Skip to content

chore(deps): bump the production-deps group across 1 directory with 14 updates - #207

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-c9692e84d1
Open

chore(deps): bump the production-deps group across 1 directory with 14 updates#207
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-c9692e84d1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-deps group with 14 updates in the / directory:

Package From To
@azure/msal-browser 5.17.1 5.21.0
@livekit/components-react 2.9.23 2.9.24
@modelcontextprotocol/sdk 1.29.0 1.30.0
@upstash/redis 1.38.0 1.38.4
html-react-parser 6.1.5 6.1.7
livekit-client 2.21.0 2.22.3
livekit-server-sdk 2.17.0 2.19.0
lucide-react 1.27.0 1.45.0
next 16.2.12 16.3.5
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
tailwind-merge 3.6.0 3.7.0
zod 4.4.3 4.6.4
zustand 5.0.14 5.0.15

Updates @azure/msal-browser from 5.17.1 to 5.21.0

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.21.0

5.21.0

Wed, 02 Sep 2026 21:15:30 GMT

Minor changes

  • Validate the relayed request in runPopupRelay before navigating and add an optional allowedAuthorityOrigins pin #8800 (kshabelko@microsoft.com)

@​azure/msal-browser v5.20.0

5.20.0

Fri, 28 Aug 2026 21:29:53 GMT

Minor changes

Patches

@​azure/msal-browser v5.19.0

5.19.0

Tue, 18 Aug 2026 20:10:56 GMT

Minor changes

  • Add browser token-binding key lifecycle support for keyId-bound ES256 DPoP keys #8708 (hectormmg@microsoft.com)
  • Bump @​azure/msal-common to v16.13.0 (beachball)

Patches

  • Route NAA BridgeProxy through the shared webBrokerBridge PendingRequestRegistry and consolidate NestedAppAuthAdapter.fromBridgeError through the shared WebBrokerBridgeErrorMap — internal-only, no NAA public API or on-wire changes #8748 (shylasummers@microsoft.com)

@​azure/msal-browser v5.18.0

5.18.0

Tue, 04 Aug 2026 20:17:38 GMT

Minor changes

Patches

... (truncated)

Commits
  • e7c704c Validate the relayed request in runPopupRelay before navigating (#8800)
  • 965b1c6 Post-release PR (#8798)
  • 5931aa7 Remove legacy authority references (#8794)
  • b972fbf Discard local storage events from another client ids (#8795)
  • 1d07b68 feat(msal-node)!: default responseMode to form_post and remove ILoopbackClien...
  • b2c73e9 Fix @​azure/msal-common DOM type dependency (#8784)
  • ee74861 fix(deps): SFI CVE remediation — js-yaml, undici, brace-expansion (#8778)
  • 4359701 fix(deps): bump @​angular-devkit/build-angular to 22.1.x (patched http-proxy-m...
  • 7bfd824 chore(msal-node): remove disallowedChangeTypes guard to allow v6 major releas...
  • 8d562d6 [NAA/PWB One Bridge] PR 4/6: Export shared bridge message interface (#8780)
  • Additional commits viewable in compare view

Updates @livekit/components-react from 2.9.23 to 2.9.24

Release notes

Sourced from @​livekit/components-react's releases.

@​livekit/components-react@​2.9.24

Patch Changes

  • Add useAgentExpression to the React SDK, reading the mood the agent publishes on lk.expression. - #1415 (@​theomonnom)

  • Preserve text stream attributes on transcript messages from useSessionMessages - #1416 (@​theomonnom)

  • Updated dependencies [28b189b, e05b190]:

    • @​livekit/components-core@​0.12.15
Changelog

Sourced from @​livekit/components-react's changelog.

2.9.24

Patch Changes

  • Add useAgentExpression to the React SDK, reading the mood the agent publishes on lk.expression. - #1415 (@​theomonnom)

  • Preserve text stream attributes on transcript messages from useSessionMessages - #1416 (@​theomonnom)

  • Updated dependencies [28b189b, e05b190]:

    • @​livekit/components-core@​0.12.15
Commits

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates @upstash/redis from 1.38.0 to 1.38.4

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.4

Patch Changes

  • 7ac8182: Fix read-your-writes sending a stale upstash-sync-token

    A read issued straight after a write travelled with the token from before that write, so the server was under no obligation to serve the write and readYourWrites silently did not hold.

    HttpClient.request() snapshotted the outgoing headers with mergeHeaders(this.headers, ...) and only afterwards wrote the freshest token into this.headers, so the token learned from response N first shipped with request N+2. The assignment now happens before the merge.

