Skip to content

chore(deps)(deps): Bump the production-deps group across 1 directory with 25 updates - #161

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-3f3a083be1
Open

chore(deps)(deps): Bump the production-deps group across 1 directory with 25 updates#161
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-3f3a083be1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-deps group with 25 updates in the / directory:

Package From To
@supabase/supabase-js 2.112.3 2.118.0
graphile-worker 0.17.3 0.18.0
jose 6.2.9 6.2.12
socket.io 4.8.3 4.8.4
ws 8.21.3 8.22.0
zod 4.4.3 4.6.7
@tanstack/query-async-storage-persister 5.102.6 5.104.4
@tanstack/react-query 5.102.6 5.104.4
@tanstack/react-query-persist-client 5.102.6 5.104.4
expo 57.0.15 58.0.14
react-native-nitro-modules 0.37.0 0.37.1
@maskito/angular 5.4.0 5.6.0
@maskito/core 5.4.0 5.6.0
@ng-web-apis/common 5.3.0 5.4.0
@ng-web-apis/intersection-observer 5.3.0 5.4.0
@ng-web-apis/mutation-observer 5.3.0 5.4.0
@ng-web-apis/platform 5.3.0 5.4.0
@taiga-ui/cdk 5.19.0 5.28.0
@taiga-ui/core 5.19.0 5.28.0
@taiga-ui/event-plugins 5.0.0 5.1.0
@taiga-ui/i18n 5.19.0 5.28.0
@taiga-ui/icons 5.19.0 5.28.0
@taiga-ui/kit 5.19.0 5.28.0
@taiga-ui/styles 5.19.0 5.28.0
socket.io-client 4.8.3 4.8.4

Updates @supabase/supabase-js from 2.112.3 to 2.118.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.118.0

2.118.0 (2026-10-15)

🚀 Features

  • postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)
  • storage: add content-encoding support for uploads (#1949)

🩹 Fixes

  • ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

  • Atharv Gaur @​Athaxv
  • Ferhat Elmas
  • Lukas Klingsbo

v2.118.0-canary.2

2.118.0-canary.2 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.1

2.118.0-canary.1 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.0

2.118.0-canary.0 (2026-10-09)

🚀 Features

  • postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

🩹 Fixes

  • ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

  • Lukas Klingsbo

v2.117.3

2.117.3 (2026-10-07)

🩹 Fixes

  • deps: bump next to patch RCE in realtime-js example (#2733)
  • functions: send a Blob or File with its own content type (#2714)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.118.0 (2026-10-15)

🚀 Features

  • postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

❤️ Thank You

  • Lukas Klingsbo

2.117.3 (2026-10-07)

🩹 Fixes

  • storage: send multipart fields before files (#2736)

❤️ Thank You

2.117.2 (2026-09-25)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.117.1 (2026-09-23)

🩹 Fixes

  • auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

2.117.0 (2026-09-22)

🚀 Features

  • auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

  • fadymak

2.116.0 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)

... (truncated)

Commits
  • b9753a1 feat(postgrest): leave computed fields out of select('*') and resolve no-argu...
  • 88faa11 fix(ci): patch next and sharp advisories and pin node-browser playwright (#2753)
  • aac9d32 chore(release): version 2.117.3 changelogs (#2744)
  • 4d23055 fix(storage): send multipart fields before files (#2736)
  • a684cf9 chore(release): version 2.117.2 changelogs (#2707)
  • 54c225d chore(release): version 2.117.1 changelogs (#2700)
  • 739b351 fix(auth): return stored session when a refresh loses to another tab (#2698)
  • f34d428 chore(release): version 2.117.0 changelogs (#2697)
  • cc45ccf feat(auth): enable passkey API by default and deprecate experimental passkey ...
  • c511286 docs(realtime): document relationship of accessToken() and heartbeat (#2680)
  • Additional commits viewable in compare view

Updates graphile-worker from 0.17.3 to 0.18.0

Release notes

Sourced from graphile-worker's releases.

v0.18.0

Minor Changes

  • #628 bc98aaf Thanks @​benjie! - Now published as pure ESM, but worry not as unflagged require(ESM) is now enabled by default in Node 20.19.0+, Node 22.12.0+ and Node 24+ so everything should continue to work as before.

  • #628 bc98aaf Thanks @​benjie! - For consistency, cosmiconfig is no longer supported for configuration; use graphile.config.ts instead. (This release will throw errors if you're using cosmisconfig, in later releases cosmiconfigs will not be detected.)

  • #628 bc98aaf Thanks @​benjie! - TypeScript task files with .ts and .mts extensions are now recognized by default and loaded through Node's native type stripping if possible. Only erasable, verbatim TypeScript syntax is supported without a custom loader or precompilation. .js, .cjs and .mjs files are prioritised ahead of .ts and .mts files.

  • #628 bc98aaf Thanks @​benjie! - We now use the exports option, meaning sub-path imports (require("graphile-worker/...")) are no longer supported. If you need something not exported by default, raise an issue.

  • #628 bc98aaf Thanks @​benjie! - Since Node 20 is EOL, Node 22 is now the minimum supported version, per our requirements documentation.

  • #628 bc98aaf Thanks @​benjie! - LogLevel export is now type only - a string union rather than a TypeScript const enum.

  • #628 bc98aaf Thanks @​benjie! - Runner gains [Symbol.asyncDispose]() method, so you can await using runner = await run(...) and the worker will be released when you reach the end of the scope. (Primarily useful for tests.)

... (truncated)

Changelog

Sourced from graphile-worker's changelog.

0.18.0

Minor Changes

  • #628 bc98aaf Thanks @​benjie! - Now published as pure ESM, but worry not as unflagged require(ESM) is now enabled by default in Node 20.19.0+, Node 22.12.0+ and Node 24+ so everything should continue to work as before.

  • #628 bc98aaf Thanks @​benjie! - For consistency, cosmiconfig is no longer supported for configuration; use graphile.config.ts instead. (This release will throw errors if you're using cosmisconfig, in later releases cosmiconfigs will not be detected.)

  • #628 bc98aaf Thanks @​benjie! - TypeScript task files with .ts and .mts extensions are now recognized by default and loaded through Node's native type stripping if possible. Only erasable, verbatim TypeScript syntax is supported without a custom loader or precompilation. .js, .cjs and .mjs files are prioritised ahead of .ts and .mts files.

  • #628 bc98aaf Thanks @​benjie! - We now use the exports option, meaning sub-path imports (require("graphile-worker/...")) are no longer supported. If you need something not exported by default, raise an issue.

  • #628 bc98aaf Thanks @​benjie! - Since Node 20 is EOL, Node 22 is now the minimum supported version, per our requirements documentation.

  • #628 bc98aaf Thanks @​benjie! - LogLevel export is now type only - a string union rather than a TypeScript const enum.

  • #628 bc98aaf Thanks @​benjie! - Runner gains [Symbol.asyncDispose]() method, so you can await using runner = await run(...) and the worker will be released when you

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphile-worker since your current version.


Updates jose from 6.2.9 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits
  • 505a55b chore(release): 6.2.12
  • 7bc9a33 perf: encode single-signature JWS input once
  • 78637bd perf: normalize General JWE shared headers once
  • bf5138b perf: deduplicate pending jwks key imports
  • b23a6f3 perf: use native encoding for larger ASCII strings
  • fd3ae3f perf: normalize jwks selection metadata once
  • 6925d43 perf: avoid copying AES-GCM output
  • be62530 docs: clarify and shorten public API guidance
  • 1b41312 build: preserve README when generation fails
  • 0b51829 build: check tree-shaking for every public binding
  • Additional commits viewable in compare view

Updates socket.io from 4.8.3 to 4.8.4

Release notes

Sourced from socket.io's releases.

socket.io@4.8.4

Bug Fixes

  • cleanup pending acks on timeout to prevent memory leak (37aad11)
  • prevent uWebSockets.js from serving missing client files (dfb5ab3)
  • reject stateful regexps for dynamic namespaces (59f4f24)
  • types: allow emitWithAck() for events with void callbacks (#5453) (8b93a18)
  • types: properly import http module (74599a6)

Dependencies

socket.io-client@4.8.4

Bug Fixes

  • types: export ExtendedError for connect_error event (#5548) (c0d5450)
  • types: export reserved event interfaces (#5533) (03945df)

Dependencies

Commits
  • c239eb5 chore(release): socket.io@4.8.4
  • 11a6f56 chore(release): socket.io-client@4.8.4
  • 00e4e73 chore(release): engine.io-client@6.6.7
  • e387ab1 chore: use @​rollup/plugin-terser instead of rollup-plugin-terser
  • 9738333 chore(release): engine.io@6.6.11
  • fc9dd90 docs(eio): rework README
  • da008a5 fix(eio): refresh ping timeout on incoming packets
  • 3df3fed fix(eio-client): restore default transport resolution
  • aaf2af3 test: upgrade WebdriverIO to v9
  • b5da079 refactor(sio): simplify packet handling switch
  • Additional commits viewable in compare view

Updates ws from 8.21.3 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

  • Introduced the protocols option (8b918b01).

Bug fixes

  • Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).
Commits
  • 297202c [dist] 8.22.0
  • 8b918b0 [feature] Introduce the protocols option
  • 73e03eb [ci] Update actions/setup-node action to v7
  • d9b8954 [fix] Change the ready state after validating the arguments (#2337)
  • See full diff in compare view

Updates zod from 4.4.3 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

  • b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

  • 0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini
  • 9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales
  • 34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note
  • 74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)
  • b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors
  • 8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze
  • bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles
  • c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)
  • a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)
  • a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)
  • 529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6
  • 9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

... (truncated)

Commits
  • b500a2e 4.6.7
  • 9c21983 ci: stage at verbose so a failed OIDC token exchange says why
  • 529f78d 4.6.6
  • a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
  • a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
  • c42596b release: hold the run on the release-approval environment until the staged ve...
  • bacad51 docs: square the Code for Japan logo to match the other bronze tiles
  • 8fb2faf docs: crop the Code for Japan logo and list it first in bronze
  • b2ef983 docs: add Code for Japan to bronze sponsors
  • 74304ce release: stage npm versions instead of publishing them (#6622)
  • Additional commits viewable in compare view

Updates @tanstack/query-async-storage-persister from 5.102.6 to 5.104.4

Release notes

Sourced from @​tanstack/query-async-storage-persister's releases.

@​tanstack/query-async-storage-persister@​5.104.4

Patch Changes

  • Updated dependencies [1fee044, fce89dd]:
    • @​tanstack/query-core@​5.104.4
    • @​tanstack/query-persist-client-core@​5.104.4

@​tanstack/query-async-storage-persister@​5.104.3

Patch Changes

  • Updated dependencies [ed4d849, 0f15bc9]:
    • @​tanstack/query-persist-client-core@​5.104.3
    • @​tanstack/query-core@​5.104.3
Changelog

Sourced from @​tanstack/query-async-storage-persister's changelog.

5.104.4

Patch Changes

  • Updated dependencies [1fee044, fce89dd]:
    • @​tanstack/query-core@​5.104.4
    • @​tanstack/query-persist-client-core@​5.104.4

5.104.3

Patch Changes

  • Updated dependencies [ed4d849, 0f15bc9]:
    • @​tanstack/query-persist-client-core@​5.104.3
    • @​tanstack/query-core@​5.104.3

5.104.2

Patch Changes

  • Updated dependencies [03e8c39]:
    • @​tanstack/query-core@​5.104.2
    • @​tanstack/query-persist-client-core@​5.104.2

5.104.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.104.1
    • @​tanstack/query-persist-client-core@​5.104.1

5.104.0

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/query-core@​5.104.0
    • @​tanstack/query-persist-client-core@​5.104.0

5.103.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.103.3
    • @​tanstack/query-persist-client-core@​5.103.3

5.103.2

... (truncated)

Commits
  • 1219972 ci: Version Packages (#12062)
  • ee47993 ci: Version Packages (#11998)
  • b699b52 ci: Version Packages (#11849)
  • e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
  • df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
  • d0cfa6a chore: replace eslint with oxlint (#11938)
  • 72c68cc docs(*): add JSDoc to the exported classes, methods, and arrow functions of t...
  • 0131c84 docs(*): add JSDoc to the exported interfaces and type aliases of the persist...
  • 91f5d9b docs(*): add missing JSDoc to the persisters and the broadcast client (#11846)
  • 5ab1aae chore(eslint.config): use 'defineConfig' from 'eslint/config' (#11819)
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.102.6 to 5.104.4

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.4

Patch Changes

  • #11722 0992a92 - fix(react-query-devtools): create the devtools instance only once instead of on every render

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency

  • Updated dependencies [c8f5eac, c208861, b61abc2, a108398]:

    • @​tanstack/query-devtools@​5.104.4
    • @​tanstack/react-query@​5.104.4

@​tanstack/react-query-next-experimental@​5.104.4

Patch Changes

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency
  • Updated dependencies [c208861, a108398]:
    • @​tanstack/react-query@​5.104.4

@​tanstack/react-query-persist-client@​5.104.4

Patch Changes

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency
  • Updated dependencies [c208861, a108398]:
    • @​tanstack/react-query@​5.104.4
    • @​tanstack/query-persist-client-core@​5.104.4

@​tanstack/react-query@​5.104.4

Patch Changes

  • #11328 c208861 - Allow queries with falsy errors to retry on mount when throwOnError returns false.

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency

  • Updated dependencies [1fee044, fce89dd]:

    • @​tanstack/query-core@​5.104.4

@​tanstack/react-query-devtools@​5.104.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.104.3
    • @​tanstack/query-devtools@​5.104.3

@​tanstack/react-query-next-experimental@​5.104.3

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.104.3

@​tanstack/react-query-persist-client@​5.104.3

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.4

Patch Changes

  • #11328 c208861 - Allow queries with falsy errors to retry on mount when throwOnError returns false.

  • #11728 a108398 - fix(react-query*): declare '@​types/react' as an optional peer dependency

  • Updated dependencies [1fee044, fce89dd]:

    • @​tanstack/query-core@​5.104.4

5.104.3

Patch Changes

  • Updated dependencies [0f15bc9]:
    • @​tanstack/query-core@​5.104.3

5.104.2

Patch Changes

  • Updated dependencies [03e8c39]:
    • @​tanstack/query-core@​5.104.2

5.104.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.104.1

5.104.0

Minor Changes

Patch Changes

  • Updated dependencies [5279b05]:
    • @​tanstack/query-core@​5.104.0

5.103.3

Patch Changes

  • #11647 1c9693e - fix(codemods): avoid copying unnecessary files from codemods project
  • Updated dependencies []:
    • @​tanstack/query-core@​5.103.3

... (truncated)

Commits
  • 1219972 ci: Version Packages (#12062)
  • 1fee044 fix(query-core): clear mutations before notifying subscribers (#11470)
  • c208861 fix(react-query): retry queries with falsy errors on mount (#11328)
  • a108398 fix(react-query*): declare '@​types/react' as an optional peer dependency (#11...
  • ee47993 ci: Version Packages (#11998)
  • 0f15bc9 fix(query-core): preserve union narrowing in setQueryData updaters (#11935)
  • b699b52 ci: Version Packages (#11849)
  • e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
  • df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
  • 833062c chore: replace prettier with oxfmt (#11939)
  • Additional commits viewable in compare view

Updates @tanstack/react-query-persist-client from 5.102.6 to 5.104.4

Release notes

Sourced from @​tanstack/react-query-persist-client's releases.

@​tanstack/react-query-persist-client

@dependabot
chore(deps)(deps): Bump the production-deps group across 1 directory …
0c625fa 
…with 25 updates

Bumps the production-deps group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.3` | `2.118.0` |
| [graphile-worker](https://github.com/graphile/worker) | `0.17.3` | `0.18.0` |
| [jose](https://github.com/panva/jose) | `6.2.9` | `6.2.12` |
| [socket.io](https://github.com/socketio/socket.io) | `4.8.3` | `4.8.4` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.7` |
| [@tanstack/query-async-storage-persister](https://github.com/TanStack/query/tree/HEAD/packages/query-async-storage-persister) | `5.102.6` | `5.104.4` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.6` | `5.104.4` |
| [@tanstack/react-query-persist-client](https://github.com/TanStack/query/tree/HEAD/packages/react-query-persist-client) | `5.102.6` | `5.104.4` |
| [expo](https://github.com/expo/expo/tree/HEAD/packages/expo) | `57.0.15` | `58.0.14` |
| [react-native-nitro-modules](https://github.com/mrousavy/nitro) | `0.37.0` | `0.37.1` |
| [@maskito/angular](https://github.com/taiga-family/maskito) | `5.4.0` | `5.6.0` |
| [@maskito/core](https://github.com/taiga-family/maskito) | `5.4.0` | `5.6.0` |
| [@ng-web-apis/common](https://github.com/taiga-family/ng-web-apis) | `5.3.0` | `5.4.0` |
| [@ng-web-apis/intersection-observer](https://github.com/taiga-family/ng-web-apis) | `5.3.0` | `5.4.0` |
| [@ng-web-apis/mutation-observer](https://github.com/taiga-family/ng-web-apis) | `5.3.0` | `5.4.0` |
| [@ng-web-apis/platform](https://github.com/taiga-family/ng-web-apis) | `5.3.0` | `5.4.0` |
| [@taiga-ui/cdk](https://github.com/taiga-family/taiga-ui) | `5.19.0` | `5.28.0` |
| [@taiga-ui/core](https://github.com/taiga-family/taiga-ui) | `5.19.0` | `5.28.0` |
| [@taiga-ui/event-plugins](https://github.com/taiga-family/ng-event-plugins) | `5.0.0` | `5.1.0` |
| [@taiga-ui/i18n](https://github.com/taiga-family/taiga-ui) | `5.19.0` | `5.28.0` |
| [@taiga-ui/icons](https://github.com/taiga-family/taiga-ui) | `5.19.0` | `5.28.0` |
| [@taiga-ui/kit](https://github.com/taiga-family/taiga-ui) | `5.19.0` | `5.28.0` |
| [@taiga-ui/styles](https://github.com/taiga-family/taiga-ui) | `5.19.0` | `5.28.0` |
| [socket.io-client](https://github.com/socketio/socket.io) | `4.8.3` | `4.8.4` |



Updates `@supabase/supabase-js` from 2.112.3 to 2.118.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/supabase-js)

Updates `graphile-worker` from 0.17.3 to 0.18.0
- [Release notes](https://github.com/graphile/worker/releases)
- [Changelog](https://github.com/graphile/worker/blob/main/CHANGELOG.md)
- [Commits](graphile/worker@v0.17.3...v0.18.0)

Updates `jose` from 6.2.9 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.9...v6.2.12)

Updates `socket.io` from 4.8.3 to 4.8.4
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/socket.io@4.8.3...socket.io@4.8.4)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

Updates `zod` from 4.4.3 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.7)

Updates `@tanstack/query-async-storage-persister` from 5.102.6 to 5.104.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/query-async-storage-persister/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/query-async-storage-persister@5.104.4/packages/query-async-storage-persister)

Updates `@tanstack/react-query` from 5.102.6 to 5.104.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.4/packages/react-query)

Updates `@tanstack/react-query-persist-client` from 5.102.6 to 5.104.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-persist-client/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-persist-client@5.104.4/packages/react-query-persist-client)

Updates `expo` from 57.0.15 to 58.0.14
- [Release notes](https://github.com/expo/expo/releases)
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/expo@58.0.14/packages/expo)

Updates `react-native-nitro-modules` from 0.37.0 to 0.37.1
- [Release notes](https://github.com/mrousavy/nitro/releases)
- [Commits](margelo/nitro@v0.37.0...v0.37.1)

Updates `@maskito/angular` from 5.4.0 to 5.6.0
- [Release notes](https://github.com/taiga-family/maskito/releases)
- [Changelog](https://github.com/taiga-family/maskito/blob/main/CHANGELOG.md)
- [Commits](taiga-family/maskito@v5.4.0...v5.6.0)

Updates `@maskito/core` from 5.4.0 to 5.6.0
- [Release notes](https://github.com/taiga-family/maskito/releases)
- [Changelog](https://github.com/taiga-family/maskito/blob/main/CHANGELOG.md)
- [Commits](taiga-family/maskito@v5.4.0...v5.6.0)

Updates `@ng-web-apis/common` from 5.3.0 to 5.4.0
- [Release notes](https://github.com/taiga-family/ng-web-apis/releases)
- [Changelog](https://github.com/taiga-family/ng-web-apis/blob/main/CHANGELOG.md)
- [Commits](taiga-family/ng-web-apis@v5.3.0...v5.4.0)

Updates `@ng-web-apis/intersection-observer` from 5.3.0 to 5.4.0
- [Release notes](https://github.com/taiga-family/ng-web-apis/releases)
- [Changelog](https://github.com/taiga-family/ng-web-apis/blob/main/CHANGELOG.md)
- [Commits](taiga-family/ng-web-apis@v5.3.0...v5.4.0)

Updates `@ng-web-apis/mutation-observer` from 5.3.0 to 5.4.0
- [Release notes](https://github.com/taiga-family/ng-web-apis/releases)
- [Changelog](https://github.com/taiga-family/ng-web-apis/blob/main/CHANGELOG.md)
- [Commits](taiga-family/ng-web-apis@v5.3.0...v5.4.0)

Updates `@ng-web-apis/platform` from 5.3.0 to 5.4.0
- [Release notes](https://github.com/taiga-family/ng-web-apis/releases)
- [Changelog](https://github.com/taiga-family/ng-web-apis/blob/main/CHANGELOG.md)
- [Commits](taiga-family/ng-web-apis@v5.3.0...v5.4.0)

Updates `@taiga-ui/cdk` from 5.19.0 to 5.28.0
- [Release notes](https://github.com/taiga-family/taiga-ui/releases)
- [Changelog](https://github.com/taiga-family/taiga-ui/blob/main/CHANGELOG.md)
- [Commits](taiga-family/taiga-ui@v5.19.0...v5.28.0)

Updates `@taiga-ui/core` from 5.19.0 to 5.28.0
- [Release notes](https://github.com/taiga-family/taiga-ui/releases)
- [Changelog](https://github.com/taiga-family/taiga-ui/blob/main/CHANGELOG.md)
- [Commits](taiga-family/taiga-ui@v5.19.0...v5.28.0)

Updates `@taiga-ui/event-plugins` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/taiga-family/ng-event-plugins/releases)
- [Changelog](https://github.com/taiga-family/ng-event-plugins/blob/main/CHANGELOG.md)
- [Commits](taiga-family/ng-event-plugins@v5.0.0...v5.1.0)

Updates `@taiga-ui/i18n` from 5.19.0 to 5.28.0
- [Release notes](https://github.com/taiga-family/taiga-ui/releases)
- [Changelog](https://github.com/taiga-family/taiga-ui/blob/main/CHANGELOG.md)
- [Commits](taiga-family/taiga-ui@v5.19.0...v5.28.0)

Updates `@taiga-ui/icons` from 5.19.0 to 5.28.0
- [Release notes](https://github.com/taiga-family/taiga-ui/releases)
- [Changelog](https://github.com/taiga-family/taiga-ui/blob/main/CHANGELOG.md)
- [Commits](taiga-family/taiga-ui@v5.19.0...v5.28.0)

Updates `@taiga-ui/kit` from 5.19.0 to 5.28.0
- [Release notes](https://github.com/taiga-family/taiga-ui/releases)
- [Changelog](https://github.com/taiga-family/taiga-ui/blob/main/CHANGELOG.md)
- [Commits](taiga-family/taiga-ui@v5.19.0...v5.28.0)

Updates `@taiga-ui/styles` from 5.19.0 to 5.28.0
- [Release notes](https://github.com/taiga-family/taiga-ui/releases)
- [Changelog](https://github.com/taiga-family/taiga-ui/blob/main/CHANGELOG.md)
- [Commits](taiga-family/taiga-ui@v5.19.0...v5.28.0)

Updates `socket.io-client` from 4.8.3 to 4.8.4
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/socket.io-client@4.8.3...socket.io-client@4.8.4)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.118.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: graphile-worker
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: socket.io
  dependency-version: 4.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@tanstack/query-async-storage-persister"
  dependency-version: 5.104.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@tanstack/react-query-persist-client"
  dependency-version: 5.104.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: expo
  dependency-version: 58.0.14
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: react-native-nitro-modules
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@maskito/angular"
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@maskito/core"
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@ng-web-apis/common"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@ng-web-apis/intersection-observer"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@ng-web-apis/mutation-observer"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@ng-web-apis/platform"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@taiga-ui/cdk"
  dependency-version: 5.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@taiga-ui/core"
  dependency-version: 5.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@taiga-ui/event-plugins"
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@taiga-ui/i18n"
  dependency-version: 5.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@taiga-ui/icons"
  dependency-version: 5.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@taiga-ui/kit"
  dependency-version: 5.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@taiga-ui/styles"
  dependency-version: 5.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: socket.io-client
  dependency-version: 4.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 25, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
pulseticker Ready Ready Preview Oct 25, 2026 10:19pm UTC

@dependabot @github

dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

This branch was successfully deployed

1 active deployment
Preview — 0c625fa7 Deployed Oct 25, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants