Bump the prod group across 1 directory with 29 updates

[dependabot]

Bumps the prod group with 29 updates in the / directory:

Package	From	To
@headlessui/react	2.1.9	2.2.0
@heroicons/react	2.1.3	2.2.0
@tailwindcss/forms	0.5.3	0.5.10
@vercel/analytics	1.3.1	1.5.0
clsx	1.2.1	2.1.1
jose	5.8.0	6.0.10
next	15.2.0-canary.33	15.2.4
next-intl	3.25.1	4.0.2
next-themes	0.2.1	0.4.6
nice-grpc	2.0.1	2.1.12
qrcode.react	3.1.0	4.2.0
react	19.0.0	19.1.0
@types/react	19.0.2	19.0.12
react-dom	19.0.0	19.1.0
@types/react-dom	19.0.2	19.0.4
react-hook-form	7.39.5	7.55.0
swr	2.2.5	2.3.3
tinycolor2	1.4.2	1.6.0
@types/tinycolor2	1.4.3	1.4.6
@bufbuild/protobuf	2.2.2	2.2.5
@connectrpc/connect	2.0.0	2.0.2
@connectrpc/connect-node	2.0.0	2.0.2
@connectrpc/connect-web	2.0.0	2.0.2
@typescript-eslint/parser	7.18.0	8.28.0
eslint-config-next	14.2.18	15.2.4
eslint-config-prettier	9.1.0	10.1.1
eslint-config-turbo	2.1.0	2.4.4
eslint-plugin-react	7.35.0	7.37.4
@babel/eslint-parser	7.25.9	7.27.0

Updates @headlessui/react from 2.1.9 to 2.2.0

Release notes

Sourced from @​headlessui/react's releases.

@​headlessui/react@​v2.2.0

Added

• Add React 19 support (#3543)

@​headlessui/react@​v2.1.10

Fixed

• Use React.JSX instead of deprecated global JSX (#3511)
• Fix crash in ListboxOptions when using as={Fragment} (#3513)

Changelog

Sourced from @​headlessui/react's changelog.

[2.2.0] - 2024-10-25

Added

• Add React 19 support (#3543)

[2.1.10] - 2024-10-10

Fixed

• Use React.JSX instead of deprecated global JSX (#3511)
• Fix crash in ListboxOptions when using as={Fragment} (#3513)

Commits

• d71fb9c 2.2.0 - @​headlessui/react
• 8814b0e Add React 19 support (#3543)
• 5eb3b12 2.1.10 - @​headlessui/react
• a4953a2 Fix crash in ListboxOptions when using as={Fragment} (#3513)
• 3b047fc update changelog
• 13d8829 Use React.JSX instead of JSX (#3511)
• See full diff in compare view

Updates @heroicons/react from 2.1.3 to 2.2.0

Release notes

Sourced from @​heroicons/react's releases.

v2.2.0

Added

• Add React 19 support (#1247)

Fixed

• Removed unnecessary clipping path from solid/arrow-left-circle (#1211)

v2.1.5

Added

• Add new icons (arrow-turn-*, bold, calendar-date-range, divide, document-currency-*, equals, h1, h2, h3, italic, link-slash, numbered-list, percent-badge, slash, strikethrough, underline)

v2.1.4

Fixed

• Improve tree-shakability of React package (#1192)

Changelog

Sourced from @​heroicons/react's changelog.

[2.2.0] - 2024-11-18

Added

• Add React 19 support (#1247)

Fixed

• Removed unnecessary clipping path from solid/arrow-left-circle (#1211)

[2.1.5] - 2024-07-10

Added

• Add new icons (arrow-turn-*, bold, calendar-date-range, divide, document-currency-*, equals, h1, h2, h3, italic, link-slash, numbered-list, percent-badge, slash, strikethrough, underline)

[2.1.4] - 2024-06-17

Fixed

• Improve tree-shakability of React package (#1192)

Commits

• 0435d4c 2.2.0
• f327cbe Add React 19 support (#1247)
• 56c073c Update changelog
• 64e2368 Remove clip-path from 20/arrow-left-circle (#1211)
• ad0ad1f 2.1.5
• 58d511e Add new icons (#1204)
• c1b192b 2.1.4
• e2e487f Make sure calls to forwardRef are marked as pure (#1192)
• cafc7d6 use size-* instead of w-* h-* (#1182)
• 9a17872 Update README.md (#1167)
• See full diff in compare view

Updates @tailwindcss/forms from 0.5.3 to 0.5.10

Release notes

Sourced from @​tailwindcss/forms's releases.

v0.5.10

Fixed

• Support installing with beta versions of Tailwind CSS v4 (#163)

v0.5.9

Fixed

• Fallback to static chevron color if theme is using variables (#167)

v0.5.8

Fixed

• Support installing with alpha versions of Tailwind CSS v4 (#163)

v0.5.7

Fixed

• Use normal checkbox and radio appearance in forced-colors mode (#152)

v0.5.6

Fixed

• Fix date time bottom spacing on MacOS Safari (#146)

v0.5.5

Fixed

• Fix text alignment on date and time inputs on iOS (#144)

v0.5.4

Fixed

• Remove chevron for selects with a non-default size (#137)
• Allow for without type (#141)

Changelog

Sourced from @​tailwindcss/forms's changelog.

[0.5.10] - 2025-01-07

Fixed

• Support installing with beta versions of Tailwind CSS v4 (#163)

[0.5.9] - 2024-09-05

Fixed

• Fallback to static chevron color if theme is using variables (#167)

[0.5.8] - 2024-08-28

Fixed

• Support installing with alpha versions of Tailwind CSS v4 (#163)

[0.5.7] - 2023-11-10

Fixed

• Use normal checkbox and radio appearance in forced-colors mode (#152)

[0.5.6] - 2023-08-28

Fixed

• Fix date time bottom spacing on MacOS Safari (#146)

[0.5.5] - 2023-08-22

Fixed

• Fix text alignment on date and time inputs on iOS (#144)

[0.5.4] - 2023-07-13

Fixed

• Remove chevron for selects with a non-default size (#137)
• Allow for without type (#141)

Commits

• 071d1c0 0.5.10
• b503c95 Update peer dependency version to include 4.0.0-beta.1 (#171)
• 781de1d chore: update underline select padding (#170)
• 0571354 chore: sort prettier classes with prettier (#169)
• e581f0e fix: underline select padding (#168)
• 02ef4f9 Update changelog
• 255476c Fallback to static chevron color if theme is using variables (#167)
• 9786ae1 Add missing release scripts
• 7d0425e Add stub test script
• aac934c Add lockfile
• Additional commits viewable in compare view

Updates @vercel/analytics from 1.3.1 to 1.5.0

Release notes

Sourced from @​vercel/analytics's releases.

1.5.0

What's Changed

• fix: next/jest does not support import.meta by @​feugy in #162
• feat: support configurable deployment basepath by @​feugy in #158

Full Changelog: vercel/analytics@1.4.1...1.5.0

1.5.0-canary.3

What's Changed

• feat: support configurable deployment basepath by @​feugy in vercel/analytics#158
• fix: next/jest does not support import.meta by @​feugy in vercel/analytics#162

Full Changelog: vercel/analytics@1.4.1...1.5.0-canary.3

1.5.0-canary.2

What's Changed

• feat: support configurable deployment basepath by @​feugy in vercel/analytics#158

Full Changelog: vercel/analytics@1.4.1...1.5.0-canary.2

1.5.0-canary.1

What's Changed

• Add an option to prefix an endpoint path with an environment variable. by @​emspishak in vercel/analytics#153

New Contributors

• @​emspishak made their first contribution in vercel/analytics#153

Full Changelog: vercel/analytics@1.4.0...1.5.0-canary.1

1.4.1

What's Changed

• fix(#157): error when rendering Nuxt component by @​feugy in vercel/analytics#160

Full Changelog: vercel/analytics@1.4.0...1.4.1

1.4.0

What's Changed

• feat: route support for Astro, Nuxt, Remix, Sveltekit and Vue by @​feugy in vercel/analytics#151
• feat: next/remix/react supports updating beforeSend by @​feugy in vercel/analytics#152
• docs: exposes types and updates example apps for beforeSend by @​feugy in vercel/analytics#154

Full Changelog: vercel/analytics@1.3.2...1.4.0

1.3.2

What's Changed

• React 19 support by @​tobiaslins in vercel/analytics#149

... (truncated)

Commits

• 9a90468 chore: release 1.5.0 (#165)
• 56ebed2 fix(#157): error when rendering Nuxt component (#160)
• 68d0d13 Add an option to prefix an endpoint path with an environment variable. (#153)
• c09b649 docs: exposes types and updates example apps for beforeSend (#154)
• 81d0eed feat: next/remix/react supports updating beforeSend (#152)
• 55bd2ff feat: route support for Astro, Nuxt, Remix, Sveltekit and Vue (#151)
• 524af71 React 19 support (#149) fix(148)
• See full diff in compare view

Updates clsx from 1.2.1 to 2.1.1

Release notes

Sourced from clsx's releases.

v2.1.1

Patches

• (types) Include bigint in ClassValue type: (#96): 3d960ab Accommodates recent @types/react changes to ReactNode. Thank you @​ViliamKopecky~!

Chores

• Add licenses.dev badge: 684509c This service recursively analyzes entire dependency graphs to ensure that a package (or your project) is using permissive licenses. For example, here's a results table for polka@next and a larger astro example.

---

Full Changelog: lukeed/clsx@v2.1.0...v2.1.1

v2.1.0

Features

• Add new clsx/lite submodule for string-only usage: 1a49142

  This is a 140b version of clsx that is ideal for Tailwind and/or React contexts, which typically follow this clsx usage pattern:

  clsx('foo bar', props.maybe && 'conditional classes', props.className);

  Important: This clsx/lite module ignores all non-string arguments and is therefore not a 1:1 replacement for clsx itself!

  import { clsx } from 'clsx';
  import { clsx as lite } from 'clsx/lite';
  // strings-only usage is identical
  clsx('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
  lite('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
  // clsx/lite ignores all non-strings
  clsx('foo', { a: true, b: false, c: true }); //=> "foo a c"
  lite('foo', { a: true, b: false, c: true }); //=> "foo"

---

Full Changelog: lukeed/clsx@v2.0.1...v2.1.0

v2.0.1

Patches

• (perf) Cache arguments.length & array.length for 6% performance gain (#26): deff09b

... (truncated)

Commits

• 925494c 2.1.1
• 3d960ab fix(types): include bigint in ClassValue type (#96)
• 684509c chore: add licenses badge
• a60db12 2.1.0
• 1a49142 feat: add clsx/lite module
• 5cac14c 2.0.1
• 855eec2 chore(bench): include ≠ symbol
• bf64e71 chore: update module size
• 6e3b2b9 chore: update benchmarks;
• 554ad31 chore: dedicated string vs number var usage;
• Additional commits viewable in compare view

Updates jose from 5.8.0 to 6.0.10

Release notes

Sourced from jose's releases.

v6.0.10

Refactor

• removed unused claims methods (74719cf)
• reorganize jwt claim set utils (1f12d88)

v6.0.9

Documentation

• add more symbol document, ignore ts-private fields (8b73687)
• bump typedoc (6163a8b)
• drop cdnjs links in README (a910038)
• drop denoland/x links in README and add jsr (3662b9e)
• fix key export links from docs/README.md (c8edfc2)

Refactor

• always assume structuredClone is present (f7898a9)
• hide internal private fields and drop ProduceJWT inheritance (ab18881)
• less objects when JWE JWT Replicated Header Parameters are used (c763a0e)

v6.0.8

Fixes

• export [customFetch] symbol from the default entrypoint (1615614), closes #762

v6.0.7

Documentation

• improve generate key/secret and import function descriptions (cd06359)

Fixes

• use [customFetch] when provided to createRemoteJWKSet (35f6509), closes #760

v6.0.6

Refactor

• move base64url around (e1350ef)

Documentation

• add various exported symbol descriptions (3b8ff71)
• add various exported symbol descriptions (fc4e7da)
• add various exported symbol descriptions (74f02c8)
• update base64url function descriptions (03d72c8)

... (truncated)

Changelog

Sourced from jose's changelog.

6.0.10 (2025-03-12)

Refactor

• removed unused claims methods (74719cf)
• reorganize jwt claim set utils (1f12d88)

6.0.9 (2025-03-11)

Documentation

• add more symbol document, ignore ts-private fields (8b73687)
• bump typedoc (6163a8b)
• drop cdnjs links in README (a910038)
• drop denoland/x links in README and add jsr (3662b9e)
• fix key export links from docs/README.md (c8edfc2)

Refactor

• always assume structuredClone is present (f7898a9)
• hide internal private fields and drop ProduceJWT inheritance (ab18881)
• less objects when JWE JWT Replicated Header Parameters are used (c763a0e)

6.0.8 (2025-02-26)

Fixes

• export [customFetch] symbol from the default entrypoint (1615614), closes #762

6.0.7 (2025-02-25)

Documentation

• improve generate key/secret and import function descriptions (cd06359)

Fixes

• use [customFetch] when provided to createRemoteJWKSet (35f6509), closes #760

6.0.6 (2025-02-23)

Refactor

... (truncated)

Commits

• e1cfcc5 chore(release): 6.0.10
• 74719cf refactor: removed unused claims methods
• 1f12d88 refactor: reorganize jwt claim set utils
• 0848798 chore: cleanup after release
• d4ded39 chore(release): 6.0.9
• 4ae905b chore: bump packages
• c763a0e refactor: less objects when JWE JWT Replicated Header Parameters are used
• f7898a9 refactor: always assume structuredClone is present
• e8d366a chore: run lint
• ab18881 refactor: hide internal private fields and drop ProduceJWT inheritance
• Additional commits viewable in compare view

Updates next from 15.2.0-canary.33 to 15.2.4

Release notes

Sourced from next's releases.

v15.2.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Match subrequest handling for edge and node (#77474)
• exclude images and static media from dev origin check (#77417)
• ensure /__next middleware URLs are included in the origin check (#77416)
• remove direct ip/port bypass in dev origin check (#77414)
• switch development origin verification to be opt-in rather than opt-out (#77395)

Credits

Huge thanks to @​ijjk and @​ztanner for helping!

v15.2.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary. This release contains a security patch for CVE-2025-29927.

Core Changes

• Update default allowed origins list (#77212)
• unify allowed origin detection handling (#77053)
• Add dev warning for cross-origin and stabilize allowedDevOrigins (#77044)
• Ensure deploymentId is used for CSS preloads (#77210)
• Update middleware request header (#77201)
• [metadata] remove the default segement check for metadata rendering (#77119)
• [ts-hint] fix vscode type hint plugin enabling (#77099)
• [metadata] re-insert icons to head for streamed metadata (#76915)

Credits

Huge thanks to @​ijjk, @​ztanner, and @​huozhi for helping!

v15.2.2

Core Changes

• [dev-overlay] fix styling on overflow error messages, add button hover state: #76771
• Fix: respond 405 status code on OPTIONS request to SSG page: #76767
• [dev-overlay] Always show relative paths: #76742
• [metadata] remove the duplicate metadata in the error boundary: #76791
• Upgrade React from d55cc79b-20250228 to 443b7ff2-20250303: #76804
• [dev-overlay] Ignore animations on page load: #76834
• fix: remove useless set-cookie in action-handler: #76839
• Turbopack: handle task cancelation: #76831
• Upgrade React from 443b7ff2-20250303 to e03ac20f-20250305: #76842

... (truncated)

Commits

• 804aa35 v15.2.4
• ecb72ee Match subrequest handling for edge and node (#77474)
• 25f810b exclude images and static media from dev origin check (#77417)
• d9bcb83 ensure /__next middleware URLs are included in the origin check (#77416)
• cfeaa86 remove direct ip/port bypass in dev origin check (#77414)
• f847302 switch development origin verification to be opt-in rather than opt-out (#77395)
• 535e26d v15.2.3
• 2fcae1d Update default allowed origins list (#77212)
• adf5462 unify allowed origin detection handling (#77053)
• 5e59da1 Add dev warning for cross-origin and stabilize allowedDevOrigins (#77044)
• Additional commits viewable in compare view

Updates next-intl from 3.25.1 to 4.0.2

Release notes

Sourced from next-intl's releases.

v4.0.2

4.0.2 (2025-03-13)

Bug Fixes

• Allow to use IntlErrorCode in user code (#1788) (913d307), closes #1787 – by @​amannn

v4.0.1

4.0.1 (2025-03-12)

Bug Fixes

• Handle default exports correctly for moduleResolution: 'node' (#1785) (b7a4a83) – by @​amannn

v4.0.0

4.0.0 (2025-03-12)

See the announcement.

v3.26.5

3.26.5 (2025-02-21)

Bug Fixes

• Handle query in <Link /> correctly when using localePrefix: 'as-needed' with domains (#1732) (ec8776e), closes #1731 – by @​amannn

v3.26.4

3.26.4 (2025-02-18)

Bug Fixes

• Add workaround for OpenTelemetry/Zone.js (#1719) (1cac9a6), closes #1711 – by @​amannn

v3.26.3

3.26.3 (2024-12-20)

Bug Fixes

• Add missing deprecation warnings for [email protected] (#1485) (1d60d08) – by @​amannn

v3.26.2

... (truncated)

Changelog

Sourced from next-intl's changelog.

4.0.2 (2025-03-13)

Bug Fixes

• Allow to use IntlErrorCode in user code (#1788) (913d307), closes #1787 – by @​amannn

4.0.1 (2025-03-12)

Bug Fixes

• Handle default exports correctly for moduleResolution: 'node' (#1785) (b7a4a83), closes /github.com/amannn/next-intl/discussions/1631#discussioncomment-12477848 – by @​amannn

4.0.0 (2025-03-12)

See the announcement.

(#1412) (172656f) – by @​amannn

3.26.5 (2025-02-21)

Bug Fixes

• Handle query in <Link /> correctly when using localePrefix: 'as-needed' with domains (#1732) (ec8776e), closes #1731 – by @​amannn

3.26.4 (2025-02-18)

Bug Fixes

• Add workaround for OpenTelemetry/Zone.js (#1719) (1cac9a6), closes #1711 – by @​amannn

3.26.3 (2024-12-20)

Bug Fixes

• Add missing deprecation warnings for [email protected] (#1485) (1d60d08) – by @​amannn

3.26.2 (2024-12-18)

Bug Fixes

• Support t.has when getTranslations is called with an object argument (#1616) (64895a2), closes /github.com/amannn/next-intl/discussions/437#discussioncomment-11593318 – by @​amannn

3.26.1 (2024-12-11)

Bug Fixes

• Use new domain next-intl.dev in links (#1601) (40a9a77) – by @​amannn

3.26.0 (2024-12-06)

... (truncated)

Commits

• d6c0e91 v4.0.2
• 913d307 fix: Allow to use IntlErrorCode in user code (#1788)
• 8d910f9 chore: Update storybook lib
• 33b050e v4.0.1
• b7a4a83 fix: Handle default exports correctly for moduleResolution: 'node' (#1785)
• cd5775c chore: Update deps (#1783)
• 0972b74 docs: Update link
• 6245413 docs: Remove invalid TS extends in examples
• f6e1c74 docs: Update examples to v4
• a23c776 docs: Update CHANGELOG.md
• Additional commits viewable in compare view

Updates next-themes from 0.2.1 to 0.4.6

Release notes

Sourced from next-themes's releases.

v0.4.6

What's Changed

• fix: add null check for value in updateDOM function to prevent runtime errors and flashing by @​groveom in pacocoursey/next-themes#344

New Contributors

• @​groveom made their first contribution in pacocoursey/next-themes#344

Full Changelog: pacocoursey/next-themes@v0.4.5...v0.4.6

v0.4.5

What's Changed

• fix: map theme to class using ValueObject in injected script by @​danielgavrilov in pacocoursey/next-themes#330
• Reduce number of renders by pre-setting resolvedTheme by @​wahba-openai in pacocoursey/next-themes#338
• Bump next from 14.2.10 to 14.2.15 in the npm_and_yarn group across 1 directory by @​dependabot in pacocoursey/next-themes#331
• Bump the npm_and_yarn group across 1 directory with 7 updates by @​dependabot in pacocoursey/next-themes#341
• chore: Fix corepack errors in CI by @​pacocoursey in pacocoursey/next-themes#342

New Contributors

• @​danielgavrilov made their first contribution in pacocoursey/next-themes#330
• @​wahba-openai made their first contribution in pacocoursey/next-themes#338

Full Changelog: pacocoursey/next-themes@v0.4.4...v0.4.5

v0.4.4

What's Changed

• fix: infinite loop theme flicker by @​arturbien in pacocoursey/next-themes#329

New Contributors

• @​o1Suleyman made their first contribution in pacocoursey/next-themes#328
• @​arturbien made their first contribution in pacocoursey/next-themes#329

Full Changelog: pacocoursey/next-themes@v0.4.3...v0.4.4

v0.4.3

What's Changed

• Pass nonce to inline style tag when using disableTransitionOnChange

Full Changelog: pacocoursey/next-themes@v0.4.2...v0.4.3

v0.4.2

What's Changed

• Re-export types from next-themes by @​cschroeter in pacocoursey/next-themes#321

New Contributors

• @​cschroeter made their first contribution in pacocoursey/next-themes#321

Full Changelog: pacocoursey/next-themes@v0.4.1...v0.4.2

... (truncated)

Commits

• See full diff in compare view

Updates nice-grpc from 2.0.1 to 2.1.12

Release notes

Sourced from nice-grpc's releases.

[email protected]

2.1.12 (2025-03-26)

Note: Version bump only for package nice-grpc

[email protected]

2.1.11 (2025-02-18)

Bug Fixes

• nice-grpc: disable implicit sending of empty header (#728) (bd3811d), closes #722

[email protected]

2.1.10 (2024-09-24)

Bug Fixes

• nice-grpc: avoid server.start() deprecation warning (#661) (bd5e82d)

[email protected]

2.1.9 (2024-06-06)

Bug Fixes

• nice-grpc: resolve compatibility issues with grpc-js 1.10.x (bdfc754), closes #555 #607

[email protected]

2.1.8 (2024-03-11)

Note: Version bump only for package nice-grpc

[email protected]

2.1.7 (2023-10-19)

Bug Fixes

• nice-grpc: add missing exports for Service Definition types (#470) (2e3ab79)

[email protected]

2.1.6 (2023-10-17)

• chore: fix hanging and erroring tests (#466) (0d169ec), closes #466
• chore(deps): upgrade grpc-js to 1.9.5 (#461) (de41157), closes #461
• docs(nice-grpc): Add example to docs for extending a client Type with CallOptions (#426) (191e706), closes #426

[email protected]

... (truncated)

Commits

• 7458e8a chore(release): publish
• 82e2197 chore(deps): upgrade grpc-js to 1.13.1 (#746)
• 1e82331 chore(deps-dev): downgrade glob to v10
• b2d5685 chore(release): publish
• bd3811d fix(nice-grpc): disable implicit sending of empty header (#728)
• ea1f329 chore(deps-dev): bump glob from 10.4.2 to 11.0.1 (#719)
• ce8f2fa chore(deps-dev): bump ts-jest from 29.1.4 to 29.2.5 (#645)
• 0a2ce45 chore(deps-dev): bump ts-proto from 1.181.0 to 2.6.1 (#705)
• 5b44e55 chore(deps): bump undici from 5.28.4 to 5.28.5 (#711)
• ea2814c chore(deps-dev): bump assert-never from 1.3.0 to 1.4.0 (#715)
• Additional commits viewable in compare view

Updates qrcode.react from 3.1.0 to 4.2.0

Release notes

Sourced from qrcode.react's releases.

v4.2.0

Added

• Added React v19 to peerDependencies (#381)

v4.1.0

Added

• Added support for new boostLevel prop, allowing the disabling of the underlying encoder's default of automatically boosting the ECL. (#374)
• Added support for accepting an array of strings for value, which enables encoding of each part into independent segments. (#374)

v4.0.1

Fixed

• Corrected issue with loading types in Typescript when configured with "moduleResolution": "Bundler" or "module": "ESNext". (

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
typescript-login	❌ Failed (Inspect)			Apr 2, 2025 8:19am