build(deps): bump the production-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #155 · fintrack-team/FinTrack

dependabot · 2026-10-11T15:08:17Z

Bumps the production-dependencies group with 10 updates in the / directory:

Package	From	To
next	`16.3.7`	`16.4.0`
@rolldown/binding-linux-x64-gnu	`1.2.11`	`1.2.13`
@rolldown/binding-linux-x64-musl	`1.2.11`	`1.2.13`
@rollup/rollup-linux-x64-gnu	`4.63.5`	`4.64.2`
express-rate-limit	`8.7.0`	`8.7.1`
mongoose	`9.10.2`	`9.11.1`
pino	`10.3.1`	`10.4.0`
@tanstack/react-query	`5.104.0`	`5.104.1`
@tanstack/react-query-devtools	`5.104.0`	`5.104.1`
react-i18next	`17.0.15`	`17.0.16`

Updates next from 16.3.7 to 16.4.0

Release notes

Sourced from next's releases.

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

docs: improve clarity and punctuation in README: #86096

Fix debug build paths Pages Router support entries: #93529

bundle-analyzer: record historical snapshots on each analyze run: #93520

fix: detect proxy.ts correctly with compound pageExtensions: #93246

feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

docs: correction to dynamicParams migration: #96624

docs: proxy event argument: #96435

docs: remove experimental note from runtime prefetching: #96615

Preserve per-segment prefetching after dynamic navigation: #96583

Rename static generation stream option to waitForAllReady: #96564

Remove obsolete static generation plumbing: #96563

[turbopack] Drop dead writes to exports: #96381

[turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

[turbopack] Add test for sideEffects with optimizePackageImports: #96549

[turbopack] Strip leading BOM before parsing CSS: #96678

Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

docs: use relative doc links in instant-navigation error pages: #96672

Turbopack: terminate failed plugin worker threads: #96592

Fix HTML-limited bot matching in prerender bypass rules: #96584

[ci] Fix create_release_branch for new repo permissions: #96641

test: skip action module instance deploy test: #96629

docs: quote the dynamicParams build error in a blockquote: #96633

[react-sync] Open pull requests as the bot that authors the commits: #96682

[Bench] Fixes for pure Fizz bench: #96771

Derive foreground cache revalidation from the consumer: #96731

Fix race when navigating Back before hydration: #96252

docs: present each Skill as steps in the AI agents guide: #96751

Reuse completed cache entries for the rest of a request: #96727

Upgrade React from 7dfc7ccd-20260803 to 11eddecd-20260805: #96735

Remove WorkStore execution mode: #96674

Remove cache revalidation execution mode reads: #96670

Separate App Route render and prerender pipelines: #96662

Remove App Page execution mode reads: #96660

test: fix missing await in css-chunking test: #96725

docs (Skills): stop assuming app/ at the root and port 3000: #96696

Implement next/font BeforeResolvePlugins as ImportMappingReplacement: #95808

Use Tailwind Turbopack loader in create-next-app: #96606

docs: instant navigation quick start with an adoption prompt: #96663

Separate App Page render and prerender pipelines: #96659

Move App Router execution intent to entrypoints: #96640

... (truncated)

Commits

e273d5b v16.4.0
fdf41d6 [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...
c3e76ad v16.4.0-canary.63
47c6cc8 Document next analyze export in the package bundling guide (#99735)
5b10604 Revert stabilization of forbidden() and unauthorized() (#99734)
f3a6f97 Preserve configured output directories during static export (#99507)
b22e5a2 Rename skill to next-bundle-optimizer and document its usage (#99731)
74dc549 [turbo-tasks-backend] Clean up task state before publishing execution complet...
ccf8c15 v16.4.0-canary.62
b8c7c7f Improve static route error guidance (#99724)
Additional commits viewable in compare view

Updates @rolldown/binding-linux-x64-gnu from 1.2.11 to 1.2.13

Release notes

Sourced from @rolldown/binding-linux-x64-gnu's releases.

v1.2.13

[1.2.13] - 2026-10-07

🚀 Features

rolldown_plugin_vite_import_glob: follow file creation and deletion via hotUpdate (#10550) by @shulaoda

inline-common-chunks: deduplicate shared code along known loading paths (#11093) by @hyfdev

rolldown_plugin_vite_import_glob: record a matcher per glob call in dev (#10592) by @shulaoda

rolldown_plugin_vite_import_glob: watch the directory each glob reads (#10549) by @shulaoda

watch: hand watch.exclude to notify as its ignore filter (#11008) by @shulaoda

dev: add experimental.devMode.hotUpdate option (#11123) by @h-a-n-a

🐛 Bug Fixes

renamer: check the printed name of namespace-alias imports for captures (#11129) by @IWANABETHATGUY

devtools: honor devtools.sessionId by @Brooooooklyn

renamer: keep a renamed nested binding off its module's top-level bindings (#11128) by @IWANABETHATGUY

dev: keep this undefined when calling an imported function in HMR patches and lazy chunks (#11126) by @h-a-n-a

dev: read string-named imports correctly in HMR patches and lazy chunks (#11127) by @h-a-n-a

sanitize preserveModules chunk names after resolving the relative path (#11087) by @waltuov

keep the with clause on bare external imports (#11100) by @IWANABETHATGUY

generator: filter DISABLE_JS_HOOK bits from generated HookUsage (#10346) by @Brooooooklyn

dev: make the module factory async for top-level await (#11118) by @h-a-n-a

node: give each renderChunk call its own meta object (#11115) by @Brooooooklyn

honor externalLiveBindings for imported exports (#11048) by @camc314

dev: keep a late payload from replacing newer module code (#11030) by @h-a-n-a

binding: use-after-free in async transform with a TsconfigCache (#11080) by @shulaoda

fail on chunk syntax errors and escape export names once (#11051) by @hyfdev

dev: ship newly imported modules the client never received (#11029) by @h-a-n-a

code-splitting: avoid cycles from redundant re-export initialization (#11073) by @hyfdev

link: treat re-exports of the same external binding as one export (#11069) by @IWANABETHATGUY

escape namespace properties in IIFE and UMD output (#11085) by @hyfdev

escape dependency paths in CJS and UMD output (#11084) by @hyfdev

use computed access for arbitrary import names (#11083) by @hyfdev

generate valid bindings for shimmed exports (#11082) by @hyfdev

dev: reload the page when an HMR update fails after merging its edit (#11031) by @h-a-n-a

dev/lazy: ship the deps of a module that a patch shipped but never ran (#11028) by @h-a-n-a

code-splitting: don't move init calls in front of unwrapped JSON modules (#11062) by @IWANABETHATGUY

escape export names in defineProperty calls (#11047) by @camc314

📚 Documentation

say the CLI bundles multiple configs one after another (#11111) by @Brooooooklyn

add renderChunk hook filter docs (#11065) by @sapphi-red

⚡ Performance

use concat_string! instead of format! for plain string joins (#11139) by @IWANABETHATGUY

utils: evaluate each concat_string! argument once (#11105) by @IWANABETHATGUY

json: escape JSON.parse string with json-escape-simd (#11104) by @IWANABETHATGUY

... (truncated)

Changelog

Sourced from @rolldown/binding-linux-x64-gnu's changelog.

[1.2.13] - 2026-10-07

🚀 Features

rolldown_plugin_vite_import_glob: follow file creation and deletion via hotUpdate (#10550) by @shulaoda

inline-common-chunks: deduplicate shared code along known loading paths (#11093) by @hyfdev

rolldown_plugin_vite_import_glob: record a matcher per glob call in dev (#10592) by @shulaoda

rolldown_plugin_vite_import_glob: watch the directory each glob reads (#10549) by @shulaoda

watch: hand watch.exclude to notify as its ignore filter (#11008) by @shulaoda

dev: add experimental.devMode.hotUpdate option (#11123) by @h-a-n-a

🐛 Bug Fixes

renamer: check the printed name of namespace-alias imports for captures (#11129) by @IWANABETHATGUY

devtools: honor devtools.sessionId by @Brooooooklyn

renamer: keep a renamed nested binding off its module's top-level bindings (#11128) by @IWANABETHATGUY

dev: keep this undefined when calling an imported function in HMR patches and lazy chunks (#11126) by @h-a-n-a

dev: read string-named imports correctly in HMR patches and lazy chunks (#11127) by @h-a-n-a

sanitize preserveModules chunk names after resolving the relative path (#11087) by @waltuov

keep the with clause on bare external imports (#11100) by @IWANABETHATGUY

generator: filter DISABLE_JS_HOOK bits from generated HookUsage (#10346) by @Brooooooklyn

dev: make the module factory async for top-level await (#11118) by @h-a-n-a

node: give each renderChunk call its own meta object (#11115) by @Brooooooklyn

honor externalLiveBindings for imported exports (#11048) by @camc314

dev: keep a late payload from replacing newer module code (#11030) by @h-a-n-a

binding: use-after-free in async transform with a TsconfigCache (#11080) by @shulaoda

fail on chunk syntax errors and escape export names once (#11051) by @hyfdev

dev: ship newly imported modules the client never received (#11029) by @h-a-n-a

code-splitting: avoid cycles from redundant re-export initialization (#11073) by @hyfdev

link: treat re-exports of the same external binding as one export (#11069) by @IWANABETHATGUY

escape namespace properties in IIFE and UMD output (#11085) by @hyfdev

escape dependency paths in CJS and UMD output (#11084) by @hyfdev

use computed access for arbitrary import names (#11083) by @hyfdev

generate valid bindings for shimmed exports (#11082) by @hyfdev

dev: reload the page when an HMR update fails after merging its edit (#11031) by @h-a-n-a

dev/lazy: ship the deps of a module that a patch shipped but never ran (#11028) by @h-a-n-a

code-splitting: don't move init calls in front of unwrapped JSON modules (#11062) by @IWANABETHATGUY

escape export names in defineProperty calls (#11047) by @camc314

📚 Documentation

say the CLI bundles multiple configs one after another (#11111) by @Brooooooklyn

add renderChunk hook filter docs (#11065) by @sapphi-red

⚡ Performance

use concat_string! instead of format! for plain string joins (#11139) by @IWANABETHATGUY

utils: evaluate each concat_string! argument once (#11105) by @IWANABETHATGUY

json: escape JSON.parse string with json-escape-simd (#11104) by @IWANABETHATGUY

unwrap JSON modules with a non-object root (#11066) by @IWANABETHATGUY

... (truncated)

Commits

f7de35f release: v1.2.13 (#11144)
4229721 chore(deps): upgrade oxc to 0.153.0 (#11109)
0f60926 fix(devtools): honor devtools.sessionId
f918ebb feat(inline-common-chunks): deduplicate shared code along known loading paths...
047cec1 fix: sanitize preserveModules chunk names after resolving the relative path (...
37f4b00 fix(generator): filter DISABLE_JS_HOOK bits from generated HookUsage (#10346)
d0e7203 feat(dev): add experimental.devMode.hotUpdate option (#11123)
4f53338 fix(node): give each renderChunk call its own meta object (#11115)
fdd3604 docs: say the CLI bundles multiple configs one after another (#11111)
ddabe04 chore(deps): update napi (#11108)
Additional commits viewable in compare view

Updates @rolldown/binding-linux-x64-musl from 1.2.11 to 1.2.13

Release notes

Sourced from @rolldown/binding-linux-x64-musl's releases.

v1.2.13

[1.2.13] - 2026-10-07

🚀 Features

rolldown_plugin_vite_import_glob: follow file creation and deletion via hotUpdate (#10550) by @shulaoda

inline-common-chunks: deduplicate shared code along known loading paths (#11093) by @hyfdev

rolldown_plugin_vite_import_glob: record a matcher per glob call in dev (#10592) by @shulaoda

rolldown_plugin_vite_import_glob: watch the directory each glob reads (#10549) by @shulaoda

watch: hand watch.exclude to notify as its ignore filter (#11008) by @shulaoda

dev: add experimental.devMode.hotUpdate option (#11123) by @h-a-n-a

🐛 Bug Fixes

renamer: check the printed name of namespace-alias imports for captures (#11129) by @IWANABETHATGUY

devtools: honor devtools.sessionId by @Brooooooklyn

renamer: keep a renamed nested binding off its module's top-level bindings (#11128) by @IWANABETHATGUY

dev: keep this undefined when calling an imported function in HMR patches and lazy chunks (#11126) by @h-a-n-a

dev: read string-named imports correctly in HMR patches and lazy chunks (#11127) by @h-a-n-a

sanitize preserveModules chunk names after resolving the relative path (#11087) by @waltuov

keep the with clause on bare external imports (#11100) by @IWANABETHATGUY

generator: filter DISABLE_JS_HOOK bits from generated HookUsage (#10346) by @Brooooooklyn

dev: make the module factory async for top-level await (#11118) by @h-a-n-a

node: give each renderChunk call its own meta object (#11115) by @Brooooooklyn

honor externalLiveBindings for imported exports (#11048) by @camc314

dev: keep a late payload from replacing newer module code (#11030) by @h-a-n-a

binding: use-after-free in async transform with a TsconfigCache (#11080) by @shulaoda

fail on chunk syntax errors and escape export names once (#11051) by @hyfdev

dev: ship newly imported modules the client never received (#11029) by @h-a-n-a

code-splitting: avoid cycles from redundant re-export initialization (#11073) by @hyfdev

link: treat re-exports of the same external binding as one export (#11069) by @IWANABETHATGUY

escape namespace properties in IIFE and UMD output (#11085) by @hyfdev

escape dependency paths in CJS and UMD output (#11084) by @hyfdev

use computed access for arbitrary import names (#11083) by @hyfdev

generate valid bindings for shimmed exports (#11082) by @hyfdev

dev: reload the page when an HMR update fails after merging its edit (#11031) by @h-a-n-a

dev/lazy: ship the deps of a module that a patch shipped but never ran (#11028) by @h-a-n-a

code-splitting: don't move init calls in front of unwrapped JSON modules (#11062) by @IWANABETHATGUY

escape export names in defineProperty calls (#11047) by @camc314

📚 Documentation

say the CLI bundles multiple configs one after another (#11111) by @Brooooooklyn

add renderChunk hook filter docs (#11065) by @sapphi-red

⚡ Performance

use concat_string! instead of format! for plain string joins (#11139) by @IWANABETHATGUY

utils: evaluate each concat_string! argument once (#11105) by @IWANABETHATGUY

json: escape JSON.parse string with json-escape-simd (#11104) by @IWANABETHATGUY

... (truncated)

Changelog

Sourced from @rolldown/binding-linux-x64-musl's changelog.

[1.2.13] - 2026-10-07

🚀 Features

rolldown_plugin_vite_import_glob: follow file creation and deletion via hotUpdate (#10550) by @shulaoda

inline-common-chunks: deduplicate shared code along known loading paths (#11093) by @hyfdev

rolldown_plugin_vite_import_glob: record a matcher per glob call in dev (#10592) by @shulaoda

rolldown_plugin_vite_import_glob: watch the directory each glob reads (#10549) by @shulaoda

watch: hand watch.exclude to notify as its ignore filter (#11008) by @shulaoda

dev: add experimental.devMode.hotUpdate option (#11123) by @h-a-n-a

🐛 Bug Fixes

renamer: check the printed name of namespace-alias imports for captures (#11129) by @IWANABETHATGUY

devtools: honor devtools.sessionId by @Brooooooklyn

renamer: keep a renamed nested binding off its module's top-level bindings (#11128) by @IWANABETHATGUY

dev: keep this undefined when calling an imported function in HMR patches and lazy chunks (#11126) by @h-a-n-a

dev: read string-named imports correctly in HMR patches and lazy chunks (#11127) by @h-a-n-a

sanitize preserveModules chunk names after resolving the relative path (#11087) by @waltuov

keep the with clause on bare external imports (#11100) by @IWANABETHATGUY

generator: filter DISABLE_JS_HOOK bits from generated HookUsage (#10346) by @Brooooooklyn

dev: make the module factory async for top-level await (#11118) by @h-a-n-a

node: give each renderChunk call its own meta object (#11115) by @Brooooooklyn

honor externalLiveBindings for imported exports (#11048) by @camc314

dev: keep a late payload from replacing newer module code (#11030) by @h-a-n-a

binding: use-after-free in async transform with a TsconfigCache (#11080) by @shulaoda

fail on chunk syntax errors and escape export names once (#11051) by @hyfdev

dev: ship newly imported modules the client never received (#11029) by @h-a-n-a

code-splitting: avoid cycles from redundant re-export initialization (#11073) by @hyfdev

link: treat re-exports of the same external binding as one export (#11069) by @IWANABETHATGUY

escape namespace properties in IIFE and UMD output (#11085) by @hyfdev

escape dependency paths in CJS and UMD output (#11084) by @hyfdev

use computed access for arbitrary import names (#11083) by @hyfdev

generate valid bindings for shimmed exports (#11082) by @hyfdev

dev: reload the page when an HMR update fails after merging its edit (#11031) by @h-a-n-a

dev/lazy: ship the deps of a module that a patch shipped but never ran (#11028) by @h-a-n-a

code-splitting: don't move init calls in front of unwrapped JSON modules (#11062) by @IWANABETHATGUY

escape export names in defineProperty calls (#11047) by @camc314

📚 Documentation

say the CLI bundles multiple configs one after another (#11111) by @Brooooooklyn

add renderChunk hook filter docs (#11065) by @sapphi-red

⚡ Performance

use concat_string! instead of format! for plain string joins (#11139) by @IWANABETHATGUY

utils: evaluate each concat_string! argument once (#11105) by @IWANABETHATGUY

json: escape JSON.parse string with json-escape-simd (#11104) by @IWANABETHATGUY

unwrap JSON modules with a non-object root (#11066) by @IWANABETHATGUY

... (truncated)

Commits

f7de35f release: v1.2.13 (#11144)
4229721 chore(deps): upgrade oxc to 0.153.0 (#11109)
0f60926 fix(devtools): honor devtools.sessionId
f918ebb feat(inline-common-chunks): deduplicate shared code along known loading paths...
047cec1 fix: sanitize preserveModules chunk names after resolving the relative path (...
37f4b00 fix(generator): filter DISABLE_JS_HOOK bits from generated HookUsage (#10346)
d0e7203 feat(dev): add experimental.devMode.hotUpdate option (#11123)
4f53338 fix(node): give each renderChunk call its own meta object (#11115)
fdd3604 docs: say the CLI bundles multiple configs one after another (#11111)
ddabe04 chore(deps): update napi (#11108)
Additional commits viewable in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.63.5 to 4.64.2

Release notes

Sourced from @rollup/rollup-linux-x64-gnu's releases.

v4.64.2

4.64.2

2026-10-07

Bug Fixes

Fix a regression where certain CoreJS helpers were wrongly tree-shaken (#6562)

Do not show errors from closeBundle if there were also build errors (#6554)

Pull Requests

#6554: Preserve build errors when closeBundle fails (@Jo2234, @lukastaegert)

#6561: Rework REPL artefacts and performance report workflows (@lukastaegert)

#6562: Do not resolve values of assigned variables returned on all paths (@lukastaegert)

v4.64.1

4.64.1

2026-10-07

Bug Fixes

Slightly improve performance when rendering ES output (#6534)

Pull Requests

#6534: Avoid repeated export name scans when rendering ES chunks (@irontaek, @lukastaegert)

#6552: chore(ci): remove redundant rust-src setup (@TrickyPi, @lukastaegert)

#6555: Lock file maintenance (@renovate[bot], @lukastaegert)

v4.64.0

4.64.0

2026-10-02

Features

Improve try-catch deoptimization to cover calling methods on objects (#6541)

Bug Fixes

Fix a situation where some feature-detections of core-js were not triggering properly (#6541)

Pull Requests

#6541: Retain callbacks of helper methods called from try statements (@lukastaegert)

#6542: Run additional tests as part of the coverage job (@lukastaegert)

#6544: Update msys2/setup-msys2 digest to ec48f7c (@renovate[bot], @lukastaegert)

#6545: Update minor/patch updates (@renovate[bot])

... (truncated)

Changelog

Sourced from @rollup/rollup-linux-x64-gnu's changelog.

4.64.2

2026-10-07

Bug Fixes

Fix a regression where certain CoreJS helpers were wrongly tree-shaken (#6562)

Do not show errors from closeBundle if there were also build errors (#6554)

Pull Requests

#6554: Preserve build errors when closeBundle fails (@Jo2234, @lukastaegert)

#6561: Rework REPL artefacts and performance report workflows (@lukastaegert)

#6562: Do not resolve values of assigned variables returned on all paths (@lukastaegert)

4.64.1

2026-10-07

Bug Fixes

Slightly improve performance when rendering ES output (#6534)

Pull Requests

#6534: Avoid repeated export name scans when rendering ES chunks (@irontaek, @lukastaegert)

#6552: chore(ci): remove redundant rust-src setup (@TrickyPi, @lukastaegert)

#6555: Lock file maintenance (@renovate[bot], @lukastaegert)

4.64.0

2026-10-02

Features

Improve try-catch deoptimization to cover calling methods on objects (#6541)

Bug Fixes

Fix a situation where some feature-detections of core-js were not triggering properly (#6541)

Pull Requests

#6541: Retain callbacks of helper methods called from try statements (@lukastaegert)

#6542: Run additional tests as part of the coverage job (@lukastaegert)

#6544: Update msys2/setup-msys2 digest to ec48f7c (@renovate[bot], @lukastaegert)

#6545: Update minor/patch updates (@renovate[bot])

#6546: Update dependency @mermaid-js/mermaid-cli to v12 (@renovate[bot])

#6547: Update Rust crate swc_compiler_base to v65 (@renovate[bot])

... (truncated)

Commits

19e0dcb 4.64.2
98ad757 Do not resolve values of assigned variables returned on all paths (#6562)
76c631a Preserve build errors when closeBundle fails (#6554)
9863ae7 Rework REPL artefacts and performance report workflows (#6561)
2e1a753 4.64.1
f48508c Avoid repeated export name scans when rendering ES chunks (#6534)
68da212 Resolve audit
1cc31f7 Lock file maintenance (#6555)
cf5bd17 chore(ci): remove redundant rust-src setup (#6552)
77773bf 4.64.0
Additional commits viewable in compare view

Updates express-rate-limit from 8.7.0 to 8.7.1

Release notes

Sourced from express-rate-limit's releases.

v8.7.1

You can view the changelog here.

Commits

c2e30b3 8.7.1
b40a390 v8.7.1 changelog
ccbee88 fix: correct es2020/es2022 version mismatch between tsconfig and esbuild comm...
11a143a chore: fix duplicate entries in pnpm-lockfile.yaml (#685)
92f685d chore(deps): bump softprops/action-gh-release from 1 to 3 (#692)
0c7c066 chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (#694)
9735b69 chore(deps): bump pnpm/action-setup from 3.0.0 to 6.1.0 (#695)
7f401b7 chore(deps): bump actions/s...
Description has been truncated

…y with 10 updates Bumps the production-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `16.3.7` | `16.4.0` | | [@rolldown/binding-linux-x64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.11` | `1.2.13` | | [@rolldown/binding-linux-x64-musl](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.11` | `1.2.13` | | [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.63.5` | `4.64.2` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.7.0` | `8.7.1` | | [mongoose](https://github.com/Automattic/mongoose) | `9.10.2` | `9.11.1` | | [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.0` | `5.104.1` | | [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.104.0` | `5.104.1` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.15` | `17.0.16` | Updates `next` from 16.3.7 to 16.4.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.7...v16.4.0) Updates `@rolldown/binding-linux-x64-gnu` from 1.2.11 to 1.2.13 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.13/packages/rolldown) Updates `@rolldown/binding-linux-x64-musl` from 1.2.11 to 1.2.13 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.13/packages/rolldown) Updates `@rollup/rollup-linux-x64-gnu` from 4.63.5 to 4.64.2 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.63.5...v4.64.2) Updates `express-rate-limit` from 8.7.0 to 8.7.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.7.0...v8.7.1) Updates `mongoose` from 9.10.2 to 9.11.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.10.2...9.11.1) Updates `pino` from 10.3.1 to 10.4.0 - [Release notes](https://github.com/pinojs/pino/releases) - [Commits](pinojs/pino@v10.3.1...v10.4.0) Updates `@tanstack/react-query` from 5.104.0 to 5.104.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.1/packages/react-query) Updates `@tanstack/react-query-devtools` from 5.104.0 to 5.104.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.104.1/packages/react-query-devtools) Updates `react-i18next` from 17.0.15 to 17.0.16 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v17.0.15...v17.0.16) --- updated-dependencies: - dependency-name: next dependency-version: 16.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@rolldown/binding-linux-x64-gnu" dependency-version: 1.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@rolldown/binding-linux-x64-musl" dependency-version: 1.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.64.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-version: 8.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: mongoose dependency-version: 9.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: pino dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/react-query" dependency-version: 5.104.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tanstack/react-query-devtools" dependency-version: 5.104.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-i18next dependency-version: 17.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-10-11T15:08:22Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
fintrack-web	Ready	Preview	Oct 11, 2026 3:10pm UTC

dependabot · 2026-10-18T15:03:51Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 11, 2026

vercel Bot deployed to Preview – fintrack-web October 11, 2026 15:10

View deployment

dependabot Bot closed this Oct 18, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-78201ead29 branch October 18, 2026 15:03

Navigation Menu

Repository navigation

build(deps): bump the production-dependencies group across 1 directory with 10 updates - #155

build(deps): bump the production-dependencies group across 1 directory with 10 updates#155
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-78201ead29

dependabot Bot commented on behalf of github Oct 11, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Oct 11, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 18, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v16.4.0

Core Changes

Misc Changes

v1.2.13

[1.2.13] - 2026-10-07

🚀 Features

🐛 Bug Fixes

📚 Documentation

⚡ Performance

[1.2.13] - 2026-10-07

🚀 Features

🐛 Bug Fixes

📚 Documentation

⚡ Performance

v1.2.13

[1.2.13] - 2026-10-07

🚀 Features

🐛 Bug Fixes

📚 Documentation

⚡ Performance

[1.2.13] - 2026-10-07

🚀 Features

🐛 Bug Fixes

📚 Documentation

⚡ Performance

v4.64.2

4.64.2

Bug Fixes

Pull Requests

v4.64.1

4.64.1

Bug Fixes

Pull Requests

v4.64.0

4.64.0

Features

Bug Fixes

Pull Requests

4.64.2

Bug Fixes

Pull Requests

4.64.1

Bug Fixes

Pull Requests

4.64.0

Features

Bug Fixes

Pull Requests

v8.7.1

Uh oh!

vercel Bot commented Oct 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Oct 18, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 11, 2026 •

edited

Loading

vercel Bot commented Oct 11, 2026 •

edited

Loading