    This regressed in 1.34.5. In 1.34.0–1.34.4 the request options held headers: this.headers by reference, so the late write was still picked up before fetch; 1.34.5 introduced per-request header merging, which turned that reference into a copy without moving the assignment.

@​upstash/redis@​1.38.3

Patch Changes

  • f020866: Send an Upstash-Telemetry-Retry header with the retry count on retried requests so retry rates are visible in server-side telemetry
  • 777dc30: Trim telemetry header values before deduplicating so whitespace around existing values does not defeat the dedup check

@​upstash/redis@​1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.2...@​upstash/redis@1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

@​upstash/redis@​1.38.2

Patch Changes

  • c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times

@​upstash/redis@​1.38.1

Patch Changes

  • bd7a19f: Add a quick tip about creating a database via https://upstash.com/start-redis to the warnings shown when the Redis url or token is missing. On Cloudflare, the warning shown when both the url and the token are missing now names both wrangler secret put commands instead of only one.
Commits
  • 73fbe1a chore: version packages (#1448)
  • 7ac8182 DX-2995: fix read-your-writes sending a stale upstash-sync-token (#1447)
  • 1bec566 ci: poll npm for the ci version instead of a fixed sleep (#1444)
  • 74da1df chore: version packages (#1443)
  • f020866 DX-2960: send Upstash-Telemetry-Retry header with the attempt number (DX-2960...
  • 777dc30 fix: trim telemetry values before dedup and cover distinct-version case (#1442)
  • fc3089b chore: version packages (#1441)
  • c0f5ad7 fix: deduplicate telemetry header values in mergeTelemetry (#1440)
  • e45fb78 chore: version packages (#1439)
  • bd7a19f DX-2866: add start-redis tip to missing url/token warnings (#1438)
  • Additional commits viewable in compare view

Updates html-react-parser from 6.1.5 to 6.1.7

Release notes

Sourced from html-react-parser's releases.

v6.1.7

6.1.7 (2026-08-13)

Bug Fixes

  • bump html-dom-parser@8.0.2 so require does not throw ERR_REQUIRE_ESM_RACE_CONDITION (#2369) (d01b8e2)

v6.1.6

6.1.6 (2026-08-13)

Build System

  • deps: bump html-dom-parser from 8.0.0 to 8.0.1 (#2366) (2debc5b)
Changelog

Sourced from html-react-parser's changelog.

6.1.7 (2026-08-13)

Bug Fixes

  • bump html-dom-parser@8.0.2 so require does not throw ERR_REQUIRE_ESM_RACE_CONDITION (#2369) (d01b8e2)

6.1.6 (2026-08-13)

Build System

  • deps: bump html-dom-parser from 8.0.0 to 8.0.1 (#2366) (2debc5b)
Commits
  • 7c930d1 chore(master): release 6.1.7 (#2370)
  • d01b8e2 fix: bump html-dom-parser@8.0.2 so require does not throw ERR_REQUIRE_ESM_RAC...
  • cbabca5 build(package): upgrade devDependencies
  • f1bb5a2 build(deps-dev): bump typescript-eslint in the eslint group (#2368)
  • b49e6b8 chore(master): release 6.1.6 (#2367)
  • 2debc5b build(deps): bump html-dom-parser from 8.0.0 to 8.0.1 (#2366)
  • c556e5f build(deps-dev): bump @​types/node from 26.1.2 to 26.2.0 (#2365)
  • faddcf1 build(deps-dev): bump eslint from 10.8.0 to 10.8.1 in the eslint group (#2364)
  • 1dba0af build(deps-dev): bump publint from 0.3.22 to 0.3.23 (#2363)
  • 17cf4e7 build(deps): bump js-yaml from 4.3.0 to 4.3.1 (#2362)
  • Additional commits viewable in compare view

Updates livekit-client from 2.21.0 to 2.22.3

Release notes

Sourced from livekit-client's releases.

v2.22.3

Patch Changes

v2.22.2

Patch Changes

  • Fix the subscriber silently buffering remote ICE candidates after a reconnect - #2054 (@​xianshijing-lk)

    triggerIceRestart put the subscriber into restartingIce on every reconnect, but only setRemoteDescription clears that — and the server re-offers the subscriber only when the reconnect moved the participant to a different node. After an ordinary signal-only resume no offer arrives, so the flag stayed set for the lifetime of the transport and every subsequent remote candidate was queued instead of applied, leaving the subscriber unable to adopt any new network path the server proposed. The subscriber no longer enters that state: the server does not send candidates ahead of the offer that introduces them, so queueing them gains nothing.

  • fix: track ws close with attemptId - #2069 (@​lukasIO)

  • fix: ensure buffered events are flushed on signal reconnection - #2044 (@​lukasIO)

  • fix: error on datastreams when chunks are missing - #2073 (@​lukasIO)

v2.22.1

Patch Changes

  • Forward DisconnectReason to the ParticipantDisconnected event - #2055 (@​seonghunYang)

  • chore: periodically log webrtc stats - #2064 (@​lukasIO)

  • fix: enqueue signal requests until queue has been drained - #2061 (@​lukasIO)

  • Add roomOptions.dataStream.maxPayloadByteLength to control max data stream size - #2060 (@​1egoman)

  • chore: signalling state machine - #2046 (@​lukasIO)

  • fix: catch unhandled ws signal errors - #2065 (@​lukasIO)

  • Fix supportsAdaptiveStream always returning true by comparing typeof against the 'undefined' string. It now returns false in environments without ResizeObserver or IntersectionObserver. - #2059 (@​mrpmohiburrahman)

  • Treat TokenSource JWTs without exp as expired, and still honor exp when nbf is absent - #2057 (@​SashaMIT)

  • Convert internal exports to be external in examples/demo - #2067 (@​1egoman)

... (truncated)

Changelog

Sourced from livekit-client's changelog.

2.22.3

Patch Changes

2.22.2

Patch Changes

  • Fix the subscriber silently buffering remote ICE candidates after a reconnect - #2054 (@​xianshijing-lk)

    triggerIceRestart put the subscriber into restartingIce on every reconnect, but only setRemoteDescription clears that — and the server re-offers the subscriber only when the reconnect moved the participant to a different node. After an ordinary signal-only resume no offer arrives, so the flag stayed set for the lifetime of the transport and every subsequent remote candidate was queued instead of applied, leaving the subscriber unable to adopt any new network path the server proposed. The subscriber no longer enters that state: the server does not send candidates ahead of the offer that introduces them, so queueing them gains nothing.

  • fix: track ws close with attemptId - #2069 (@​lukasIO)

  • fix: ensure buffered events are flushed on signal reconnection - #2044 (@​lukasIO)

  • fix: error on datastreams when chunks are missing - #2073 (@​lukasIO)

2.22.1

Patch Changes

  • Forward DisconnectReason to the ParticipantDisconnected event - #2055 (@​seonghunYang)

  • chore: periodically log webrtc stats - #2064 (@​lukasIO)

  • fix: enqueue signal requests until queue has been drained - #2061 (@​lukasIO)

  • Add roomOptions.dataStream.maxPayloadByteLength to control max data stream size - #2060 (@​1egoman)

  • chore: signalling state machine - #2046 (@​lukasIO)

  • fix: catch unhandled ws signal errors - #2065 (@​lukasIO)

  • Fix supportsAdaptiveStream always returning true by comparing typeof against the 'undefined' string. It now returns false in environments without ResizeObserver or IntersectionObserver. - #2059 (@​mrpmohiburrahman)

... (truncated)

Commits
  • 53dd840 Version Packages (#2088)
  • 9b3ad5e fix: only apply map update in singlePC mode on answer (#2090)
  • 0143077 align E2eeManager with logging pattern (#2081)
  • 15931b8 finalization strategy for worker listeners (#2079)
  • 8617f84 forward worker logs to main thread (#2078)
  • 8054c66 fix: add code 1000 to onclose handler in WebSocketStream (#2086)
  • ab7a827 fix: don't reset mid track map on publisher answers with empty map (#2089)
  • 113d512 Support simulcast for svc codecs (vp9/av1) (#2083)
  • ae32e31 chore(deps): update actions/checkout action to v6.1.0 (#2076)
  • e775b6a chore(deps): update dependency jose to v6.2.9 (#2075)
  • Additional commits viewable in compare view

Updates livekit-server-sdk from 2.17.0 to 2.19.0

Release notes

Sourced from livekit-server-sdk's releases.

livekit-server-sdk@2.19.0

Minor Changes

  • Support the PASSTHROUGH encoding preset on startEgress, for single-track MediaSource egress that skips transcoding - #713 (@​frostbyte73)

  • Send an X-Livekit-Request-Id idempotency key on every server API request. The same id is replayed on each region failover attempt, so the server can identify and deduplicate a retried request. - #711 (@​cnderrauber)

Patch Changes

  • Update @​livekit/protocol to 1.51.0 - #714 (@​anunaym14)

  • Remove node:crypto fallbacks from Web Crypto helpers so isolate/edge bundlers can import the SDK. - #704 (@​intrdx)

livekit-server-sdk@2.18.0

Minor Changes

  • Add EgressClient.startEgress(), a unified convenience method that calls the v2 Egress.StartEgress RPC with a StartEgressRequest (or a partial init object). The existing per-type start helpers are unchanged. - #706 (@​frostbyte73)

Patch Changes

  • update e2ee defaults to confirm to required FFI fields and update protocol - #708 (@​lukasIO)
Changelog

Sourced from livekit-server-sdk's changelog.

2.19.0

Minor Changes

  • Support the PASSTHROUGH encoding preset on startEgress, for single-track MediaSource egress that skips transcoding - #713 (@​frostbyte73)

  • Send an X-Livekit-Request-Id idempotency key on every server API request. The same id is replayed on each region failover attempt, so the server can identify and deduplicate a retried request. - #711 (@​cnderrauber)

Patch Changes

  • Update @​livekit/protocol to 1.51.0 - #714 (@​anunaym14)

  • Remove node:crypto fallbacks from Web Crypto helpers so isolate/edge bundlers can import the SDK. - #704 (@​intrdx)

2.18.0

Minor Changes

  • Add EgressClient.startEgress(), a unified convenience method that calls the v2 Egress.StartEgress RPC with a StartEgressRequest (or a partial init object). The existing per-type start helpers are unchanged. - #706 (@​frostbyte73)

Patch Changes

  • update e2ee defaults to confirm to required FFI fields and update protocol - #708 (@​lukasIO)
Commits

Updates lucide-react from 1.27.0 to 1.45.0

Release notes

Sourced from lucide-react's releases.

Version 1.45.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Version 1.44.0

What's Changed

New Contributors

... (truncated)

Commits
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
  • See full diff in compare view

Updates next from 16.2.12 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
  • next/image: Reject empty images when reading/writing to the disk cache (#98186)
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
  • Add CSP nonce to script tags of loading and template files (#98403)
  • Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backpor...

Description has been truncated

@dependabot
chore(deps): bump the production-deps group across 1 directory with 1…
b49481a 
…4 updates

Bumps the production-deps group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.17.1` | `5.21.0` |
| [@livekit/components-react](https://github.com/livekit/components-js/tree/HEAD/packages/react) | `2.9.23` | `2.9.24` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.0` | `1.38.4` |
| [html-react-parser](https://github.com/remarkablemark/html-react-parser) | `6.1.5` | `6.1.7` |
| [livekit-client](https://github.com/livekit/client-sdk-js) | `2.21.0` | `2.22.3` |
| [livekit-server-sdk](https://github.com/livekit/node-sdks/tree/HEAD/packages/livekit-server-sdk) | `2.17.0` | `2.19.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.27.0` | `1.45.0` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.5` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.4` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |



Updates `@azure/msal-browser` from 5.17.1 to 5.21.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.17.1...msal-browser-v5.21.0)

Updates `@livekit/components-react` from 2.9.23 to 2.9.24
- [Release notes](https://github.com/livekit/components-js/releases)
- [Changelog](https://github.com/livekit/components-js/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/livekit/components-js/commits/@livekit/components-react@2.9.24/packages/react)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `@upstash/redis` from 1.38.0 to 1.38.4
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.0...@upstash/redis@1.38.4)

Updates `html-react-parser` from 6.1.5 to 6.1.7
- [Release notes](https://github.com/remarkablemark/html-react-parser/releases)
- [Changelog](https://github.com/remarkablemark/html-react-parser/blob/master/CHANGELOG.md)
- [Commits](remarkablemark/html-react-parser@v6.1.5...v6.1.7)

Updates `livekit-client` from 2.21.0 to 2.22.3
- [Release notes](https://github.com/livekit/client-sdk-js/releases)
- [Changelog](https://github.com/livekit/client-sdk-js/blob/main/CHANGELOG.md)
- [Commits](livekit/client-sdk-js@v2.21.0...v2.22.3)

Updates `livekit-server-sdk` from 2.17.0 to 2.19.0
- [Release notes](https://github.com/livekit/node-sdks/releases)
- [Changelog](https://github.com/livekit/node-sdks/blob/main/packages/livekit-server-sdk/CHANGELOG.md)
- [Commits](https://github.com/livekit/node-sdks/commits/livekit-server-sdk@2.19.0/packages/livekit-server-sdk)

Updates `lucide-react` from 1.27.0 to 1.45.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.45.0/packages/lucide-react)

Updates `next` from 16.2.12 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.5)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.4.3 to 4.6.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.4)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@livekit/components-react"
  dependency-version: 2.9.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: html-react-parser
  dependency-version: 6.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: livekit-client
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: livekit-server-sdk
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: lucide-react
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: next
  dependency-version: 16.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: zod
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Sep 16, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
teamsly Ready Ready Preview Sep 16, 2026 7:03pm UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants