Bump the minor-and-patch group with 16 updates by dependabot[bot] · Pull Request #66 · zdevzone/keyforge

dependabot · 2026-10-21T23:57:27Z

Bumps the minor-and-patch group with 16 updates:

Package	From	To
@aws-sdk/client-s3	`3.1149.0`	`3.1152.0`
better-auth	`1.7.7`	`1.7.10`
fastify	`5.12.5`	`5.12.7`
kysely	`0.29.6`	`0.29.7`
zod	`4.6.5`	`4.6.7`
playwright	`1.64.0`	`1.64.1`
@radix-ui/react-select	`2.4.0`	`2.4.1`
@radix-ui/react-tooltip	`1.4.0`	`1.4.1`
@tanstack/react-query	`5.104.1`	`5.104.4`
cn	`0.4.0`	`0.5.0`
lucide-react	`1.55.0`	`1.59.0`
motion	`14.1.0`	`14.3.0`
radix-ui	`1.7.0`	`1.8.1`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
vite-plus	`1.1.0`	`1.3.0`

Updates @aws-sdk/client-s3 from 3.1149.0 to 3.1152.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1152.0

3.1152.0(2026-10-14)

Documentation Changes

client-marketplace-metering: Documentation update - added a Get started pointer to the AWS Marketplace AI Metering Agent Skill in the BatchMeterUsage API reference. No API or behavior change. (c97db282)

New Features

clients: update client endpoints as of 2026-10-14 (91a8a07c)

client-imagebuilder: This release adds parentInstance to infrastructure configurations, so builds can use an already-running instance from an Amazon EC2 Auto Scaling group. It also adds terminateInstanceOnCompletion, which keeps build and test instances running after image creation ends. (e8a5e26b)

client-cloudfront: This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections. (6bae6413)

client-transfer: AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover. (9d0e8866)

client-dynamodb-streams: Add support for a new iterator type (AT TIMESTAMP) for DynamoDB Streams GetShardIterator API that allows reading from a specific point in time from the stream. (150e6ae3)

client-ec2: Adds T8i instance sizes to the InstanceType enum. T8i instances are low-cost burstable instances powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards (65c6056b)

client-arc-region-switch: Features - Adds support for an optional payload to invoke the Lambda function with as part of the Custom action Lambda execution block (d21aa72b)

client-organizations: With dual-stack enabled, all requests now resolve to the endpoint in the partition's primary Region (for example, organizations.us-east-1.api.aws) and are signed for that Region. Previously, requests from other Regions resolved to a nonexistent endpoint. No API changes. (9324745e)

client-bedrock-agentcore-control: This release supports scoping Amazon Bedrock AgentCore Gateway rate limits by request header or request body field. (30c5bca2)

client-lambda: AWS Lambda now supports an optional X-Ray trace header for chained invocations in durable executions, enabling child invocations to be linked to the initiating span. (08219be0)

client-guardduty: Releasing support for Custom Detection Rule Runtime Monitoring (0cb32b8f)

lib-transfer-manager: publish as a preview package (#8355) (41080929)

For list of updated packages, view updated-packages.md in assets-3.1152.0.zip

v3.1151.0

3.1151.0(2026-10-13)

Chores

lib-transfer-manager: move lib-transfer-manager to preview/ folder (#8351) (5037a006)

scripts: add preview/ folder to build tooling (#8350) (a922905a)

Documentation Changes

client-lambda-web: Documentation update to include common use cases. (643507a0)

New Features

clients: update client endpoints as of 2026-10-13 (d3994582)

client-lakeformation: Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS). (c7a586fc)

client-agent-registry-control: AWS Agent Registry is improving recently launched custom metadata schema feature to make shared attributes easier to manage. (ed00d0bb)

client-omics: With Expanded container registry support, you can use container images from registries such as Seqera (Wave), NVIDIA NGC, and Google Artifact Registry with AWS HealthOmics private workflows, without manually migrating images into Amazon ECR or editing your workflow definitions. (db382740)

client-route-53-domains: Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response. (c5cc6f50)

client-gamelift: Adds support for new instance types in the C8a, C8i, C9g, M8a, M8i, and M9g families for managed EC2 and container fleets (51456772)

client-appstream: Adds support for administrators to require users to re-authenticate OneDrive and Google Drive storage connectors when a streaming session is reused. (2b6f2af5)

client-connect: New APIs to support aliases and versions for ContactFlow. (39466baa)

client-appintegrations: This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect. (3b212b20)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1152.0 (2026-10-14)

