chore(web)(deps): bump the dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #66 · RISHII7/echo

dependabot · 2026-07-09T06:48:25Z

Bumps the dependencies group with 11 updates in the /apps/web directory:

Package	From	To
@clerk/nextjs	`7.5.12`	`7.5.17`
@convex-dev/agent	`0.1.16`	`0.6.4`
@sentry/nextjs	`10.63.0`	`10.65.0`
@shadcn/react	`0.2.0`	`0.2.1`
convex	`1.25.4`	`1.42.1`
lucide-react	`0.475.0`	`0.577.0`
next	`16.2.6`	`16.2.10`
react	`19.2.4`	`19.2.7`
react-dom	`19.2.4`	`19.2.7`
recharts	`3.8.0`	`3.9.2`
zod	`3.25.67`	`3.25.76`

Updates @clerk/nextjs from 7.5.12 to 7.5.17

Release notes

Sourced from @clerk/nextjs's releases.

@clerk/nextjs@7.5.17

Patch Changes

Updated dependencies [1a19409]:

@clerk/backend@3.11.4

@clerk/nextjs@7.5.16

Patch Changes

Updated dependencies [8dbf343]:

@clerk/shared@4.25.2

@clerk/react@6.12.2

@clerk/backend@3.11.3

@clerk/nextjs@7.5.15

Patch Changes

Updated dependencies [08ba540, 62f6702]:

@clerk/backend@3.11.2

@clerk/shared@4.25.1

@clerk/react@6.12.1

@clerk/nextjs@7.5.14

Patch Changes
Deprecate createRouteMatcher() in favor of resource-based auth checks. (#8994) by @Ephem

Middleware-based auth checks rely on path matching, which can diverge from how Next.js routes requests and leave protected resources reachable.

For a migration guide, see: https://clerk.com/docs/guides/development/upgrading/upgrade-guides/migrate-from-create-route-matcher

Instead of protecting routes from middleware, move auth checks into each protected page, layout, API route, or Server Function, for example:
import { auth } from '@clerk/nextjs/server'
export default async function Page() {
await auth.protect()
return <h1>Dashboard</h1>
}
Updated dependencies [6f97ef5, bab1f29, f2d9e4b, 80afb69]:

@clerk/shared@4.25.0

@clerk/react@6.12.0

@clerk/backend@3.11.1
@clerk/nextjs@7.5.13

... (truncated)

Changelog

Sourced from @clerk/nextjs's changelog.

7.5.17

Patch Changes

Updated dependencies [1a19409]:

@clerk/backend@3.11.4

7.5.16

Patch Changes

Updated dependencies [8dbf343]:

@clerk/shared@4.25.2

@clerk/react@6.12.2

@clerk/backend@3.11.3

7.5.15

Patch Changes

Updated dependencies [08ba540, 62f6702]:

@clerk/backend@3.11.2

@clerk/shared@4.25.1

@clerk/react@6.12.1

7.5.14

Patch Changes
Deprecate createRouteMatcher() in favor of resource-based auth checks. (#8994) by @Ephem

Middleware-based auth checks rely on path matching, which can diverge from how Next.js routes requests and leave protected resources reachable.

For a migration guide, see: https://clerk.com/docs/guides/development/upgrading/upgrade-guides/migrate-from-create-route-matcher

Instead of protecting routes from middleware, move auth checks into each protected page, layout, API route, or Server Function, for example:
import { auth } from '@clerk/nextjs/server'
export default async function Page() {
await auth.protect()
return <h1>Dashboard</h1>
}
Updated dependencies [6f97ef5, bab1f29, f2d9e4b, 80afb69]:

@clerk/shared@4.25.0

... (truncated)

Commits

b51e224 ci(repo): Version packages (#9129)
3fc812f ci(repo): Version packages (#9117)
39f190b ci(repo): Version packages (#9108)
0a29667 ci(repo): Version packages (#9091)
7c56495 fix(nextjs): Deprecate createRouteMatcher (#8994)
485bca5 ci(repo): Version packages (#9062)
2e1fec7 fix(shared,nextjs): suggest :path* subtree form in createRouteMatcher path ty...
See full diff in compare view

Updates @convex-dev/agent from 0.1.16 to 0.6.4

Changelog

Sourced from @convex-dev/agent's changelog.

0.6.4

Fix streaming UI message dedupe (#281)

chore(deltas): delete legacy TextStreamPart streaming path (#275)

fix(react): Fix O(n²) lag streaming long tool-input deltas (#190) (#270)

fix(mapping): preserve tool messages in multi-step history (#200) (#272)

fix: Stops a cleanup task from canceling itself (#285)

0.6.3

Update types for ctx args to be more compatible with convex 1.41

0.6.2

fix: persist final step when saveStreamDeltas.returnImmediately is true (#266)

fix: handle tool validation errors in stopWhen and willContinue (#241)

0.6.1

Fix bundled package

0.6.0

Tool approval support: needsApproval in createTool, agent.approveToolCall(), agent.denyToolCall()

Auto-deny unresolved tool approvals when a new generation starts

Fix unhandled rejection in DeltaStreamer on transaction teardown

Note on versioning: This release jumps from 0.3.2 to 0.6.0, skipping versions 0.4.0 and 0.5.0. This is intentional and aligns the @convex-dev/agent package version with the AI SDK v6 major version for clearer compatibility signaling. Going forward, the minor version of this package will track the AI SDK major version to make it easier for developers to identify which version of the AI SDK is supported.

Breaking: Requires AI SDK v6 and drops support for AI SDK v5. Projects pinned to v5 must upgrade their AI SDK dependencies before updating to this version.

Aligns this package's message and tool invocation types with the AI SDK v6 APIs to reduce casting/adapter code when integrating with the core SDK.

Updates internal helpers to use the AI SDK v6 request/response shapes and error handling semantics.

Migration from 0.3.x:

Update your AI SDK dependency to v6 in package.json and reinstall dependencies.

Rebuild and run your type checker to surface any call sites that depend on the old AI SDK v5 types or message shapes.

Review any custom integrations that relied on deprecated v5-only helpers and update them to the new AI SDK v6-compatible APIs.

See Vercel's v6 migration guide

... (truncated)

Commits

2ac7448 0.6.4
51d7975 use convex linter (#255)
989f499 only cancel pending scheduled functions (#285)
26ddfcc refactor RunQueryCtx to QueryCtx using Pick (#284)
ef9e0c6 Fix streaming UI message dedupe (#281)
9713c5c chore(deltas): delete legacy TextStreamPart streaming path (#275)
118df1c fix(react): O(n²) lag streaming long tool-input deltas (#190) (#270)
249398a fix(mapping): preserve tool messages in multi-step history (#200) (#272)
026fae4 0.6.3
63e04c7 use ActionCtx versions of runQuery/runMutation for compatibility (#277)
Additional commits viewable in compare view

Updates @sentry/nextjs from 10.63.0 to 10.65.0

Release notes

Sourced from @sentry/nextjs's releases.

10.65.0

feat(angular): Set url attributes on pageload and navigation spans (#21985)

feat(astro): Set url.template on pageload spans (#22011)

feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)

feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)

feat(bun): warn when externalizing instrumented deps (#21999)

feat(core): Require attributes on SerializedStreamedSpan (#22052)

feat(ember): Set url.template, url.path and url.full on router spans (#22095)

feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)

feat(nextjs): Set url attributes on pageload and navigation spans (#22006)

feat(react): Set url.template, url.path and url.full on routing spans (#22087)

feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)

feat(remix): Set url.template on pageload and navigation spans (#22025)

feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)

feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)

feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)

feat(server-utils): Implement orchestrion-based express integration (#21889)

feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)

feat(solid): Set url attributes on solid router and tanstack router spans (#22090)

feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)

feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)

fix(browser): Send web vital span sentry.segment.name attribute (#22024)

fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)

fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)

fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)

fix(replay): Skip client reports for replay failures after stop (#22177)

perf(vite): add fast component annotation transform (#22089)

ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)

chore: Add external contributor to CHANGELOG.md (#22111)

chore: Reinstate changelog anchor (#22022)

chore(cloudflare): Ignore import patterns (#22008)

chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)

chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)

chore(opentelemetry): Add worker as export | sort exports (#21859)

chore(size-limit): weekly auto-bump (#21812)

ci: Only run cloudflare & bundler plugin tests when necessary (#22130)

ci(deps): bump actions/checkout from 6 to 7 (#21898)

ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)

ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)

ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)

ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)

feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)

feat(core): add uniq array util and consolidate call sites (#22152)

feat(deps): Bump @growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)

feat(deps): Bump @opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)

feat(deps): Bump dotenv from 16.0.3 to 17.4.2 (#22150)

... (truncated)

Changelog

Sourced from @sentry/nextjs's changelog.

10.65.0

feat(angular): Set url attributes on pageload and navigation spans (#21985)

feat(astro): Set url.template on pageload spans (#22011)

feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)

feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)

feat(bun): warn when externalizing instrumented deps (#21999)

feat(core): Require attributes on SerializedStreamedSpan (#22052)

feat(ember): Set url.template, url.path and url.full on router spans (#22095)

feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)

feat(nextjs): Set url attributes on pageload and navigation spans (#22006)

feat(react): Set url.template, url.path and url.full on routing spans (#22087)

feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)

feat(remix): Set url.template on pageload and navigation spans (#22025)

feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)

feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)

feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)

feat(server-utils): Implement orchestrion-based express integration (#21889)

feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)

feat(solid): Set url attributes on solid router and tanstack router spans (#22090)

feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)

feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)

fix(browser): Send web vital span sentry.segment.name attribute (#22024)

fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)

fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)

fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)

fix(replay): Skip client reports for replay failures after stop (#22177)

perf(vite): add fast component annotation transform (#22089)

ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)

chore: Add external contributor to CHANGELOG.md (#22111)

chore: Reinstate changelog anchor (#22022)

chore(cloudflare): Ignore import patterns (#22008)

chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)

chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)

chore(opentelemetry): Add worker as export | sort exports (#21859)

chore(size-limit): weekly auto-bump (#21812)

ci: Only run cloudflare & bundler plugin tests when necessary (#22130)

ci(deps): bump actions/checkout from 6 to 7 (#21898)

ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)

ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)

ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)

ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)

feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)

feat(core): add uniq array util and consolidate call sites (#22152)

feat(deps): Bump @growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)

feat(deps): Bump @opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)

... (truncated)

Commits

c66a815 release: 10.65.0
018c570 Merge pull request #22179 from getsentry/prepare-release/10.65.0
5a1e331 meta(changelog): Update changelog for 10.65.0
e934b44 feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
04bbb79 fix(replay): Skip client reports for replay failures after stop (#22177)
cb77f42 test: Remove fixed container_name from node integration test docker-compose f...
a84cc9d test(node-integration-tests): Surface early scenario exit instead of hanging ...
88e3b32 feat(core): add isObjectLike guard and consolidate non-null-object checks (#2...
7565c90 ref(nitro, nuxt): inline == null checks for nullish detection (#22154)
256b9b9 feat(ember): Set url.template, url.path and url.full on router spans (#22095)
Additional commits viewable in compare view

Updates @shadcn/react from 0.2.0 to 0.2.1

Release notes

Sourced from @shadcn/react's releases.

@shadcn/react@0.2.1

Patch Changes

#11106 f6a26478547c7057aeda82516666dc3473dc39bd Thanks @shadcn! - Fix MessageScroller autoScroll around anchored turns: the anchor hold now hands off to follow-output once the streamed reply fills the viewport, content growth outrunning the frame-coalesced resize handler no longer releases follow-output, and the scroll button no longer flickers while follow-output closes the gap a streamed chunk just opened.

#11100 dd6ce77cf1606eee2839368a97cc35417f763232 Thanks @shadcn! - Fix MessageScroller abandoning a newly appended scrollAnchor placement when autoScroll is enabled, so the anchored turn holds at the reading line while the reply streams.

#11085 628e427231ca4bb7f586a69f99fe7809749a53e2 Thanks @devnomic! - Fix MessageScroller firing "ResizeObserver loop completed with undelivered notifications" during streamed content growth by coalescing ResizeObserver callbacks into requestAnimationFrame.

Changelog

Sourced from @shadcn/react's changelog.

0.2.1

Patch Changes

#11106 f6a26478547c7057aeda82516666dc3473dc39bd Thanks @shadcn! - Fix MessageScroller autoScroll around anchored turns: the anchor hold now hands off to follow-output once the streamed reply fills the viewport, content growth outrunning the frame-coalesced resize handler no longer releases follow-output, and the scroll button no longer flickers while follow-output closes the gap a streamed chunk just opened.

#11100 dd6ce77cf1606eee2839368a97cc35417f763232 Thanks @shadcn! - Fix MessageScroller abandoning a newly appended scrollAnchor placement when autoScroll is enabled, so the anchored turn holds at the reading line while the reply streams.

#11085 628e427231ca4bb7f586a69f99fe7809749a53e2 Thanks @devnomic! - Fix MessageScroller firing "ResizeObserver loop completed with undelivered notifications" during streamed content growth by coalescing ResizeObserver callbacks into requestAnimationFrame.

Commits

5e800ca chore(release): version packages (#11099)
f6a2647 fix(react): follow the live edge after an anchored reply fills the viewport (...
dd6ce77 fix(react): hold newly appended scroll anchors while autoScroll is enabled (#...
628e427 fix(message-scroller): avoid ResizeObserver loop error by coalescing resize h...
See full diff in compare view

Updates convex from 1.25.4 to 1.42.1

Changelog

Sourced from convex's changelog.

1.42.1

Fixed an issue where the CLI would be unable to find the tsgo binary in newer versions of @typescript/native-preview.

Added a new initialAuthTokenReuse option to ConvexReactClient that prevents extra function calls when users re-authenticate.

1.42.0

Added a new npx convex project create command that can be used to create new projects programmatically.

Added a new --names-only flag to npx convex env list (and npx convex env default list). This flag shows the names of the env vars that are set, without the values. It can be useful to let AI coding agents know the variables that are set on a deployment, without giving them the actual values.

Added a new useStaleSnapshot option to the arguments for runQuery. This is an advanced feature that can be used to allow mutations to avoid optimistic concurrency control (OCC) conflicts in some cases where they can commit even though they depend on conflicting reads. This change allows us to improve the performance of some of the official Convex components, including Workpool.

Improved the documentation of db.* methods to more clearly explain the difference between the old APIs without table names (e.g. db.get(userId)) and the new APIs with table names (e.g. db.get("users", userId)).

Fixed an issue where the CLI would not surface permission errors correctly when the user or token doesn’t have permission to do something.

Exposes the current scheduled function's ID as scheduledFunctionId in ctx.meta.getRequestMetadata().

npx convex insights has a new --json flag that makes the command output easier to parse programmatically.

File storage: marked a few TypeScript types in convex/server as @deprecated (FileMetadata, FileStorageId, StorageId). These types are used only by file storage APIs that were deprecated in convex@1.6.0, so we also marked them as @deprecated for clarity.

Bumps the ws peer dependency to avoid a vulnerable range.

1.41.0

It is now possible to set limits on nested queries and mutations with the new transactionLimits option in runQuery/runMutation.

npx convex ai-files now installs skills with separate copies of each skill for each coding agent instead of using symlinks. We made this change to avoid known issues with symlinks on Windows.

When using Convex in anonymous mode (without a Convex account), npx convex dev now starts a different dashboard server for each deployment. This ensures the dashboard always connects to the right deployment when multiple deployments are running at the same time.

1.40.0

... (truncated)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by reece-convex, a new releaser for convex since your current version.

Updates lucide-react from 0.475.0 to 0.577.0

Release notes

Sourced from lucide-react's releases.

Version 0.577.0

What's Changed

chore(deps): bump rollup from 4.53.3 to 4.59.0 by @dependabot[bot] in lucide-icons/lucide#4106

fix(repo): correctly ignore docs/releaseMetadata via .gitignore by @bhavberi in lucide-icons/lucide#4100

feat(icons): added ellipse icon by @KISHORE-KUMAR-S in lucide-icons/lucide#3749

New Contributors

@bhavberi made their first contribution in lucide-icons/lucide#4100

@KISHORE-KUMAR-S made their first contribution in lucide-icons/lucide#3749

Full Changelog: lucide-icons/lucide@0.576.0...0.577.0

Version 0.576.0

What's Changed

Added zodiac signs by @karsa-mistmere in lucide-icons/lucide#712

fix(icons): fixes guideline violations in package-* icons. by @karsa-mistmere in lucide-icons/lucide#4074

fix(icons): changed receipt icon by @karsa-mistmere in lucide-icons/lucide#4075

fix(icons): updated cuboid icon tags and categories by @karsa-mistmere in lucide-icons/lucide#4095

fix(icons): changed cuboid icon by @jamiemlaw in lucide-icons/lucide#4098

fix(lucide-font, lucide-static): Fixing stable code points by @ericfennis in lucide-icons/lucide#3894

feat(icons): added fishing-rod icon by @7ender in lucide-icons/lucide#3839

Full Changelog: lucide-icons/lucide@0.575.0...0.576.0

Version 0.575.0

What's Changed

feat(icons): added message-square-check icon by @karsa-mistmere in lucide-icons/lucide#4076

fix(lucide): Fix ESM Module output path in build by @ericfennis in lucide-icons/lucide#4084

feat(icons): added metronome icon by @edwloef in lucide-icons/lucide#4063

fix(icons): remove execution permission of SVG files by @duckafire in lucide-icons/lucide#4053

fix(icons): changed file-pen-line icon by @jguddas in lucide-icons/lucide#3970

feat(icons): added square-arrow-right-exit and square-arrow-right-enter icons by @EthanHazel in lucide-icons/lucide#3958

fix(icons): renamed flip-* to square-centerline-dashed-* by @jguddas in lucide-icons/lucide#3945

New Contributors

@edwloef made their first contribution in lucide-icons/lucide#4063

@duckafire made their first contribution in lucide-icons/lucide#4053

Full Changelog: lucide-icons/lucide@0.573.0...0.575.0

Version 0.574.0

What's Changed

fix(icons): changed rocking-chair icon by @jamiemlaw in lucide-icons/lucide#3445

fix(icons): flipped coins icon by @jguddas in lucide-icons/lucide#3158

feat(icons): added x-line-top icon by @jguddas in lucide-icons/lucide#2838

feat(icons): added mouse-left icon by @marvfash in lucide-icons/lucide#2788

feat(icons): added mouse-right icon by @marvfash in lucide-icons/lucide#2787

New Contributors

... (truncated)

Commits

f6c0d06 chore(deps): bump rollup from 4.53.3 to 4.59.0 (#4106)
67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
076e0bb chore(dependencies): Update dependencies (#3809)
80d6f73 fix(icons): Rename fingerprint icon to fingerprint-pattern (#3767)
1cfb3ff chore(deps-dev): bump vite from 6.3.5 to 6.3.6 (#3611)
e71198d chore: icon alias improvements (#2861)
3e644fd chore(scripts): Refactor scripts to typescript (#3316)
19fa01b build(deps-dev): bump vite from 6.3.2 to 6.3.4 (#3181)
03eb862 use implicit return in react package (#2325)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lucide-react since your current version.

Updates next from 16.2.6 to 16.2.10

Release notes

Sourced from next's releases.

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

Commits

9dadfd6 v16.2.10
534d9c1 [16.2.x] Release pipeline updates (#95160)
98941fc backport: docs fixes 16.2.x (#94935)
6e1a94d [16.2.x][ci]: fix release script to not strip newlines (#94640)
f37fad9 v16.2.9
d9aaaed [cd] Allow tagging semver-lower releases as @latest if @latest po… (#94627)
6f16804 v16.2.8
0dbc1d5 [16.2.x][cd] Ensure release can be triggered on old branches (#94598)
90e3c81 [16.2.x] Align Actions dependencies with Canary (#94339)
83f402c [16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)
Additional commits viewable in compare view

Updates react from 19.2.4 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

Commits

6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
23f4f9f 19.2.5
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates react-dom from 19.2.4 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions w...
Description has been truncated

vercel · 2026-07-09T06:48:29Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
echo	Error		Jul 13, 2026 3:38am

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
echo-widget	Skipped		Jul 13, 2026 3:38am

… 11 updates Bumps the dependencies group with 11 updates in the /apps/web directory: | Package | From | To | | --- | --- | --- | | [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.5.12` | `7.5.17` | | [@convex-dev/agent](https://github.com/get-convex/agent) | `0.1.16` | `0.6.4` | | [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.63.0` | `10.65.0` | | [@shadcn/react](https://github.com/shadcn-ui/ui/tree/HEAD/packages/react) | `0.2.0` | `0.2.1` | | [convex](https://github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex) | `1.25.4` | `1.42.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.475.0` | `0.577.0` | | [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.10` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.7` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.7` | | [recharts](https://github.com/recharts/recharts) | `3.8.0` | `3.9.2` | | [zod](https://github.com/colinhacks/zod) | `3.25.67` | `3.25.76` | Updates `@clerk/nextjs` from 7.5.12 to 7.5.17 - [Release notes](https://github.com/clerk/javascript/releases) - [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md) - [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.5.17/packages/nextjs) Updates `@convex-dev/agent` from 0.1.16 to 0.6.4 - [Changelog](https://github.com/get-convex/agent/blob/main/CHANGELOG.md) - [Commits](get-convex/agent@v0.1.16...v0.6.4) Updates `@sentry/nextjs` from 10.63.0 to 10.65.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.63.0...10.65.0) Updates `@shadcn/react` from 0.2.0 to 0.2.1 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/@shadcn/react@0.2.1/packages/react) Updates `convex` from 1.25.4 to 1.42.1 - [Release notes](https://github.com/get-convex/convex-backend/releases) - [Changelog](https://github.com/get-convex/convex-backend/blob/main/npm-packages/convex/CHANGELOG.md) - [Commits](https://github.com/get-convex/convex-backend/commits/HEAD/npm-packages/convex) Updates `lucide-react` from 0.475.0 to 0.577.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react) Updates `next` from 16.2.6 to 16.2.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.6...v16.2.10) Updates `react` from 19.2.4 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.4 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `recharts` from 3.8.0 to 3.9.2 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.8.0...v3.9.2) Updates `zod` from 3.25.67 to 3.25.76 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.67...v3.25.76) --- updated-dependencies: - dependency-name: "@clerk/nextjs" dependency-version: 7.5.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@convex-dev/agent" dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@sentry/nextjs" dependency-version: 10.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@shadcn/react" dependency-version: 0.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: convex dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: lucide-react dependency-version: 0.577.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: next dependency-version: 16.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: recharts dependency-version: 3.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: zod dependency-version: 3.25.76 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-20T03:37:22Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added app:web Relates to apps/web automated Created automatically by a bot dependencies Pull requests that update a dependency file labels Jul 9, 2026

dependabot Bot requested a review from RISHII7 as a code owner July 9, 2026 06:48

dependabot Bot added dependencies Pull requests that update a dependency file automated Created automatically by a bot app:web Relates to apps/web labels Jul 9, 2026

vercel Bot temporarily deployed to Preview – echo-widget July 9, 2026 06:48 Inactive

vercel Bot had a problem deploying to Preview – echo July 9, 2026 06:48 Failure

dependabot Bot mentioned this pull request Jul 9, 2026

chore(web)(deps): bump lucide-react from 0.475.0 to 0.577.0 in /apps/web #60

Closed

dependabot Bot changed the title ~~chore(web)(deps): bump the dependencies group in /apps/web with 11 updates~~ chore(web)(deps): bump the dependencies group across 1 directory with 11 updates Jul 13, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/apps/web/dependencies-86d05cfe60 branch from c58b250 to 3a8e96d Compare July 13, 2026 03:38

vercel Bot temporarily deployed to Preview – echo-widget July 13, 2026 03:38 Inactive

vercel Bot had a problem deploying to Preview – echo July 13, 2026 03:38 Failure

dependabot Bot closed this Jul 20, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/apps/web/dependencies-86d05cfe60 branch July 20, 2026 03:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(web)(deps): bump the dependencies group across 1 directory with 11 updates#66

chore(web)(deps): bump the dependencies group across 1 directory with 11 updates#66
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/dependencies-86d05cfe60

dependabot Bot commented on behalf of github Jul 9, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jul 9, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​clerk/nextjs@​7.5.17

Patch Changes

@​clerk/nextjs@​7.5.16

Patch Changes

@​clerk/nextjs@​7.5.15

Patch Changes

@​clerk/nextjs@​7.5.14

Patch Changes

@​clerk/nextjs@​7.5.13

7.5.17

Patch Changes

7.5.16

Patch Changes

7.5.15

Patch Changes

7.5.14

Patch Changes

0.6.4

0.6.3

0.6.2

0.6.1

0.6.0

10.65.0

10.65.0

@​shadcn/react@​0.2.1

Patch Changes

0.2.1

Patch Changes

1.42.1

1.42.0

1.41.0

1.40.0

Version 0.577.0

What's Changed

New Contributors

Version 0.576.0

What's Changed

Version 0.575.0

What's Changed

New Contributors

Version 0.574.0

What's Changed

New Contributors

v16.2.10

v16.2.9

v16.2.8

v16.2.7

Core Changes

Credits

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.7 (June 1, 2026)

React Server Components

Uh oh!

vercel Bot commented Jul 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

dependabot Bot commented on behalf of github Jul 9, 2026 •

edited

Loading

`@clerk/nextjs@7`.5.17

`@clerk/nextjs@7`.5.16

`@clerk/nextjs@7`.5.15

`@clerk/nextjs@7`.5.14

`@clerk/nextjs@7`.5.13

`@shadcn/react@0`.2.1

vercel Bot commented Jul 9, 2026 •

edited

Loading