chore(web)(deps): bump the dependencies group across 1 directory with 21 updates by dependabot[bot] · Pull Request #103 · RISHII7/echo

dependabot · 2026-10-05T03:38:54Z

Bumps the dependencies group with 21 updates in the /apps/web directory:

Package	From	To
@base-ui/react	`1.6.0`	`1.8.0`
@clerk/nextjs	`7.5.12`	`7.9.10`
@convex-dev/agent	`0.1.16`	`0.7.3`
@hookform/resolvers	`5.4.0`	`5.9.1`
@sentry/nextjs	`10.63.0`	`10.75.3`
@shadcn/react	`0.2.0`	`0.3.1`
convex	`1.25.4`	`1.46.0`
countries-and-timezones	`3.9.0`	`3.10.0`
input-otp	`1.4.2`	`1.5.0`
jotai	`2.20.1`	`2.20.3`
lucide-react	`0.475.0`	`0.577.0`
next	`16.2.6`	`16.3.8`
react	`19.2.4`	`19.3.0`
@types/react	`19.2.17`	`19.3.0`
react-day-picker	`10.0.1`	`10.0.2`
react-dom	`19.2.4`	`19.3.0`
@types/react-dom	`19.2.3`	`19.3.0`
react-hook-form	`7.81.0`	`7.89.0`
recharts	`3.8.0`	`3.10.1`
sonner	`2.0.7`	`2.0.8`
zod	`3.25.67`	`3.25.76`

Updates @base-ui/react from 1.6.0 to 1.8.0

Release notes

Sourced from @base-ui/react's releases.

v1.8.0

General changes

Fix label association when a control unregisters (#5456) by @atomiks

Reduce animation completion work (#5535) by @atomiks

Fix prop and ref merging for lazy render elements (#5562) by @atomiks

Fix roving focus when items are added or removed (#5447) by @atomiks

Fix hover and focus interaction issues (#5037) by @atomiks

Improve trigger mount performance (#5426) by @atomiks

Fix disabled anchor tracking on scroll (#5478) by @atomiks

Fix transform origin for start/end alignment (#5015) by @atomiks

Remove duplicate options key from arrow middleware (#5606) by @atomiks

Register passive touch listeners (#5572) by @wanxiankai

Alert Dialog

Ignore outside clicks from presses that began before open (#5378) by @michaldudak

Autocomplete

Render groups with the rowgroup role in grid mode (#5564) by @atomiks

Allow opening and browsing the popup while readOnly (#5541) by @vikuscz

Move aria-orientation to the role owners (#5551) by @gonzoblasco

Hide group labels and scrollbars from the accessibility tree (#5598) by @azeng4499

Avatar

Add keepMounted prop to <Avatar.Image> (#5536) by @atomiks

Checkbox

Fix stale and duplicated control IDs (#5457) by @atomiks

Fix controlled blur validation and stale filled state (#5563) by @atomiks

Checkbox Group

Fix stale and duplicated control IDs (#5457) by @atomiks

Combobox

Fix applying data-readonly to <Combobox.Trigger> (#5418) by @sai6855

Add createItems collection API (#5326) by @atomiks

Fix cancellation when preserving the filter after selection (#5362) by @atomiks

Render groups with the rowgroup role in grid mode (#5564) by @atomiks

Allow opening and browsing the popup while readOnly (#5541) by @vikuscz

Move aria-orientation to the role owners (#5551) by @gonzoblasco

Fix record item label lookup reading from Object.prototype (#5518) by @XionWCFM

Anchor multiple selection to the first selected item with a linear lookup (#5573, #5613) by @atomiks and @michaldudak

Hide group labels and scrollbars from the accessibility tree (#5598) by @azeng4499

... (truncated)

Changelog

Sourced from @base-ui/react's changelog.

v1.8.0

Sep 4, 2026

General changes

Fix label association when a control unregisters (#5456) by @atomiks

Reduce animation completion work (#5535) by @atomiks

Fix prop and ref merging for lazy render elements (#5562) by @atomiks

Fix roving focus when items are added or removed (#5447) by @atomiks

Fix hover and focus interaction issues (#5037) by @atomiks

Improve trigger mount performance (#5426) by @atomiks

Fix disabled anchor tracking on scroll (#5478) by @atomiks

Fix transform origin for start/end alignment (#5015) by @atomiks

Remove duplicate options key from arrow middleware (#5606) by @atomiks

Register passive touch listeners (#5572) by @wanxiankai

Alert Dialog

Ignore outside clicks from presses that began before open (#5378) by @michaldudak