Note: Version bump only for package @aws-sdk/client-s3

3.1151.0 (2026-10-13)

Note: Version bump only for package @aws-sdk/client-s3

3.1150.0 (2026-10-12)

Note: Version bump only for package @aws-sdk/client-s3

Commits

3ce8aa7 Publish v3.1152.0
d6adfcb Publish v3.1151.0
4c9a334 Publish v3.1150.0
See full diff in compare view

Updates better-auth from 1.7.7 to 1.7.10

Release notes

Sourced from better-auth's releases.

v1.7.10

better-auth

Bug Fixes

Fixed Captcha and OpenAPI plugin subpath imports and type resolution for better-auth/plugins/multi-session and better-auth/test. (#11822)

Fixed Google One Tap sign-ins not recording google as the last login method. (#11393)

Fixed imports from better-auth/plugins/one-tap failing with a not-exported error. (#11696)

Fixed Google One Tap ignoring plugin-level autoSelect and cancelOnTapOutside settings. (#11820)

Fixed Google One Tap sign-ins ignoring configured Google profile mapping and user info updates. (#11819)

Fixed Google One Tap calling a prompt method unsupported by FedCM and retrying skipped prompts. (#11821)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

Added optional self-service signing key rotation for private_key_jwt clients. (#11695)

Bug Fixes

Fixed valid DPoP proofs being rejected for parameterized routes and URLs with trailing slashes. (#11786)

Fixed native clients with HTTP loopback callbacks being rejected when application type inference is enabled. (#11798)

Fixed device-code clients being unable to refresh access for approved resources omitted from a token poll. (#11815)

Fixed OAuth consent without a reference overwriting or reusing consent for a different reference. (#11801)

Fixed dynamic client registration rejecting requests that include both supported and unsupported grants. (#11797)

Fixed attempts to change cached trusted clients returning HTTP 500 instead of HTTP 400. (#11781)

Improved errors for unknown OAuth client_id values to say client not found. (#11799)

Fixed PKCE verifier errors to return the specified HTTP 400 response and error code. (#11724)

Fixed unknown OAuth clients receiving invalid_grant instead of invalid_client at the token endpoint. (#11176)

Fixed unverifiable JWT access tokens causing server errors at /oauth2/userinfo, /oauth2/introspect, and /oauth2/revoke. (#11596)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

Limited JWKS refetches for unknown key IDs to protect servers from repeated requests. (#11805)

Fixed unreachable JWKS endpoints being reported as invalid tokens instead of server errors. (#11612)

For detailed changes, see CHANGELOG

@better-auth/mongo-adapter

Bug Fixes

Fixed MongoDB findMany ignoring ID sorting and potentially repeating or skipping paginated results. (#11801)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.10

Patch Changes

#11393 eebd47a Thanks @breken-ai! - If you use the lastLoginMethod plugin with oneTap, signing in through Google One Tap now records "google", the same value as signing in with the Google button. Before, a One Tap sign-in recorded nothing: the better-auth.last_used_login_method cookie kept its previous value or stayed unset, and so did user.lastLoginMethod with storeInDatabase.

If your customResolveMethod includes a /one-tap/callback → "google" workaround, remove that mapping; keep the resolver if it handles other routes.

#11821 09d07e6 Thanks @gustavovalverde! - The Google One Tap prompt (authClient.oneTap() without button) no longer calls getSkippedReason(), which Google's FedCM migration guide says to remove. Before, it called it under any promptOptions.fedCM setting.

A skipped prompt now ends the flow and calls onPromptNotification right away instead of retrying. Google doesn't report why a prompt was skipped, and a prompt the user closed stays hidden for Google's cooldown period, so the retries could not bring it back. Dismissed prompts still retry as before.

Google Identity Services still logs its FedCM migration warning, because it does so whenever prompt() receives a listener. The plugin needs the listener to track dismissals and skips, so the warning is expected and safe to ignore.

#11819 eaecb72 Thanks @gustavovalverde! - Google One Tap now applies your socialProviders.google.mapProfileToUser and custom getUserInfo, the same as the standard Google sign-in. Before, One Tap ignored both and always stored the token's name, email, email_verified, and picture claims.

If you configured either one, users created through One Tap now get the fields it returns, including any extra fields such as a first name from given_name. Returning users are updated from it on each One Tap sign-in when socialProviders.google.overrideUserInfoOnSignIn is on, and so are existing users that One Tap links when account.accountLinking.updateUserInfoOnLink is on. Check that your mapper suits One Tap users too.

If you set socialProviders.google.overrideUserInfoOnSignIn, One Tap sign-ins now update returning users' name, image, and email from Google, as the redirect sign-in already does.

Setups that configure none of these, including oneTap({ clientId }) with no Google provider, are unaffected.

#11820 88c9a37 Thanks @gustavovalverde! - If you set autoSelect or cancelOnTapOutside on oneTapClient(), the One Tap prompt and the Sign in with Google button now use them. Before, only values passed to authClient.oneTap() took effect, so with autoSelect: true on the plugin, returning users still had to pick an account. Values passed to oneTap() still override the plugin's. Apps that set these options only on oneTap(), or not at all, are unaffected.

#11696 0cf1f7c Thanks @drewsephski! - You can now import the One Tap plugin from better-auth/plugins/one-tap, as you can for other plugins. Previously this import failed with a "not exported" error. Imports from better-auth/plugins and better-auth/client/plugins are unchanged.

#11822 414e845 Thanks @gustavovalverde! - You can now import the Captcha and OpenAPI plugins from better-auth/plugins/captcha and better-auth/plugins/open-api, as you can for other plugins. Previously these imports failed with a "not exported" error. Imports from better-auth/plugins are unchanged.

If your TypeScript config uses "moduleResolution": "node" (or node10), better-auth/plugins/multi-session and better-auth/test now resolve their types. Previously TypeScript reported that it could not find their declarations. Projects using bundler, node16, or nodenext resolution are unaffected.

Updated dependencies [fedd055, bbd0a19, 99cdfe7]:

@better-auth/core@1.7.10

@better-auth/mongo-adapter@1.7.10

@better-auth/drizzle-adapter@1.7.10

@better-auth/kysely-adapter@1.7.10

@better-auth/memory-adapter@1.7.10

@better-auth/prisma-adapter@1.7.10

@better-auth/telemetry@1.7.10

1.7.9

Patch Changes

#11766 6edaa61 Thanks @bytaesu! - An onAPIError.onError handler that throws or rejects no longer fails the request or causes an unhandled promise rejection. The error is logged and the original error response is returned. Async handlers now finish before the response is sent.

Updated dependencies []:

@better-auth/core@1.7.9

@better-auth/drizzle-adapter@1.7.9

@better-auth/kysely-adapter@1.7.9

@better-auth/memory-adapter@1.7.9

... (truncated)

Commits

b734a41 chore: release v1.7.10 (#11795)
eebd47a fix(last-login-method): record Google One Tap sign-ins (#11393)
eaecb72 fix(one-tap): apply the Google provider's mapProfileToUser and getUserInfo (#...
414e845 fix(better-auth): keep package subpaths in sync with build entries (#11822)
88c9a37 fix(one-tap): apply plugin-level autoSelect and cancelOnTapOutside (#11820)
09d07e6 fix(one-tap): stop calling prompt moment methods unsupported under FedCM (#11...
0cf1f7c fix(one-tap): add the better-auth/plugins/one-tap subpath export (#11696)
d2a5f83 chore: release v1.7.9 (#11761)
dbca311 test: fix test names in bearer and organization (#11768)
c03ced5 chore: bump @biomejs/biome (#11760)
Additional commits viewable in compare view

