Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 13 updates - #16

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-8eb13029e9
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-8eb13029e9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 14, 2026

Copy link
Copy Markdown

Bumps the minor-and-patch group with 13 updates in the / directory:

Package From To
@supabase/supabase-js 2.118.0 2.119.0
@vercel/speed-insights 2.0.0 2.1.0
canvas-confetti 1.9.3 1.9.4
next 16.4.3 16.4.6
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
@electric-sql/pglite 0.5.14 0.5.16
@lhci/cli 0.15.1 0.16.0
@playwright/test 1.64.1 1.65.0
@tailwindcss/turbopack 4.3.3 4.3.5
eslint-config-next 16.4.3 16.4.6
tailwindcss 4.3.3 4.3.5
vitest 5.0.5 5.1.0

Updates @supabase/supabase-js from 2.118.0 to 2.119.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.119.0

2.119.0 (2026-11-04)

🚀 Features

  • postgrest: expose query builder options to .from method - custom fetch per request (#1570)
  • realtime: broadcast persistence (#2690)

🩹 Fixes

  • auth: deleteUser miscast empty object to User (#2773)
  • auth: global sign out cleared the local session when the server failed to log out (#2786)
  • realtime: include vsn in the unsupported serializer error (#2812)
  • storage: exists reports invalid JWT or missing bucket as missing file (#2783)
  • storage: ignore undefined FileOptions during upload (#2789)

❤️ Thank You

v2.119.0-canary.6

2.119.0-canary.6 (2026-11-04)

This was a version bump only, there were no code changes.

v2.119.0-canary.5

2.119.0-canary.5 (2026-11-03)

🚀 Features

  • realtime: broadcast persistence (#2690)

🩹 Fixes

  • realtime: include vsn in the unsupported serializer error (#2812)

❤️ Thank You

  • Claude Opus 5.5
  • Guilherme Souza

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.119.0 (2026-11-04)

🚀 Features

  • postgrest: expose query builder options to .from method - custom fetch per request (#1570)

❤️ Thank You

Commits
  • d2090f3 ci(repo): migrate test configs to supabase cli v3 (#2811)
  • ecab7fb docs(misc): document SDK compatibility with Platform Services (#2798)
  • 8181a4d chore(deps): bump playwright to 1.64.0 (#2777)
  • bb56484 feat(postgrest): expose query builder options to .from method - custom fetch ...
  • e428dfe chore(release): version 2.118.0 changelogs (#2766)
  • See full diff in compare view

Updates @vercel/speed-insights from 2.0.0 to 2.1.0

Release notes

Sourced from @​vercel/speed-insights's releases.

v2.1.0

What's Changed

Features

  • Add softNavs to opt out of soft-navigation reporting with <SpeedInsights softNavs={false} /> or injectSpeedInsights({ softNavs: false }). #124
  • Add SvelteKit 3 support through @vercel/speed-insights/sveltekit-next. The existing @vercel/speed-insights/sveltekit integration is unchanged. #120

Maintenance

  • Update Node.js for development and CI to 22.23.4. #123
  • Use npm OIDC trusted publishing and pnpm 11 for the release workflow. #117, #116

Existing exports remain supported. The injected script's default-on soft-navigation rollout is separate; the SDK leaves that default unchanged when softNavs is omitted.

Full Changelog: vercel/speed-insights@v2.0.0...v2.1.0

v2.1.0-canary

What's Changed

New Contributors

Full Changelog: vercel/speed-insights@v2.0.1-canary...v2.1.0-canary

v2.0.1-canary

What's Changed

Full Changelog: vercel/speed-insights@v2.0.0...v2.0.1-canary

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vercel/speed-insights since your current version.


Updates canvas-confetti from 1.9.3 to 1.9.4

Release notes

Sourced from canvas-confetti's releases.

1.9.4

What's Changed

Maintenance

New Contributors

Full Changelog: catdad/canvas-confetti@1.9.3...1.9.4

Commits
  • 5f77cde bumping version to 1.9.4
  • f0027c6 updating to use github action as trusted publisher
  • 0566ad2 Merge pull request #258 from Gavin-Hofer/gavin/fix-offscreen-canvas-error
  • 51e7932 Merge branch 'master' into gavin/fix-offscreen-canvas-error
  • c4385c8 Merge pull request #259 from catdad/actions-update
  • 4bf60a5 updating linting to later versions that work in node 24
  • 0d755bc using latest version of node
  • 664a8bb updating actions to the latest versions
  • c1748fe Fixed error in canDrawBitmap if OffscreenCanvas exists but is not supported
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for canvas-confetti since your current version.


Updates next from 16.4.3 to 16.4.6

Release notes

Sourced from next's releases.

v16.4.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Pin Tailwind to 4.3.3 in create-next-app and tests (#101061, #101176) (#101307)
  • [lts-active] Automatically compress route handler responses if not already compressed (#101280)
  • [lts-active] Turbopack GC fixes for dev (#100279, #100370) (#101308)

Credits

Huge thanks to @​lukesandberg and @​eps1lon for helping!

v16.4.5

This release contains security fixes for the following advisories:

Moderate

v16.4.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary. The announced security released for November will be published tomorrow.

Core Changes

  • [lts-active] test: disable the reads fallback params after a client navigation deployment test (#100668)
  • [lts-active] Reload on missed Turbopack startup CSS updates (#100619)
  • [lts-active] Revert "Optimize strict module factory chunks (#98421)" (#100866)
  • [lts-active] Emit the Turbopack shared-runtime bootstrap in the PPR resume so it gets the CSP nonce (#100907)
  • [lts-active] [ci] Pin deploy test deployments to Node.js 22.x (#100886)
  • [lts-active] fix(analyze): use route summaries as the analyzer route index (#100974)
  • [lts-active] Use fast-jwt instead of jsonwebtoken (#100885)

Credits

Huge thanks to @​icyJoseph, @​mischnic, @​wbinnssmith, @​lukesandberg, and @​eps1lon for helping!

Commits
  • 54b876b v16.4.6
  • f3c50b2 [lts-active] Turbopack GC fixes (#100279, #100370) (#101308)
  • 7d0dc76 [lts-active] Automatically compress route handler responses if not already co...
  • deee1fb [lts-active] Pin Tailwind to 4.3.3 in create-next-app and tests (#101061, #10...
  • a1443f2 docs: clarify SVG handling in the Image Optimization API (#101301) (#101306)
  • 8aa9c3e [lts-active] docs: map BFF proxy example routes to fixed backend endpoints (#...
  • 2a799e7 [lts-active] Backport docs fixes since v16.4.0 (#101033)
  • 4e5335a v16.4.5
  • 809be72 [lts-active] Strip internal middleware cookie headers from edge responses (#282)
  • 2842833 [lts-active] Fix stale compressed framing for forwarded fetch responses (#281)
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates @electric-sql/pglite from 0.5.14 to 0.5.16

Release notes

Sourced from @​electric-sql/pglite's releases.

@​electric-sql/pglite@​0.5.16

Patch Changes

  • 4f9737a: Export pglite.wasm, initdb.wasm and pglite.data so they can be imported by package path (e.g. @electric-sql/pglite/pglite.wasm), and document Nitro/Nuxt support.
  • 26a6e21: Parse infinity and -infinity in date, timestamp and timestamptz values as Infinity and -Infinity instead of Invalid Date, and serialize them back to infinity and -infinity.
  • 10378a7: Escape embedded double quotes in identifier template helper so identifiers containing " produce valid SQL
  • 1cb5ca1: Serialize query descriptions and wait for database initialization so concurrent operations return the correct parameter and result metadata.
  • 3e94d9e: reset the stream callback after execProtocolRawStream so later execProtocolRaw/execProtocolRawSync calls are not routed to it

@​electric-sql/pglite@​0.5.15

Patch Changes

  • 649dc0e: Reject with TransactionAbortedError when committing an aborted transaction rolls it back instead of silently resolving.
  • fe8bdc2: Reduce initdb memory usage by passing a smaller WebAssembly.Memory object during initialization'
  • 7c62782: Upgrade tsup to 8.5.1
  • 84ce5ae: Upgrade emsdk to 6.0.13

@​electric-sql/pglite-prepopulatedfs@​0.5.15

Patch Changes

  • Updated dependencies [649dc0e]
  • Updated dependencies [fe8bdc2]
  • Updated dependencies [7c62782]
  • Updated dependencies [84ce5ae]
    • @​electric-sql/pglite@​0.5.15
Changelog

Sourced from @​electric-sql/pglite's changelog.

0.5.16

Patch Changes

  • 4f9737a: Export pglite.wasm, initdb.wasm and pglite.data so they can be imported by package path (e.g. @electric-sql/pglite/pglite.wasm), and document Nitro/Nuxt support.
  • 26a6e21: Parse infinity and -infinity in date, timestamp and timestamptz values as Infinity and -Infinity instead of Invalid Date, and serialize them back to infinity and -infinity.
  • 10378a7: Escape embedded double quotes in identifier template helper so identifiers containing " produce valid SQL
  • 1cb5ca1: Serialize query descriptions and wait for database initialization so concurrent operations return the correct parameter and result metadata.
  • 3e94d9e: reset the stream callback after execProtocolRawStream so later execProtocolRaw/execProtocolRawSync calls are not routed to it

0.5.15

Patch Changes

  • 649dc0e: Reject with TransactionAbortedError when committing an aborted transaction rolls it back instead of silently resolving.
  • fe8bdc2: Reduce initdb memory usage by passing a smaller WebAssembly.Memory object during initialization'
  • 7c62782: Upgrade tsup to 8.5.1
  • 84ce5ae: Upgrade emsdk to 6.0.13
Commits

Updates @lhci/cli from 0.15.1 to 0.16.0

Release notes

Sourced from @​lhci/cli's releases.

v0.16.0

v0.16.0 (2026-11-02)

  • feat: upgrade to lighthouse 13.6.0 (#1152) (5aa2faf), closes #1152
  • feat(cli): support multiple locales in filesystem upload (#1173) (79b609a), closes #1173
  • feat(server): add CLS median graph to project dashboard (#1190) (80c2782), closes #1190
  • feat(server): support subitems in audit detail pane (#1186) (4db2b5d), closes #1186
  • feat(server): support list and checklist audit details in diffing and UI (#1158) (abd2bc0), closes #1158
  • feat(server): add audit_cumulative-layout-shift_median statistic (#1155) (331ec55), closes #1155
  • feat(utils): fix insight presets and map replaced legacy audits (#1151) (0b39a32), closes #1151
  • feat(viewer): add locale switcher to report comparison UI (#1174) (44c608c), closes #1174
  • fix(cli): bind FallbackServer to loopback address (#1182) (966ba2d), closes #1182
  • fix(cli): catch executablePath error for puppeteer-core in getChromiumPath (#1159) (08b9802), closes #1159
  • fix(cli): close Puppeteer browser when collect finishes (#1163) (0359261), closes #1163
  • fix(cli): prefer project Puppeteer installation (#1144) (02021f5), closes #1144
  • fix(cli): decode stdout and stderr as utf8 in node-runner (#1156) (f88133a), closes #1156
  • fix(docker): upgrade base image to node:22-bookworm-slim (#1150) (9c0ee54), closes #1150
  • fix(server): render 0 values in audit table details (#1185) (ba536cc), closes #1185
  • fix(server): use timing-safe comparison for build and admin tokens (#1180) (ca52d40), closes #1180
  • fix(server): use numericUnit and support KiB/MiB in numeric-diff (#1157) (6945cf9), closes #1157
  • fix(utils): reject git refs starting with a dash in build-context (#1183) (9c8f1c1), closes #1183
  • fix(utils): prevent prototype pollution in lodash merge (#1181) (71fc88e), closes #1181
  • fix(utils): match pre-grouped audit items across locales (#1175) (39a3518), closes #1175
  • fix(utils): check url/origin before entity in getItemKey (#1172) (b27cadc), closes #1172
  • fix(utils): avoid filename collision in saveLHR (#1166) (e6aa7c1), closes #1166
  • fix(utils): support string entity key in audit-diff-finder (#1154) (818f6d0), closes #1154
  • fix(utils): respect median-run aggregation in category assertions (#1146) (46b2846), closes #1146
  • docs: document collecting and uploading multiple configurations (mobile/desktop) (#1184) (3c1431e), closes #1184
  • test: fix and update seed-data fixture (#1189) (03514f8)
  • test(cli): normalize report link in autorun-github.test.js (#1153) (a0b25d6), closes #1153
  • test(server): update snapshots in e2e and storybook tests (#1171) (b169a9d), closes #1171
  • test(server): define setImmediate in storybook.test.jsx (#1170) (a3d0ff8), closes #1170
  • chore: bump version references to 0.15.1 (ebee453)
  • chore: bump to node 22 (#1149) (bc6321c), closes #1149
  • chore: bump version references to 0.16 and add node engines requirement (#1194) (6e4f473), closes #1194
  • chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#1193) (9f33b5d), closes #1193
  • chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191) (493c76f), closes #1191
  • chore(deps): update runtime dependencies and security advisories (#1192) (4701152), closes #1192
  • chore(deps): bump fast-uri from 3.1.8 to 3.1.9 in the npm_and_yarn group across 1 directory (#1178) (dae03de), closes #1178
  • chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates (#1177) (85d3343), closes #1177
  • chore(deps): update typescript to 6.0.3 (#1162) (a10daa8), closes #1162
  • chore(deps): update dependencies to address security vulnerabilities (#1161) (e4a892f), closes #1161
  • chore(deps): bump puppeteer to ^24.43.1 (#1164) (3a5808b), closes #1164
  • chore(deps): remove tmp dependency (#1141) (679f74b), closes #1141
  • chore(deps): bump inquirer from 6.x to 8.2.7 (#1140) (d36fdee), closes #1140
  • misc(release): include dist in server and viewer npm packages (#1187) (8c19aa4), closes #1187
  • misc(release): deploy GitHub Pages via publish workflow (#1188) (9c89ccf), closes #1188
  • misc(release): add GHA publish workflow for npm, multi-arch Docker (#1176) (c965460), closes #1176

... (truncated)

Commits
  • 6e4f473 chore: bump version references to 0.16 and add node engines requirement (#1194)
  • 9f33b5d chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#...
  • 493c76f chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191)
  • 4701152 chore(deps): update runtime dependencies and security advisories (#1192)
  • 80c2782 feat(server): add CLS median graph to project dashboard (#1190)
  • 03514f8 test: fix and update seed-data fixture (#1189)
  • 8c19aa4 misc(release): include dist in server and viewer npm packages (#1187)
  • 9c89ccf misc(release): deploy GitHub Pages via publish workflow (#1188)
  • 4db2b5d feat(server): support subitems in audit detail pane (#1186)
  • ba536cc fix(server): render 0 values in audit table details (#1185)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​lhci/cli since your current version.


Updates @playwright/test from 1.64.1 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
      // No other test runs while this one is running.
    });
  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
      test.skip('Not implemented yet');
    });

... (truncated)

Commits
  • a1f35e1 chore: mark v1.65.0 (#43925)
  • a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
  • 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
  • daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
  • 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
  • 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
  • 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
  • d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
  • 6e3f5ff docs: release notes for v1.65 (#43874)
  • aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
  • Additional commits viewable in compare view

Updates @tailwindcss/turbopack from 4.3.3 to 4.3.5

Release notes

Sourced from @​tailwindcss/turbopack's releases.

v4.3.5

Fixed

  • Canonicalization: improve performance in projects with many functional variant values (e.g. a matchVariant plugin with thousands of values) (#20663)
  • Don't crash or create a fallback with the wrong color for a color-mix(…) without a color interpolation method (e.g. color-mix(var(--color-red-500)) or color-mix(currentcolor 50%, transparent)) (#20658, #20666)
  • Ensure @tailwindcss/oxide-wasm32-wasi loads instead of hanging forever (e.g. with NAPI_RS_FORCE_WASI=error or in WebContainers) (#20667)
  • Remove as: '*.css' from the @tailwindcss/turbopack setup in its README, because it breaks CSS modules (#20660)
  • Ignore <!-- and --> between top-level rules in CSS instead of throwing or swallowing the next rule (e.g. a { color: red } --> b { color: blue }) (#20665)
  • Ensure @tailwindcss/oxide-wasm32-wasi detects changed and new source files after the first scan (e.g. in WebContainers) (#20487)
  • Prevent type errors with skipLibCheck: false caused by imports of unshipped modules in the @tailwindcss/node type declarations (#20632)

v4.3.4

Added

  • Add @tailwindcss/turbopack, a Turbopack loader for using Tailwind CSS with Next.js (#20367)

Fixed

  • Ensure watch mode detects changes to symlinked @source files whose real paths aren't otherwise scanned (#20356)
  • Ensure variants using @scope wrap generated utilities instead of nesting inside them (#20369)
  • Ensure nested @scope rules preserve their scoping semantics when flattened (#20369)
  • Preserve declarations directly inside @scope by wrapping them in :where(:scope) (#20369)
  • Ensure generated utilities include a space in empty var() fallbacks (e.g. var(--tw-blur,) → var(--tw-blur, )) (#20373)
  • Canonicalization: convert arbitrary breakpoint and container query variants to named equivalents (e.g. max-[64rem]:flex → max-lg:flex) (#20380)
  • Prevent @tailwindcss/vite from crashing on every edit under Vite's experimental bundledDev mode (#20379)
  • Ensure @tailwindcss/oxide falls back to WASM on platforms without native bindings (@tailwindcss/oxide-wasm32-wasi now installs on all platforms, but only loads when no native binding is available) (#20383)
  • Extract class candidates from Ruby %w and %W literals using angle brackets or custom delimiters (e.g. %w<flex>, %w|flex|), including in Slim and Haml templates (#20387)
  • Preserve whitespace in --default(…) values in functional @utility definitions (e.g. --default(box alphabetic) no longer becomes boxalphabetic) (#20392)
  • Ensure automatic source detection respects negation-based .gitignore files (e.g. /* followed by !/… patterns) (#20397)
  • Ensure root theme('…') namespace lookups in JavaScript plugins and config files return the full namespace object instead of the value of its DEFAULT key (#20399)
  • Skip ignored directories when generating watch globs instead of walking their contents on every rebuild (#20408)
  • Drop invalid UTF-8 candidates during class detection (#20389)
  • Prevent @tailwindcss/vite from forcing full-page reloads for scanned files that Vite does not handle as modules (e.g. .php files) (#20414)
  • Canonicalization: don't merge utilities that reference different theme variables set to CSS-wide keywords like unset (#20417)
  • Don't generate utilities when a modifier is used that would otherwise be silently ignored (e.g. rounded-sm/[5], shadow-sm/foo, stroke-2/50) (#20419)
  • Preserve and, or, and not inside selectors in supports-[…] variants (e.g. supports-[selector(a:not(.foo))]:flex) (#20420)
  • Don't warn about Angular's ::ng-deep and :host-context() when optimizing CSS (#20434)
  • Don't generate CSS for candidates containing an empty additional modifier (e.g. bg-red-500/50/ and group-hover/foo//bar:flex) (#20466)
  • Ensure min-*, max-*, and container query variants with decimal values are sorted numerically (e.g. min-[40.25rem] before min-[40.5rem]) (#20512)
  • Ensure CSS comments ending with \*/ are closed correctly instead of swallowing the CSS that follows (e.g. /* C:\temp\*/) (#20508)
  • Improve style invalidation performance of group-* and peer-* variants (#20513)
  • Ensure cached compilers release their loadModule and loadStylesheet callbacks after compilation (#20531)
  • Canonicalization: preserve & when moving a pseudo-element into * or ** (e.g. [&_::before]:flex → **:[&::before]:flex) (#20550)
  • Ensure the Set.prototype.intersection polyfill in canonicalizeCandidates(…) returns the intersection instead of the first set on Node.js < 22 (#20562)
  • Canonicalization: ensure inline theme(…) alphas with more than 2 decimals migrate to a percentage modifier with the same opacity (e.g. theme(colors.red.500/.12345) → text-red-500/[12.345%], not text-red-500/[12.345]) (#20563)
  • Canonicalization: preserve inline theme(…) alphas as an arbitrary percentage when a custom --opacity-* theme value would change the opacity (e.g. theme(colors.red.500/50%) → text-red-500/[50%] with --opacity-50: 10%) (

…3 updates

Bumps the minor-and-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.118.0` | `2.119.0` |
| [@vercel/speed-insights](https://github.com/vercel/speed-insights/tree/HEAD/packages/web) | `2.0.0` | `2.1.0` |
| [canvas-confetti](https://github.com/catdad/canvas-confetti) | `1.9.3` | `1.9.4` |
| [next](https://github.com/vercel/next.js) | `16.4.3` | `16.4.6` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [@electric-sql/pglite](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite) | `0.5.14` | `0.5.16` |
| [@lhci/cli](https://github.com/GoogleChrome/lighthouse-ci) | `0.15.1` | `0.16.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |
| [@tailwindcss/turbopack](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-turbopack) | `4.3.3` | `4.3.5` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.4.3` | `16.4.6` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.3` | `4.3.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.5` | `5.1.0` |



Updates `@supabase/supabase-js` from 2.118.0 to 2.119.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.119.0/packages/core/supabase-js)

Updates `@vercel/speed-insights` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/vercel/speed-insights/releases)
- [Commits](https://github.com/vercel/speed-insights/commits/v2.1.0/packages/web)

Updates `canvas-confetti` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/catdad/canvas-confetti/releases)
- [Commits](catdad/canvas-confetti@1.9.3...1.9.4)

Updates `next` from 16.4.3 to 16.4.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.3...v16.4.6)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@electric-sql/pglite` from 0.5.14 to 0.5.16
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/electric-pglite/blob/main/packages/pglite/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite@0.5.16/packages/pglite)

Updates `@lhci/cli` from 0.15.1 to 0.16.0
- [Release notes](https://github.com/GoogleChrome/lighthouse-ci/releases)
- [Commits](GoogleChrome/lighthouse-ci@v0.15.1...v0.16.0)

Updates `@playwright/test` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `@tailwindcss/turbopack` from 4.3.3 to 4.3.5
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.5/packages/@tailwindcss-turbopack)

Updates `eslint-config-next` from 16.4.3 to 16.4.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.6/packages/eslint-config-next)

Updates `tailwindcss` from 4.3.3 to 4.3.5
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.5/packages/tailwindcss)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.119.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vercel/speed-insights"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: canvas-confetti
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@electric-sql/pglite"
  dependency-version: 0.5.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@lhci/cli"
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tailwindcss/turbopack"
  dependency-version: 4.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Nov 14, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
gitissue Ready Ready Preview Nov 14, 2026 11:39pm UTC

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants