Skip to content

chore(deps): bump the production-deps group across 1 directory with 11 updates - #203

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-54b5eb800e
Closed

chore(deps): bump the production-deps group across 1 directory with 11 updates#203
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-54b5eb800e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-deps group with 11 updates in the / directory:

Package From To
@azure/msal-browser 5.17.1 5.21.0
@livekit/components-react 2.9.23 2.9.24
@modelcontextprotocol/sdk 1.29.0 1.30.0
@upstash/redis 1.38.0 1.38.3
html-react-parser 6.1.5 6.1.7
livekit-client 2.21.0 2.22.2
livekit-server-sdk 2.17.0 2.18.0
lucide-react 1.27.0 1.40.0
next 16.2.12 16.3.4
zod 4.4.3 4.5.4
zustand 5.0.14 5.0.15

Updates @azure/msal-browser from 5.17.1 to 5.21.0

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.21.0

5.21.0

Wed, 02 Sep 2026 21:15:30 GMT

Minor changes

  • Validate the relayed request in runPopupRelay before navigating and add an optional allowedAuthorityOrigins pin #8800 (kshabelko@microsoft.com)

@​azure/msal-browser v5.20.0

5.20.0

Fri, 28 Aug 2026 21:29:53 GMT

Minor changes

Patches

@​azure/msal-browser v5.19.0

5.19.0

Tue, 18 Aug 2026 20:10:56 GMT

Minor changes

  • Add browser token-binding key lifecycle support for keyId-bound ES256 DPoP keys #8708 (hectormmg@microsoft.com)
  • Bump @​azure/msal-common to v16.13.0 (beachball)

Patches

  • Route NAA BridgeProxy through the shared webBrokerBridge PendingRequestRegistry and consolidate NestedAppAuthAdapter.fromBridgeError through the shared WebBrokerBridgeErrorMap — internal-only, no NAA public API or on-wire changes #8748 (shylasummers@microsoft.com)

@​azure/msal-browser v5.18.0

5.18.0

Tue, 04 Aug 2026 20:17:38 GMT

Minor changes

Patches

... (truncated)

Commits
  • e7c704c Validate the relayed request in runPopupRelay before navigating (#8800)
  • 965b1c6 Post-release PR (#8798)
  • 5931aa7 Remove legacy authority references (#8794)
  • b972fbf Discard local storage events from another client ids (#8795)
  • 1d07b68 feat(msal-node)!: default responseMode to form_post and remove ILoopbackClien...
  • b2c73e9 Fix @​azure/msal-common DOM type dependency (#8784)
  • ee74861 fix(deps): SFI CVE remediation — js-yaml, undici, brace-expansion (#8778)
  • 4359701 fix(deps): bump @​angular-devkit/build-angular to 22.1.x (patched http-proxy-m...
  • 7bfd824 chore(msal-node): remove disallowedChangeTypes guard to allow v6 major releas...
  • 8d562d6 [NAA/PWB One Bridge] PR 4/6: Export shared bridge message interface (#8780)
  • Additional commits viewable in compare view

Updates @livekit/components-react from 2.9.23 to 2.9.24

Release notes

Sourced from @​livekit/components-react's releases.

@​livekit/components-react@​2.9.24

Patch Changes

  • Add useAgentExpression to the React SDK, reading the mood the agent publishes on lk.expression. - #1415 (@​theomonnom)

  • Preserve text stream attributes on transcript messages from useSessionMessages - #1416 (@​theomonnom)

  • Updated dependencies [28b189b, e05b190]:

    • @​livekit/components-core@​0.12.15
Changelog

Sourced from @​livekit/components-react's changelog.

2.9.24

Patch Changes

  • Add useAgentExpression to the React SDK, reading the mood the agent publishes on lk.expression. - #1415 (@​theomonnom)

  • Preserve text stream attributes on transcript messages from useSessionMessages - #1416 (@​theomonnom)

  • Updated dependencies [28b189b, e05b190]:

    • @​livekit/components-core@​0.12.15
Commits

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates @upstash/redis from 1.38.0 to 1.38.3

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.3

Patch Changes

  • f020866: Send an Upstash-Telemetry-Retry header with the retry count on retried requests so retry rates are visible in server-side telemetry
  • 777dc30: Trim telemetry header values before deduplicating so whitespace around existing values does not defeat the dedup check

@​upstash/redis@​1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.2...@​upstash/redis@1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

@​upstash/redis@​1.38.2

Patch Changes

  • c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times

@​upstash/redis@​1.38.1

Patch Changes

  • bd7a19f: Add a quick tip about creating a database via https://upstash.com/start-redis to the warnings shown when the Redis url or token is missing. On Cloudflare, the warning shown when both the url and the token are missing now names both wrangler secret put commands instead of only one.
Commits
  • 74da1df chore: version packages (#1443)
  • f020866 DX-2960: send Upstash-Telemetry-Retry header with the attempt number (DX-2960...
  • 777dc30 fix: trim telemetry values before dedup and cover distinct-version case (#1442)
  • fc3089b chore: version packages (#1441)
  • c0f5ad7 fix: deduplicate telemetry header values in mergeTelemetry (#1440)
  • e45fb78 chore: version packages (#1439)
  • bd7a19f DX-2866: add start-redis tip to missing url/token warnings (#1438)
  • 8cf6209 fix: stabilize flaky evalshaRo test by waiting for script replication
  • 3024bb2 DX-2750: add ai sdk telemetry to redis search example (#1437)
  • bf3f48a chore: add resource section to README (#1435)
  • Additional commits viewable in compare view

Updates html-react-parser from 6.1.5 to 6.1.7

Release notes

Sourced from html-react-parser's releases.

v6.1.7

6.1.7 (2026-08-13)

Bug Fixes

  • bump html-dom-parser@8.0.2 so require does not throw ERR_REQUIRE_ESM_RACE_CONDITION (#2369) (d01b8e2)

v6.1.6

6.1.6 (2026-08-13)

Build System

  • deps: bump html-dom-parser from 8.0.0 to 8.0.1 (#2366) (2debc5b)
Changelog

Sourced from html-react-parser's changelog.

6.1.7 (2026-08-13)

Bug Fixes

  • bump html-dom-parser@8.0.2 so require does not throw ERR_REQUIRE_ESM_RACE_CONDITION (#2369) (d01b8e2)

6.1.6 (2026-08-13)

Build System

  • deps: bump html-dom-parser from 8.0.0 to 8.0.1 (#2366) (2debc5b)
Commits
  • 7c930d1 chore(master): release 6.1.7 (#2370)
  • d01b8e2 fix: bump html-dom-parser@8.0.2 so require does not throw ERR_REQUIRE_ESM_RAC...
  • cbabca5 build(package): upgrade devDependencies
  • f1bb5a2 build(deps-dev): bump typescript-eslint in the eslint group (#2368)
  • b49e6b8 chore(master): release 6.1.6 (#2367)
  • 2debc5b build(deps): bump html-dom-parser from 8.0.0 to 8.0.1 (#2366)
  • c556e5f build(deps-dev): bump @​types/node from 26.1.2 to 26.2.0 (#2365)
  • faddcf1 build(deps-dev): bump eslint from 10.8.0 to 10.8.1 in the eslint group (#2364)
  • 1dba0af build(deps-dev): bump publint from 0.3.22 to 0.3.23 (#2363)
  • 17cf4e7 build(deps): bump js-yaml from 4.3.0 to 4.3.1 (#2362)
  • Additional commits viewable in compare view

Updates livekit-client from 2.21.0 to 2.22.2

Release notes

Sourced from livekit-client's releases.

v2.22.2

Patch Changes

  • Fix the subscriber silently buffering remote ICE candidates after a reconnect - #2054 (@​xianshijing-lk)

    triggerIceRestart put the subscriber into restartingIce on every reconnect, but only setRemoteDescription clears that — and the server re-offers the subscriber only when the reconnect moved the participant to a different node. After an ordinary signal-only resume no offer arrives, so the flag stayed set for the lifetime of the transport and every subsequent remote candidate was queued instead of applied, leaving the subscriber unable to adopt any new network path the server proposed. The subscriber no longer enters that state: the server does not send candidates ahead of the offer that introduces them, so queueing them gains nothing.

  • fix: track ws close with attemptId - #2069 (@​lukasIO)

  • fix: ensure buffered events are flushed on signal reconnection - #2044 (@​lukasIO)

  • fix: error on datastreams when chunks are missing - #2073 (@​lukasIO)

v2.22.1

Patch Changes

  • Forward DisconnectReason to the ParticipantDisconnected event - #2055 (@​seonghunYang)

  • chore: periodically log webrtc stats - #2064 (@​lukasIO)

  • fix: enqueue signal requests until queue has been drained - #2061 (@​lukasIO)

  • Add roomOptions.dataStream.maxPayloadByteLength to control max data stream size - #2060 (@​1egoman)

  • chore: signalling state machine - #2046 (@​lukasIO)

  • fix: catch unhandled ws signal errors - #2065 (@​lukasIO)

  • Fix supportsAdaptiveStream always returning true by comparing typeof against the 'undefined' string. It now returns false in environments without ResizeObserver or IntersectionObserver. - #2059 (@​mrpmohiburrahman)

  • Treat TokenSource JWTs without exp as expired, and still honor exp when nbf is absent - #2057 (@​SashaMIT)

  • Convert internal exports to be external in examples/demo - #2067 (@​1egoman)

v2.22.0

Minor Changes

  • introduce DevelopmentTokenServer and deprecate SandboxTokenServer - #2032 (@​lukasIO)

Patch Changes

  • Decode text data streams without TextDecoder fatal mode for broader runtime support - #2037 (@​JoelTowell)

  • fix: ensure buffered events are flushed on signal reconnection - #2043 (@​lukasIO)

... (truncated)

Changelog

Sourced from livekit-client's changelog.

2.22.2

Patch Changes

  • Fix the subscriber silently buffering remote ICE candidates after a reconnect - #2054 (@​xianshijing-lk)

    triggerIceRestart put the subscriber into restartingIce on every reconnect, but only setRemoteDescription clears that — and the server re-offers the subscriber only when the reconnect moved the participant to a different node. After an ordinary signal-only resume no offer arrives, so the flag stayed set for the lifetime of the transport and every subsequent remote candidate was queued instead of applied, leaving the subscriber unable to adopt any new network path the server proposed. The subscriber no longer enters that state: the server does not send candidates ahead of the offer that introduces them, so queueing them gains nothing.

  • fix: track ws close with attemptId - #2069 (@​lukasIO)

  • fix: ensure buffered events are flushed on signal reconnection - #2044 (@​lukasIO)

  • fix: error on datastreams when chunks are missing - #2073 (@​lukasIO)

2.22.1

Patch Changes

  • Forward DisconnectReason to the ParticipantDisconnected event - #2055 (@​seonghunYang)

  • chore: periodically log webrtc stats - #2064 (@​lukasIO)

  • fix: enqueue signal requests until queue has been drained - #2061 (@​lukasIO)

  • Add roomOptions.dataStream.maxPayloadByteLength to control max data stream size - #2060 (@​1egoman)

  • chore: signalling state machine - #2046 (@​lukasIO)

  • fix: catch unhandled ws signal errors - #2065 (@​lukasIO)

  • Fix supportsAdaptiveStream always returning true by comparing typeof against the 'undefined' string. It now returns false in environments without ResizeObserver or IntersectionObserver. - #2059 (@​mrpmohiburrahman)

  • Treat TokenSource JWTs without exp as expired, and still honor exp when nbf is absent - #2057 (@​SashaMIT)

  • Convert internal exports to be external in examples/demo - #2067 (@​1egoman)

2.22.0

Minor Changes

  • introduce DevelopmentTokenServer and deprecate SandboxTokenServer - #2032 (@​lukasIO)

Patch Changes

... (truncated)

Commits

Updates livekit-server-sdk from 2.17.0 to 2.18.0

Release notes

Sourced from livekit-server-sdk's releases.

livekit-server-sdk@2.18.0

Minor Changes

  • Add EgressClient.startEgress(), a unified convenience method that calls the v2 Egress.StartEgress RPC with a StartEgressRequest (or a partial init object). The existing per-type start helpers are unchanged. - #706 (@​frostbyte73)

Patch Changes

  • update e2ee defaults to confirm to required FFI fields and update protocol - #708 (@​lukasIO)
Changelog

Sourced from livekit-server-sdk's changelog.