Updates fastify from 5.12.5 to 5.12.7

Release notes

Sourced from fastify's releases.

v5.12.7

Full Changelog: fastify/fastify@v5.12.6...v5.12.7

v5.12.6

⚠️ Security Release

Fix for GHSA-389g-gv7q-r4x8

What's Changed

[Backport 5.x] types: restrict route lookup methods by @github-actions[bot] in fastify/fastify#7048

[Backport 5.x] perf: decode string bodies once instead of per chunk by @github-actions[bot] in fastify/fastify#7053

[Backport 5.x] perf: avoid resetting the level of request child loggers by @github-actions[bot] in fastify/fastify#7058

[Backport 5.x] fix: resolve reply.mediaType from raw response headers by @github-actions[bot] in fastify/fastify#7067

[Backport 5.x] perf: use a FIFO cache for parsed content-types by @github-actions[bot] in fastify/fastify#7072

[Backport 5.x] fix(validation): lowercase header names in propertyNames enum/const by @mcollina in fastify/fastify#7104

[Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of storing it by @github-actions[bot] in fastify/fastify#7087

[Backport 5.x] fix: remove error when HTTP QUERY request has empty body by @github-actions[bot] in fastify/fastify#7060

[Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 by @github-actions[bot] in fastify/fastify#7094

Full Changelog: fastify/fastify@v5.12.5...v5.12.6

Commits

9f40003 Bumped v5.12.7
16469b9 Bumped v5.12.6
63496de [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)
20b55d4 [Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)
38d2b63 [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...
3241fbd [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...
1a46b1b [Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)
7e06676 [Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)
1b0eb32 [Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)
a636a10 [Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)
Additional commits viewable in compare view

Updates kysely from 0.29.6 to 0.29.7

Release notes

Sourced from kysely's releases.

0.29.7

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

Controlled transactions get fixes for connection leaks, shared completion state, and commands racing with ongoing queries:

Commit, rollback, and savepoint commands now wait for ongoing queries and streams to finish.

Close or exhaust active streams before awaiting these commands.

A failed rollback now releases the connection and marks the transaction as rolled back.

🚀 Features

🐞 Bugfixes

fix: release controlled transaction connection when begin fails by @igalklebanov in kysely-org/kysely#2080

fix: share completion state between controlled transaction handles by @igalklebanov in kysely-org/kysely#2090

fix: release controlled transaction connection when rollback fails by @B4nan in kysely-org/kysely#2136

fix: serialize controlled transaction commands with queries by @igalklebanov in kysely-org/kysely#2081

PostgreSQL 🐘

fix(postgres): release the client when destroyed while acquiring a connection by @abebelagua & @igalklebanov in kysely-org/kysely#2088

MSSQL 🥅

fix(mssql): escape jsonBuildObject keys. by @igalklebanov in kysely-org/kysely#2078

fix(mssql): escape JSON in jsonBuildObject by @igalklebanov in kysely-org/kysely#2079

📖 Documentation

docs: add Langfuse to the built-into proof wall by @igalklebanov in kysely-org/kysely#2054

docs: add TrueForge to the built-into proof wall by @igalklebanov in kysely-org/kysely#2055

docs: add Open Mercato to the built-into proof wall by @igalklebanov in kysely-org/kysely#2056

docs: make homepage title descriptive by @igalklebanov in kysely-org/kysely#2058

fix(site): preload the homepage video poster with high priority by @igalklebanov in kysely-org/kysely#2059

fix(site): stabilize demo video dimensions by @igalklebanov in kysely-org/kysely#2060

docs: add a default social preview card by @igalklebanov in kysely-org/kysely#2061

docs: share the homepage description and refresh production examples by @igalklebanov in kysely-org/kysely#2062

docs: add descriptions to non-example pages by @igalklebanov in kysely-org/kysely#2063

fix(site): stabilize search label and center shortcut keys by @igalklebanov in kysely-org/kysely#2064

fix(site): serve Markdown for explicit Accept requests by @igalklebanov in kysely-org/kysely#2066

fix(site): expose agent documentation discovery hint by @igalklebanov in kysely-org/kysely#2065

fix(site): add agent discovery hints to Markdown pages by @igalklebanov in kysely-org/kysely#2067

fix(site): remove HTML comments from generated Markdown by @igalklebanov in kysely-org/kysely#2068

fix(site): include category pages in agent documentation by @igalklebanov in kysely-org/kysely#2069

fix(site): reduce homepage Markdown size by @igalklebanov in kysely-org/kysely#2071

docs(site): improve API reference discovery by @igalklebanov in kysely-org/kysely#2072

docs(site): publish robots.txt with sitemap by @igalklebanov in kysely-org/kysely#2074

docs(site): advertise agent index in homepage Link header by @igalklebanov in kysely-org/kysely#2075

... (truncated)

Commits

ac876c2 0.29.7
e50ef04 docs: clarify shared pool and database instance lifecycles (#2143)
af446a0 fix(postgres): release the client when destroyed while acquiring a connection...
9db0d49 chore: bump deps. (#2142)
59841c3 fix: serialize controlled transaction commands with queries (#2081)
3037377 ci: add registry fallbacks and reuse the SQL Server image (#2140)
cbe5eb6 fix: release controlled transaction connection when rollback fails (#2136)
fcc56f5 fix(site): respect reduced motion and add demo playback control (#2130)
5048e23 docs(site): remove duplicate intro help paragraph (#2133)
9a873eb fix: share completion state between controlled transaction handles (#2090)
Additional commits viewable in compare view

Updates zod from 4.6.5 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini

9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales

34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note

74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)

b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors

8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze

bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles

c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)

a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)

a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)

529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6

9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why

Commits

b500a2e 4.6.7
9c21983 ci: stage at verbose so a failed OIDC token exchange says why
529f78d 4.6.6
a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
c42596b release: hold the run on the release-approval environment until the staged ve...
bacad51 docs: square the Code for Japan logo to match the other bronze tiles
8fb2faf docs: crop the Code for Japan logo and list it first in bronze
b2ef983 docs: add Code for Japan to bronze sponsors
74304ce release: stage npm versions instead of publishing them (#6622)
Additional commits viewable in compare view

Updates playwright from 1.64.0 to 1.64.1

Release notes

Sourced from playwright's releases.

v1.64.1

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0

#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

Commits

cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
866cbb8 chore: mark v1.64.1 (#43354)
1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
See full diff in compare view

Updates @radix-ui/react-select from 2.4.0 to 2.4.1

Changelog

Sourced from @radix-ui/react-select's changelog.

2.4.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

Commits

See full diff in compare view

Updates @radix-ui/react-tooltip from 1.4.0 to 1.4.1

Changelog

Sourced from @radix-ui/react-tooltip's changelog.

1.4.1

Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.

Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

Commits

See full diff in compare view

Updates @tanstack/react-query from 5.104.1 to 5.104.4

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.104.4

Patch Changes

#11722 0992a92 - fix(react-query-devtools): create the devtools instance only once instead of on every render

#11728 a108398 - fix(react-query*): declare '@types/react' as an optional peer dependency

Updated dependencies [c8f5eac, c208861, b61abc2, a108398]:

@tanstack/query-devtools@5.104.4

@tanstack/react-query@5.104.4

@tanstack/react-query-next-experimental@5.104.4

Patch Changes

#11728 a108398 - fix(react-query*): declare '@types/react' as an optional peer dependency

Updated dependencies [c208861, a108398]:

@tanstack/react-query@5.104.4

@tanstack/react-query-persist-client@5.104.4

Patch Changes

#11728 a108398 - fix(react-query*): declare '@types/react' as an optional peer dependency

Updated dependencies [c208861, a108398]:

@tanstack/react-query@5.104.4

@tanstack/query-persist-client-core@5.104.4

@tanstack/react-query@5.104.4

Patch Changes

#11328 c208861 - Allow queries with falsy errors to retry on mount when throwOnError returns false.

