chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates#23
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates#23dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
…dates Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `15.5.5` | `15.5.9` | | [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.11` | `4.24.12` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [jws](https://github.com/brianloveswords/node-jws) | `4.0.0` | `4.0.1` | | [mdast-util-to-hast](https://github.com/syntax-tree/mdast-util-to-hast) | `13.2.0` | `13.2.1` | | [prismjs](https://github.com/PrismJS/prism) | `1.27.0` | `1.30.0` | | [tar](https://github.com/isaacs/node-tar) | `7.5.1` | `7.5.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.10` | `7.2.7` | Updates `next` from 15.5.5 to 15.5.9 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.5.5...v15.5.9) Updates `next-auth` from 4.24.11 to 4.24.12 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.11...next-auth@4.24.12) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `jws` from 4.0.0 to 4.0.1 - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v4.0.0...v4.0.1) Updates `mdast-util-to-hast` from 13.2.0 to 13.2.1 - [Release notes](https://github.com/syntax-tree/mdast-util-to-hast/releases) - [Commits](syntax-tree/mdast-util-to-hast@13.2.0...13.2.1) Updates `prismjs` from 1.27.0 to 1.30.0 - [Release notes](https://github.com/PrismJS/prism/releases) - [Changelog](https://github.com/PrismJS/prism/blob/v2/CHANGELOG.md) - [Commits](PrismJS/prism@v1.27.0...v1.30.0) Updates `tar` from 7.5.1 to 7.5.2 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.1...v7.5.2) Updates `vite` from 7.1.10 to 7.2.7 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.2.7/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.2.7/packages/vite) --- updated-dependencies: - dependency-name: next dependency-version: 15.5.9 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next-auth dependency-version: 4.24.12 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mdast-util-to-hast dependency-version: 13.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: prismjs dependency-version: 1.30.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.2.7 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This was referenced Dec 12, 2025
Closed
chore(deps): bump next-auth from 4.24.11 to 4.24.12 in the npm_and_yarn group across 1 directory
#18
Closed
Closed
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 8 updates in the / directory:
15.5.515.5.94.24.114.24.124.1.04.1.14.0.04.0.113.2.013.2.11.27.01.30.07.5.17.5.27.1.107.2.7Updates
nextfrom 15.5.5 to 15.5.9Release notes
Sourced from next's releases.
Commits
c5de33ev15.5.9dd23399Backport facebook/react#35351 for 15.5.8 (#87086)7526cd6v15.5.81e9ec41Update React Version (#41)16141e5Update React Version (#30)e01e589Backport Next.js changes to v15.5.8 (#23)b2706dblock binaries3eaf68bv15.5.78367ce5update version script9115040Update React Version for Next.js 15.5.7 (#10)Updates
next-authfrom 4.24.11 to 4.24.12Commits
1f48cf7chore(release): bump version [skip ci]4758a2fci: addworkflow_dispatchfor release.ymld3aecfefeat: add next 16 support (#13303)82efcf8fix: security issue fromnodemailer(#13304)798c3d5docs: update banner02d3480chore: remove clerk ads7f88fa0chore: remove sponsors46e01afchore(docs): update credentials.md app router route.js filename (#13025)11939f2feat(core): add default cache control headers for GET endpoints (#12627)918a6acdocs: Update FAQ withallowDangerousEmailAccountLinking(#12586)Maintainer changes
This version was pushed to npm by himself_65, a new releaser for next-auth since your current version.
Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
jwsfrom 4.0.0 to 4.0.1Release notes
Sourced from jws's releases.
Changelog
Sourced from jws's changelog.
... (truncated)
Commits
34c45b2Merge commit from fork49bc39bversion 4.0.1d42350cEnhance tests for HMAC streaming sign and verify5cb007cImprove secretOrKey initialization in VerifyStreamf9a2e1cImprove secret handling in SignStreamb9fb8d3Merge pull request #102 from auth0/SRE-57-Upload-opslevel-yaml95b75eeUpload OpsLevel YAML8857ee7test: remove unused variable (#96)Maintainer changes
This version was pushed to npm by julien.wollscheid, a new releaser for jws since your current version.
Updates
mdast-util-to-hastfrom 13.2.0 to 13.2.1Release notes
Sourced from mdast-util-to-hast's releases.
Commits
174795b13.2.13d05b3aUpdate Node in Actionsab3a795Fix support for spaces in class namesefb5312Refactor to use@importsa5bc210Add declaration mapsb54955dAdd.tsbuildinfoto.gitignoreUpdates
prismjsfrom 1.27.0 to 1.30.0Release notes
Sourced from prismjs's releases.
Changelog
Sourced from prismjs's changelog.
... (truncated)
Commits
76dde18Release 1.30.093cca40npm pkg fix99c5ca9Add release script8e8b935check that currentScript is set by a script tag (#3863)f894dc2Fix logo in the footerac38dceDelete CNAME9b5b09aEnable CORS59e5a341.29.0cd080f2Updated npmignore to include new MD files (#3534)751664bAdded PR stop notice (#3532)Maintainer changes
This version was pushed to npm by dmitrysharabin, a new releaser for prismjs since your current version.
Updates
tarfrom 7.5.1 to 7.5.2Commits
d9ea73a7.5.25e1a8e6Fix sync tar.list when file size reduces while reading0fbeaedformatting2dbacfeadd types for make-tar utilc5865d3remove unused taprc filebdb3809header: only read from ustar block if not specified in Paxd094cd7BlueOak-1.0.04a6ae72Verify invulnerability to tarmageddon attackUpdates
vitefrom 7.1.10 to 7.2.7Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
317b3b2release: v7.2.7721f163fix: plugin shortcut support (#21211)bda5dbbrelease: v7.2.63aa7527release: v7.2.572e398afix(deps): update all non-major dependencies (#21175)3765f7bfix: shortcuts not rebound after server restart (#21166)5ef557afix: fixexternal: truemerging (#21164)74559c9chore(deps): update rolldown-related dependencies (#21174)df5a30dfix(config): handle shebang properly (#21158)a3cd262fix(deps): update all non-major dependencies (#21146)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.