2.18.0

Minor Changes

  • Add EgressClient.startEgress(), a unified convenience method that calls the v2 Egress.StartEgress RPC with a StartEgressRequest (or a partial init object). The existing per-type start helpers are unchanged. - #706 (@​frostbyte73)

Patch Changes

  • update e2ee defaults to confirm to required FFI fields and update protocol - #708 (@​lukasIO)
Commits

Updates lucide-react from 1.27.0 to 1.40.0

Release notes

Sourced from lucide-react's releases.

Version 1.40.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.39.0...1.40.0

Version 1.39.0

What's Changed

Full Changelog: lucide-icons/lucide@1.38.0...1.39.0

Version 1.38.0

What's Changed

Full Changelog: lucide-icons/lucide@1.36.0...1.38.0

Version 1.37.0

What's Changed

... (truncated)

Commits
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates next from 16.2.12 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

... (truncated)

Commits
  • 299180d v16.3.4
  • 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
  • 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
  • d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
  • 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
  • a9a1cb7 v16.3.3
  • 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 3a15b4a [16.3.x] [next/image]: disable avif image optimization
  • 7378b51 Backport/docs fixes 16.3 (#97649)
  • Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar
  • eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6...

    Description has been truncated

@dependabot @github

dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
teamsly Error Error Sep 7, 2026 6:15am UTC

@dependabot
chore(deps): bump the production-deps group across 1 directory with 1…
8cba583 
…1 updates

Bumps the production-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.17.1` | `5.21.0` |
| [@livekit/components-react](https://github.com/livekit/components-js/tree/HEAD/packages/react) | `2.9.23` | `2.9.24` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.0` | `1.38.3` |
| [html-react-parser](https://github.com/remarkablemark/html-react-parser) | `6.1.5` | `6.1.7` |
| [livekit-client](https://github.com/livekit/client-sdk-js) | `2.21.0` | `2.22.2` |
| [livekit-server-sdk](https://github.com/livekit/node-sdks/tree/HEAD/packages/livekit-server-sdk) | `2.17.0` | `2.18.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.27.0` | `1.40.0` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.4` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |



Updates `@azure/msal-browser` from 5.17.1 to 5.21.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.17.1...msal-browser-v5.21.0)

Updates `@livekit/components-react` from 2.9.23 to 2.9.24
- [Release notes](https://github.com/livekit/components-js/releases)
- [Changelog](https://github.com/livekit/components-js/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/livekit/components-js/commits/@livekit/components-react@2.9.24/packages/react)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `@upstash/redis` from 1.38.0 to 1.38.3
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.0...@upstash/redis@1.38.3)

Updates `html-react-parser` from 6.1.5 to 6.1.7
- [Release notes](https://github.com/remarkablemark/html-react-parser/releases)
- [Changelog](https://github.com/remarkablemark/html-react-parser/blob/master/CHANGELOG.md)
- [Commits](remarkablemark/html-react-parser@v6.1.5...v6.1.7)

Updates `livekit-client` from 2.21.0 to 2.22.2
- [Release notes](https://github.com/livekit/client-sdk-js/releases)
- [Changelog](https://github.com/livekit/client-sdk-js/blob/main/CHANGELOG.md)
- [Commits](livekit/client-sdk-js@v2.21.0...v2.22.2)

Updates `livekit-server-sdk` from 2.17.0 to 2.18.0
- [Release notes](https://github.com/livekit/node-sdks/releases)
- [Changelog](https://github.com/livekit/node-sdks/blob/main/packages/livekit-server-sdk/CHANGELOG.md)
- [Commits](https://github.com/livekit/node-sdks/commits/livekit-server-sdk@2.18.0/packages/livekit-server-sdk)

Updates `lucide-react` from 1.27.0 to 1.40.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.40.0/packages/lucide-react)

Updates `next` from 16.2.12 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.4)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@livekit/components-react"
  dependency-version: 2.9.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: html-react-parser
  dependency-version: 6.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: livekit-client
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: livekit-server-sdk
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: lucide-react
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: next
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-deps-54b5eb800e branch from e4c6cc5 to 8cba583 Compare September 7, 2026 06:14
@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 14, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-deps-54b5eb800e branch September 14, 2026 06:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants