Repository navigation
chore(deps): bump the production-minor-patch group with 4 updates - #278
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the production-minor-patch group with 4 updates: [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3), [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot), [next](https://github.com/vercel/next.js) and [nodemailer](https://github.com/nodemailer/nodemailer). Updates `@aws-sdk/client-s3` from 3.1146.0 to 3.1148.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1148.0/clients/client-s3) Updates `@radix-ui/react-slot` from 1.3.3 to 1.4.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `next` from 16.3.8 to 16.4.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.8...v16.4.0) Updates `nodemailer` from 10.0.15 to 10.0.16 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v10.0.15...v10.0.16) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1148.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@radix-ui/react-slot" dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: next dependency-version: 16.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: nodemailer dependency-version: 10.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
|
This workspace has reached the limit of 50 included PR reviews during your trial. Upgrade to continue receiving PR security reviews. So far, Strix has reviewed 50 pull requests and surfaced 1 security issue across this workspace. |
![graphify-labs[bot]](https://avatars.githubusercontent.com/in/4356270?s=60&v=4){kind=small}
There was a problem hiding this comment.
Graphify reviewed this change.
No issues found by static checks — no coupling regressions or blocking issues in the code graph. That is not the same as safe to merge: see what was not checked.
Not checked: tests were not run; no formal proof of the changed code.
Graphify review — findings
Bumps the web app's runtime dependencies: next to 16.4.0, @aws-sdk/client-s3 to 3.1148.0, @radix-ui/react-slot to 1.4.0, and nodemailer to 10.0.16. The minimum versions in package.json move up to match. The lockfile now resolves to a single @smithy/core and drops duplicate @smithy/signature-v4 and @smithy/types copies, and refreshes caniuse-lite and baseline-browser-mapping.
No blocking issues surfaced.
Analysis details — impact, health, verification
Impact & health
Graphify review
Impact — 79 functions depend on the 79 functions this change touches.
Health — grade A; no new coupling hotspots.
Verification — 79 functions in the blast radius were not formally verified this run (proofs are advisory here).
Gate & verification
graphify gate
PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.
Advisory (not blocking):
- verification_scope: 79 function(s) in the blast radius were not formally verified this run
Bumps the production-minor-patch group with 4 updates: @aws-sdk/client-s3, @radix-ui/react-slot, next and nodemailer.
Updates
@aws-sdk/client-s3from 3.1146.0 to 3.1148.0Release notes
Sourced from @aws-sdk/client-s3's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/client-s3's changelog.
Commits
1bc0425Publish v3.1148.0663046dPublish v3.1147.0Updates
@radix-ui/react-slotfrom 1.3.3 to 1.4.0Changelog
Sourced from @radix-ui/react-slot's changelog.
Commits
Updates
nextfrom 16.3.8 to 16.4.0Release notes
Sourced from next's releases.
... (truncated)
Commits
e273d5bv16.4.0fdf41d6[ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...c3e76adv16.4.0-canary.6347c6cc8Document next analyze export in the package bundling guide (#99735)5b10604Revert stabilization offorbidden()andunauthorized()(#99734)f3a6f97Preserve configured output directories during static export (#99507)b22e5a2Rename skill to next-bundle-optimizer and document its usage (#99731)74dc549[turbo-tasks-backend] Clean up task state before publishing execution complet...ccf8c15v16.4.0-canary.62b8c7c7fImprove static route error guidance (#99724)Updates
nodemailerfrom 10.0.15 to 10.0.16Release notes
Sourced from nodemailer's releases.
Changelog
Sourced from nodemailer's changelog.
Commits
afa8815chore(master): release 10.0.16 (#1889)c4ae20dfix(addressparser): keep an escaped parenthesis inside a comment645e97cfix(fetch): read the cookie name-value pair by positione2e7fa3chore(deps): update dependencies9f16eedfix(fetch): keep the case of cookie names (#1888)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions