Skip to content

chore(deps): bump the patch-minor-dependencies group across 1 directory with 35 updates#2405

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/tavla/patch-minor-dependencies-7c17232cd5
Open

chore(deps): bump the patch-minor-dependencies group across 1 directory with 35 updates#2405
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/tavla/patch-minor-dependencies-7c17232cd5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps the patch-minor-dependencies group with 35 updates in the /tavla directory:

Package From To
@entur/alert 0.18.8 0.18.10
@entur/button 4.0.4 4.0.5
@entur/chip 0.10.8 0.10.10
@entur/dropdown 8.1.0 8.1.2
@entur/expand 3.7.5 3.7.6
@entur/form 9.3.0 9.3.2
@entur/icons 8.4.4 8.4.5
@entur/layout 3.5.0 3.6.1
@entur/loader 0.6.5 0.6.6
@entur/menu 6.1.3 6.1.5
@entur/modal 1.8.8 1.8.10
@entur/table 4.10.8 4.10.10
@entur/tokens 3.22.3 3.22.4
@entur/tooltip 5.3.8 5.3.10
@entur/typography 2.1.5 2.1.6
@sentry/nextjs 10.45.0 10.51.0
dompurify 3.4.1 3.4.2
firebase 12.11.0 12.12.1
firebase-admin 13.7.0 13.8.0
firebase-functions 7.2.2 7.2.5
jsdom 29.0.1 29.1.1
lodash 4.17.23 4.18.1
nanoid 5.1.7 5.1.11
next 16.2.3 16.2.4
posthog-js 1.363.4 1.372.6
posthog-node 5.28.5 5.33.0
react 19.2.4 19.2.5
react-dom 19.2.4 19.2.5
zod 4.3.6 4.4.2
@biomejs/biome 2.4.8 2.4.14
@graphql-codegen/import-types-preset 4.0.0 4.0.1
@types/node 25.5.0 25.6.0
autoprefixer 10.4.27 10.5.0
firebase-tools 15.10.1 15.16.0
typescript 6.0.2 6.0.3

Updates @entur/alert from 0.18.8 to 0.18.10

Changelog

Sourced from @​entur/alert's changelog.

0.18.10 (2026-04-16)

Note: Version bump only for package @​entur/alert

Commits

Updates @entur/button from 4.0.4 to 4.0.5

Changelog

Sourced from @​entur/button's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits
  • 0ae0ebd chore(release): publish
  • c668762 style(root): sort import members alphabetically
  • 9b649a1 chore(root): replace eslint with oxlint
  • See full diff in compare view

Updates @entur/chip from 0.10.8 to 0.10.10

Changelog

Sourced from @​entur/chip's changelog.

0.10.10 (2026-04-16)

Note: Version bump only for package @​entur/chip

Commits

Updates @entur/dropdown from 8.1.0 to 8.1.2

Changelog

Sourced from @​entur/dropdown's changelog.

8.1.2 (2026-04-16)

Note: Version bump only for package @​entur/dropdown

Commits
  • e24bdc1 chore(release): publish
  • 0ae0ebd chore(release): publish
  • 1a5ef8d refactor: fixup or silence lint warnings and remove dead code
  • 6c0ddb4 fix: resolve 53 safe lint warnings (no-unused-vars, no-unneeded-ternary, no-w...
  • c668762 style(root): sort import members alphabetically
  • 9b649a1 chore(root): replace eslint with oxlint
  • See full diff in compare view

Updates @entur/expand from 3.7.5 to 3.7.6

Changelog

Sourced from @​entur/expand's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits
  • 0ae0ebd chore(release): publish
  • c668762 style(root): sort import members alphabetically
  • 9b649a1 chore(root): replace eslint with oxlint
  • See full diff in compare view

Updates @entur/form from 9.3.0 to 9.3.2

Changelog

Sourced from @​entur/form's changelog.

9.3.2 (2026-04-16)

Note: Version bump only for package @​entur/form

Commits
  • e24bdc1 chore(release): publish
  • 0ae0ebd chore(release): publish
  • 1a5ef8d refactor: fixup or silence lint warnings and remove dead code
  • c668762 style(root): sort import members alphabetically
  • 9b649a1 chore(root): replace eslint with oxlint
  • See full diff in compare view

Updates @entur/icons from 8.4.4 to 8.4.5

Changelog

Sourced from @​entur/icons's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits
  • 0ae0ebd chore(release): publish
  • f9a686e Merge pull request #310 from entur/copilot/switch-eslint-to-oxlint
  • 1a5ef8d refactor: fixup or silence lint warnings and remove dead code
  • 6c0ddb4 fix: resolve 53 safe lint warnings (no-unused-vars, no-unneeded-ternary, no-w...
  • 56404a1 chore(icons): bump svgo from 4.0.0 to 4.0.1
  • 9b649a1 chore(root): replace eslint with oxlint
  • See full diff in compare view

Updates @entur/layout from 3.5.0 to 3.6.1

Changelog

Sourced from @​entur/layout's changelog.

3.6.1 (2026-04-16)

Bug Fixes

  • layout/beta/portal, layout/beta/sidebar: fix overflow scrolling and styling issues in Portal and Sidebar (1de520b)
Commits
  • e24bdc1 chore(release): publish
  • 1d1d74e refactor(layout/beta/portal, layout/beta/sidebar): extract CSS variable fallb...
  • 1de520b fix(layout/beta/portal, layout/beta/sidebar): fix overflow scrolling and styl...
  • 0ae0ebd chore(release): publish
  • 758bc0a fix(layout/beta/grid): don't set inline CSS variable defaults when props are ...
  • 73322e9 feat(layout/beta/sidebar, layout/beta/portal): add --eds-viewport-height CSS ...
  • b9403f5 feat(layout/beta/sidebar): add automatic spacing to Sidebar.Data section
  • 07c94b5 fix(layout/beta/sidebar): constrain sidebar to viewport height with internal ...
  • c668762 style(root): sort import members alphabetically
  • 9b649a1 chore(root): replace eslint with oxlint
  • Additional commits viewable in compare view

Updates @entur/loader from 0.6.5 to 0.6.6

Changelog

Sourced from @​entur/loader's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits
  • 0ae0ebd chore(release): publish
  • c668762 style(root): sort import members alphabetically
  • 9b649a1 chore(root): replace eslint with oxlint
  • See full diff in compare view

Updates @entur/menu from 6.1.3 to 6.1.5

Changelog

Sourced from @​entur/menu's changelog.

6.1.5 (2026-04-16)

Note: Version bump only for package @​entur/menu

Commits

Updates @entur/modal from 1.8.8 to 1.8.10

Changelog

Sourced from @​entur/modal's changelog.

1.8.10 (2026-04-16)

Note: Version bump only for package @​entur/modal

Commits

Updates @entur/table from 4.10.8 to 4.10.10

Changelog

Sourced from @​entur/table's changelog.

4.10.10 (2026-04-16)

Note: Version bump only for package @​entur/table

Commits

Updates @entur/tokens from 3.22.3 to 3.22.4

Changelog

Sourced from @​entur/tokens's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits
  • 0ae0ebd chore(release): publish
  • c668762 style(root): sort import members alphabetically
  • 9b649a1 chore(root): replace eslint with oxlint
  • See full diff in compare view

Updates @entur/tooltip from 5.3.8 to 5.3.10

Changelog

Sourced from @​entur/tooltip's changelog.

5.3.10 (2026-04-16)

Note: Version bump only for package @​entur/tooltip

Commits

Updates @entur/typography from 2.1.5 to 2.1.6

Changelog

Sourced from @​entur/typography's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits
  • 0ae0ebd chore(release): publish
  • 1a5ef8d refactor: fixup or silence lint warnings and remove dead code
  • 6c0ddb4 fix: resolve 53 safe lint warnings (no-unused-vars, no-unneeded-ternary, no-w...
  • c668762 style(root): sort import members alphabetically
  • 9b649a1 chore(root): replace eslint with oxlint
  • See full diff in compare view

Updates @sentry/nextjs from 10.45.0 to 10.51.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.51.0

Important Changes

  • feat(cloudflare): Add trace propagation for RPC method calls (#20343)

    Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects. This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

    // Worker
    export default Sentry.withSentry(
      env => ({
        dsn: env.SENTRY_DSN,
        enableRpcTracePropagation: true,
      }),
      handler,
    );
    // Durable Object
    export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
    env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
    }),
    MyDurableObjectBase,
    );

  • feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#20497)

    To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options. Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:

    // instrument.mjs (or instrument.ts)
    import * as Sentry from '@sentry/hono/node';
    Sentry.init({
    dsn: 'DSN',
    tracesSampleRate: 1.0,
    });

  • feat(nitro): Add @sentry/nitro SDK (#19224)

    A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig. Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.51.0

Important Changes

  • feat(cloudflare): Add trace propagation for RPC method calls (#20343)

    Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects. This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

    // Worker
    export default Sentry.withSentry(
      env => ({
        dsn: env.SENTRY_DSN,
        enableRpcTracePropagation: true,
      }),
      handler,
    );
    // Durable Object
    export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
    env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
    }),
    MyDurableObjectBase,
    );

  • feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#20497)

    To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options. Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:

    // instrument.mjs (or instrument.ts)
    import * as Sentry from '@sentry/hono/node';
    Sentry.init({
    dsn: 'DSN',
    tracesSampleRate: 1.0,
    });

  • feat(nitro): Add @sentry/nitro SDK (#19224)

    A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig. Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes

... (truncated)

Commits
  • dc0b839 release: 10.51.0
  • b3cabee Merge pull request #20599 from getsentry/prepare-release/10.51.0
  • 3be99a9 meta(changelog): Update changelog for 10.51.0
  • bea1aad test(browser): Unflake some more tests (#20591)
  • 50aa085 test(node): Unflake postgres tests (#20593)
  • 1166839 fix(hono): Distinguish .use() middleware in sub-apps from .all() handlers...
  • 217ad4a test(node): Fix flaky ANR test (#20592)
  • 91ffb3f test(node): Fix flaky worker thread integration test (#20588)
  • c4e3902 chore(ci): Do not report flaky test issues if we cannot find a test name (#20...
  • c0005cd test(node): Update timeout for cron integration tests (#20586)
  • Additional commits viewable in compare view

Updates dompurify from 3.4.1 to 3.4.2

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.2

  • Fixed an issue with URI validation on attributes allowed via ADD_ATTR callback, thanks @​nelstrom
  • Fixed an issue with source maps referring to non-existing files, thanks @​cmdcolin
  • Updated existing workflows, fuzzer, release signing, etc., added more tests
  • Bumped several dependencies where possible
Commits

Updates firebase from 12.11.0 to 12.12.1

Release notes

Sourced from firebase's releases.

firebase@12.12.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.11.0

Minor Changes

Patch Changes

  • f87c15e #9791 (fixes #9792) - Fixed a bug that causes the model to error if the user specifies responseSchema or responseJsonSchema.

@​firebase/auth@​1.13.0

Minor Changes

  • 715c042 #9740 (fixes #9739) - Updated the peer dependency range for @​react-native-async-storage/async-storage to support both v2 and v3

@​firebase/data-connect@​0.6.0

Minor Changes

  • 34c63bf #9822 - Fix header names for auth and app check tokens over streaming

  • 87d5cc1 #9809 - Add streaming support for Firebase Data Connect.

firebase@12.12.0

Minor Changes

... (truncated)

Commits

Updates firebase-admin from 13.7.0 to 13.8.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v13.8.0

New Features

  • feat(pnv): Add support for Phone Number Verification (#3101)
  • feat(fcm): Add bandwidthConstrainedOk and restrictedSatelliteOk (#2994)

Miscellaneous

  • [chore] Release 13.8.0 (#3109)
  • chore(deps): bump node-forge to 1.4.0 (#3108)
  • build(deps-dev): bump @​types/node from 25.3.0 to 25.3.3 (#3090)
  • build(deps-dev): bump lodash and @​microsoft/api-extractor (#3106)
  • build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 (#3095)
  • build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 (#3093)
  • build(deps): bump fast-xml-parser from 5.3.7 to 5.4.1 (#3087)
Commits
  • ff4c94d [chore] Release 13.8.0 (#3109)
  • bbd3365 chore(deps): bump node-forge to 1.4.0 (#3108)
  • 1689659 build(deps-dev): bump @​types/node from 25.3.0 to 25.3.3 (#3090)
  • db6f5c0 build(deps-dev): bump lodash and @​microsoft/api-extractor (#3106)
  • c8de86d feat(pnv): Add support for Phone Number Verification (#3101)
  • a3faacf build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 (#3095)
  • 7fbad72 feat(fcm): Add bandwidthConstrainedOk and restrictedSatelliteOk (#2994)
  • 7cbc314 build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 (#3093)
  • 1773f03 build(deps): bump fast-xml-parser from 5.3.7 to 5.4.1 (#3087)
  • See full diff in compare view

Updates firebase-functions from 7.2.2 to 7.2.5

Release notes

Sourced from firebase-functions's releases.

v7.2.5

Internal fixes

v7.2.4

-Internal Improvements #1864

v7.2.3

  • Accept BooleanParams in CallableOptions (#1854)
  • rotate the npmrc key to robot account (#1857)
Commits

Updates jsdom from 29.0.1 to 29.1.1

Release notes

Sourced from jsdom's releases.

v29.1.1

  • Fixed 'border-radius' computed style serialization. (@​asamuzaK)
  • Fixed computed style computation when using 'background-origin' and 'background-clip' CSS properties. (@​asamuzaK)
  • Significantly optimized initial calls to getComputedStyle(), before the cache warms up. (@​asamuzaK)

v29.1.0

  • Added basic support for the ratio CSS type. (@​asamuzaK)
  • Fixed getComputedStyle() sometimes returning outdated results after CSS was modified. (@​asamuzaK)

v29.0.2

  • Significantly improved and sped up getComputedStyle(). Computed value rules are now applied across a broader set of properties, and include fixes related to inheritance, defaulting keywords, custom properties, and color-related values such as currentcolor and system colors. (@​asamuzaK)
  • Fixed CSS 'background' and 'border' shorthand parsing. (@​asamuzaK)
Commits
  • 9b9ea7e 29.1.1
  • 07efb78 Optimize computed style comparison
  • 5f66329 Fix background-origin/background-clip in background shorthand
  • ad8af77 Fix border shorthand handling
  • 5a3e88e 29.1.0
  • 73db204 Update dependencies and dev dependencies
  • a7168a5 Support ratio CSS unit type
  • 15346e0 Fix style cache invalidation
  • 2a1e2cd 29.0.2
  • 4097d66 Resolve computed CSS values lazily in CSSStyleDeclaration
  • Additional commits viewable in compare view

Updates lodash from 4.17.23 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates nanoid from 5.1.7 to 5.1.11

Release notes

Sourced from nanoid's releases.

5.1.11

  • Fixed breaking Nano ID by requesting big ID.

5.1.10

5.1.9

  • Fixed npm package size regression.

5.1.8

Changelog

Sourced from nanoid's changelog.

5.1.11

  • Fixed breaking Nano ID by requesting big ID.

5.1.10

5.1.9

  • Fixed npm package size regression.

5.1.8

Commits

…ry with 35 updates

Bumps the patch-minor-dependencies group with 35 updates in the /tavla directory:

| Package | From | To |
| --- | --- | --- |
| [@entur/alert](https://github.com/entur/design-system/tree/HEAD/packages/alert) | `0.18.8` | `0.18.10` |
| [@entur/button](https://github.com/entur/design-system/tree/HEAD/packages/button) | `4.0.4` | `4.0.5` |
| [@entur/chip](https://github.com/entur/design-system/tree/HEAD/packages/chip) | `0.10.8` | `0.10.10` |
| [@entur/dropdown](https://github.com/entur/design-system/tree/HEAD/packages/dropdown) | `8.1.0` | `8.1.2` |
| [@entur/expand](https://github.com/entur/design-system/tree/HEAD/packages/expand) | `3.7.5` | `3.7.6` |
| [@entur/form](https://github.com/entur/design-system/tree/HEAD/packages/form) | `9.3.0` | `9.3.2` |
| [@entur/icons](https://github.com/entur/design-system/tree/HEAD/packages/icons) | `8.4.4` | `8.4.5` |
| [@entur/layout](https://github.com/entur/design-system/tree/HEAD/packages/layout) | `3.5.0` | `3.6.1` |
| [@entur/loader](https://github.com/entur/design-system/tree/HEAD/packages/loader) | `0.6.5` | `0.6.6` |
| [@entur/menu](https://github.com/entur/design-system/tree/HEAD/packages/menu) | `6.1.3` | `6.1.5` |
| [@entur/modal](https://github.com/entur/design-system/tree/HEAD/packages/modal) | `1.8.8` | `1.8.10` |
| [@entur/table](https://github.com/entur/design-system/tree/HEAD/packages/table) | `4.10.8` | `4.10.10` |
| [@entur/tokens](https://github.com/entur/design-system/tree/HEAD/packages/tokens) | `3.22.3` | `3.22.4` |
| [@entur/tooltip](https://github.com/entur/design-system/tree/HEAD/packages/tooltip) | `5.3.8` | `5.3.10` |
| [@entur/typography](https://github.com/entur/design-system/tree/HEAD/packages/typography) | `2.1.5` | `2.1.6` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.45.0` | `10.51.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.1` | `3.4.2` |
| [firebase](https://github.com/firebase/firebase-js-sdk) | `12.11.0` | `12.12.1` |
| [firebase-admin](https://github.com/firebase/firebase-admin-node) | `13.7.0` | `13.8.0` |
| [firebase-functions](https://github.com/firebase/firebase-functions) | `7.2.2` | `7.2.5` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.0.1` | `29.1.1` |
| [lodash](https://github.com/lodash/lodash) | `4.17.23` | `4.18.1` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.7` | `5.1.11` |
| [next](https://github.com/vercel/next.js) | `16.2.3` | `16.2.4` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.363.4` | `1.372.6` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.28.5` | `5.33.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.2` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.8` | `2.4.14` |
| [@graphql-codegen/import-types-preset](https://github.com/dotansimha/graphql-code-generator-community/tree/HEAD/packages/presets/import-types) | `4.0.0` | `4.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.0` | `25.6.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.27` | `10.5.0` |
| [firebase-tools](https://github.com/firebase/firebase-tools) | `15.10.1` | `15.16.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `6.0.3` |



Updates `@entur/alert` from 0.18.8 to 0.18.10
- [Changelog](https://github.com/entur/design-system/blob/main/packages/alert/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/alert@0.18.10/packages/alert)

Updates `@entur/button` from 4.0.4 to 4.0.5
- [Changelog](https://github.com/entur/design-system/blob/main/packages/button/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/button@4.0.5/packages/button)

Updates `@entur/chip` from 0.10.8 to 0.10.10
- [Changelog](https://github.com/entur/design-system/blob/main/packages/chip/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/chip@0.10.10/packages/chip)

Updates `@entur/dropdown` from 8.1.0 to 8.1.2
- [Changelog](https://github.com/entur/design-system/blob/main/packages/dropdown/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/dropdown@8.1.2/packages/dropdown)

Updates `@entur/expand` from 3.7.5 to 3.7.6
- [Changelog](https://github.com/entur/design-system/blob/main/packages/expand/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/expand@3.7.6/packages/expand)

Updates `@entur/form` from 9.3.0 to 9.3.2
- [Changelog](https://github.com/entur/design-system/blob/main/packages/form/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/form@9.3.2/packages/form)

Updates `@entur/icons` from 8.4.4 to 8.4.5
- [Changelog](https://github.com/entur/design-system/blob/main/packages/icons/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/icons@8.4.5/packages/icons)

Updates `@entur/layout` from 3.5.0 to 3.6.1
- [Changelog](https://github.com/entur/design-system/blob/main/packages/layout/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/layout@3.6.1/packages/layout)

Updates `@entur/loader` from 0.6.5 to 0.6.6
- [Changelog](https://github.com/entur/design-system/blob/main/packages/loader/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/loader@0.6.6/packages/loader)

Updates `@entur/menu` from 6.1.3 to 6.1.5
- [Changelog](https://github.com/entur/design-system/blob/main/packages/menu/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/menu@6.1.5/packages/menu)

Updates `@entur/modal` from 1.8.8 to 1.8.10
- [Changelog](https://github.com/entur/design-system/blob/main/packages/modal/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/modal@1.8.10/packages/modal)

Updates `@entur/table` from 4.10.8 to 4.10.10
- [Changelog](https://github.com/entur/design-system/blob/main/packages/table/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/table@4.10.10/packages/table)

Updates `@entur/tokens` from 3.22.3 to 3.22.4
- [Changelog](https://github.com/entur/design-system/blob/main/packages/tokens/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/tokens@3.22.4/packages/tokens)

Updates `@entur/tooltip` from 5.3.8 to 5.3.10
- [Changelog](https://github.com/entur/design-system/blob/main/packages/tooltip/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/tooltip@5.3.10/packages/tooltip)

Updates `@entur/typography` from 2.1.5 to 2.1.6
- [Changelog](https://github.com/entur/design-system/blob/main/packages/typography/CHANGELOG.md)
- [Commits](https://github.com/entur/design-system/commits/@entur/typography@2.1.6/packages/typography)

Updates `@sentry/nextjs` from 10.45.0 to 10.51.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.45.0...10.51.0)

Updates `dompurify` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.1...3.4.2)

Updates `firebase` from 12.11.0 to 12.12.1
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@12.11.0...firebase@12.12.1)

Updates `firebase-admin` from 13.7.0 to 13.8.0
- [Release notes](https://github.com/firebase/firebase-admin-node/releases)
- [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-admin-node@v13.7.0...v13.8.0)

Updates `firebase-functions` from 7.2.2 to 7.2.5
- [Release notes](https://github.com/firebase/firebase-functions/releases)
- [Commits](firebase/firebase-functions@v7.2.2...v7.2.5)

Updates `jsdom` from 29.0.1 to 29.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.0.1...v29.1.1)

Updates `lodash` from 4.17.23 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

Updates `nanoid` from 5.1.7 to 5.1.11
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.7...5.1.11)

Updates `next` from 16.2.3 to 16.2.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.2.3...v16.2.4)

Updates `posthog-js` from 1.363.4 to 1.372.6
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.363.4...posthog-js@1.372.6)

Updates `posthog-node` from 5.28.5 to 5.33.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.33.0/packages/node)

Updates `react` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `zod` from 4.3.6 to 4.4.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.2)

Updates `@biomejs/biome` from 2.4.8 to 2.4.14
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.14/packages/@biomejs/biome)

Updates `@graphql-codegen/import-types-preset` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/dotansimha/graphql-code-generator-community/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator-community/blob/main/packages/presets/import-types/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator-community/commits/@graphql-codegen/import-types-preset@4.0.1/packages/presets/import-types)

Updates `@types/node` from 25.5.0 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `autoprefixer` from 10.4.27 to 10.5.0
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.27...10.5.0)

Updates `firebase-tools` from 15.10.1 to 15.16.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Commits](firebase/firebase-tools@v15.10.1...v15.16.0)

Updates `typescript` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.2...v6.0.3)

---
updated-dependencies:
- dependency-name: "@entur/alert"
  dependency-version: 0.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/button"
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/chip"
  dependency-version: 0.10.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/dropdown"
  dependency-version: 8.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/expand"
  dependency-version: 3.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/form"
  dependency-version: 9.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/icons"
  dependency-version: 8.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/layout"
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/loader"
  dependency-version: 0.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/menu"
  dependency-version: 6.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/modal"
  dependency-version: 1.8.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/table"
  dependency-version: 4.10.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/tokens"
  dependency-version: 3.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/tooltip"
  dependency-version: 5.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@entur/typography"
  dependency-version: 2.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: firebase
  dependency-version: 12.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: firebase-admin
  dependency-version: 13.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: firebase-functions
  dependency-version: 7.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: jsdom
  dependency-version: 29.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: nanoid
  dependency-version: 5.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: next
  dependency-version: 16.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: posthog-js
  dependency-version: 1.372.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: posthog-node
  dependency-version: 5.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: react
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: zod
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@graphql-codegen/import-types-preset"
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: firebase-tools
  dependency-version: 15.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-minor-dependencies
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-minor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 7, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 7, 2026 07:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants