chore(deps): bump the production-minor-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #47 · podverse/metaboost

dependabot · 2026-07-06T13:14:34Z

Bumps the production-minor-patch group with 6 updates in the / directory:

Package	From	To
nanoid	`5.1.15`	`5.1.16`
recharts	`3.9.0`	`3.9.2`
@fortawesome/fontawesome-free	`7.2.0`	`7.3.0`
next	`16.2.9`	`16.2.10`
next-intl	`4.13.0`	`4.13.1`
nodemailer	`9.0.1`	`9.0.3`

Updates nanoid from 5.1.15 to 5.1.16

Release notes

Sourced from nanoid's releases.

5.1.16

Fixed forever loop on negative size (by @spokodev).

Changelog

Sourced from nanoid's changelog.

5.1.16

Fixed forever loop on negative size (by @spokodev).

Commits

6ccc67b Release 5.1.16 version
6de05d7 fix(non-secure): clamp negative size with a smaller guard (#600)
3925903 Update dependencies
See full diff in compare view

Updates recharts from 3.9.0 to 3.9.2

Release notes

Sourced from recharts's releases.

v3.9.2

What's Changed

docs: clarify custom labels and ticks need SVG elements by @ishaanlabs-gg in recharts/recharts#7524

chore(deps): bump immer from 11.1.8 to 11.1.9 by @dependabot[bot] in recharts/recharts#7526

fix(Sankey): avoid exponential depth traversal on dense graphs by @dm-gthb in recharts/recharts#7479

New Contributors

@ishaanlabs-gg made their first contribution in recharts/recharts#7524

@dm-gthb made their first contribution in recharts/recharts#7479

Full Changelog: recharts/recharts@v3.9.1...v3.9.2

v3.9.1

What's Changed

perf: optimize ScatterChart hover by reducing re-renders from O(n) to O(1) by @roy7 in recharts/recharts#7133

fix(YAxis): render explicit ticks when a non-literal domain can't resolve on empty data (#7362) by @nlenepveu in recharts/recharts#7393

fix: avoid Sankey nodes overlapping skipped-depth links by @pupuking723 in recharts/recharts#7471

Add stacked bar chart with horizontal threshold line example by @nijuse in recharts/recharts#7495

fix(DefaultLegendContent): omit empty value from legend icon aria-label by @greymoth-jp in recharts/recharts#7501

chore(deps): bump immer from 10.2.0 to 11.1.8 by @dependabot[bot] in recharts/recharts#7452

fix(getNiceTickValues): remove trailing duplicate tick when allowDecimals=false by @JSap0914 in recharts/recharts#7482

Fix/per graphical item formatter prop by @shreedharbhat98 in recharts/recharts#7287

New Contributors

@pupuking723 made their first contribution in recharts/recharts#7471

@nijuse made their first contribution in recharts/recharts#7495

@greymoth-jp made their first contribution in recharts/recharts#7501

@JSap0914 made their first contribution in recharts/recharts#7482

Full Changelog: recharts/recharts@v3.9.0...v3.9.1

Commits

b345105 3.9.2
f27779c npm i
85f9369 chore(deps-dev): bump prettier from 3.8.4 to 3.9.4 (#7520)
52a2a89 fix(Sankey): avoid exponential depth traversal on dense graphs (#7479)
8a056c1 chore(deps-dev): bump rollup from 4.61.1 to 4.62.2 (#7527)
2af6ec6 chore(deps): bump immer from 11.1.8 to 11.1.9 (#7526)
6f10d53 docs: clarify custom labels and ticks need SVG elements (#7524)
c04f1a7 chore(deps-dev): bump lint-staged from 17.0.7 to 17.0.8 (#7521)
69c7a96 chore(deps-dev): bump glob from 11.1.0 to 13.0.6 (#7522)
6efaf16 chore(deps): bump es-toolkit from 1.47.0 to 1.49.0 (#7515)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for recharts since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @fortawesome/fontawesome-free from 7.2.0 to 7.3.0

Release notes

Sourced from @fortawesome/fontawesome-free's releases.

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

70fb2dd Release 7.3.0 (#21612)
See full diff in compare view

Updates next from 16.2.9 to 16.2.10

Release notes

Sourced from next's releases.

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

Commits

9dadfd6 v16.2.10
534d9c1 [16.2.x] Release pipeline updates (#95160)
98941fc backport: docs fixes 16.2.x (#94935)
6e1a94d [16.2.x][ci]: fix release script to not strip newlines (#94640)
See full diff in compare view

Updates next-intl from 4.13.0 to 4.13.1

Release notes

Sourced from next-intl's releases.

v4.13.1

4.13.1 (2026-06-30)

Bug Fixes

Handle ICU escape sequences around < consistently in dev and production (#2352) (4025d1f) – by @amannn

Changelog

Sourced from next-intl's changelog.

4.13.1 (2026-06-30)

Bug Fixes

Handle ICU escape sequences around < consistently in dev and production (#2352) (4025d1f) – by @amannn

Commits

976ca1f v4.13.1
4025d1f fix: Handle ICU escape sequences around < consistently in dev and productio...
90691ed docs: Add hooks hint to extraction.mdx (#2348)
30d1004 docs: Handle malformed tweet entities from API (#2343)
030afd3 docs: Add copy-to-clipboard for details section permalinks (#2342)
See full diff in compare view

Updates nodemailer from 9.0.1 to 9.0.3

Release notes

Sourced from nodemailer's releases.

v9.0.3

9.0.3 (2026-06-30)

Bug Fixes

smtp-connection: harden STARTTLS upgrade and secure socket handling (#1835) (07d8253)

v9.0.2

9.0.2 (2026-06-29)

Bug Fixes

addressparser: keep operator chars inside an address-literal as text (#1829) (9ba1064)

harden smtp-connection low-severity issues (22ddcea)

harden smtp-connection response parsing and socket lifecycle (68860b9)

prevent SES transport callback double-invocation and hang on sync errors (#1831) (9517bc5)

reject CRLF in HTTP proxy CONNECT destination to prevent request injection (6347b47)

Changelog

Sourced from nodemailer's changelog.

9.0.3 (2026-06-30)

Bug Fixes

smtp-connection: harden STARTTLS upgrade and secure socket handling (#1835) (07d8253)

9.0.2 (2026-06-29)

Bug Fixes

addressparser: keep operator chars inside an address-literal as text (#1829) (9ba1064)

harden smtp-connection low-severity issues (22ddcea)

harden smtp-connection response parsing and socket lifecycle (68860b9)

prevent SES transport callback double-invocation and hang on sync errors (#1831) (9517bc5)

reject CRLF in HTTP proxy CONNECT destination to prevent request injection (6347b47)

Commits

1f61eb4 chore(master): release 9.0.3 (#1836)
07d8253 fix(smtp-connection): harden STARTTLS upgrade and secure socket handling (#1835)
4801f3a chore(master): release 9.0.2 (#1832)
9ba1064 fix(addressparser): keep operator chars inside an address-literal as text (#1...
22ddcea fix: harden smtp-connection low-severity issues
af002eb chore: add Node.js 26 to the CI test matrix
6347b47 fix: reject CRLF in HTTP proxy CONNECT destination to prevent request injection
68860b9 fix: harden smtp-connection response parsing and socket lifecycle
9517bc5 fix: prevent SES transport callback double-invocation and hang on sync errors...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… with 6 updates Bumps the production-minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [nanoid](https://github.com/ai/nanoid) | `5.1.15` | `5.1.16` | | [recharts](https://github.com/recharts/recharts) | `3.9.0` | `3.9.2` | | [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) | `7.2.0` | `7.3.0` | | [next](https://github.com/vercel/next.js) | `16.2.9` | `16.2.10` | | [next-intl](https://github.com/amannn/next-intl) | `4.13.0` | `4.13.1` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.1` | `9.0.3` | Updates `nanoid` from 5.1.15 to 5.1.16 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@5.1.15...5.1.16) Updates `recharts` from 3.9.0 to 3.9.2 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.9.0...v3.9.2) Updates `@fortawesome/fontawesome-free` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.0) Updates `next` from 16.2.9 to 16.2.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.9...v16.2.10) Updates `next-intl` from 4.13.0 to 4.13.1 - [Release notes](https://github.com/amannn/next-intl/releases) - [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md) - [Commits](amannn/next-intl@v4.13.0...v4.13.1) Updates `nodemailer` from 9.0.1 to 9.0.3 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v9.0.1...v9.0.3) --- updated-dependencies: - dependency-name: nanoid dependency-version: 5.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: recharts dependency-version: 3.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@fortawesome/fontawesome-free" dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: next dependency-version: 16.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: next-intl dependency-version: 4.13.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: nodemailer dependency-version: 9.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-13T13:10:20Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Dependency updates and security issues label Jul 6, 2026

github-actions Bot added apps Changes to apps/ packages Changes to packages/ labels Jul 6, 2026

dependabot Bot closed this Jul 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/develop/production-minor-patch-367892d9e7 branch July 13, 2026 13:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the production-minor-patch group across 1 directory with 6 updates - #47

chore(deps): bump the production-minor-patch group across 1 directory with 6 updates#47
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/production-minor-patch-367892d9e7

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

5.1.16

5.1.16

v3.9.2

What's Changed

New Contributors

v3.9.1

What's Changed

New Contributors

Release 7.3.0

v16.2.10

v4.13.1

4.13.1 (2026-06-30)

Bug Fixes

4.13.1 (2026-06-30)

Bug Fixes

v9.0.3

9.0.3 (2026-06-30)

Bug Fixes

v9.0.2

9.0.2 (2026-06-29)

Bug Fixes

9.0.3 (2026-06-30)

Bug Fixes

9.0.2 (2026-06-29)

Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited

Loading