Autocomplete

Render groups with the rowgroup role in grid mode (#5564) by @atomiks

Allow opening and browsing the popup while readOnly (#5541) by @vikuscz

Move aria-orientation to the role owners (#5551) by @gonzoblasco

Hide group labels and scrollbars from the accessibility tree (#5598) by @azeng4499

Avatar

Add keepMounted prop to <Avatar.Image> (#5536) by @atomiks

Checkbox

Fix stale and duplicated control IDs (#5457) by @atomiks

Fix controlled blur validation and stale filled state (#5563) by @atomiks

Checkbox Group

Fix stale and duplicated control IDs (#5457) by @atomiks

Combobox

Fix applying data-readonly to <Combobox.Trigger> (#5418) by @sai6855

Add createItems collection API (#5326) by @atomiks

Fix cancellation when preserving the filter after selection (#5362) by @atomiks

Render groups with the rowgroup role in grid mode (#5564) by @atomiks

Allow opening and browsing the popup while readOnly (#5541) by @vikuscz

... (truncated)

Commits

47b4052 [release] v1.8.0 (#5609)
dd13809 [toast] Accept an updater function in the update method instead of on data (#...
670e95c [docs] Update docs infra to restore generated types (#5616)
e8526f7 [utils] Restore frozen EMPTY_ARRAY (#5620)
b7f6683 [number field] Preserve consumer selection when focusing the input (#5619)
b8c5d78 [context menu] Correct generated API metadata (#5523)
261d699 [combobox][autocomplete] Document that items must not contain nullish entries...
0a6ff44 [toast] Replace custom data wholesale and accept a function to derive it (#5611)
2e1bddd [combobox][select] Make the multiple selection anchor lookup linear (#5613)
ad83c8a [code-infra] Run TypeScript 7 alongside the TS6 JS API (#5603)
Additional commits viewable in compare view

Updates @clerk/nextjs from 7.5.12 to 7.9.10

Release notes

Sourced from @clerk/nextjs's releases.

@clerk/nextjs@7.9.9

Patch Changes

Removed the period from the end of the displayed error. Agents were trying to use the URL with period at the end and getting 404s (#9985) by @royanger

Updated dependencies [0fe89c2, e34a5cc, c8eb8d5]:

@clerk/backend@3.21.1

@clerk/shared@4.37.1

@clerk/react@6.17.4

@clerk/nextjs@7.9.7

Patch Changes

Updated dependencies [645a532, 84ee588, 4e538ac]:

@clerk/shared@4.36.0

@clerk/react@6.17.2

@clerk/backend@3.20.1

@clerk/nextjs@7.9.5

Patch Changes

Fix a development-only React key warning when using ClerkProvider in the App Router. (#9816) by @joshrowley

Fix a cross-request credential leak in clerkMiddleware(). When using dynamic keys (an options callback that resolves a different secretKey per request), a clerkClient() call made inside the middleware handler could be built with another concurrent request's secret key. Each request now gets its own isolated store, so the keys resolved for a request are only ever visible to that request. (#9723) by @dominic-clerk

Updated dependencies [804d3db, 64c8e3e, f56a14b, 07b4c2b, 4e36687, 917453a, 3d6ed25, 40f40f2, 9e7485c]:

@clerk/shared@4.34.0

@clerk/react@6.17.0

@clerk/backend@3.19.0

Changelog

Sourced from @clerk/nextjs's changelog.

7.9.10

Patch Changes

Updated dependencies [4eac21f, f6937c8]:

@clerk/backend@3.22.0

@clerk/shared@4.38.0

@clerk/react@6.17.5

7.9.9

Patch Changes

Removed the period from the end of the displayed error. Agents were trying to use the URL with period at the end and getting 404s (#9985) by @royanger

Updated dependencies [0fe89c2, e34a5cc, c8eb8d5]:

@clerk/backend@3.21.1

@clerk/shared@4.37.1

@clerk/react@6.17.4

7.9.8

Patch Changes

Updated dependencies [397fd72, 6a14691, 0ee4ee2, 7a3fcf5, 69c1b9c, d9cf0f2, f8266be]:

@clerk/backend@3.21.0

@clerk/shared@4.37.0

@clerk/react@6.17.3

7.9.7

Patch Changes

Updated dependencies [645a532, 84ee588, 4e538ac]:

@clerk/shared@4.36.0

@clerk/react@6.17.2

@clerk/backend@3.20.1

7.9.6

Patch Changes

Updated dependencies [b3af79e, cc6f11a, 9d78a1f, d46b544, f50f48c]:

@clerk/shared@4.35.0

@clerk/backend@3.20.0

@clerk/react@6.17.1

7.9.5

Patch Changes

... (truncated)

Commits

6fd8e8d ci(repo): Version packages (#10021)
2e03a39 ci(repo): Version packages (#9977)
c610ff2 fix(nextjs): removed period from error to stop 404s by agents reading the err...
26feba7 ci(repo): Version packages (#9933)
750e7fc ci(repo): Version packages (#9931)
8bca915 ci(repo): Version packages (#9893)
cc6f11a fix(shared): Reword error messaging when missing or invalid keys (#9848)
0a15af9 ci(repo): Version packages (#9782)
b6c7426 fix(nextjs): key App Router ClerkProvider children (#9816)
5e2a46f fix(nextjs): isolate middleware request data per request (#9723)
Additional commits viewable in compare view

Updates @convex-dev/agent from 0.1.16 to 0.7.3

Changelog

Sourced from @convex-dev/agent's changelog.

0.7.3

Preserve stream cleanup order across statuses (#365)

Preserve async thread deletion limits across continuations (#363)

Flush throttled deltas on a timer, not on the next part (#328)

Persist opted-in source parts (#362)

Finish the stream row when messages aren't stored (#327)

Drain deltas at end-of-stream, not at the final step (#326)

0.7.2
Preserve classified provider errors when streamed responses fail, including aborts racing late message writes (#320). DeltaStreamer.getOrCreateStreamId now accepts { ifAborted: "returnUndefined" } for abort-aware writes; its existing no-argument behavior is unchanged.
Add hasSuccessfulToolCall(toolName) stop-condition helper. Like the AI SDK's hasToolCall but only matches tool calls that produced a tool-result content part — failed tool calls (tool-error parts under AI SDK v6) do not match. Use when you want the agent to retry on argument-validation or runtime tool failures rather than stopping.
import { hasSuccessfulToolCall, stepCountIs } from "@convex-dev/agent";
await agent.streamText(
ctx,
{ threadId },
{
prompt: "...",
stopWhen: [hasSuccessfulToolCall("generateImage"), stepCountIs(5)],
},
);
Fix: willContinue (the internal helper that decides whether to keep looping after a step that has tool calls) now counts tool-error content parts as completed outputs. Without this, AI SDK v6 agents would stop after a step where any tool call errored, even if the model had more work queued.

Stop a generation whose prompt message was deleted (#324)

Preserve complete message orders (#317)

Support explicit message ordering (#319)
0.7.1

Persists oversized streamed files (#307)

fix: preserve text-part metadata on user messages (#318)

0.7.0

... (truncated)

Commits

a5c8f47 0.7.3
ce148be Preserve stream cleanup order across statuses (#365)
0e73025 Preserve async thread deletion limits across continuations (#363)
6f6d079 fix(streaming): flush throttled deltas on a timer, not on the next part (#328)
9dec2a6 fix(streaming): persist opted-in source parts (#362)
671a753 fix(streaming): finish the stream row when messages aren't stored (#327)
2e72cd1 fix(streaming): drain deltas at end-of-stream, not at the final step (#326)
23f7000 0.7.2
3cd5eb0 polish hasSuccessfulToolCall and willContinue (#263)
e9b6502 fix(playground): recharts v3 + chart component update (#346)
Additional commits viewable in compare view

Updates @hookform/resolvers from 5.4.0 to 5.9.1

Release notes

Sourced from @hookform/resolvers's releases.

v5.9.1

5.9.1 (2026-08-17)

Bug Fixes

isNameInFieldArray fails to recognise bracket-notation array paths causing nested errors overwriting (#876) (f18ddfb)

v5.9.0

5.9.0 (2026-08-15)

Features

update joi to v18 (#873) (c8159ae)

v5.8.0

5.8.0 (2026-08-13)

Features

support Vest 6 (a5100ab)

v5.7.1

5.7.1 (2026-08-02)

Bug Fixes

ata-validator peer dependency version (#871) (827f20b)

v5.7.0

5.7.0 (2026-08-02)

