Skip to content
This repository was archived by the owner on Mar 23, 2026. It is now read-only.

Bump the prod-deps group across 1 directory with 14 updates#283

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-deps-138d63c046
Closed

Bump the prod-deps group across 1 directory with 14 updates#283
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-deps-138d63c046

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 14, 2025

Bumps the prod-deps group with 14 updates in the / directory:

Package From To
@auth0/nextjs-auth0 3.7.0 4.4.2
@mui/material 6.4.8 7.0.2
@neondatabase/serverless 0.10.4 1.0.0
@next/mdx 15.1.6 15.3.0
dotenv 16.4.7 16.5.0
drizzle-orm 0.39.3 0.41.0
next 15.1.6 15.3.0
nodemailer 6.10.0 6.10.1
react 19.0.0 19.1.0
@types/react 19.0.10 19.1.1
react-dom 19.0.0 19.1.0
@types/react-dom 19.0.4 19.1.2
react-hotkeys-hook 4.6.1 5.0.1
react-markdown 9.1.0 10.1.0

Updates @auth0/nextjs-auth0 from 3.7.0 to 4.4.2

Release notes

Sourced from @​auth0/nextjs-auth0's releases.

v4.4.2

Revert

Fixed

v4.4.1

Fixed

v4.4.0

Added

Fixed

v4.3.0

Added

v4.2.1

Changed

v4.2.0

Security

The above security fix was done to help prevent customers being vulnerable to Authorization Bypass in Next.js Middleware.

Releasing this as a non-major version bump, even thought this is a breaking change. We are doing this because this is a security fix to help prevent customers using our SDK is versions of NextJS vulnerable to GHSA-f82v-jwr5-mffw

v4.1.0

Added

... (truncated)

Changelog

Sourced from @​auth0/nextjs-auth0's changelog.

v4.4.2 (2025-04-08)

Full Changelog

Revert

Fixed

v4.4.1 (2025-04-03)

Full Changelog

Fixed

v4.4.0 (2025-04-01)

Full Changelog

Added

Fixed

v4.3.0 (2025-03-28)

Full Changelog

Added

v4.2.1 (2025-03-24)

Full Changelog

Changed

v4.2.0 (2025-03-23)

Full Changelog

Security

... (truncated)

Commits

Updates @mui/material from 6.4.8 to 7.0.2

Release notes

Sourced from @​mui/material's releases.

v7.0.2

Apr 9, 2025

A big thanks to the 12 contributors who made this release possible.

@mui/material@7.0.2

@mui/material-nextjs@7.0.2

@mui/styled-engine@7.0.2

  • Added caching to StyledEngineProvider to improve performance for running tests with Jest (#45846) @​siriwatknp

Core

Docs

... (truncated)

Changelog

Sourced from @​mui/material's changelog.

7.0.2

Apr 9, 2025

A big thanks to the 12 contributors who made this release possible.

@mui/material@7.0.2

@mui/material-nextjs@7.0.2

@mui/styled-engine@7.0.2

  • Added caching to StyledEngineProvider to improve performance for running tests with Jest (#45846) @​siriwatknp

Core

Docs

... (truncated)

Commits

Updates @neondatabase/serverless from 0.10.4 to 1.0.0

Changelog

Sourced from @​neondatabase/serverless's changelog.

1.0.0 (2025-03-25)

Breaking change: the HTTP query template function can now only be called as a template function, not as a conventional function. This improves safety from accidental SQL-injection vulnerabilities. For example:

import { neon } from '@neondatabase/serverless';
const sql = neon(process.env.DATABASE_URL);
const id = 1;
// this is safe and convenient, as before
const result = await sqlSELECT * FROM table WHERE id = ${id};
// this looks very similar and was previously allowed, but was open to SQL
// injection attacks because it uses ordinary string interpolation -- it's now
// both a TypeScript type error and a runtime error
const throws = await sql(SELECT * FROM table WHERE id = ${id});

To fill the gap left by this change, the template function has two new properties: a query() function that allows manually parameterized queries, and an unsafe() function that lets you interpolate trusted arbitrary string values. For example:

// this was previously allowed, and was safe, but is now also an error so as to
// prevent the vulnerability seen above
const throws = await sql('SELECT * FROM table WHERE id = $1', [id]);
// the query() function is the new way to manually specify placeholders and
// values (the same way it's done by client.query() and pool.query())
const result = await sql.query('SELECT * FROM table WHERE id = $1', [id]);
// to interpolate strings like column or table names, only if you know
// they're safe, use the unsafe() function
const table = condition ? 'table1' : 'table2'; // known-safe string values
const result = await sqlSELECT * FROM ${sql.unsafe(table)} WHERE id = ${id};
// but in the above case, you might prefer to do this instead
const table = condition ? sqltable1 : sqltable2;
const result = await sqlSELECT * FROM ${table} WHERE id = ${id};

In addition, HTTP template queries are now fully composable, including those with parameters. For example:

const name = 'Olivia';
const limit = 1;
const whereClause = sql`WHERE name = ${name}`;
const limitClause = sql`LIMIT ${limit}`;
// compilation to raw SQL now happens lazily, at query time, so that parameter
// placeholders can be numbered appropriately
const result = await sqlSELECT * FROM table ${whereClause} ${limitClause};
</tr></table>

... (truncated)

Commits

Updates @next/mdx from 15.1.6 to 15.3.0

Release notes

Sourced from @​next/mdx's releases.

v15.3.0

Core Changes

  • [dev-overlay] Customize <select> styling for consistency: #76973
  • Upgrade React from 029e8bd6-20250306 to 0ca3deeb-20250311: #76989
  • [metadata]: add pinterest meta tag: #76988
  • [dev-overlay] ensure stripping overlay bundle in prod build: #76976
  • Apply env inlining during generate build mode: #76990
  • Turbopack: Implement deploymentId: #76904
  • track persistent caching usage: #76996
  • [metadata] re-insert icons to head for streamed metadata: #76915
  • Upgrade React from 0ca3deeb-20250311 to 6aa8254b-20250312: #77033
  • Move static-env imports: #77035
  • [dev-overlay] Add size setting to preferences: #77027
  • Add config for only generating static env: #77038
  • chore(HMR clients): Clean up and share code between app and pages router: #76960
  • Add dev warning for cross-origin and stabilize allowedDevOrigins: #77044
  • unify allowed origin detection handling: #77053
  • Handle hash change in all files for static env: #77058
  • [dev-overlay] highlight errored code line for runtime errors: #77078
  • NFT: Ignore all of Webpack: #77081
  • Add experimental build mode flag for env: #77089
  • (feat) support client-side instrumentation: #76916
  • Fix JSDoc comment for 'seconds' cache life profile: #77084
  • refactor(HMR clients): Encapsulate some of the turbopack state tracking into a shared TurbopackHmr class: #76994
  • Slightly improve error handling for unknown server actions: #77135
  • Fix output standalone for alternative bundler: #76971
  • Add alternate bundler plugin information to next info: #77059
  • [metadata] remove the default segement check for metadata rendering: #77119
  • [dev-overlay] Fix stacking order of highlighted line: #77189
  • Upgrade React from 6aa8254b-20250312 to 5398b711-20250314: #77129
  • fix(styled-jsx): Pass useLightningcss option to styled-jsx correctly: #77008
  • log the instrumentation-client execution time: #77121
  • Turbopack: canary-gate production builds: #77146
  • [dev-overlay] remove special handling for missing tag error : #77147
  • chore(react-dev-overlay): Remove confusingly underscored variables in useErrorOverlayReducer: #77205
  • Update middleware request header: #77201
  • Update default allowed origins list: #77212
  • Ensure deploymentId is used for CSS preloads: #77210
  • chore(HMR clients): Fix a bunch of typescript errors by including the appropriate webpack type declarations: #77207
  • Update cache handler interface: #76687
  • Turbopack: don't include AMP optimizer in NFT: #77242
  • Server actions should not read stale data after calling revalidate*: #76885
  • [dev-overlay] Blur fader for scrollable container: #77196
  • Make revalidate* work when followed by a redirect in a route handler: #77090
  • feat: onNavigate for link: #77209
  • fix: pass telemetry plugin rspack tests: #77257
  • feat(eslint-plugin): add minimal built-in flat presets: #73873
  • [perf] skip loading client manifest for static metadata routes: #77260
  • Upgrade React from 5398b711-20250314 to c69a5fc5-20250318: #77249

... (truncated)

Commits

Updates dotenv from 16.4.7 to 16.5.0

Changelog

Sourced from dotenv's changelog.

16.5.0 (2025-04-07)

Added

  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

  • Remove _log method. Use _debug #862
Commits

Updates drizzle-orm from 0.39.3 to 0.41.0

Release notes

Sourced from drizzle-orm's releases.

0.41.0

  • bigint, number modes for SQLite, MySQL, PostgreSQL, SingleStore decimal & numeric column types
  • Changed behavior of sql-js query preparation to query prebuild instead of db-side prepare due to need to manually free prepared queries, removed .free() method
  • Fixed MySQL, SingleStore varchar allowing not specifying length in config
  • Fixed MySQL, SingleStore binary, varbinary data\type mismatches
  • Fixed numeric\decimal data\type mismatches: #1290, #1453
  • Fixed drizzle-studio + AWS Data Api connection issue: #3224
  • Fixed isConfig utility function checking types of wrong fields
  • Enabled supportBigNumbers in auto-created mysql2 driver instances
  • Fixed custom schema tables querying in RQBv1: #4060
  • Removed in-driver mapping for postgres types 1231 (numeric[]), 1115 (timestamp[]), 1185 (timestamp_with_timezone[]), 1187 (interval[]), 1182 (date[]), preventing precision loss and data\type mismatches
  • Fixed SQLite buffer-mode blob sometimes returning number[]

0.40.1

Updates to neon-http for @neondatabase/serverless@1.0.0 - thanks @​jawj

Starting from this version, drizzle-orm will be compatible with both @neondatabase/serverless 1.0

0.40.0

New Features

Added Gel dialect support and gel-js client support

Drizzle is getting a new Gel dialect with its own types and Gel-specific logic. In this first iteration, almost all query-building features have been copied from the PostgreSQL dialect since Gel is fully PostgreSQL-compatible. The only change in this iteration is the data types. The Gel dialect has a different set of available data types, and all mappings for these types have been designed to avoid any extra conversions on Drizzle's side. This means you will insert and select exactly the same data as supported by the Gel protocol.

Drizzle + Gel integration will work only through drizzle-kit pull. Drizzle won't support generate, migrate, or push features in this case. Instead, drizzle-kit is used solely to pull the Drizzle schema from the Gel database, which can then be used in your drizzle-orm queries.

The Gel + Drizzle workflow:

  1. Use the gel CLI to manage your schema.
  2. Use the gel CLI to generate and apply migrations to the database.
  3. Use drizzle-kit to pull the Gel database schema into a Drizzle schema.
  4. Use drizzle-orm with gel-js to query the Gel database.

Here is a small example of how to connect to Gel using Drizzle:

// Make sure to install the 'gel' package 
import { drizzle } from "drizzle-orm/gel";
import { createClient } from "gel";
const gelClient = createClient();
const db = drizzle({ client: gelClient });
const result = await db.execute('select 1');

and drizzle-gel schema definition

import { gelTable, uniqueIndex, uuid, smallint, text } from "drizzle-orm/gel-core"
</tr></table> 

... (truncated)

Commits

Updates next from 15.1.6 to 15.3.0

Release notes

Sourced from next's releases.

v15.3.0

Core Changes

  • [dev-overlay] Customize <select> styling for consistency: #76973
  • Upgrade React from 029e8bd6-20250306 to 0ca3deeb-20250311: #76989
  • [metadata]: add pinterest meta tag: #76988
  • [dev-overlay] ensure stripping overlay bundle in prod build: #76976
  • Apply env inlining during generate build mode: #76990
  • Turbopack: Implement deploymentId: #76904
  • track persistent caching usage: #76996
  • [metadata] re-insert icons to head for streamed metadata: #76915
  • Upgrade React from 0ca3deeb-20250311 to 6aa8254b-20250312: #77033
  • Move static-env imports: #77035
  • [dev-overlay] Add size setting to preferences: #77027
  • Add config for only generating static env: #77038
  • chore(HMR clients): Clean up and share code between app and pages router: #76960
  • Add dev warning for cross-origin and stabilize allowedDevOrigins: #77044
  • unify allowed origin detection handling: #77053
  • Handle hash change in all files for static env: #77058
  • [dev-overlay] highlight errored code line for runtime errors: #77078
  • NFT: Ignore all of Webpack: #77081
  • Add experimental build mode flag for env: #77089
  • (feat) support client-side instrumentation: #76916
  • Fix JSDoc comment for 'seconds' cache life profile: #77084
  • refactor(HMR clients): Encapsulate some of the turbopack state tracking into a shared TurbopackHmr class: #76994
  • Slightly improve error handling for unknown server actions: #77135
  • Fix output standalone for alternative bundler: #76971
  • Add alternate bundler plugin information to next info: #77059
  • [metadata] remove the default segement check for metadata rendering: #77119
  • [dev-overlay] Fix stacking order of highlighted line: #77189
  • Upgrade React from 6aa8254b-20250312 to 5398b711-20250314: #77129
  • fix(styled-jsx): Pass useLightningcss option to styled-jsx correctly: #77008
  • log the instrumentation-client execution time: #77121
  • Turbopack: canary-gate production builds: #77146
  • [dev-overlay] remove special handling for missing tag error : #77147
  • chore(react-dev-overlay): Remove confusingly underscored variables in useErrorOverlayReducer: #77205
  • Update middleware request header: #77201
  • Update default allowed origins list: #77212
  • Ensure deploymentId is used for CSS preloads: #77210
  • chore(HMR clients): Fix a bunch of typescript errors by including the appropriate webpack type declarations: #77207
  • Update cache handler interface: #76687
  • Turbopack: don't include AMP optimizer in NFT: #77242
  • Server actions should not read stale data after calling revalidate*: #76885
  • [dev-overlay] Blur fader for scrollable container: #77196
  • Make revalidate* work when followed by a redirect in a route handler: #77090
  • feat: onNavigate for link: #77209
  • fix: pass telemetry plugin rspack tests: #77257
  • feat(eslint-plugin): add minimal built-in flat presets: #73873
  • [perf] skip loading client manifest for static metadata routes: #77260
  • Upgrade React from 5398b711-20250314 to c69a5fc5-20250318: #77249

... (truncated)

Commits

Updates nodemailer from 6.10.0 to 6.10.1

Release notes

Sourced from nodemailer's releases.

v6.10.1

6.10.1 (2025-02-06)

Bug Fixes

Changelog

Sourced from nodemailer's changelog.

6.10.1 (2025-02-06)

Bug Fixes

Commits

Updates react from 19.0.0 to 19.1.0

Release notes

Sourced from react's releases.

19.1.0 (March 28,...

Description has been truncated

Bumps the prod-deps group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@auth0/nextjs-auth0](https://github.com/auth0/nextjs-auth0) | `3.7.0` | `4.4.2` |
| [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `6.4.8` | `7.0.2` |
| [@neondatabase/serverless](https://github.com/neondatabase/serverless) | `0.10.4` | `1.0.0` |
| [@next/mdx](https://github.com/vercel/next.js/tree/HEAD/packages/next-mdx) | `15.1.6` | `15.3.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.4.7` | `16.5.0` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.39.3` | `0.41.0` |
| [next](https://github.com/vercel/next.js) | `15.1.6` | `15.3.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.0` | `6.10.1` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.0.0` | `19.1.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.0.10` | `19.1.1` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.0.0` | `19.1.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.0.4` | `19.1.2` |
| [react-hotkeys-hook](https://github.com/JohannesKlauss/react-keymap-hook) | `4.6.1` | `5.0.1` |
| [react-markdown](https://github.com/remarkjs/react-markdown) | `9.1.0` | `10.1.0` |



Updates `@auth0/nextjs-auth0` from 3.7.0 to 4.4.2
- [Release notes](https://github.com/auth0/nextjs-auth0/releases)
- [Changelog](https://github.com/auth0/nextjs-auth0/blob/main/CHANGELOG.md)
- [Commits](auth0/nextjs-auth0@v3.7.0...v4.4.2)

Updates `@mui/material` from 6.4.8 to 7.0.2
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v7.0.2/packages/mui-material)

Updates `@neondatabase/serverless` from 0.10.4 to 1.0.0
- [Changelog](https://github.com/neondatabase/serverless/blob/main/CHANGELOG.md)
- [Commits](https://github.com/neondatabase/serverless/commits/v1.0.0)

Updates `@next/mdx` from 15.1.6 to 15.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v15.3.0/packages/next-mdx)

Updates `dotenv` from 16.4.7 to 16.5.0
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.7...v16.5.0)

Updates `drizzle-orm` from 0.39.3 to 0.41.0
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.39.3...0.41.0)

Updates `next` from 15.1.6 to 15.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.1.6...v15.3.0)

Updates `nodemailer` from 6.10.0 to 6.10.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v6.10.0...v6.10.1)

Updates `react` from 19.0.0 to 19.1.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.1.0/packages/react)

Updates `@types/react` from 19.0.10 to 19.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.0.0 to 19.1.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.1.0/packages/react-dom)

Updates `@types/react-dom` from 19.0.4 to 19.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-hotkeys-hook` from 4.6.1 to 5.0.1
- [Release notes](https://github.com/JohannesKlauss/react-keymap-hook/releases)
- [Changelog](https://github.com/JohannesKlauss/react-hotkeys-hook/blob/main/CHANGELOG.md)
- [Commits](https://github.com/JohannesKlauss/react-keymap-hook/commits)

Updates `react-markdown` from 9.1.0 to 10.1.0
- [Release notes](https://github.com/remarkjs/react-markdown/releases)
- [Changelog](https://github.com/remarkjs/react-markdown/blob/main/changelog.md)
- [Commits](remarkjs/react-markdown@9.1.0...10.1.0)

---
updated-dependencies:
- dependency-name: "@auth0/nextjs-auth0"
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@mui/material"
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@neondatabase/serverless"
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@next/mdx"
  dependency-version: 15.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: dotenv
  dependency-version: 16.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: drizzle-orm
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: next
  dependency-version: 15.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: nodemailer
  dependency-version: 6.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: react
  dependency-version: 19.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@types/react"
  dependency-version: 19.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: react-dom
  dependency-version: 19.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: react-hotkeys-hook
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: react-markdown
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 14, 2025
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 14, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
svw-web-app ❌ Failed (Inspect) Apr 14, 2025 1:49pm

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 21, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 21, 2025
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/prod-deps-138d63c046 branch April 21, 2025 13:40
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants