Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2025

Bumps the prod-minor-updates group with 9 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.922.0 3.940.0
cookie 1.0.2 1.1.1
express 5.1.0 5.2.1
lucide-react 0.552.0 0.555.0
next-intl 4.4.0 4.5.7
posthog-node 5.11.2 5.15.0
react-hook-form 7.66.0 7.67.0
resend 6.4.2 6.5.2
tailwind-merge 3.3.1 3.4.0

Updates @aws-sdk/client-s3 from 3.922.0 to 3.940.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.940.0

3.940.0(2025-11-25)

New Features
  • clients: update client endpoints as of 2025-11-25 (e2770904)
  • client-network-firewall: Network Firewall release of the Proxy feature. (0eb20e88)
  • client-organizations: Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. (75e196ee)
  • client-route-53: Adds support for new route53 feature: accelerated recovery. (dbe0a58f)
  • client-ec2: This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. (7d70b063)
Bug Fixes
  • core/protocols: performance improvements for shape serde traversal (#7523) (b20a25ea)
Tests

For list of updated packages, view updated-packages.md in assets-3.940.0.zip

v3.939.0

3.939.0(2025-11-24)

Chores
  • scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)
New Features
  • client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
  • client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)
Bug Fixes
  • clients: export enum objects for string shapes (#7521) (62f648df)
  • cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)
Tests

For list of updated packages, view updated-packages.md in assets-3.939.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.940.0 (2025-11-25)

Note: Version bump only for package @​aws-sdk/client-s3

3.939.0 (2025-11-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.937.0 (2025-11-20)

Features

  • client-s3: Enable / Disable ABAC on a general purpose bucket. (9816b26)

3.936.0 (2025-11-19)

Note: Version bump only for package @​aws-sdk/client-s3

3.935.0 (2025-11-19)

Features

  • client-s3: Adds support for blocking SSE-C writes to general purpose buckets. (cee2e72)

3.934.0 (2025-11-18)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits
  • e9962f1 Publish v3.940.0
  • 1592379 Publish v3.939.0
  • 9981cbc Publish v3.937.0
  • 9816b26 feat(client-s3): Enable / Disable ABAC on a general purpose bucket.
  • a180cc7 Publish v3.936.0
  • c31b14b Publish v3.935.0
  • cee2e72 feat(client-s3): Adds support for blocking SSE-C writes to general purpose bu...
  • ac2be51 chore(codegen): update for smithy/core serde fixes (#7511)
  • 3b6a4d9 Publish v3.934.0
  • 674fae6 Publish v3.933.0
  • Additional commits viewable in compare view

Updates cookie from 1.0.2 to 1.1.1

Release notes

Sourced from cookie's releases.

v1.1.1

Fixed

  • Overwrite value in passed in options (#253) c66147c
    • When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

jshttp/cookie@v1.1.0...v1.1.1

v1.1.0

Added:

  • Add stringifyCookie and parseSetCookie methods (#244, #214)
  • Rename existing methods for clarity (old method names remain for backward compatibility)
    • parseparseCookie
    • serializestringifySetCookie
  • Add side effects field (#245) 00b0327

jshttp/cookie@v1.0.2...v1.1.0

Commits

Updates express from 5.1.0 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.
Commits

Updates lucide-react from 0.552.0 to 0.555.0

Release notes

Sourced from lucide-react's releases.

Version 0.555.0

What's Changed

Full Changelog: lucide-icons/lucide@0.554.0...0.555.0

Version 0.554.0

What's Changed

Breaking change

For lucide-react and lucide-solid, imports for Fingerprint icon are changed to FingerprintPattern.

Lucide React

- import { Fingerprint } from "lucide-react";
+ import { FingerprintPattern } from "lucide-react";

Lucide Solid

- import { Fingerprint } from "lucide/solid";
+ import { FingerprintPattern } from "lucide/solid";
// Or

import Fingerprint from "lucide/solid/icons/fingerprint";


import FingerprintPattern from "lucide/solid/icons/fingerprint-pattern";

New Contributors

Full Changelog: lucide-icons/lucide@0.553.0...0.554.0

Version 0.553.0

What's Changed

... (truncated)

Commits

Updates next-intl from 4.4.0 to 4.5.7

Release notes

Sourced from next-intl's releases.

v4.5.7

4.5.7 (2025-12-01)

Bug Fixes

v4.5.6

4.5.6 (2025-11-27)

Bug fixes for useExtracted

v4.5.5

4.5.5 (2025-11-19)

Bug Fixes

v4.5.4

4.5.4 (2025-11-19)

Bug Fixes

v4.5.3

4.5.3 (2025-11-13)

Bug Fixes

v4.5.2

4.5.2 (2025-11-12)

Bug Fixes

... (truncated)

Changelog

Sourced from next-intl's changelog.

4.5.7 (2025-12-01)

Bug Fixes

4.5.6 (2025-11-27)

Bug Fixes

4.5.5 (2025-11-19)

Bug Fixes

4.5.4 (2025-11-19)

Bug Fixes

4.5.3 (2025-11-13)

Bug Fixes

4.5.2 (2025-11-12)

Bug Fixes

4.5.1 (2025-11-11)

Bug Fixes

4.5.0 (2025-11-07)

Features

Commits

Updates posthog-node from 5.11.2 to 5.15.0

Release notes

Sourced from posthog-node's releases.

[email protected]

5.15.0

Minor Changes

[email protected]

5.14.1

Patch Changes

[email protected]

5.14.0

Minor Changes

Patch Changes

[email protected]

5.13.2

Patch Changes

[email protected]

5.13.1

Patch Changes

[email protected]

5.13.0

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.15.0

Minor Changes

5.14.1

Patch Changes

5.14.0

Minor Changes

Patch Changes

5.13.3

Patch Changes

5.13.2

Patch Changes

5.13.1

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for posthog-node since your current version.


Updates react-hook-form from 7.66.0 to 7.67.0

Release notes

Sourced from react-hook-form's releases.

Version 7.67.0

🎯 feat: add exact to useController props (#13154)

useForm({
  defaultValues: {
    user: {
      name: ''
    }
  }
})
<Controller control={control} name="user" exact={false} /> // subscribe to all user object

✨ fix(types): allow undefined value with async defaultValues in Controller (#13160) 🐞 fix(types): correct PathValueImpl type inference (#13150)

thanks to @​ap0nia, @​Fasping & @​joseph0926

Version 7.66.1

⚡ perf: reduce redundant property access in getDirtyFields (#13146) 🐞 fix(createFormControl): skip setValid() during batch array updates (#13140) 🐞 fix(useForm): recompute isValid after reset when values update asynchronously (#13126) 🐞 fix(deepEqual): handle NaN comparison correctly using Object.is (#13120)

thanks to @​kimtaejin3, @​a28689604 & @​WuMingDao

Commits
  • bc0c12f 7.67.0
  • caa514c 7.66.1
  • d13be6a ⚡ perf: reduce redundant property access in getDirtyFields (#13146)
  • 6800ba9 ❤️ thank you so much thanks.dev for sponsoring the project!
  • 932c957 🐞 fix(createFormControl): skip setValid() during batch array updates (#13140)
  • fb6423f 🐞 fix(useForm): recompute isValid after reset when values update asynchronous...
  • 4922698 🐞 fix(deepEqual): handle NaN comparison correctly using Object.is (#13120)
  • 67770d3 🫧 chore: add eslint cache in package.json (#13117)
  • 2596e5e 🔩 chore: upgrade dev deps (#13116)
  • See full diff in compare view

Updates resend from 6.4.2 to 6.5.2

Release notes

Sourced from resend's releases.

v6.5.2

What's Changed

Full Changelog: resend/resend-node@v6.5.1...v6.5.2

v6.5.1

What's Changed

Full Changelog: resend/resend-node@v6.5.0...v6.5.1

v6.5.0

What's Changed

Full Changelog: resend/resend-node@v6.4.2...v6.5.0

Commits

Updates tailwind-merge from 3.3.1 to 3.4.0

Release notes

Sourced from tailwind-merge's releases.

v3.4.0

New Features

Documentation

Other

Full Changelog: dcastil/tailwind-merge@v3.3.1...v3.4.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov and a private sponsor for sponsoring tailwind-merge! ❤️

Commits
  • 3e1256a v3.4.0
  • e15f392 add changelog for v3.4.0
  • 75e9aef Merge pull request #619 from quantizor/further-improvements
  • 1bafc9c Make benchmark test names consistent
  • 0799c12 revert: remove array-based string building optimization
  • 1927858 test: add ultra long class list benchmark
  • 87baba3 Remove unnecessary pre-computed conflict maps
  • 7831c8e perf: pre-compute conflict arrays at initialization
  • 1a3d133 perf: replace localeCompare with direct string comparison
  • 0270028 perf: use index-based recursion to avoid array allocations
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for tailwind-merge since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • `@...

Description has been truncated

Bumps the prod-minor-updates group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.922.0` | `3.940.0` |
| [cookie](https://github.com/jshttp/cookie) | `1.0.2` | `1.1.1` |
| [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.552.0` | `0.555.0` |
| [next-intl](https://github.com/amannn/next-intl) | `4.4.0` | `4.5.7` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.11.2` | `5.15.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.66.0` | `7.67.0` |
| [resend](https://github.com/resend/resend-node) | `6.4.2` | `6.5.2` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.3.1` | `3.4.0` |



Updates `@aws-sdk/client-s3` from 3.922.0 to 3.940.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.940.0/clients/client-s3)

Updates `cookie` from 1.0.2 to 1.1.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v1.0.2...v1.1.1)

Updates `express` from 5.1.0 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.1.0...v5.2.1)

Updates `lucide-react` from 0.552.0 to 0.555.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.555.0/packages/lucide-react)

Updates `next-intl` from 4.4.0 to 4.5.7
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.4.0...v4.5.7)

Updates `posthog-node` from 5.11.2 to 5.15.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/[email protected]/packages/node)

Updates `react-hook-form` from 7.66.0 to 7.67.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.66.0...v7.67.0)

Updates `resend` from 6.4.2 to 6.5.2
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v6.4.2...v6.5.2)

Updates `tailwind-merge` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.3.1...v3.4.0)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.940.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: cookie
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: lucide-react
  dependency-version: 0.555.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: next-intl
  dependency-version: 4.5.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: posthog-node
  dependency-version: 5.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: react-hook-form
  dependency-version: 7.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: resend
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: tailwind-merge
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 2, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 4, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 4, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/prod-minor-updates-de4f2e0db9 branch December 4, 2025 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant