Skip to content

build(deps): bump the npm-dependencies group with 10 updates - #116

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-921ec40fe1
Open

build(deps): bump the npm-dependencies group with 10 updates#116
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-921ec40fe1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 10 updates:

Package From To
@tanstack/react-query 5.103.2 5.104.5
lucide-react 1.48.0 1.61.0
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
viem 2.56.9 2.57.10
@cloudflare/vite-plugin 1.64.0 1.65.0
@cloudflare/workers-types 5.20260925.1 5.20261023.1
@types/node 26.6.2 26.6.5
@vitejs/plugin-react 6.1.1 6.1.2
knip 6.38.0 6.42.1

Updates @tanstack/react-query from 5.103.2 to 5.104.5

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5
    • @​tanstack/query-devtools@​5.104.5

@​tanstack/react-query-next-experimental@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5

@​tanstack/react-query-persist-client@​5.104.5

Patch Changes

  • Updated dependencies [1f8d134]:
    • @​tanstack/react-query@​5.104.5
    • @​tanstack/query-persist-client-core@​5.104.5

@​tanstack/react-query@​5.104.5

Patch Changes

  • #12117 1f8d134 - Recompute useMutationState and useIsMutating results when their filters, selector, or query client change, without waiting for a mutation cache update.
  • Updated dependencies [f608f93]:
    • @​tanstack/query-core@​5.104.5

@​tanstack/react-query-devtools@​5.104.4

Patch Changes

  • #11722 0992a92 - fix(react-query-devtools): create the devtools instance only once instead of on every render

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency

  • Updated dependencies [c8f5eac, c208861, b61abc2, a108398]:

    • @​tanstack/query-devtools@​5.104.4
    • @​tanstack/react-query@​5.104.4

@​tanstack/react-query-next-experimental@​5.104.4

Patch Changes

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency
  • Updated dependencies [c208861, a108398]:
    • @​tanstack/react-query@​5.104.4

@​tanstack/react-query-persist-client@​5.104.4

Patch Changes

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency
  • Updated dependencies [c208861, a108398]:
    • @​tanstack/react-query@​5.104.4

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.5

Patch Changes

  • #12117 1f8d134 - Recompute useMutationState and useIsMutating results when their filters, selector, or query client change, without waiting for a mutation cache update.
  • Updated dependencies [f608f93]:
    • @​tanstack/query-core@​5.104.5

5.104.4

Patch Changes

  • #11328 c208861 - Allow queries with falsy errors to retry on mount when throwOnError returns false.

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency

  • Updated dependencies [1fee044, fce89dd]:

    • @​tanstack/query-core@​5.104.4

5.104.3

Patch Changes

  • Updated dependencies [0f15bc9]:
    • @​tanstack/query-core@​5.104.3

5.104.2

Patch Changes

  • Updated dependencies [03e8c39]:
    • @​tanstack/query-core@​5.104.2

5.104.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.104.1

5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/query-core@​5.104.0

... (truncated)

Commits

Updates lucide-react from 1.48.0 to 1.61.0

Release notes

Sourced from lucide-react's releases.

Version 1.61.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

Version 1.60.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

Version 1.59.0

What's Changed

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

... (truncated)

Commits
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • 3f1255e chore(deps-dev): bump @​vitejs/plugin-react (#4995)
  • 949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
  • 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
  • 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
  • e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
  • See full diff in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates viem from 2.56.9 to 2.57.10

Release notes

Sourced from viem's releases.

viem@2.57.10

Patch Changes

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Added Actions.accounts.upgrade and Actions.accounts.upgradeSync to upgrade an existing account to a configurable account in place (TIP-1113), and an upgrade form of Account.fromConfig for the upgraded account.

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Added the configurable key type to Actions.accessKey.getMetadata and execution error messages for configurable account upgrades and retired root keys.

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Synced configurable accounts with Tempo T14, renaming the nativeMultisig ABI, address and selector exports to configurableAccount, sending configurableAccountSimulation to the node, deriving configurable account addresses and signatures with the tempo:configurable-account:* domains, and storing relay state under configurableAccount:* store keys.