#11728 a108398 - fix(react-query*): declare '@types/react' as an optional peer dependency

Updated dependencies [1fee044, fce89dd]:

@tanstack/query-core@5.104.4

@tanstack/react-query-devtools@5.104.3

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.104.3

@tanstack/query-devtools@5.104.3

@tanstack/react-query-next-experimental@5.104.3

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.104.3

@tanstack/react-query-persist-client@5.104.3

Patch Changes

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.104.4

Patch Changes

#11328 c208861 - Allow queries with falsy errors to retry on mount when throwOnError returns false.

#11728 a108398 - fix(react-query*): declare '@types/react' as an optional peer dependency

Updated dependencies [1fee044, fce89dd]:

@tanstack/query-core@5.104.4

5.104.3

Patch Changes

Updated dependencies [0f15bc9]:

@tanstack/query-core@5.104.3

5.104.2

Patch Changes

Updated dependencies [03e8c39]:

@tanstack/query-core@5.104.2

Commits

1219972 ci: Version Packages (#12062)
1fee044 fix(query-core): clear mutations before notifying subscribers (#11470)
c208861 fix(react-query): retry queries with falsy errors on mount (#11328)
a108398 fix(react-query*): declare '@types/react' as an optional peer dependency (#11...
ee47993 ci: Version Packages (#11998)
0f15bc9 fix(query-core): preserve union narrowing in setQueryData updaters (#11935)
b699b52 ci: Version Packages (#11849)
e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
833062c chore: replace prettier with oxfmt (#11939)
Additional commits viewable in compare view

Updates cn from 0.4.0 to 0.5.0

Release notes

Sourced from cn's releases.

cn@0.5.0

Minor Changes

#157 663adea Thanks @shadcn! - Drop Node 20, which reached end of life, and require Node 22 or later.

#164 64aa1d0 Thanks @shadcn! - cn build now follows package @imports, reads @theme declarations after nested blocks such as @keyframes, and drops names declared before a --*: initial reset.

Changelog

Sourced from cn's changelog.

0.5.0

Minor Changes

#157 663adea Thanks @shadcn! - Drop Node 20, which reached end of life, and require Node 22 or later.

#164 64aa1d0 Thanks @shadcn! - cn build now follows package @imports, reads @theme declarations after nested blocks such as @keyframes, and drops names declared before a --*: initial reset.

Commits

8ebcbf0 chore(release): version packages (#158)
64aa1d0 fix(build): read @theme scales the way Tailwind builds them (#164)
c71bd53Description has been truncated

Bumps the minor-and-patch group with 16 updates: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1149.0` | `3.1152.0` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.7` | `1.7.10` | | [fastify](https://github.com/fastify/fastify) | `5.12.5` | `5.12.7` | | [kysely](https://github.com/kysely-org/kysely) | `0.29.6` | `0.29.7` | | [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` | | [playwright](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.4.0` | `2.4.1` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.4.0` | `1.4.1` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.1` | `5.104.4` | | [cn](https://github.com/shadcn-ui/cn/tree/HEAD/packages/cn) | `0.4.0` | `0.5.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.59.0` | | [motion](https://github.com/motiondivision/motion) | `14.1.0` | `14.3.0` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.7.0` | `1.8.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `1.1.0` | `1.3.0` | Updates `@aws-sdk/client-s3` from 3.1149.0 to 3.1152.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1152.0/clients/client-s3) Updates `better-auth` from 1.7.7 to 1.7.10 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.7.10/packages/better-auth) Updates `fastify` from 5.12.5 to 5.12.7 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.5...v5.12.7) Updates `kysely` from 0.29.6 to 0.29.7 - [Release notes](https://github.com/kysely-org/kysely/releases) - [Commits](kysely-org/kysely@v0.29.6...v0.29.7) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) Updates `playwright` from 1.64.0 to 1.64.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.64.0...v1.64.1) Updates `@radix-ui/react-select` from 2.4.0 to 2.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-tooltip` from 1.4.0 to 1.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `@tanstack/react-query` from 5.104.1 to 5.104.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.4/packages/react-query) Updates `cn` from 0.4.0 to 0.5.0 - [Release notes](https://github.com/shadcn-ui/cn/releases) - [Changelog](https://github.com/shadcn-ui/cn/blob/main/packages/cn/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/cn/commits/cn@0.5.0/packages/cn) Updates `lucide-react` from 1.55.0 to 1.59.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.59.0/packages/lucide-react) Updates `motion` from 14.1.0 to 14.3.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v14.1.0...v14.3.0) Updates `radix-ui` from 1.7.0 to 1.8.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `vite-plus` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/voidzero-dev/vite-plus/releases) - [Commits](https://github.com/voidzero-dev/vite-plus/commits/v1.3.0/packages/cli) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1152.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: better-auth dependency-version: 1.7.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: fastify dependency-version: 5.12.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: kysely dependency-version: 0.29.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: playwright dependency-version: 1.64.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-select" dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@tanstack/react-query" dependency-version: 5.104.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: cn dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: motion dependency-version: 14.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: radix-ui dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vite-plus dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-24T05:49:32Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot requested a review from zdevzone as a code owner October 21, 2026 23:57

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026

zdevzone closed this Oct 24, 2026

zdevzone deleted the dependabot/npm_and_yarn/dev/minor-and-patch-c3237a0c98 branch October 24, 2026 05:49

Navigation Menu

Repository navigation

Bump the minor-and-patch group with 16 updates - #66

Bump the minor-and-patch group with 16 updates#66
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/minor-and-patch-c3237a0c98

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026

v3.1152.0

3.1152.0(2026-10-14)

Documentation Changes

New Features

v3.1151.0

3.1151.0(2026-10-13)

Chores

Documentation Changes

New Features

3.1152.0 (2026-10-14)

3.1151.0 (2026-10-13)

3.1150.0 (2026-10-12)

v1.7.10

better-auth

Bug Fixes

@better-auth/oauth-provider

Features

Bug Fixes

@better-auth/core

Bug Fixes

@better-auth/mongo-adapter

Bug Fixes

1.7.10

Patch Changes

1.7.9

Patch Changes

v5.12.7

v5.12.6

⚠️ Security Release

What's Changed

0.29.7

🚀 Features

🐞 Bugfixes

PostgreSQL 🐘

MSSQL 🥅

📖 Documentation

v4.6.7

Commits:

v4.6.6

Commits:

v1.64.1

Bug Fixes

2.4.1

1.4.1

@​tanstack/react-query-devtools@​5.104.4

Patch Changes

@​tanstack/react-query-next-experimental@​5.104.4

Patch Changes

@​tanstack/react-query-persist-client@​5.104.4

Patch Changes

@​tanstack/react-query@​5.104.4

Patch Changes

@​tanstack/react-query-devtools@​5.104.3

Patch Changes

@​tanstack/react-query-next-experimental@​5.104.3

Patch Changes

@​tanstack/react-query-persist-client@​5.104.3

Patch Changes

5.104.4

Patch Changes

5.104.3

Patch Changes

5.104.2

Patch Changes

cn@0.5.0

Minor Changes

0.5.0

Minor Changes

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

`better-auth`

`@better-auth/oauth-provider`

`@better-auth/core`

`@better-auth/mongo-adapter`

`@tanstack/react-query-devtools@5`.104.4

`@tanstack/react-query-next-experimental@5`.104.4

`@tanstack/react-query-persist-client@5`.104.4

`@tanstack/react-query@5`.104.4

`@tanstack/react-query-devtools@5`.104.3

`@tanstack/react-query-next-experimental@5`.104.3

`@tanstack/react-query-persist-client@5`.104.3