Skip to content

chore(deps): bump the minor-and-patch group with 11 updates - #13

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-5a52acca2d
Closed

chore(deps): bump the minor-and-patch group with 11 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-5a52acca2d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 11 updates:

Package From To
@supabase/supabase-js 2.118.0 2.119.0
canvas-confetti 1.9.3 1.9.4
next 16.4.3 16.4.5
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
@electric-sql/pglite 0.5.14 0.5.15
@lhci/cli 0.15.1 0.16.0
@tailwindcss/turbopack 4.3.3 4.3.4
eslint-config-next 16.4.3 16.4.5
tailwindcss 4.3.3 4.3.4
vitest 5.0.5 5.1.0

Updates @supabase/supabase-js from 2.118.0 to 2.119.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.119.0

2.119.0 (2026-11-04)

🚀 Features

  • postgrest: expose query builder options to .from method - custom fetch per request (#1570)
  • realtime: broadcast persistence (#2690)

🩹 Fixes

  • auth: deleteUser miscast empty object to User (#2773)
  • auth: global sign out cleared the local session when the server failed to log out (#2786)
  • realtime: include vsn in the unsupported serializer error (#2812)
  • storage: exists reports invalid JWT or missing bucket as missing file (#2783)
  • storage: ignore undefined FileOptions during upload (#2789)

❤️ Thank You

v2.119.0-canary.6

2.119.0-canary.6 (2026-11-04)

This was a version bump only, there were no code changes.

v2.119.0-canary.5

2.119.0-canary.5 (2026-11-03)

🚀 Features

  • realtime: broadcast persistence (#2690)

🩹 Fixes

  • realtime: include vsn in the unsupported serializer error (#2812)

❤️ Thank You

  • Claude Opus 5.5
  • Guilherme Souza

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.119.0 (2026-11-04)

🚀 Features

  • postgrest: expose query builder options to .from method - custom fetch per request (#1570)

❤️ Thank You

Commits
  • d2090f3 ci(repo): migrate test configs to supabase cli v3 (#2811)
  • ecab7fb docs(misc): document SDK compatibility with Platform Services (#2798)
  • 8181a4d chore(deps): bump playwright to 1.64.0 (#2777)
  • bb56484 feat(postgrest): expose query builder options to .from method - custom fetch ...
  • e428dfe chore(release): version 2.118.0 changelogs (#2766)
  • See full diff in compare view

Updates canvas-confetti from 1.9.3 to 1.9.4

Release notes

Sourced from canvas-confetti's releases.

1.9.4

What's Changed

Maintenance

New Contributors

Full Changelog: catdad/canvas-confetti@1.9.3...1.9.4

Commits
  • 5f77cde bumping version to 1.9.4
  • f0027c6 updating to use github action as trusted publisher
  • 0566ad2 Merge pull request #258 from Gavin-Hofer/gavin/fix-offscreen-canvas-error
  • 51e7932 Merge branch 'master' into gavin/fix-offscreen-canvas-error
  • c4385c8 Merge pull request #259 from catdad/actions-update
  • 4bf60a5 updating linting to later versions that work in node 24
  • 0d755bc using latest version of node
  • 664a8bb updating actions to the latest versions
  • c1748fe Fixed error in canDrawBitmap if OffscreenCanvas exists but is not supported
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for canvas-confetti since your current version.


Updates next from 16.4.3 to 16.4.5

Release notes

Sourced from next's releases.

v16.4.5

This release contains security fixes for the following advisories:

Moderate

v16.4.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary. The announced security released for November will be published tomorrow.

Core Changes

  • [lts-active] test: disable the reads fallback params after a client navigation deployment test (#100668)
  • [lts-active] Reload on missed Turbopack startup CSS updates (#100619)
  • [lts-active] Revert "Optimize strict module factory chunks (#98421)" (#100866)
  • [lts-active] Emit the Turbopack shared-runtime bootstrap in the PPR resume so it gets the CSP nonce (#100907)
  • [lts-active] [ci] Pin deploy test deployments to Node.js 22.x (#100886)
  • [lts-active] fix(analyze): use route summaries as the analyzer route index (#100974)
  • [lts-active] Use fast-jwt instead of jsonwebtoken (#100885)

Credits

Huge thanks to @​icyJoseph, @​mischnic, @​wbinnssmith, @​lukesandberg, and @​eps1lon for helping!

Commits
  • 4e5335a v16.4.5
  • 809be72 [lts-active] Strip internal middleware cookie headers from edge responses (#282)
  • 2842833 [lts-active] Fix stale compressed framing for forwarded fetch responses (#281)
  • 6596840 [lts-active] [use cache] Fix cache key when binary args are used (#280)
  • 18eeffb [lts-active] Fix shared shell poisoning from request-supplied placeholder par...
  • e66e656 [lts-active] [next/image] Fix false-positive AVIF/HEIC detection (#278)
  • d605874 [lts-active] Fix unstable_cache leaking cold 'use cache' fills across roo...
  • 80c96ed [lts-active] Fix outer 'use cache' entries reused across root param values ...
  • b175f52 v16.4.4
  • ba4a4c1 [lts-active] Use fast-jwt instead of jsonwebtoken (#100885)
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates @electric-sql/pglite from 0.5.14 to 0.5.15

Release notes

Sourced from @​electric-sql/pglite's releases.

@​electric-sql/pglite@​0.5.15

Patch Changes

  • 649dc0e: Reject with TransactionAbortedError when committing an aborted transaction rolls it back instead of silently resolving.
  • fe8bdc2: Reduce initdb memory usage by passing a smaller WebAssembly.Memory object during initialization'
  • 7c62782: Upgrade tsup to 8.5.1
  • 84ce5ae: Upgrade emsdk to 6.0.13

@​electric-sql/pglite-prepopulatedfs@​0.5.15

Patch Changes

  • Updated dependencies [649dc0e]
  • Updated dependencies [fe8bdc2]
  • Updated dependencies [7c62782]
  • Updated dependencies [84ce5ae]
    • @​electric-sql/pglite@​0.5.15
Changelog

Sourced from @​electric-sql/pglite's changelog.

0.5.15

Patch Changes

  • 649dc0e: Reject with TransactionAbortedError when committing an aborted transaction rolls it back instead of silently resolving.
  • fe8bdc2: Reduce initdb memory usage by passing a smaller WebAssembly.Memory object during initialization'
  • 7c62782: Upgrade tsup to 8.5.1
  • 84ce5ae: Upgrade emsdk to 6.0.13
Commits

Updates @lhci/cli from 0.15.1 to 0.16.0

Release notes

Sourced from @​lhci/cli's releases.

v0.16.0

v0.16.0 (2026-11-02)

  • feat: upgrade to lighthouse 13.6.0 (#1152) (5aa2faf), closes #1152
  • feat(cli): support multiple locales in filesystem upload (#1173) (79b609a), closes #1173
  • feat(server): add CLS median graph to project dashboard (#1190) (80c2782), closes #1190
  • feat(server): support subitems in audit detail pane (#1186) (4db2b5d), closes #1186
  • feat(server): support list and checklist audit details in diffing and UI (#1158) (abd2bc0), closes #1158
  • feat(server): add audit_cumulative-layout-shift_median statistic (#1155) (331ec55), closes #1155
  • feat(utils): fix insight presets and map replaced legacy audits (#1151) (0b39a32), closes #1151
  • feat(viewer): add locale switcher to report comparison UI (#1174) (44c608c), closes #1174
  • fix(cli): bind FallbackServer to loopback address (#1182) (966ba2d), closes #1182
  • fix(cli): catch executablePath error for puppeteer-core in getChromiumPath (#1159) (08b9802), closes #1159
  • fix(cli): close Puppeteer browser when collect finishes (#1163) (0359261), closes #1163
  • fix(cli): prefer project Puppeteer installation (#1144) (02021f5), closes #1144
  • fix(cli): decode stdout and stderr as utf8 in node-runner (#1156) (f88133a), closes #1156
  • fix(docker): upgrade base image to node:22-bookworm-slim (#1150) (9c0ee54), closes #1150
  • fix(server): render 0 values in audit table details (#1185) (ba536cc), closes #1185
  • fix(server): use timing-safe comparison for build and admin tokens (#1180) (ca52d40), closes #1180
  • fix(server): use numericUnit and support KiB/MiB in numeric-diff (#1157) (6945cf9), closes #1157
  • fix(utils): reject git refs starting with a dash in build-context (#1183) (9c8f1c1), closes #1183
  • fix(utils): prevent prototype pollution in lodash merge (#1181) (71fc88e), closes #1181
  • fix(utils): match pre-grouped audit items across locales (#1175) (39a3518), closes #1175
  • fix(utils): check url/origin before entity in getItemKey (#1172) (b27cadc), closes #1172
  • fix(utils): avoid filename collision in saveLHR (#1166) (e6aa7c1), closes #1166
  • fix(utils): support string entity key in audit-diff-finder (#1154) (818f6d0), closes #1154
  • fix(utils): respect median-run aggregation in category assertions (#1146) (46b2846), closes #1146
  • docs: document collecting and uploading multiple configurations (mobile/desktop) (#1184) (3c1431e), closes #1184
  • test: fix and update seed-data fixture (#1189) (03514f8)
  • test(cli): normalize report link in autorun-github.test.js (#1153) (a0b25d6), closes #1153
  • test(server): update snapshots in e2e and storybook tests (#1171) (b169a9d), closes #1171
  • test(server): define setImmediate in storybook.test.jsx (#1170) (a3d0ff8), closes #1170
  • chore: bump version references to 0.15.1 (ebee453)
  • chore: bump to node 22 (#1149) (bc6321c), closes #1149
  • chore: bump version references to 0.16 and add node engines requirement (#1194) (6e4f473), closes #1194
  • chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#1193) (9f33b5d), closes #1193
  • chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191) (493c76f), closes #1191
  • chore(deps): update runtime dependencies and security advisories (#1192) (4701152), closes #1192
  • chore(deps): bump fast-uri from 3.1.8 to 3.1.9 in the npm_and_yarn group across 1 directory (#1178) (dae03de), closes #1178
  • chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates (#1177) (85d3343), closes #1177
  • chore(deps): update typescript to 6.0.3 (#1162) (a10daa8), closes #1162
  • chore(deps): update dependencies to address security vulnerabilities (#1161) (e4a892f), closes #1161
  • chore(deps): bump puppeteer to ^24.43.1 (#1164) (3a5808b), closes #1164
  • chore(deps): remove tmp dependency (#1141) (679f74b), closes #1141
  • chore(deps): bump inquirer from 6.x to 8.2.7 (#1140) (d36fdee), closes #1140
  • misc(release): include dist in server and viewer npm packages (#1187) (8c19aa4), closes #1187
  • misc(release): deploy GitHub Pages via publish workflow (#1188) (9c89ccf), closes #1188
  • misc(release): add GHA publish workflow for npm, multi-arch Docker (#1176) (c965460), closes #1176

... (truncated)

Commits
  • 6e4f473 chore: bump version references to 0.16 and add node engines requirement (#1194)
  • 9f33b5d chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#...
  • 493c76f chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191)
  • 4701152 chore(deps): update runtime dependencies and security advisories (#1192)
  • 80c2782 feat(server): add CLS median graph to project dashboard (#1190)
  • 03514f8 test: fix and update seed-data fixture (#1189)
  • 8c19aa4 misc(release): include dist in server and viewer npm packages (#1187)
  • 9c89ccf misc(release): deploy GitHub Pages via publish workflow (#1188)
  • 4db2b5d feat(server): support subitems in audit detail pane (#1186)
  • ba536cc fix(server): render 0 values in audit table details (#1185)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​lhci/cli since your current version.


Updates @tailwindcss/turbopack from 4.3.3 to 4.3.4

Release notes

Sourced from @​tailwindcss/turbopack's releases.

v4.3.4

Added

  • Add @tailwindcss/turbopack, a Turbopack loader for using Tailwind CSS with Next.js (#20367)

Fixed

  • Ensure watch mode detects changes to symlinked @source files whose real paths aren't otherwise scanned (#20356)
  • Ensure variants using @scope wrap generated utilities instead of nesting inside them (#20369)
  • Ensure nested @scope rules preserve their scoping semantics when flattened (#20369)
  • Preserve declarations directly inside @scope by wrapping them in :where(:scope) (#20369)
  • Ensure generated utilities include a space in empty var() fallbacks (e.g. var(--tw-blur,) → var(--tw-blur, )) (#20373)
  • Canonicalization: convert arbitrary breakpoint and container query variants to named equivalents (e.g. max-[64rem]:flex → max-lg:flex) (#20380)
  • Prevent @tailwindcss/vite from crashing on every edit under Vite's experimental bundledDev mode (#20379)
  • Ensure @tailwindcss/oxide falls back to WASM on platforms without native bindings (#20383)
  • Extract class candidates from Ruby %w and %W literals using angle brackets or custom delimiters (e.g. %w<flex>, %w|flex|), including in Slim and Haml templates (#20387)
  • Preserve whitespace in --default(…) values in functional @utility definitions (e.g. --default(box alphabetic) no longer becomes boxalphabetic) (#20392)
  • Ensure automatic source detection respects negation-based .gitignore files (e.g. /* followed by !/… patterns) (#20397)
  • Ensure root theme('…') namespace lookups in JavaScript plugins and config files return the full namespace object instead of the value of its DEFAULT key (#20399)
  • Skip ignored directories when generating watch globs instead of walking their contents on every rebuild (#20408)
  • Drop invalid UTF-8 candidates during class detection (#20389)
  • Prevent @tailwindcss/vite from forcing full-page reloads for scanned files that Vite does not handle as modules (e.g. .php files) (#20414)
  • Canonicalization: don't merge utilities that reference different theme variables set to CSS-wide keywords like unset (#20417)
  • Don't generate utilities when a modifier is used that would otherwise be silently ignored (e.g. rounded-sm/[5], shadow-sm/foo, stroke-2/50) (#20419)
  • Preserve and, or, and not inside selectors in supports-[…] variants (e.g. supports-[selector(a:not(.foo))]:flex) (#20420)
  • Don't warn about Angular's ::ng-deep and :host-context() when optimizing CSS (#20434)
  • Don't generate CSS for candidates containing an empty additional modifier (e.g. bg-red-500/50/ and group-hover/foo//bar:flex) (#20466)
  • Ensure min-*, max-*, and container query variants with decimal values are sorted numerically (e.g. min-[40.25rem] before min-[40.5rem]) (#20512)
  • Ensure CSS comments ending with \*/ are closed correctly instead of swallowing the CSS that follows (e.g. /* C:\temp\*/) (#20508)
  • Improve style invalidation performance of group-* and peer-* variants (#20513)
  • Ensure cached compilers release their loadModule and loadStylesheet callbacks after compilation (#20531)
  • Canonicalization: preserve & when moving a pseudo-element into * or ** (e.g. [&_::before]:flex → **:[&::before]:flex) (#20550)
  • Ensure the Set.prototype.intersection polyfill in canonicalizeCandidates(…) returns the intersection instead of the first set on Node.js < 22 (#20562)
  • Canonicalization: ensure inline theme(…) alphas with more than 2 decimals migrate to a percentage modifier with the same opacity (e.g. theme(colors.red.500/.12345) → text-red-500/[12.345%], not text-red-500/[12.345]) (#20563)
  • Canonicalization: preserve inline theme(…) alphas as an arbitrary percentage when a custom --opacity-* theme value would change the opacity (e.g. theme(colors.red.500/50%) → text-red-500/[50%] with --opacity-50: 10%) (#20563)
  • Ensure the @property fallback isn't applied in Safari versions that no longer support margin-trim: inline (#20569)
  • Treat viewport units like dvmin and svi and font-relative units like cap and rex as lengths in arbitrary values (e.g. text-[10dvmin] generates font-size instead of color) (#20516)
  • Write plugin logs to stderr in tailwindcss canonicalize so they don't end up in the results on stdout (#20561)
  • Extract class shorthands on later lines when Pug text, comments, or quoted attribute values contain unbalanced brackets, or a quote that doesn't start a string (e.g. input(pattern=/"/.source)) (#20547, #20572)
  • Underline the correct occurrence of an unsupported data type in --value(…) warnings (#20554)
  • Canonicalization: prefer an existing candidate when collapsing utilities over another utility with the same default theme value (e.g. text-foreground text-primary → text-primary, not text-card-checked-border) (#20540)
  • Canonicalization: don't collapse utilities into a utility that uses another theme variable with the same default value (e.g. mt-card mb-card → my-card, not my-4) (#20574)
  • Ensure @tailwindcss/postcss rewrites relative url(…)s of stylesheets that are inlined before it runs (e.g. @imports in Vite) in optimized builds (#20576)
  • Drop nested rules that put a combinator after a pseudo-element when using pseudo-element variants (e.g. selection:* on a utility with a nested & > * rule) (#20575)
  • Don't generate CSS for arbitrary values with unbalanced parentheses or brackets (e.g. w-[calc(1px] or [--x:a[b]) (#20577)
  • Canonicalization: prevent collapse: true from taking exponentially longer when classes are linked through a utility that sets many properties (e.g. sr-only) (#20558)
  • Ensure & is substituted inside :-moz-any(…) and :-webkit-any(…) in custom variants (e.g. @custom-variant firefox (:-moz-any(&));) (#20486)
  • Ensure the standalone macOS binaries have a valid code signature, so macOS 27 no longer kills them at launch (#20578)
  • Ensure @tailwindcss/turbopack and @tailwindcss/webpack rebuild when the input CSS changes (e.g. next dev with Turbopack no longer serves the CSS of the previous edit) (#20582)
  • Canonicalization: don't drop a utility that sets a --tw-* variable when an unrelated property has the same value (e.g. link mt-4 no longer becomes mt-4 when link sets margin-top: 16px and --tw-translate-x: 16px) (#20593)

... (truncated)

Changelog

Sourced from @​tailwindcss/turbopack's changelog.

[4.3.4] - 2026-11-02

Added

  • Add @tailwindcss/turbopack, a Turbopack loader for using Tailwind CSS with Next.js (#20367)

Fixed

  • Ensure watch mode detects changes to symlinked @source files whose real paths aren't otherwise scanned (#20356)
  • Ensure variants using @scope wrap generated utilities instead of nesting inside them (#20369)
  • Ensure nested @scope rules preserve their scoping semantics when flattened (#20369)
  • Preserve declarations directly inside @scope by wrapping them in :where(:scope) (#20369)
  • Ensure generated utilities include a space in empty var() fallbacks (e.g. var(--tw-blur,) → var(--tw-blur, )) (#20373)
  • Canonicalization: convert arbitrary breakpoint and container query variants to named equivalents (e.g. max-[64rem]:flex → max-lg:flex) (#20380)
  • Prevent @tailwindcss/vite from crashing on every edit under Vite's experimental bundledDev mode (#20379)
  • Ensure @tailwindcss/oxide falls back to WASM on platforms without native bindings (#20383)
  • Extract class candidates from Ruby %w and %W literals using angle brackets or custom delimiters (e.g. %w<flex>, %w|flex|), including in Slim and Haml templates (#20387)
  • Preserve whitespace in --default(…) values in functional @utility definitions (e.g. --default(box alphabetic) no longer becomes boxalphabetic) (#20392)
  • Ensure automatic source detection respects negation-based .gitignore files (e.g. /* followed by !/… patterns) (#20397)
  • Ensure root theme('…') namespace lookups in JavaScript plugins and config files return the full namespace object instead of the value of its DEFAULT key (#20399)
  • Skip ignored directories when generating watch globs instead of walking their contents on every rebuild (#20408)
  • Drop invalid UTF-8 candidates during class detection (#20389)
  • Prevent @tailwindcss/vite from forcing full-page reloads for scanned files that Vite does not handle as modules (e.g. .php files) (#20414)
  • Canonicalization: don't merge utilities that reference different theme variables set to CSS-wide keywords like unset (#20417)
  • Don't generate utilities when a modifier is used that would otherwise be silently ignored (e.g. rounded-sm/[5], shadow-sm/foo, stroke-2/50) (#20419)
  • Preserve and, or, and not inside selectors in supports-[…] variants (e.g. supports-[selector(a:not(.foo))]:flex) (#20420)
  • Don't warn about Angular's ::ng-deep and :host-context() when optimizing CSS (#20434)
  • Don't generate CSS for candidates containing an empty additional modifier (e.g. bg-red-500/50/ and group-hover/foo//bar:flex) (#20466)
  • Ensure min-*, max-*, and container query variants with decimal values are sorted numerically (e.g. min-[40.25rem] before min-[40.5rem]) (#20512)
  • Ensure CSS comments ending with \*/ are closed correctly instead of swallowing the CSS that follows (e.g. /* C:\temp\*/) (#20508)
  • Improve style invalidation performance of group-* and peer-* variants (#20513)
  • Ensure cached compilers release their loadModule and loadStylesheet callbacks after compilation (#20531)
  • Canonicalization: preserve & when moving a pseudo-element into * or ** (e.g. [&_::before]:flex → **:[&::before]:flex) (#20550)
  • Ensure the Set.prototype.intersection polyfill in canonicalizeCandidates(…) returns the intersection instead of the first set on Node.js < 22 (#20562)
  • Canonicalization: ensure inline theme(…) alphas with more than 2 decimals migrate to a percentage modifier with the same opacity (e.g. theme(colors.red.500/.12345) → text-red-500/[12.345%], not text-red-500/[12.345]) (#20563)
  • Canonicalization: preserve inline theme(…) alphas as an arbitrary percentage when a custom --opacity-* theme value would change the opacity (e.g. theme(colors.red.500/50%) → text-red-500/[50%] with --opacity-50: 10%) (#20563)
  • Ensure the @property fallback isn't applied in Safari versions that no longer support margin-trim: inline (#20569)
  • Treat viewport units like dvmin and svi and font-relative units like cap and rex as lengths in arbitrary values (e.g. text-[10dvmin] generates font-size instead of color) (#20516)
  • Write plugin logs to stderr in tailwindcss canonicalize so they don't end up in the results on stdout (#20561)
  • Extract class shorthands on later lines when Pug text, comments, or quoted attribute values contain unbalanced brackets, or a quote that doesn't start a string (e.g. input(pattern=/"/.source)) (#20547, #20572)
  • Underline the correct occurrence of an unsupported data type in --value(…) warnings (#20554)
  • Canonicalization: prefer an existing candidate when collapsing utilities over another utility with the same default theme value (e.g. text-foreground text-primary → text-primary, not text-card-checked-border) (#20540)
  • Canonicalization: don't collapse utilities into a utility that uses another theme variable with the same default value (e.g. mt-card mb-card → my-card, not my-4) (#20574)
  • Ensure @tailwindcss/postcss rewrites relative url(…)s of stylesheets that are inlined before it runs (e.g. @imports in Vite) in optimized builds (#20576)
  • Drop nested rules that put a combinator after a pseudo-element when using pseudo-element variants (e.g. selection:* on a utility with a nested & > * rule) (#20575)
  • Don't generate CSS for arbitrary values with unbalanced parentheses or brackets (e.g. w-[calc(1px] or [--x:a[b]) (#20577)
  • Canonicalization: prevent collapse: true from taking exponentially longer when classes are linked through a utility that sets many properties (e.g. sr-only) (#20558)
  • Ensure & is substituted inside :-moz-any(…) and :-webkit-any(…) in custom variants (e.g. @custom-variant firefox (:-moz-any(&));) (#20486)
  • Ensure the standalone macOS binaries have a valid code signature, so macOS 27 no longer kills them at launch (#20578)
  • Ensure @tailwindcss/turbopack and @tailwindcss/webpack rebuild when the input CSS changes (e.g. next dev with Turbopack no longer serves the CSS of the previous edit) (#20582)

... (truncated)

Commits
  • 2626ae6 4.3.4 (#20447)
  • f7f47f8 Rebuild @tailwindcss/turbopack and @tailwindcss/webpack when the input CS...
  • 56565b6 Add Turbopack loader integration coverage
  • c9689a4 Add @​tailwindcss/turbopack loader
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tailwindcss/turbopack since your current version.


Updates eslint-config-next from 16.4.3 to 16.4.5

Release notes

Sourced from eslint-config-next's releases.

v16.4.5

This release contains security fixes for the following advisories:

Moderate

@dependabot
chore(deps): bump the minor-and-patch group with 11 updates
9b0fd09 
Bumps the minor-and-patch group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.118.0` | `2.119.0` |
| [canvas-confetti](https://github.com/catdad/canvas-confetti) | `1.9.3` | `1.9.4` |
| [next](https://github.com/vercel/next.js) | `16.4.3` | `16.4.5` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [@electric-sql/pglite](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite) | `0.5.14` | `0.5.15` |
| [@lhci/cli](https://github.com/GoogleChrome/lighthouse-ci) | `0.15.1` | `0.16.0` |
| [@tailwindcss/turbopack](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-turbopack) | `4.3.3` | `4.3.4` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.4.3` | `16.4.5` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.3` | `4.3.4` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.5` | `5.1.0` |


Updates `@supabase/supabase-js` from 2.118.0 to 2.119.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.119.0/packages/core/supabase-js)

Updates `canvas-confetti` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/catdad/canvas-confetti/releases)
- [Commits](catdad/canvas-confetti@1.9.3...1.9.4)

Updates `next` from 16.4.3 to 16.4.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.3...v16.4.5)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@electric-sql/pglite` from 0.5.14 to 0.5.15
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite@0.5.15/packages/pglite)

Updates `@lhci/cli` from 0.15.1 to 0.16.0
- [Release notes](https://github.com/GoogleChrome/lighthouse-ci/releases)
- [Commits](GoogleChrome/lighthouse-ci@v0.15.1...v0.16.0)

Updates `@tailwindcss/turbopack` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/@tailwindcss-turbopack)

Updates `eslint-config-next` from 16.4.3 to 16.4.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.5/packages/eslint-config-next)

Updates `tailwindcss` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/tailwindcss)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.119.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: canvas-confetti
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@electric-sql/pglite"
  dependency-version: 0.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@lhci/cli"
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tailwindcss/turbopack"
  dependency-version: 4.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.4.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Nov 7, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
gitissue Ready Ready Preview Nov 7, 2026 11:36pm UTC

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 7, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 14, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 14, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-5a52acca2d branch November 14, 2026 23:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants