chore(deps)(deps): bump the production-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #810 · objectstack-ai/spec

dependabot · 2026-02-24T14:22:03Z

Bumps the production-dependencies group with 10 updates in the / directory:

Package	From	To
lucide-react	`0.574.0`	`0.575.0`
@oclif/core	`4.8.0`	`4.8.1`
glob	`13.0.5`	`13.0.6`
better-auth	`1.4.18`	`1.4.19`
hono	`4.11.9`	`4.12.2`
fumadocs-core	`16.6.3`	`16.6.5`
fumadocs-mdx	`14.2.7`	`14.2.8`
fumadocs-ui	`16.6.3`	`16.6.5`
tailwind-merge	`3.4.1`	`3.5.0`
react-resizable-panels	`4.6.4`	`4.6.5`

Updates lucide-react from 0.574.0 to 0.575.0

Release notes

Sourced from lucide-react's releases.

Version 0.575.0

What's Changed

feat(icons): added message-square-check icon by @karsa-mistmere in lucide-icons/lucide#4076

fix(lucide): Fix ESM Module output path in build by @ericfennis in lucide-icons/lucide#4084

feat(icons): added metronome icon by @edwloef in lucide-icons/lucide#4063

fix(icons): remove execution permission of SVG files by @duckafire in lucide-icons/lucide#4053

fix(icons): changed file-pen-line icon by @jguddas in lucide-icons/lucide#3970

feat(icons): added square-arrow-right-exit and square-arrow-right-enter icons by @EthanHazel in lucide-icons/lucide#3958

fix(icons): renamed flip-* to square-centerline-dashed-* by @jguddas in lucide-icons/lucide#3945

New Contributors

@edwloef made their first contribution in lucide-icons/lucide#4063

@duckafire made their first contribution in lucide-icons/lucide#4053

Full Changelog: lucide-icons/lucide@0.573.0...0.575.0

Commits

See full diff in compare view

Updates @oclif/core from 4.8.0 to 4.8.1

Release notes

Sourced from @oclif/core's releases.

4.8.1

Bug Fixes

deps: bump minimatch from 9.0.5 to 10.2.1 (2815e37)

Changelog

Sourced from @oclif/core's changelog.

4.8.1 (2026-02-22)

Bug Fixes

deps: bump minimatch from 9.0.5 to 10.2.1 (2815e37)

Commits

5072476 chore(release): 4.8.1 [skip ci]
ce25dae Merge pull request #1539 from oclif/dependabot-npm_and_yarn-minimatch-10.2.1
2815e37 fix(deps): bump minimatch from 9.0.5 to 10.2.1
bcfc7d0 Merge pull request #1540 from oclif/dependabot-npm_and_yarn-eslint-9.39.3
d399e77 chore(dev-deps): bump eslint from 9.39.2 to 9.39.3
6929b32 Merge pull request #1541 from oclif/dependabot-npm_and_yarn-eslint-config-ocl...
72cf503 chore(dev-deps): bump eslint-config-oclif from 6.0.137 to 6.0.140
e32b9b3 Merge pull request #1534 from oclif/dependabot-npm_and_yarn-oclif-plugin-plug...
a8489da Merge pull request #1535 from oclif/dependabot-npm_and_yarn-eslint-config-ocl...
3e95a26 chore(dev-deps): bump eslint-config-oclif from 6.0.135 to 6.0.137
Additional commits viewable in compare view

Updates glob from 13.0.5 to 13.0.6

Commits

e80cb38 13.0.6
9cdbbff revert tsgo, not ready for test coverage correctness yet
89c99ba use tsgo compiler
b7275d5 update deps, expand engines to include node 18
942e360 update workflows, pull taprc out of package.json
4a0d53c update tap for mockImport bugfix
ef94ad2 update tap
180c2d4 update docs
37993c8 remove stray console.error in test
See full diff in compare view

Updates better-auth from 1.4.18 to 1.4.19

Release notes

Sourced from better-auth's releases.

v1.4.19

🚀 Features

adapter:

Improve select support - by @jslno in better-auth/better-auth#7667 (4aae0)

oauth-provider:

Add iss parameter to authorization responses (RFC 9207) - by @Paola3stefania in better-auth/better-auth#7669 (766fc)

Add configurable rate limiting for OAuth endpoints - by @Paola3stefania in better-auth/better-auth#7666 (2410d)

Enforce HTTPS for redirect URIs - by @Paola3stefania in better-auth/better-auth#7670 (cf473)

phone-number:

Support user additionalFields in signUpOnVerification flow - by @bytaesu and @himself65 in better-auth/better-auth#7699 (f3080)

🐞 Bug Fixes

Skip sending email verification to already verified users without a session - by @bytaesu in better-auth/better-auth#7712 (1667f)

Improve Headers detection with instanceof check and cross-realm fallback - by @bytaesu in better-auth/better-auth#7651 (1dc6a)

Safely coerce date values from DB in OAuth provider plugin - by @himself65 in better-auth/better-auth#7937 (f7074)

Correct error redirect URL construction - by @bytaesu in better-auth/better-auth#7799 (61cc2)

Encode callbackURL in delete-user verification email - by @Paola3stefania in better-auth/better-auth#8007 (fab61)

Add error handling for id token verification in Apple and Google providers - by @Paola3stefania in better-auth/better-auth#8011 (90ffd)

access:

Allow passing statements directly into newRole - by @jslno in better-auth/better-auth#7687 (9312d)

adapter:

Use getCurrentAdapter for user lookup to avoid transaction deadlock - by @sakamoto-wk in better-auth/better-auth#7758 (327ee)

admin:

Change list type from never[] to UserWithRole[] - by @LovelessCodes in better-auth/better-auth#7701 (3c0c5)

Apply listUsers filter when filterValue is defined - by @coderrshyam, @bytaesu and Taesu in better-auth/better-auth#7827 (5f611)

Optional chain user in hooks - by @jslno in better-auth/better-auth#8026 (17407)

api-key:

Error details not passed to response - by @ping-maxwell and @himself65 in better-auth/better-auth#7692 (8fd94)

cli:

Add .env.local to dotenv - by @himself65 in better-auth/better-auth#7831 (e804e)

cookie:

Relax cookie retrieval for getSessionCookie - by @jslno in better-auth/better-auth#8008 (81f50)

custom-session:

Use getSetCookie() to preserve individual Set-Cookie headers - by @thomaspeklak in better-auth/better-auth#7879 (0f035)

db:

Infer default value for required attr properly - by @jslno in better-auth/better-auth#7996 (c44a8)

email-otp:

Typo in OpenAPI response metadata - by @smsunarto and Claude Opus 4.5 in better-auth/better-auth#7737 (defcb)

expo:

Construct the new Request to avoid immutable headers error on Cloudflare Workers - by @bytaesu in better-auth/better-auth#7774 (5e83e)

Avoid a leading “; ” when constructing the first cookie - by @Laurin-Notemann in better-auth/better-auth#7821 (3f5c1)

Support wildcard trusted origins in deep link cookie injection - by @bytaesu in better-auth/better-auth#8013 (7153e)

generic-oauth:

Emit duplicate id warning - by @himself65 in better-auth/better-auth#7779 (c682a)

microsoft:

Add verifyIdToken support for Microsoft Entra ID provider - by @bytaesu in better-auth/better-auth#7795 (80120)

oauth:

Support case-insensitive email matching for social account linking - by @karuppusamy-d in better-auth/better-auth#7812 (987f4)

... (truncated)

Commits

1892ca3 chore: release v1.4.19
0f035e3 fix(custom-session): use getSetCookie() to preserve individual Set-Cookie hea...
3f25497 fix(organization): remove unreachable null check in acceptInvitation (#7825)
80120ae fix(microsoft): add verifyIdToken support for Microsoft Entra ID provider (...
17407ba fix(admin): optional chain user in hooks (#8026)
c44a84d fix(db): infer default value for required attr properly (#7996)
81f507a fix(cookie): relax cookie retrieval for getSessionCookie (#8008)
fab61af fix: encode callbackURL in delete-user verification email (#8007)
c682ac8 fix(generic-oauth): emit duplicate id warning (#7779)
327ee71 fix(adapter): use getCurrentAdapter for user lookup to avoid transaction de...
Additional commits viewable in compare view

Updates hono from 4.11.9 to 4.12.2

Release notes

Sourced from hono's releases.

v4.12.2

Security fix

Fixed incorrect handling of X-Forwarded-For in the AWS Lambda adapter behind ALB that could allow IP-based access control bypass. The detail: GHSA-xh87-mx6m-69f3

Thanks @EdamAme-x

What's Changed

fix(context): revert PR #4707 by @yusukebe in honojs/hono#4757

Full Changelog: honojs/hono@v4.12.1...v4.12.2

v4.12.1

What's Changed

fix(client): export ApplyGlobalResponse from hono/client by @sushichan044 in honojs/hono#4743

Full Changelog: honojs/hono@v4.12.0...v4.12.1

v4.12.0

Release Notes

Hono v4.12.0 is now available!

This release includes new features for the Hono client, middleware improvements, adapter enhancements, and significant performance improvements to the router and context.

$path for Hono Client

The Hono client now has a $path() method that returns the path string instead of a full URL. This is useful when you need just the path portion for routing or key-based operations:
const client = hc<typeof app>('http://localhost:8787')
// Get the path string
const path = client.api.posts.$path()
// => '/api/posts'
// With path parameters
const postPath = client.api.posts[':id'].$path({
param: { id: '123' },
})
// => '/api/posts/123'
// With query parameters
const searchPath = client.api.posts.$path({
query: { filter: 'test' },
})
// => '/api/posts?filter=test'

... (truncated)

Commits

df97e5f 4.12.2
212c64f fix(context): revert PR #4707 (#4757)
5cc8f8f ci: apply automated fixes
41adbf5 Merge commit from fork
2de30d7 4.12.1
91ef235 fix(client): export ApplyGlobalResponse from hono/client (#4743)
d2ed2e9 4.12.0
01e78ad Merge pull request #4735 from honojs/next
a340a25 perf(context): use createResponseInstance for new Response (#4733)
bd26c31 perf(trie-router): improve performance (1.5x ~ 2.0x) (#4724)
Additional commits viewable in compare view

Updates fumadocs-core from 16.6.3 to 16.6.5

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.6.5

Patch Changes

1a614de: enforce MDX stringifier by default

6ab6692: fix edge case for Dynamic Link

fumadocs-core@16.6.4

No release notes provided.

Commits

8a12676 Version Packages (#3020)
c684f53 feat(create-app): add OpenGraph Image to template (#3023)
1a614de Core: enforce MDX stringifier by default
16360ef TypeScript: fix tag parser
f5e7993 OpenAPI: improve edge case handling
d0cc719 Merge pull request #3024 from Shatlyk1011/patch-1
6ab6692 Core: fix edge case for Dynamic Link
4192b69 Version Packages (#3015)
8f8e7f0 UI: fix accessibility issues
3f8c9b0 OpenAPI: Support OpenAPI 3.2 security scheme deprecation
Additional commits viewable in compare view

Updates fumadocs-mdx from 14.2.7 to 14.2.8

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@14.2.8

Patch Changes

1a614de: enforce MDX stringifier by default

Updated dependencies [1a614de]

Updated dependencies [6ab6692]

fumadocs-core@16.6.5

Commits

See full diff in compare view

Updates fumadocs-ui from 16.6.3 to 16.6.5

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.6.5

Patch Changes

Updated dependencies [1a614de]

Updated dependencies [6ab6692]

fumadocs-core@16.6.5

fumadocs-ui@16.6.4

Patch Changes

8f8e7f0: fix accessibility issues

fumadocs-core@16.6.4

Commits

8a12676 Version Packages (#3020)
c684f53 feat(create-app): add OpenGraph Image to template (#3023)
1a614de Core: enforce MDX stringifier by default
16360ef TypeScript: fix tag parser
f5e7993 OpenAPI: improve edge case handling
d0cc719 Merge pull request #3024 from Shatlyk1011/patch-1
6ab6692 Core: fix edge case for Dynamic Link
4192b69 Version Packages (#3015)
8f8e7f0 UI: fix accessibility issues
3f8c9b0 OpenAPI: Support OpenAPI 3.2 security scheme deprecation
Additional commits viewable in compare view

Updates tailwind-merge from 3.4.1 to 3.5.0

Release notes

Sourced from tailwind-merge's releases.

v3.5.0

New Features

Add support for Tailwind CSS v4.2 by @dcastil in dcastil/tailwind-merge#651

Full Changelog: dcastil/tailwind-merge@v3.4.1...v3.5.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @block, @openclaw, @sourcegraph and more via @thnxdev for sponsoring tailwind-merge! ❤️

Commits

270ac79 v3.5.0
86f772e add changelog for 3.5.0
6c1f77c Merge pull request #651 from dcastil/feature/add-support-for-tailwind-css-v4.2
7a4cacf Add support for decimal fraction values
9ef0f79 fix incorrectly escaped characters
f4938b0 update README with v4.2 support
b02a572 Add Tailwind v4.2 font-features utilities support
5bd25ec Add Tailwind v4.2 logical sizing utilities
697c920 Add Tailwind v4.2 logical border block utilities
6656a47 Improve JSDoc comments for logical insets
Additional commits viewable in compare view

Updates react-resizable-panels from 4.6.4 to 4.6.5

Release notes

Sourced from react-resizable-panels's releases.

4.6.5

670: Check for undefined adoptedStyleSheets (to better support environments like jsdom)

671: Bug-fix: Update in-memory layout cache when group is resized by double-clicking on a separator

Changelog

Sourced from react-resizable-panels's changelog.

4.6.5

670: Check for undefined adoptedStyleSheets (to better support environments like jsdom)

671: Bug-fix: Update in-memory layout cache when group is resized by double-clicking on a separator

Commits

d905ad8 4.6.4 -> 4.6.5
ecc52f8 Check for undefined adoptedStyleSheets (to better support environments like j...
7090efb Conditionally-rendered panel edge case bug fix (#671)
211676e Fixed typo in docs example
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…rectory with 10 updates Bumps the production-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.574.0` | `0.575.0` | | [@oclif/core](https://github.com/oclif/core) | `4.8.0` | `4.8.1` | | [glob](https://github.com/isaacs/node-glob) | `13.0.5` | `13.0.6` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.4.18` | `1.4.19` | | [hono](https://github.com/honojs/hono) | `4.11.9` | `4.12.2` | | [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.6.3` | `16.6.5` | | [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `14.2.7` | `14.2.8` | | [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.6.3` | `16.6.5` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.4.1` | `3.5.0` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.6.4` | `4.6.5` | Updates `lucide-react` from 0.574.0 to 0.575.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.575.0/packages/lucide-react) Updates `@oclif/core` from 4.8.0 to 4.8.1 - [Release notes](https://github.com/oclif/core/releases) - [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md) - [Commits](oclif/core@4.8.0...4.8.1) Updates `glob` from 13.0.5 to 13.0.6 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v13.0.5...v13.0.6) Updates `better-auth` from 1.4.18 to 1.4.19 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Commits](https://github.com/better-auth/better-auth/commits/v1.4.19/packages/better-auth) Updates `hono` from 4.11.9 to 4.12.2 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.11.9...v4.12.2) Updates `fumadocs-core` from 16.6.3 to 16.6.5 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-core@16.6.3...fumadocs-core@16.6.5) Updates `fumadocs-mdx` from 14.2.7 to 14.2.8 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/commits/fumadocs-mdx@14.2.8) Updates `fumadocs-ui` from 16.6.3 to 16.6.5 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@16.6.3...fumadocs-ui@16.6.5) Updates `tailwind-merge` from 3.4.1 to 3.5.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v3.4.1...v3.5.0) Updates `react-resizable-panels` from 4.6.4 to 4.6.5 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.6.4...4.6.5) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 0.575.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@oclif/core" dependency-version: 4.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: glob dependency-version: 13.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: better-auth dependency-version: 1.4.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: fumadocs-core dependency-version: 16.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-mdx dependency-version: 14.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-ui dependency-version: 16.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tailwind-merge dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-resizable-panels dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-02-24T14:22:06Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectstack-play	Ready	Preview, Comment	Feb 24, 2026 2:30pm
spec	Ready	Preview, Comment	Feb 24, 2026 2:30pm

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 24, 2026

github-actions bot added documentation Improvements or additions to documentation size/s labels Feb 24, 2026

vercel bot deployed to Preview – objectstack-play February 24, 2026 14:27 View deployment

vercel bot deployed to Preview – spec February 24, 2026 14:30 View deployment

hotlong merged commit 3e8f41d into main Feb 25, 2026
25 of 26 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-d5ef2c5366 branch February 25, 2026 02:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps): bump the production-dependencies group across 1 directory with 10 updates#810

chore(deps)(deps): bump the production-dependencies group across 1 directory with 10 updates#810
hotlong merged 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-d5ef2c5366

dependabot bot commented on behalf of github Feb 24, 2026

Uh oh!

vercel bot commented Feb 24, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Feb 24, 2026

Version 0.575.0

What's Changed

New Contributors

4.8.1

Bug Fixes

4.8.1 (2026-02-22)

Bug Fixes

v1.4.19

🚀 Features

🐞 Bug Fixes

v4.12.2

Security fix

What's Changed

v4.12.1

What's Changed

v4.12.0

Release Notes

$path for Hono Client

fumadocs-core@16.6.5

Patch Changes

fumadocs-core@16.6.4

fumadocs-mdx@14.2.8

Patch Changes

fumadocs-ui@16.6.5

Patch Changes

fumadocs-ui@16.6.4

Patch Changes

v3.5.0

New Features

4.6.5

4.6.5

Uh oh!

vercel bot commented Feb 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`$path` for Hono Client

vercel bot commented Feb 24, 2026 •

edited

Loading