    - Abis.nativeMultisig
+ Abis.configurableAccount
- Addresses.nativeMultisig
+ Addresses.configurableAccount
- Addresses.nativeMultisigFactory
+ Addresses.configurableAccountRecoveryFactory
- Selectors.nativeMultisig
+ Selectors.configurableAccount

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Added Actions.accounts.deriveAccount and Actions.accounts.verifyHash for the configurable account precompiles, configurable account signature support in verifyHash, and a factory option on Account.fromConfig that defaults to Addresses.configurableAccountRecoveryFactory.

  • #5260 b56592f7b6cc2d01d926bf6cf278d53cbc0b6e17 Thanks @​jxom! - viem/tempo: Added hardforks t7 through t14 and fixed Hardfork.lt treating unknown hardforks as older than every known hardfork.

viem@2.57.8

Patch Changes

viem@2.57.7

Patch Changes

viem@2.57.6

Patch Changes

... (truncated)

Commits
  • 92cf794 chore: version package (#5261)
  • b56592f feat(tempo): sync configurable accounts with Tempo T14 (#5260)
  • 2b2f4c7 chore: version package (#5259)
  • 13c0386 feat: add client.scope (#5258)
  • 21ac7eb chore: unblock release verify (audit overrides, Playwright runner) (#5254)
  • 2e10d28 chore: version package (#5237)
  • 323c9fd fix: support empty version in EIP712Domain (#5240)
  • 8b685f8 fix: hash indexed string args as UTF-8 in encodeEventTopics and `parseEve...
  • a97d64c fix: substitute ERC-1155 token ID as hex in getEnsAvatar metadata URIs (#5239)
  • da50caa feat(chains): add RWA Chain and RWA Chain Sepolia (#5241)
  • Additional commits viewable in compare view

Updates @cloudflare/vite-plugin from 1.64.0 to 1.65.0

Release notes

Sourced from @​cloudflare/vite-plugin's releases.

@​cloudflare/vite-plugin@​1.65.0

Minor Changes

  • #16363 d3240f2 Thanks @​jamesopstad! - Remove the experimental.newConfig option from Vite plugin v1

    Vite plugin v1 now supports Wrangler configuration files only. Projects using cloudflare.config.ts for configuration should upgrade to Vite plugin v2 beta.

Patch Changes

  • #16373 8cc5f87 Thanks @​petebacondarwin! - Report unsupported remote bindings under Bun instead of hanging

    Starting remote bindings now fails with an actionable error explaining Bun's unsupported request routing. Use Node.js or disable remote bindings to continue local development.

  • #16334 9cecd09 Thanks @​petebacondarwin! - Fix Container setup guidance in Vite development and preview

    Container registry instructions now show the Wrangler command and the configuration location, including Wrangler files and inline Vite configuration.

  • #16333 68d6eec Thanks @​petebacondarwin! - Update the local Workers runtime to the October 19 release

    Include the fix for nested asset paths during local development on Windows, together with the compatible Wrangler release.

    The runtime update also disposes Workflow step results and introspection modifiers after use, preventing undisposed RPC warnings and cancelled local Workflow requests.

  • #16379 160e655 Thanks @​petebacondarwin! - Update the local Workflow runtime to use native storage cleanup

    Consume the Miniflare fix that queues Workflow persistence deletion with instance recreation, including deletion through the local Explorer. This prevents storage cleanup from racing reuse of the same Workflow instance ID.

  • #16289 bbe822f Thanks @​petebacondarwin! - Retry remote preview token refreshes after transient failures

    Backport the retry fix to the private remote-bindings workspace package and require wrangler@4.151.1 so long-running remote development sessions recover after a network outage.

  • #16291 0262f7d Thanks @​petebacondarwin! - Use published SDK dependencies for Vite plugin v1 maintenance

    Pin the plugin's published SDK dependencies to their deployed npm versions. Keep private shared packages as workspace dependencies so their implementation and build tools remain available on the v1 maintenance branch.

Changelog

Sourced from @​cloudflare/vite-plugin's changelog.

1.65.0

Minor Changes

  • #16363 d3240f2 Thanks @​jamesopstad! - Remove the experimental.newConfig option from Vite plugin v1

    Vite plugin v1 now supports Wrangler configuration files only. Projects using cloudflare.config.ts for configuration should upgrade to Vite plugin v2 beta.

Patch Changes

  • #16373 8cc5f87 Thanks @​petebacondarwin! - Report unsupported remote bindings under Bun instead of hanging

    Starting remote bindings now fails with an actionable error explaining Bun's unsupported request routing. Use Node.js or disable remote bindings to continue local development.

  • #16334 9cecd09 Thanks @​petebacondarwin! - Fix Container setup guidance in Vite development and preview

    Container registry instructions now show the Wrangler command and the configuration location, including Wrangler files and inline Vite configuration.

  • #16333 68d6eec Thanks @​petebacondarwin! - Update the local Workers runtime to the October 19 release

    Include the fix for nested asset paths during local development on Windows, together with the compatible Wrangler release.

    The runtime update also disposes Workflow step results and introspection modifiers after use, preventing undisposed RPC warnings and cancelled local Workflow requests.

  • #16379 160e655 Thanks @​petebacondarwin! - Update the local Workflow runtime to use native storage cleanup

    Consume the Miniflare fix that queues Workflow persistence deletion with instance recreation, including deletion through the local Explorer. This prevents storage cleanup from racing reuse of the same Workflow instance ID.

  • #16289 bbe822f Thanks @​petebacondarwin! - Retry remote preview token refreshes after transient failures

    Backport the retry fix to the private remote-bindings workspace package and require wrangler@4.151.1 so long-running remote development sessions recover after a network outage.

  • #16291 0262f7d Thanks @​petebacondarwin! - Use published SDK dependencies for Vite plugin v1 maintenance

    Pin the plugin's published SDK dependencies to their deployed npm versions. Keep private shared packages as workspace dependencies so their implementation and build tools remain available on the v1 maintenance branch.

Commits
  • 49a4610 [vite-plugin] Version v1 maintenance release (#16433)
  • d936c09 Revert "[vite-plugin] Version v1 maintenance release" (#16438)
  • 48737b5 [vite-plugin] Version v1 maintenance release (#16320)
  • 160e655 [vite-plugin] Backport Workflow storage cleanup to v1 (#16379)
  • 3f4259f [vite-plugin] Upgrade Vite in the v1 maintenance workspace (#16406)
  • f8af56a [vite-plugin] Use Vitest 5 in v1 maintenance tests (#16378)
  • 9cecd09 [vite-plugin] Backport caller-owned Container guidance to v1 (#16334)
  • 68d6eec [vite-plugin] Update v1 to the October 19 runtime release (#16333)
  • ef120cf [vite-plugin] Remove no-effect v1 backports (#16365)
  • d3240f2 Remove experimental.newConfig option in Vite plugin v1 (#16363)
  • Additional commits viewable in compare view

Updates @cloudflare/workers-types from 5.20260925.1 to 5.20261023.1

Commits

Updates @types/node from 26.6.2 to 26.6.5

Commits

Updates @vitejs/plugin-react from 6.1.1 to 6.1.2

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Commits

Updates knip from 6.38.0 to 6.42.1

Release notes

Sourced from knip's releases.

Release 6.42.1

  • fix(semantic-release): resolve shareable configs from extends (#2159) (4c4a5ece9148cf621f3a6e091fd3550b18f6e19a) - thanks @​giaBaoJS!
  • fix(jest): load projects entries as Jest configs (#2167) (4c22593724460890e4492ba86119d0188127f2ba) - thanks @​Cayan!
  • Update npmx.dev snapshot (4b19797b77a559f7190e9119b3a156e1ac6aef9f)
  • fix(tailwind): track packages referenced from CSS url() (#2166) (949da00abf419c1eeabdab1541ce7e5c312371b9) - thanks @​agustincastaing!
  • Add .otf to foreign file extensions (fcff4db0b88d6282569743cd779aec5a5df99862)
  • Match quoted SCSS url() values within a single line (2c5c2a2efab8f08be538bfe1f40982cb6f0fca3c)
  • fix(bun): treat bun test arguments as path filters (#2165) (5f3a7fb526d3eca7561aacfc9d0ac60056525206) - thanks @​jakeleventhal!
  • fix(vitest): use default test entries when config has no test key (#2170) (7ee576ccd461f719b533e3783a5b58391ce89e91) - thanks @​fixfon!

Release 6.42.0

  • fix: add bun 1.4.3 check subcommand (#2131) (09129b8aaa554ffae2ff8f42a5ff4d6994eb7759) - thanks @​NimmLor!
  • Detect pnpm workspaces correctly around packages: (resolve #2133, close #2134) (d1cc0928be54e6cac9668460d9f6a21e3a94f818)
  • fix(github-actions): resolve working-directory nested under checkout path (#2136) (87e051e45f12c107cc25ed08bba962b95bb23b51) - thanks @​kenny-ish!
  • fix(nx): track local generator and executor entry points (#2117) (#2121) (558407f51b5fdf4460275b69950676e7bace35d5) - thanks @​DreamLongYT!
  • Update dependency bun to v1.4.3 (#2137) (71f90bf6d5fb2675430f60416e403851f9cb2cfe) - thanks @​renovate[bot]!
  • docs(react-router): note to run react-router typegen before Knip (#2140) (f21ce9a9f1e3264cad1b763cf31ec2c177fb8656) - thanks @​MannXo!
  • fix: normalize scoped binary names (close #2143) (c8509c4e45e1c343da707c26877a0a6584f6bc11)
  • Clarify plugin implementation boundaries (c5a67f59d351e8d26dc6ecbbd3c3193e313772a4)
  • fix(jest): treat mocked and required dependencies as used (#2141) (3eaf1ba16045a3ac22f0717c4f1252312298bb76) - thanks @​TkDodo!
  • fix: preserve root-only plugins for trailing-slash cwd (#2139) (7f0db0e7670bfd18fab081b522a104f787829f7d) - thanks @​sean0407!
  • fix(nx): resolve run-commands script paths from the target cwd (#2151) (516bd9a324303653978528f582287c857846fcc8) - thanks @​JeanBeaurepaire!
  • Resolve Nx run-commands loader paths from the target cwd (fa8ca13e1345115d30122900ab68db7339487502)
  • Add @​solidjs/vite-plugin plugin (#2144) (579a88d306429694be43590efb50cb72067551ba) - thanks @​everton-dgn!
  • feat: add filesystem-routing plugin (#2145) (1abd9e1875bae36b0baf77f5864aab849d1528a8) - thanks @​everton-dgn!
  • Support tags in line comments (resolve #1924) (5abef4846e20f09fd4d0ee8dc2513ce50b616cdb)
  • Keep resolveFromAST to static values in plugin guide (4cd353fd9ecb780228a63069080586a46ba6a8f2)
  • fix(solidjs-vite-plugin): keep entry overrides in production (#2155) (e4b5f890787da07824cc174cb624396f2133ff06) - thanks @​everton-dgn!
  • feat(angular): resolve styleUrl and styleUrls of @​Component (#2157) (c20d4d720c586c9c5dc6e3d1a6ea60c557688bfa) - thanks @​Cayan!
  • Update npmx.dev snapshot (59eb873f3beecf40b7aed9579bd29e1ab8b631f0)
  • fix(next): recognize Turbopack alias targets (#2156) (1d44f6a1a39c5557c1e215c7cf9db17937967344) - thanks @​jakeleventhal!
  • fix: preserve re-exports from framework entries (#2154) (263ce20408a77b2473c555f304ad3b55c696b6a6) - thanks @​jakeleventhal!
  • feat(solidjs-vite-plugin): follow Solid's SSR and client mode entry rules (#2148) (d711231eae14d8ecac562d73078125f3b30dc8fd) - thanks @​everton-dgn!
  • feat(filesystem-routing): read route options from Vite configs (#2149) (585f206ca52d54e30f2068c818e1b33b50085459) - thanks @​everton-dgn!
  • feat(filesystem-routing): resolve routes from the Vite root (#2150) (8cc0cb0c9ff09463cad30817c8cf78cbc48b7ed6) - thanks @​everton-dgn!
  • fix: track namespace members in Promise.all imports (#2162) (3f17cdfce7a0f90e2599a7074291c4c875fe8244) - thanks @​everton-dgn!
  • Update a few dependencies (161dbed3ccffa574e3a9493ddb20842eefa26af8)
  • Fix Solid setup fixture coverage (ebe4180785667f6ff85c1e6ce2a11226713b2d5a)
  • Migrate shell script parsing to unbash v6 (f86044c6760ac4f27e564f15feeae907cba3d297)
  • Add sponsors: @​pennylane-hq, @​agentscore, @​oblique-security (thank you!) (57ff23eb430aaece73e02574923cabc6016a920b)
  • Stop pairing Promise.all imports and bindings after a spread (5bd2c64eaf92f82a316d8fa6551acdb1d6c48c32)
  • Update some stats (dd02ddeb235dd516cf93db99dda2180b0eb09a97)
  • fix(nx): read karmaConfig from target options (#2164) (4e1e4bc18f6d2f2705d729c375a20bd1679b8c0f) - thanks @​Cayan!
  • Add tsrs plugin (#2163) (ba09126c023a2c408de8d7dae3bf6ab97e420966) - thanks @​jakeleventhal!
  • Drop redundant containingFilePath from plugin config inputs (ffb6caf02891d29eee41c7a0ecf147312dbe7205)
  • Resolve Nx target option configs from the workspace root (52c5233aa905124c5b30c0bb7f9b0b25cd4260c6)

Release 6.41.0

  • Add Flue plugin (#2124) (c52737d45ff008d6d96d4c2d4182048a2aa64602) - thanks @​LuisFigueroaG!
  • Match all React Native config file extensions (#2125) (898fdffb37ae0bdb3d2653038eb10c2e01edf983) - thanks @​LuisFigueroaG!

... (truncated)

Commits
  • ee32ee6 Release knip@6.42.1
  • 7ee576c fix(vitest): use default test entries when config has no test key (#2170)
  • 5f3a7fb fix(bun): treat bun test arguments as path filters (#2165)

@dependabot
build(deps): bump the npm-dependencies group with 10 updates
49d3ae0 
Bumps the npm-dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.103.2` | `5.104.5` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.48.0` | `1.61.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [viem](https://github.com/wevm/viem) | `2.56.9` | `2.57.10` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.64.0` | `1.65.0` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260925.1` | `5.20261023.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.5` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.1.2` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.38.0` | `6.42.1` |


Updates `@tanstack/react-query` from 5.103.2 to 5.104.5
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.5/packages/react-query)

Updates `lucide-react` from 1.48.0 to 1.61.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/lucide-react)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `viem` from 2.56.9 to 2.57.10
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.56.9...viem@2.57.10)

Updates `@cloudflare/vite-plugin` from 1.64.0 to 1.65.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/@cloudflare/vite-plugin@1.65.0/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.65.0/packages/vite-plugin-cloudflare)

Updates `@cloudflare/workers-types` from 5.20260925.1 to 5.20261023.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@types/node` from 26.6.2 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react)

Updates `knip` from 6.38.0 to 6.42.1
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.42.1/packages/knip)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lucide-react
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: viem
  dependency-version: 2.57.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20261023.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: knip
  dependency-version: 6.42.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team October 30, 2026 12:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 30, 2026
@socket-security

socket-security Bot commented Oct 30, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​cloudflare/​workers-types@​5.20260925.1 ⏵ 5.20261023.176 -2410096 +199100
Updatedlucide-react@​1.48.0 ⏵ 1.61.010010098 +19680
Updated@​types/​node@​26.6.2 ⏵ 26.6.510010081 +196100
Updatedreact@​19.3.0 ⏵ 19.3.11001008497100
Updated@​cloudflare/​vite-plugin@​1.64.0 ⏵ 1.65.099 +11008798 +1100
Updated@​tanstack/​react-query@​5.103.2 ⏵ 5.104.5991009198100
Updated@​vitejs/​plugin-react@​6.1.1 ⏵ 6.1.2100 +1100100 +191100
Updatedreact-dom@​19.3.0 ⏵ 19.3.110010092 +198100
Updatedknip@​6.38.0 ⏵ 6.42.199 +110095 +196100
Updatedviem@​2.56.9 ⏵ 2.57.1097100100 +198 +1100

View full report

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🚀 Deploying Preview to Cloudflare 🚀

Preview Deployments by commit

Status Deployment URL Commit Updated (UTC) See this deployment's details
  • Build: Failed ❌

View logs ↗		 49d3ae0 2026-10-30T12:15:39.452Z View logs ↗

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants