testnet September 1, 2026 15:23 Failure

vercel Bot had a problem deploying to Preview – cipherscan September 1, 2026 15:23 Failure

vercel Bot had a problem deploying to Preview – cipherscan-a7os September 1, 2026 15:23 Failure

vercel Bot had a problem deploying to Preview – cipherscan-crosslink September 1, 2026 15:23 Failure

dependabot Bot changed the title ~~chore(deps): bump the frontend-patches group with 17 updates~~ chore(deps): bump the frontend-patches group across 1 directory with 17 updates Sep 4, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend-patches-41eba9642d branch from 582f561 to b0445b8 Compare September 4, 2026 05:37

vercel Bot had a problem deploying to Preview – cipherscan-testnet September 4, 2026 05:38 Failure

vercel Bot had a problem deploying to Preview – cipherscan September 4, 2026 05:38 Failure

vercel Bot had a problem deploying to Preview – cipherscan-crosslink September 4, 2026 05:39 Failure

vercel Bot had a problem deploying to Preview – cipherscan-a7os September 4, 2026 05:39 Failure

dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend-patches-41eba9642d branch from b0445b8 to 0db6a46 Compare September 4, 2026 13:14

vercel Bot had a problem deploying to Preview – cipherscan-crosslink September 4, 2026 13:15 Failure

vercel Bot had a problem deploying to Preview – cipherscan-a7os September 4, 2026 13:15 Failure

vercel Bot had a problem deploying to Preview – cipherscan September 4, 2026 13:15 Failure

vercel Bot had a problem deploying to Preview – cipherscan-testnet September 4, 2026 13:16 Failure

dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend-patches-41eba9642d branch from 0db6a46 to e540af2 Compare September 5, 2026 05:13

vercel Bot had a problem deploying to Preview – cipherscan-a7os September 5, 2026 05:14 Failure

vercel Bot had a problem deploying to Preview – cipherscan-testnet September 5, 2026 05:14 Failure

vercel Bot had a problem deploying to Preview – cipherscan September 5, 2026 05:14 Failure

vercel Bot had a problem deploying to Preview – cipherscan-crosslink September 5, 2026 05:15 Failure

dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend-patches-41eba9642d branch from e540af2 to c91f094 Compare September 5, 2026 05:17

vercel Bot had a problem deploying to Preview – cipherscan September 5, 2026 05:18 Failure

vercel Bot had a problem deploying to Preview – cipherscan-crosslink September 5, 2026 05:19 Failure

vercel Bot had a problem deploying to Preview – cipherscan-a7os September 5, 2026 05:19 Failure

vercel Bot had a problem deploying to Preview – cipherscan-testnet September 5, 2026 05:19 Failure

dependabot Bot closed this Sep 9, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/frontend-patches-41eba9642d branch September 9, 2026 07:46

Navigation Menu

chore(deps): bump the frontend-patches group across 1 directory with 17 updates - #67

chore(deps): bump the frontend-patches group across 1 directory with 17 updates#67
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend-patches-41eba9642d

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

vercel Bot commented Sep 1, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Sep 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.7.8

10.7.8 (2026-08-05)

Bug Fixes

v9.7.0

What's Changed

New Contributors

@​xyflow/react@​12.11.6

Patch Changes

@​xyflow/react@​12.11.5

Patch Changes

@​xyflow/react@​12.11.4

Patch Changes

@​xyflow/react@​12.11.3

Patch Changes

12.11.6

Patch Changes

12.11.5

Patch Changes

12.11.4

Patch Changes

12.11.3

Patch Changes

1.7.2

Patch Changes

1.7.1

Patch Changes

v16.3.4

Credits

v16.3.3

v16.3.2

Core Changes

Credits

v16.3.1

What's Changed

pg@8.23.0

pg@8.22.0

pg@8.21.0

pg@8.20.0

pg@8.19.0

pg@8.18.0

pg@8.17.0

pg@8.16.0

pg@8.15.0

pg@8.14.0

pg@8.13.0

pg@8.12.0

8.5.26

8.5.25

8.5.24

8.5.23

8.5.22

8.5.21

8.5.20

8.5.26

8.5.25

8.5.24

8.5.23

8.5.22

8.5.21

8.5.20

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.7 (June 1, 2026)

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

`@xyflow/react@12`.11.6

`@xyflow/react@12`.11.5

`@xyflow/react@12`.11.4

`@xyflow/react@12`.11.3

vercel Bot commented Sep 1, 2026 •

edited

Loading

netlify Bot commented Sep 1, 2026 •

edited

Loading