Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 17 updates#65

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-8ddf639827
Open

chore(deps): bump the npm-dependencies group across 1 directory with 17 updates#65
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-8ddf639827

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 16 updates in the / directory:

Package From To
@clerk/nextjs 7.3.4 7.5.9
@clerk/ui 1.10.0 1.23.0
lucide-react 1.16.0 1.22.0
next 16.2.6 16.2.9
radix-ui 1.4.3 1.6.0
react 19.2.6 19.2.7
@types/react 19.2.14 19.2.17
react-dom 19.2.6 19.2.7
@biomejs/biome 2.4.15 2.5.1
@clerk/testing 2.0.28 2.1.7
@playwright/test 1.60.0 1.61.1
@tailwindcss/postcss 4.3.0 4.3.1
@vitejs/plugin-react 6.0.2 6.0.3
lefthook 2.1.6 2.1.9
shadcn 4.7.0 4.12.0
vitest 4.1.6 4.1.9

Updates @clerk/nextjs from 7.3.4 to 7.5.9

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.5.9

Patch Changes

  • Updated dependencies [19ce04a]:
    • @​clerk/shared@​4.22.0
    • @​clerk/react@​6.11.1
    • @​clerk/backend@​3.8.4

@​clerk/nextjs@​7.5.8

Patch Changes

@​clerk/nextjs@​7.5.7

Patch Changes

  • Updated dependencies [01789b4]:
    • @​clerk/shared@​4.20.0
    • @​clerk/backend@​3.8.2
    • @​clerk/react@​6.10.4

@​clerk/nextjs@​7.5.6

Patch Changes

@​clerk/nextjs@​7.5.5

Patch Changes

@​clerk/nextjs@​7.5.3

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

7.5.9

Patch Changes

  • Updated dependencies [19ce04a]:
    • @​clerk/shared@​4.22.0
    • @​clerk/react@​6.11.1
    • @​clerk/backend@​3.8.4

7.5.8

Patch Changes

7.5.7

Patch Changes

  • Updated dependencies [01789b4]:
    • @​clerk/shared@​4.20.0
    • @​clerk/backend@​3.8.2
    • @​clerk/react@​6.10.4

7.5.6

Patch Changes

7.5.5

Patch Changes

7.5.4

Patch Changes

... (truncated)

Commits

Updates @clerk/ui from 1.10.0 to 1.23.0

Release notes

Sourced from @​clerk/ui's releases.

@​clerk/ui@​1.23.0

Minor Changes

Patch Changes

  • Fix the self-serve SSO configuration wizard losing your place when organization data refetches mid-flow. After submitting a Configure step (for example saving an identity provider's metadata), a background refetch on the OrganizationProfile Security page could unmount the open ConfigureSSO wizard and re-render it on an earlier step. The wizard now stays on its current step while data loads in the background. (#8999) by @​iagodahlem

  • Fix focus ring visibility on Tab elements for keyboard navigation. (#8998) by @​alexcarpenter

  • Updated dependencies [19ce04a, 3e036f4]:

    • @​clerk/localizations@​4.11.0
    • @​clerk/shared@​4.22.0

@​clerk/ui@​1.21.0

Minor Changes

  • Migrate from :focus to :focus-visible so focus rings only appear during keyboard navigation (#8595) by @​alexcarpenter

  • Improve UserButton and OrganizationSwitcher accessibility. The trigger button now announces itself as a dialog trigger (aria-haspopup="dialog") and the popover uses role="dialog" instead of role="menu". UserButton and OrganizationSwitcher popovers now receive focus when opened, and actions are logically grouped with labelled role="group" elements for screen readers. (#8325) by @​alexcarpenter

Patch Changes

  • Condense the OrganizationProfile Security page SSO overview to a single summary row (one-line description, domains as chips, status badge, actions under the overflow menu) and remove the now-unused ssoSection provider/sign-on URL/issuer/descriptionLine2 localization keys. (#8915) by @​iagodahlem

  • Updates development mode indicator styling. (#8917) by @​alexcarpenter

  • Add a generic FLOW_STEP_MOUNTED telemetry event (eventFlowStepMounted) for measuring multi-step flow funnels, and wire it into the self-serve SSO flow (#8951) by @​LauraBeatris

  • Add localization support for OAuth access denied errors. (#8786) by @​wobsoriano

  • Allow changing enterprise connection provider between self-serve SSO steps (#8881) by @​LauraBeatris

  • The Security tab in <OrganizationProfile /> is now hidden for members who lack the manage enterprise connections permission (org:sys_entconns:manage), instead of rendering a permission-denied state. This matches how the Members, Billing, and API keys tabs are gated. (#8971) by @​iagodahlem

  • Self-serve SSO: fix the configuration wizard rendering a blank step when a connection is reset from the first configuration step. Resetting now returns to the provider selection step. (#8970) by @​iagodahlem

  • Self-serve SSO: restore keyboard-accessible provider selection, mark configuration wizard steps complete based on connection state rather than position, and fix the organization Security page loading state. (#8940) by @​iagodahlem

  • Updated dependencies [c38d853, 7e3174a, 97039bb, f43071d, 0e0ff11, 0039618, a536a0d]:

    • @​clerk/localizations@​4.9.3
    • @​clerk/shared@​4.21.0

@​clerk/ui@​1.20.0

Minor Changes

... (truncated)

Changelog

Sourced from @​clerk/ui's changelog.

1.23.0

Minor Changes

Patch Changes

  • Fix the self-serve SSO configuration wizard losing your place when organization data refetches mid-flow. After submitting a Configure step (for example saving an identity provider's metadata), a background refetch on the OrganizationProfile Security page could unmount the open ConfigureSSO wizard and re-render it on an earlier step. The wizard now stays on its current step while data loads in the background. (#8999) by @​iagodahlem

  • Fix focus ring visibility on Tab elements for keyboard navigation. (#8998) by @​alexcarpenter

  • Updated dependencies [19ce04a, 3e036f4]:

    • @​clerk/localizations@​4.11.0
    • @​clerk/shared@​4.22.0

1.22.0

Minor Changes

  • Monetary amounts are now formatted using your application's locale. For example, with the locale set to fr-FR, a USD 1000 amount now renders as 1 000,00 $US; previously, it rendered as $1,000.00 regardless of your application's configured locale. (#8918) by @​dstaley

Patch Changes

  • Fix the <ConfigureSSO /> wizard header on small screens: the back link now stacks above the step indicators and the step separators are hidden, so the steps no longer wrap onto a second line. (#8984) by @​iagodahlem

  • Updated dependencies [fd7b824, af0eb3f, 8024cac]:

    • @​clerk/localizations@​4.10.0

1.21.0

Minor Changes

  • Migrate from :focus to :focus-visible so focus rings only appear during keyboard navigation (#8595) by @​alexcarpenter

  • Improve UserButton and OrganizationSwitcher accessibility. The trigger button now announces itself as a dialog trigger (aria-haspopup="dialog") and the popover uses role="dialog" instead of role="menu". UserButton and OrganizationSwitcher popovers now receive focus when opened, and actions are logically grouped with labelled role="group" elements for screen readers. (#8325) by @​alexcarpenter

Patch Changes

  • Condense the OrganizationProfile Security page SSO overview to a single summary row (one-line description, domains as chips, status badge, actions under the overflow menu) and remove the now-unused ssoSection provider/sign-on URL/issuer/descriptionLine2 localization keys. (#8915) by @​iagodahlem

  • Updates development mode indicator styling. (#8917) by @​alexcarpenter

  • Add a generic FLOW_STEP_MOUNTED telemetry event (eventFlowStepMounted) for measuring multi-step flow funnels, and wire it into the self-serve SSO flow (#8951) by @​LauraBeatris

  • Add localization support for OAuth access denied errors. (#8786) by @​wobsoriano

  • Allow changing enterprise connection provider between self-serve SSO steps (#8881) by @​LauraBeatris

... (truncated)

Commits
  • 34c653a ci(repo): Version packages (#8993)
  • 19ce04a chore(ui,shared,localizations): Handle expired status for organization domain...
  • afe9a90 fix(ui): keep ConfigureSSO wizard mounted while security page data refetches ...
  • 0691d46 fix(ui): Ensure tab focus ring is visible for keyboard interactions (#8998)
  • a1e37f4 feat(ui): Add drag to upload to AvatarUploader (#8348)
  • d654e82 ci(repo): Version packages (#8983)
  • fd7b824 feat(localizations,ui): Render monetary amounts according to locale (#8918)
  • 2ddaed5 fix(ui): stack ConfigureSSO header and drop step separators on mobile (#8984)
  • d79852e ci(repo): Version packages (#8939)
  • f43071d chore(shared,ui): Add telemetry event for flow steps (#8951)
  • Additional commits viewable in compare view

Updates lucide-react from 1.16.0 to 1.22.0

Release notes

Sourced from lucide-react's releases.

Version 1.22.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.21.0...1.22.0

Version 1.21.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.20.0...1.21.0

Version 1.20.0

What's Changed

... (truncated)

Commits
  • 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
  • See full diff in compare view

Updates next from 16.2.6 to 16.2.9

Release notes

Sourced from next's releases.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Backport documentation fixes for v16.2 (#93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
  • [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
  • [backport] Propagate adapter preferred regions (#94200)
  • [16.2.x] Don't drop FormData entries (#94240)
  • [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

Commits
  • f37fad9 v16.2.9
  • d9aaaed [cd] Allow tagging semver-lower releases as @latest if @latest po… (#94627)
  • 6f16804 v16.2.8
  • 0dbc1d5 [16.2.x][cd] Ensure release can be triggered on old branches (#94598)
  • 90e3c81 [16.2.x] Align Actions dependencies with Canary (#94339)
  • 83f402c [16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)
  • 411c455 v16.2.7
  • c63224f [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...
  • 63115c7 [16.2.x] Don't drop FormData entries (#94240)
  • aef22fd [backport] Propagate adapter preferred regions (#94200)
  • Additional commits viewable in compare view

Updates radix-ui from 1.4.3 to 1.6.0

Changelog

Sourced from radix-ui's changelog.

1.6.0

const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>('Slot');

Avatar

  • Fixed several edge cases with Avatar's loading state
    • An avatar's fallback would not be displayed again if its image component unmounted. This is now fixed.
    • Rendering multiple Avatar.Image components per Avatar.Root was never supported and results in buggy, unpredictable behavior. We now warn about this in development.
    • Zero-sized images were treated as loading, meaning that onLoadingStatusChange is never called once loaded. A zero-sized image now triggers an error status on load.

Password Toggle Field

  • Renamed misspelled onVisiblityChange prop to onVisibilityChange.
  • Fixed prop type definitions to include asChild for all component parts.

Scroll Area

  • Stabilized the viewport style tag unless the nonce changes.

Slot

  • SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.

Toggle Group

  • Updated single-select and multi-select toggle groups to use the radiogroup and toolbar roles, respectively.

Select

  • Allowed a Select.Item with an empty string value to act as a "clear" option. Selecting it resets the selection back to the placeholder, restoring the native <select> behavior for optional selects. Previously using an empty string value would throw an error.
  • Fixed a bug where typeahead search resulted in focusing an element that no longer exists.

Other updates

  • Fixed a regression in that caused submenu misalignment when using custom portals.
  • Removed dev-only warnings for dialogs when title and/or description is not rendered.
  • Fixed a bug where menus and submenus remained open after a window loses focus.
  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.

1.5.0

Context Menu

  • Added support for a controlled open prop on ContextMenu.Root. This is intended for reading the open state and closing the menu programmatically, though we discourage opening the menu programmatically since opening the menu depends on user interaction to position the menu.

    

    • 






... (truncated)





Commits





Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for radix-ui since your current version.






Updates react from 19.2.6 to 19.2.7



Release notes

Sourced from react's releases.




19.2.7 (June 1st, 2026)


React Server Components








Commits





Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.






Updates @types/react from 19.2.14 to 19.2.17



Commits






Updates react-dom from 19.2.6 to 19.2.7



Release notes

Sourced from react-dom's releases.




19.2.7 (June 1st, 2026)


React Server Components








Commits





Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.






Updates @biomejs/biome from 2.4.15 to 2.5.1



Release notes

Sourced from @​biomejs/biome's releases.




Biome CLI v2.5.1


2.5.1


Patch Changes


    

  • 

    #10722 f8a303d Thanks @​denbezrukov! - Fixed CSS formatter output for comments between import media queries.
    

    -@import url("print.css") print,
-/* comment */
-screen;
+@import url("print.css") print, /* comment */ screen;
    

    • 

  • 

    #10738 9fdc560 Thanks @​JamBalaya56562! - Fixed #9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.
    

    -    "path": "src\account\setup-passkey.tsx",
+    "path": "src\\account\\setup-passkey.tsx",
    

    • 

  • 

    #10626 5f837df Thanks @​tom-groves! - Fixed #10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLog → noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.
    

    • 

  • 

    #10535 c245f9d Thanks @​Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@html expr} blocks were incorrectly reported as unused.
    

    • 

  • 

    #10668 a0f197e Thanks @​Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.
    

    • 

  • 

    #10667 d8c3e87 Thanks @​Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.
    

    • 

  • 

    #10696 ef2373f Thanks @​ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.
    

    • 

  • 

    #10705 4ccb410 Thanks @​ematipico! - Fixed #10652. Biome plugins are now properly filtered when using --only and --skip flags.
    

    • 

  • 

    #10669 aa0a6eb Thanks @​Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.
    

    • 

  • 

    #10689 844b1be Thanks @​ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.
    

    If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.
    

    • 

  • 

    #10695 043fbb5 Thanks @​ematipico! - Fixed #10674. Biome now throws an error when the field level is missing from a rule option.
    

    • 

  • 

    #10712 5941df2 Thanks @​Conaclos! - Improved the diagnostic and the documentation of useFlatMap.
    

    • 

  • 

    #10615 23814f1 Thanks @​qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.
    

    • 

  • 

    #10688 ec69489 Thanks @​ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.
    

    • 

  • 

    #10701 6c2e0d7 Thanks @​ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.
    

    • 






... (truncated)





Changelog

Sourced from @​biomejs/biome's changelog.




2.5.1


Patch Changes


    

  • 

    #10722 f8a303d Thanks @​denbezrukov! - Fixed CSS formatter output for comments between import media queries.
    

    -@import url("print.css") print,
-/* comment */
-screen;
+@import url("print.css") print, /* comment */ screen;
    

    • 

  • 

    #10738 9fdc560 Thanks @​JamBalaya56562! - Fixed #9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.
    

    -    "path": "src\account\setup-passkey.tsx",
+    "path": "src\\account\\setup-passkey.tsx",
    

    • 

  • 

    #10626 5f837df Thanks @​tom-groves! - Fixed #10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLog → noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.
    

    • 

  • 

    #10535 c245f9d Thanks @​Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@html expr} blocks were incorrectly reported as unused.
    

    • 

  • 

    #10668 a0f197e Thanks @​Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.
    

    • 

  • 

    #10667 d8c3e87 Thanks @​Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.
    

    • 

  • 

    #10696 ef2373f Thanks @​ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.
    

    • 

  • 

    #10705 4ccb410 Thanks @​ematipico! - Fixed #10652. Biome plugins are now properly filtered when using --only and --skip flags.
    

    • 

  • 

    #10669 aa0a6eb Thanks @​Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.
    

    • 

  • 

    #10689 844b1be Thanks @​ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The...

    Description has been truncated

    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

      
        @dependabot
  




      

        
          chore(deps): bump the npm-dependencies group across 1 directory with …
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          7c2a9ab
        
      

    

  

    

      
…17 updates

Bumps the npm-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.3.4` | `7.5.9` |
| [@clerk/ui](https://github.com/clerk/javascript/tree/HEAD/packages/ui) | `1.10.0` | `1.23.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.16.0` | `1.22.0` |
| [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.9` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.4.3` | `1.6.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.17` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.15` | `2.5.1` |
| [@clerk/testing](https://github.com/clerk/javascript/tree/HEAD/packages/testing) | `2.0.28` | `2.1.7` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.0` | `4.3.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.2` | `6.0.3` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.6` | `2.1.9` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.7.0` | `4.12.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.6` | `4.1.9` |



Updates `@clerk/nextjs` from 7.3.4 to 7.5.9
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.5.9/packages/nextjs)

Updates `@clerk/ui` from 1.10.0 to 1.23.0
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/ui/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/ui@1.23.0/packages/ui)

Updates `lucide-react` from 1.16.0 to 1.22.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.22.0/packages/lucide-react)

Updates `next` from 16.2.6 to 16.2.9
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.2.6...v16.2.9)

Updates `radix-ui` from 1.4.3 to 1.6.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui)

Updates `react` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@biomejs/biome` from 2.4.15 to 2.5.1
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.1/packages/@biomejs/biome)

Updates `@clerk/testing` from 2.0.28 to 2.1.7
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/testing/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/testing@2.1.7/packages/testing)

Updates `@playwright/test` from 1.60.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.61.1)

Updates `@tailwindcss/postcss` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-postcss)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@vitejs/plugin-react` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react)

Updates `lefthook` from 2.1.6 to 2.1.9
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.6...v2.1.9)

Updates `shadcn` from 4.7.0 to 4.12.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.12.0/packages/shadcn)

Updates `tailwindcss` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss)

Updates `vitest` from 4.1.6 to 4.1.9
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.5.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@clerk/ui"
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lucide-react
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: next
  dependency-version: 16.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: radix-ui
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@clerk/testing"
  dependency-version: 2.1.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: lefthook
  dependency-version: 2.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: shadcn
  dependency-version: 4.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 4.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Jun 28, 2026

    

  








      

  
      



  

  @vercel






  



    

      

  

    

      
          
      

      
            vercel
  Bot

      

      

      commented


        Jun 28, 2026



      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        



        

    

  





      


        



  
    

      
          
The latest updates on your projects. Learn more about Vercel for GitHub.






Project
Deployment
Actions
Updated (UTC)






devflow
Ready Ready
Preview, Comment
Jun 28, 2026 6:56pm






      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  











  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews




  




    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    javascript

  Pull requests that update javascript code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      0 participants