Features

support vine v4 (#867) (4cfba18)

v5.6.0

5.6.0 (2026-08-01)

Features

improve all resovlers drops validation errors for special root field names (b011a5f)

v5.5.8

5.5.8 (2026-08-01)

... (truncated)

Commits

f18ddfb fix: isNameInFieldArray fails to recognise bracket-notation array paths causi...
c8159ae feat: update joi to v18 (#873)
a5100ab feat: support Vest 6
28ec539 fix(vest)!: support Vest 6 (#874)
827f20b fix: ata-validator peer dependency version (#871)
4cfba18 feat: support vine v4 (#867)
58d2e2d remove dead image
b011a5f feat: improve all resovlers drops validation errors for special root field names
5483a03 improve all resolvers (#870)
2f28787 fix: Zod resolver drops validation errors for special root field names (#869)
Additional commits viewable in compare view

Updates @sentry/nextjs from 10.63.0 to 10.75.3

Release notes

Sourced from @sentry/nextjs's releases.

10.75.3

fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel route (#24617)

chore(v10/bundler-plugins): move traces sample rate from 1.0 to 0.3 (#24646)

chore(v10/publish): Tag all packages as v10 (#24619)

Bundle size 📦

Path Size

@sentry/browser 27.56 KB

@sentry/browser - with treeshaking flags 26.04 KB

@sentry/browser (incl. Tracing) 46.02 KB

@sentry/browser (incl. Tracing + Span Streaming) 47.77 KB

@sentry/browser (incl. Tracing, Profiling) 50.67 KB

@sentry/browser (incl. Tracing, Replay) 84.38 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 74.28 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 89 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 101.33 KB

@sentry/browser (incl. Feedback) 44.33 KB

@sentry/browser (incl. sendFeedback) 32.25 KB

@sentry/browser (incl. FeedbackAsync) 37.27 KB

@sentry/browser (incl. Metrics) 28.63 KB

@sentry/browser (incl. Logs) 28.84 KB

@sentry/browser (incl. Metrics & Logs) 29.52 KB

@sentry/react 29.32 KB

@sentry/react (incl. Tracing) 48.28 KB

@sentry/vue 32.88 KB

@sentry/vue (incl. Tracing) 47.98 KB

@sentry/svelte 27.58 KB

CDN Bundle 29.87 KB

CDN Bundle (incl. Tracing) 47.92 KB

CDN Bundle (incl. Logs, Metrics) 31.41 KB

CDN Bundle (incl. Tracing, Logs, Metrics) 49.21 KB

CDN Bundle (incl. Replay, Logs, Metrics) 69.82 KB

CDN Bundle (incl. Tracing, Replay) 84.64 KB

CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 85.87 KB

CDN Bundle (incl. Tracing, Replay, Feedback) 90.31 KB

CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 91.55 KB

CDN Bundle - uncompressed 88.83 KB

CDN Bundle (incl. Tracing) - uncompressed 144.49 KB

CDN Bundle (incl. Logs, Metrics) - uncompressed 93.43 KB

CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 148.38 KB

CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 215.46 KB

CDN Bundle (incl. Tracing, Replay) - uncompressed 261.12 KB

... (truncated)

Changelog

Sourced from @sentry/nextjs's changelog.

10.75.3

fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel route (#24617)

chore(v10/bundler-plugins): move traces sample rate from 1.0 to 0.3 (#24646)

chore(v10/publish): Tag all packages as v10 (#24619)

10.75.2

fix(v10/cloudflare): Enforce flush timeout across Workflow lifecycle (#24582)

fix(v10/core): Apply dataCollection.urlQueryParams to collected URLs and query strings (#24572)

fix(v10/nextjs): Align tunnel request matching in middleware with tunnel rewrite (#24565)

fix(v10/node): Stop leaking unhandled rejections on aborted Vercel AI streams (#24563)

10.75.1

fix(v10/cloudflare): Capture telemetry from untraced Durable Object RPC calls (#24512)

fix(v10/cloudflare): Instrument namespaces returned by jurisdiction() (#24513)

fix(v10/hono): Allow @cloudflare/workers-types v5 as peer dependency (#24500)

fix(v10/nextjs): Resolve Next.js version relative to the SDK when cwd differs (#24475)

10.75.0

Important Changes

feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)

fix(v10/browser): Release the XHR virtualError once the request completed (#24307)

fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)

fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)

fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)

fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)

fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)

fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)

fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)

fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

10.74.0

feat(v10): Streamline isolation scope handling & reset in isolation scopes (#24152)

... (truncated)

Commits

3b282c1 release: 10.75.3
b5ea330 meta(changelog): Update changelog for 10.75.3 (#24649)
533a6fa chore(v10/bundler-plugins): move traces sample rate from 1.0 to 0.3 (#24646)
4e91ce5 chore(v10/publish): Tag all packages as v10 (#24619)
f01ca30 fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel ...
79e6e95 Merge remote-tracking branch 'remotes/origin/release/10.75.2' into v10
faeac9a release: 10.75.2
7175b19 meta(changelog): Update changelog for 10.75.2 (#24585)
8f5dc60 fix(v10/cloudflare): Enforce flush timeout across Workflow lifecycle (#24582)
44506df fix(v10/node): Stop leaking unhandled rejections on aborted Vercel AI streams...
Additional commits viewable in compare view

Updates @shadcn/react from 0.2.0 to 0.3.1

Release notes

Sourced from @shadcn/react's releases.

@shadcn/react@0.3.1

Patch Changes

#11720 503a3a57aec9a3817e37f90aa0817b1fabd284d0 Thanks @shadcn! - Set data-pending-scroll on the MessageScroller root and viewport until defaultScrollPosition ("end" or "last-anchor") is applied, so the viewport can be hidden and a server-rendered transcript does not flash the top of the thread on reload.

@shadcn/react@0.3.0

Minor Changes

#11414 3e54530e31020e2277df03490a30a08e3bc1792b Thanks @shadcn! - Add the Questionnaire primitive for multi-step questions, freeform answers, validation, and keyboard navigation.

@shadcn/react@0.2.1

Patch Changes

#11106 f6a26478547c7057aeda82516666dc3473dc39bd Thanks @shadcn! - Fix MessageScroller autoScroll around anchored turns: the anchor hold now hands off to follow-output once the streamed reply fills the viewport, content growth outrunning the frame-coalesced resize handler no longer releases follow-output, and the scroll button no longer flickers while follow-output closes the gap a streamed chunk just opened.

#11100 dd6ce77cf1606eee2839368a97cc35417f763232 Thanks @shadcn! - Fix MessageScroller abandoning a newly appended scrollAnchor placement when autoScroll is enabled, so the anchored turn holds at the reading line while the reply streams.

#11085 628e427231ca4bb7f586a69f99fe7809749a53e2 Thanks @devnomic! - Fix MessageScroller firing "ResizeObserver loop completed with undelivered notifications" during streamed content growth by coalescing ResizeObserver callbacks into requestAnimationFrame.

Changelog

Sourced from @shadcn/react's changelog.

0.3.1

Patch Changes

#11720 503a3a57aec9a3817e37f90aa0817b1fabd284d0 Thanks @shadcn! - Set data-pending-scroll on the MessageScroller root and viewport until defaultScrollPosition ("end" or "last-anchor") is applied, so the viewport can be hidden and a server-rendered transcript does not flash the top of the thread on reload.

0.3.0

Minor Changes

#11414 3e54530e31020e2277df03490a30a08e3bc1792b Thanks @shadcn! - Add the Questionnaire primitive for multi-step questions, freeform answers, validation, and keyboard navigation.

0.2.1

Patch Changes

#11106 f6a26478547c7057aeda82516666dc3473dc39bd Thanks @shadcn! - Fix MessageScroller autoScroll around anchored turns: the anchor hold now hands off to follow-output once the streamed reply fills the viewport, content growth outrunning the frame-coalesced resize handler no longer releases follow-output, and the scroll button no longer flickers while follow-output closes the gap a streamed chunk just opened.

#11100 dd6ce77cf1606eee2839368a97cc35417f763232 Thanks @shadcn! - Fix MessageScroller abandoning a newly appended scrollAnchor placement when autoScroll is enabled, so the anchored turn holds at the reading line while the reply streams.

#11085 628e427231ca4bb7f586a69f99fe7809749a53e2 Thanks @devnomic! - Fix MessageScroller firing "ResizeObserver loop completed with undelivered notifications" during streamed content growth by coalescing ResizeObserver callbacks into requestAnimationFrame.

Commits

63c1308 chore(release): version packages (#11714)
503a3a5 fix(react): hide MessageScroller until the opening position applies (#11720)
b1c580c chore(release): version packages (#11374)
3e54530 feat: questionnaire (#11414)
5e800ca chore(release): version packages (#11099)
f6a2647 fix(react): follow the live edge after an anchored reply fills the viewport (...
dd6ce77 fix(react): hold newly appended scroll anchors while autoScroll is enabled (#...
628e427 fix(message-scroller): avoid ResizeObserver loop error by coalescing resize h...
See full diff in compare view

Updates convex from 1.25.4 to 1.46.0

Changelog

Sourced from convex's changelog.

1.46.0

Added .optional() to all validators. For example, v.string().optional() is equivalent to v.optional(v.string()). This changes TypeScript compatibility between validators from different Convex versions; projects sharing validators across packages may need to align their convex dependency versions.

npx convex deploy --dry-run now warns when a schema change requires checking every document in large tables against the new schema, since these deploys can take a long time. The warning lists the affected tables along with their document counts and sizes.

Fixed a bug where npx convex deploy could fail with a deployment:data:view permission error when deleting indexes with a deploy key that only has deployment:deploy. The CLI now reuses the schema evaluation response to size the affected tables instead of reading them directly, so deployment:data:view is no longer required.

convex/server exports FunctionReference_future, a reference type whose arguments are checked similar to the way Convex checks them at runtime. Use it instead of FunctionReference when you accept someone else's Convex function as a callback and know which arguments you will pass it. Behavior summary: it rejects a function requiring arguments you never pass, rejects a function that does not declare a top-level argument you do pass, and accepts a function taking broader values than you pass. A plain FunctionReference gets the first and third backwards. The surplus-key check stops at the top level: a surplus key inside a nested object, array element, or union arm is not detected. A value of the type is usable with ctx.runMutation, ctx.scheduler.runAfter, createFunctionHandle, and every other API in this package that takes a reference, all of which now accept FunctionReference | FunctionReference_future. It is deliberately not assignable to a plain FunctionReference, so forwarding one into code typed that way is a compile error rather than a silent loss of argument checking. Library code that wants to accept either kind of reference should take that same union and read arguments and return types through FunctionArgs and FunctionReturnType, which accept either kind.

As a part of the FunctionReference_future work, the _args and _returnType slots on FunctionReference are deprecated. They'll be removed in a future version. FunctionReference gains an optional _fn slot that enables the checked comparison of args.

1.45.0

Local deployments now upgrade to a new backend version in place, instead of going through a snapshot export and import. Upgrades no longer depend on the size of your local data, and no longer prompt about transferring it.

The Convex MCP server (npx convex mcp) now supports the stateless MCP protocol (2026-07-28 MCP specification).

Added a new getServiceToken function that generates service tokens for first-party Convex services. This will be used by the upcoming Convex AI gateway.

Improved the error message when npx convex export fails because a snapshot export is already in progress.

... (truncated)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by ayushdewanconvex, a new releaser for convex since your current version.

Updates countries-and-timezones from 3.9.0 to 3.10.0

Release notes

Sourced from countries-and-timezones's releases.

v3.10.0

Changed

Updated with 2026c IANA Time Zone Database.

ChangelogDescription has been truncated

… 21 updates Bumps the dependencies group with 21 updates in the /apps/web directory: | Package | From | To | | --- | --- | --- | | [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.8.0` | | [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.5.12` | `7.9.10` | | [@convex-dev/agent](https://github.com/get-convex/agent) | `0.1.16` | `0.7.3` | | [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.4.0` | `5.9.1` | | [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.63.0` | `10.75.3` | | [@shadcn/react](https://github.com/shadcn-ui/ui/tree/HEAD/packages/react) | `0.2.0` | `0.3.1` | | [convex](https://github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex) | `1.25.4` | `1.46.0` | | [countries-and-timezones](https://github.com/manuelmhtr/countries-and-timezones) | `3.9.0` | `3.10.0` | | [input-otp](https://github.com/guilhermerodz/input-otp/tree/HEAD/packages/input-otp) | `1.4.2` | `1.5.0` | | [jotai](https://github.com/pmndrs/jotai) | `2.20.1` | `2.20.3` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.475.0` | `0.577.0` | | [next](https://github.com/vercel/next.js) | `16.2.6` | `16.3.8` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` | | [react-day-picker](https://github.com/gpbl/react-day-picker/tree/HEAD/packages/react-day-picker) | `10.0.1` | `10.0.2` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.81.0` | `7.89.0` | | [recharts](https://github.com/recharts/recharts) | `3.8.0` | `3.10.1` | | [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` | | [zod](https://github.com/colinhacks/zod) | `3.25.67` | `3.25.76` | Updates `@base-ui/react` from 1.6.0 to 1.8.0 - [Release notes](https://github.com/mui/base-ui/releases) - [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/base-ui/commits/v1.8.0/packages/react) Updates `@clerk/nextjs` from 7.5.12 to 7.9.10 - [Release notes](https://github.com/clerk/javascript/releases) - [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md) - [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.9.10/packages/nextjs) Updates `@convex-dev/agent` from 0.1.16 to 0.7.3 - [Changelog](https://github.com/get-convex/agent/blob/main/CHANGELOG.md) - [Commits](get-convex/agent@v0.1.16...v0.7.3) Updates `@hookform/resolvers` from 5.4.0 to 5.9.1 - [Release notes](https://github.com/react-hook-form/resolvers/releases) - [Commits](react-hook-form/resolvers@v5.4.0...v5.9.1) Updates `@sentry/nextjs` from 10.63.0 to 10.75.3 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.75.3/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.63.0...10.75.3) Updates `@shadcn/react` from 0.2.0 to 0.3.1 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/@shadcn/react@0.3.1/packages/react) Updates `convex` from 1.25.4 to 1.46.0 - [Release notes](https://github.com/get-convex/convex-backend/releases) - [Changelog](https://github.com/get-convex/convex-backend/blob/main/npm-packages/convex/CHANGELOG.md) - [Commits](https://github.com/get-convex/convex-backend/commits/HEAD/npm-packages/convex) Updates `countries-and-timezones` from 3.9.0 to 3.10.0 - [Release notes](https://github.com/manuelmhtr/countries-and-timezones/releases) - [Changelog](https://github.com/manuelmhtr/countries-and-timezones/blob/dev/CHANGELOG.md) - [Commits](manuelmhtr/countries-and-timezones@v3.9.0...v3.10.0) Updates `input-otp` from 1.4.2 to 1.5.0 - [Release notes](https://github.com/guilhermerodz/input-otp/releases) - [Changelog](https://github.com/guilhermerodz/input-otp/blob/master/CHANGELOG.md) - [Commits](https://github.com/guilhermerodz/input-otp/commits/v1.5.0/packages/input-otp) Updates `jotai` from 2.20.1 to 2.20.3 - [Release notes](https://github.com/pmndrs/jotai/releases) - [Commits](pmndrs/jotai@v2.20.1...v2.20.3) Updates `lucide-react` from 0.475.0 to 0.577.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react) Updates `next` from 16.2.6 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.6...v16.3.8) Updates `react` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.17 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-day-picker` from 10.0.1 to 10.0.2 - [Release notes](https://github.com/gpbl/react-day-picker/releases) - [Changelog](https://github.com/gpbl/react-day-picker/blob/main/packages/react-day-picker/CHANGELOG.md) - [Commits](https://github.com/gpbl/react-day-picker/commits/v10.0.2/packages/react-day-picker) Updates `react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-hook-form` from 7.81.0 to 7.89.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.81.0...v7.89.0) Updates `recharts` from 3.8.0 to 3.10.1 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.8.0...v3.10.1) Updates `sonner` from 2.0.7 to 2.0.8 - [Release notes](https://github.com/emilkowalski/sonner/releases) - [Commits](emilkowalski/sonner@v2.0.7...v2.0.8) Updates `zod` from 3.25.67 to 3.25.76 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.67...v3.25.76) --- updated-dependencies: - dependency-name: "@base-ui/react" dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@clerk/nextjs" dependency-version: 7.9.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@convex-dev/agent" dependency-version: 0.7.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@hookform/resolvers" dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@sentry/nextjs" dependency-version: 10.75.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@shadcn/react" dependency-version: 0.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: convex dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: countries-and-timezones dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: input-otp dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: jotai dependency-version: 2.20.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: lucide-react dependency-version: 0.577.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: react-day-picker dependency-version: 10.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: react-hook-form dependency-version: 7.89.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: recharts dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sonner dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: zod dependency-version: 3.25.76 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-10-05T03:38:58Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
echo	Error		Oct 5, 2026 3:39am UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
echo-widget	Skipped		Oct 5, 2026 3:39am UTC

coderabbitai · 2026-10-05T03:39:16Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 3bfe11b0-92bd-4768-9739-df72badd026a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added app:web Relates to apps/web automated Created automatically by a bot labels Oct 5, 2026

dependabot Bot requested a review from RISHII7 as a code owner October 5, 2026 03:38

dependabot Bot added dependencies Pull requests that update a dependency file automated Created automatically by a bot app:web Relates to apps/web labels Oct 5, 2026

vercel Bot temporarily deployed to Preview – echo-widget October 5, 2026 03:38 Inactive

vercel Bot had a problem deploying to Preview – echo October 5, 2026 03:39 Failure

Navigation Menu

chore(web)(deps): bump the dependencies group across 1 directory with 21 updates - #103

chore(web)(deps): bump the dependencies group across 1 directory with 21 updates#103
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/dependencies-d31c418752

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

vercel Bot commented Oct 5, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 5, 2026

Review skipped

Uh oh!

This branch had an error being deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Path	Size
`@sentry/browser`	27.56 KB
`@sentry/browser` - with treeshaking flags	26.04 KB
`@sentry/browser` (incl. Tracing)	46.02 KB
`@sentry/browser` (incl. Tracing + Span Streaming)	47.77 KB
`@sentry/browser` (incl. Tracing, Profiling)	50.67 KB
`@sentry/browser` (incl. Tracing, Replay)	84.38 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	74.28 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	89 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	101.33 KB
`@sentry/browser` (incl. Feedback)	44.33 KB
`@sentry/browser` (incl. sendFeedback)	32.25 KB
`@sentry/browser` (incl. FeedbackAsync)	37.27 KB
`@sentry/browser` (incl. Metrics)	28.63 KB
`@sentry/browser` (incl. Logs)	28.84 KB
`@sentry/browser` (incl. Metrics & Logs)	29.52 KB
`@sentry/react`	29.32 KB
`@sentry/react` (incl. Tracing)	48.28 KB
`@sentry/vue`	32.88 KB
`@sentry/vue` (incl. Tracing)	47.98 KB
`@sentry/svelte`	27.58 KB
CDN Bundle	29.87 KB
CDN Bundle (incl. Tracing)	47.92 KB
CDN Bundle (incl. Logs, Metrics)	31.41 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	49.21 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.82 KB
CDN Bundle (incl. Tracing, Replay)	84.64 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	85.87 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	90.31 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	91.55 KB
CDN Bundle - uncompressed	88.83 KB
CDN Bundle (incl. Tracing) - uncompressed	144.49 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	93.43 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	148.38 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	215.46 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	261.12 KB

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026

v1.8.0

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

v1.8.0

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

@​clerk/nextjs@​7.9.9

Patch Changes

@​clerk/nextjs@​7.9.7

Patch Changes

@​clerk/nextjs@​7.9.5

Patch Changes

7.9.10

Patch Changes

7.9.9

Patch Changes

7.9.8

Patch Changes

7.9.7

Patch Changes

7.9.6

Patch Changes

7.9.5

Patch Changes

0.7.3

0.7.2

0.7.1

0.7.0

v5.9.1

5.9.1 (2026-08-17)

Bug Fixes

v5.9.0

5.9.0 (2026-08-15)

Features

v5.8.0

5.8.0 (2026-08-13)

Features

v5.7.1

5.7.1 (2026-08-02)

Bug Fixes

v5.7.0

5.7.0 (2026-08-02)

Features

v5.6.0

5.6.0 (2026-08-01)

Features

v5.5.8

5.5.8 (2026-08-01)

10.75.3

Bundle size 📦

10.75.3

10.75.2

10.75.1

10.75.0

Important Changes

Other Changes

10.74.0

@​shadcn/react@​0.3.1

Patch Changes

@​shadcn/react@​0.3.0

Minor Changes

@​shadcn/react@​0.2.1

Patch Changes

0.3.1

Patch Changes

0.3.0

Minor Changes

0.2.1

`@clerk/nextjs@7`.9.9

`@clerk/nextjs@7`.9.7

`@clerk/nextjs@7`.9.5

`@shadcn/react@0`.3.1

`@shadcn/react@0`.3.0

`@shadcn/react@0`.2.1

vercel Bot commented Oct 5, 2026 •

edited

Loading