Skip to content

deps(deps): bump the minor-and-patch group with 8 updates#49

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/minor-and-patch-41e06ef430
Open

deps(deps): bump the minor-and-patch group with 8 updates#49
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/minor-and-patch-41e06ef430

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the minor-and-patch group with 8 updates:

Package From To
@supabase/supabase-js 2.98.0 2.99.0
framer-motion 12.34.4 12.35.2
isomorphic-dompurify 3.0.0 3.1.0
lucide-react 0.576.0 0.577.0
openai 6.25.0 6.27.0
puppeteer 24.37.5 24.38.0
@types/node 25.3.3 25.3.5
postcss 8.5.6 8.5.8

Updates @supabase/supabase-js from 2.98.0 to 2.99.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.99.0

2.99.0 (2026-03-09)

🚀 Features

  • auth: add custom OIDC/OAuth provider admin CRUD methods (#2133)

🩹 Fixes

  • storage: improve FileObject type accuracy with nullable fields (#2116)

❤️ Thank You

v2.98.1-canary.1

2.98.1-canary.1 (2026-03-05)

🩹 Fixes

  • storage: improve FileObject type accuracy with nullable fields (#2116)

❤️ Thank You

v2.98.1-canary.0

2.98.1-canary.0 (2026-02-27)

🚀 Features

  • auth: add custom OIDC/OAuth provider admin CRUD methods (#2133)

❤️ Thank You

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.99.0 (2026-03-09)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

Commits

Updates framer-motion from 12.34.4 to 12.35.2

Changelog

Sourced from framer-motion's changelog.

[12.35.2] 2026-03-09

Fixed

  • Reduced filesize of styleEffect.
  • Fix rounding from popLayout.
  • opacity animations in React Strict Mode in development.
  • Ensure useSpring is not affected by monitor framerate.
  • Updating animations sequence segment types to exclude lifecycle handlers.
  • Fix layout animations with parents offset by a %-based translation.
  • Fix autoplay: false with WAAPI animations.
  • Fix layout jump in React Strict Mode in development.
  • Detect divide-by-zero in CSS calc() values before making animatable templates.

[12.35.1] 2026-03-06

Fixed

  • Fixing combination of string keyframes, spring and delay.
  • Gracefully handle negative scroll values.
  • Fix one-frame visual gap when rapidly switching WAAPI animations.
  • animation.time = 0 on a finished animation sets the playhead in a paused state.

[12.35.0] 2026-03-03

Added

  • ViewTimeline support for scroll and useScroll.

[12.34.6] 2026-03-03

Fixed

  • Handle % translate values in layout animations.

[12.34.5] 2026-03-03

Fixed

  • Ensure final WAAPI styles are always committed synchronously to prevent flash of incorrect styles in Firefox.
  • Prevent Next.js from caching typeof window checks.
  • Improve projection node cleanup.
  • Variant propagation fixed for asynchronously-mounted children.
Commits
  • 2034efc v12.35.2
  • 9f080ca Updating changelog
  • 31dd9bd Latest
  • da23762 Merge pull request #3602 from motiondivision/worktree-fix-issue-3232
  • 80b321e Merge pull request #3599 from motiondivision/worktree-fix-issue-3244
  • 4e5e0ae Merge pull request #3600 from motiondivision/worktree-fix-issue-3236
  • 16b83b4 Merge branch 'main' into worktree-fix-issue-3236
  • f4adc2e Extract convertToZero to module level with documentation
  • b793fc0 Merge pull request #3598 from motiondivision/worktree-fix-issue-3254
  • e787956 Simplify transformBox and add comment for percentage re-measurement
  • Additional commits viewable in compare view

Updates isomorphic-dompurify from 3.0.0 to 3.1.0

Release notes

Sourced from isomorphic-dompurify's releases.

3.1.0: Updated dependencies

What's Changed

Full Changelog: kkomelin/isomorphic-dompurify@3.0.0...3.1.0

Commits
  • d622ce0 chore: Incremented project version.
  • dc24182 chore: Updated deps.
  • de68cec chore(deps-dev): bump @​biomejs/biome from 2.4.5 to 2.4.6
  • ae01355 chore(deps): bump dompurify from 3.3.1 to 3.3.2
  • 058fca3 chore(deps-dev): bump @​biomejs/biome from 2.4.4 to 2.4.5
  • 48c772c chore(deps-dev): bump lefthook from 2.1.1 to 2.1.2
  • daa0420 Merge branch 'master' of github.com:kkomelin/isomorphic-dompurify
  • a7dd07a docs: Slightly corrected the language.
  • 00ccf3a chore(deps-dev): bump @​types/jsdom from 27.0.0 to 28.0.0
  • 9f8db63 Update funding sources in FUNDING.yml
  • Additional commits viewable in compare view

Updates lucide-react from 0.576.0 to 0.577.0

Release notes

Sourced from lucide-react's releases.

Version 0.577.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.576.0...0.577.0

Commits

Updates openai from 6.25.0 to 6.27.0

Release notes

Sourced from openai's releases.

v6.27.0

6.27.0 (2026-03-05)

Full Changelog: v6.26.0...v6.27.0

Features

  • api: The GA ComputerTool now uses the CompuerTool class. The 'computer_use_preview' tool is moved to ComputerUsePreview (0206188)

Chores

  • internal: improve import alias names (9cc2478)

v6.26.0

6.26.0 (2026-03-05)

Full Changelog: v6.25.0...v6.26.0

Features

  • api: gpt-5.4, tool search tool, and new computer tool (1d1e5a9)

Bug Fixes

  • api: internal schema fixes (6b401ad)
  • api: manual updates (2b54919)
  • api: readd phase (4a0cf29)
  • api: remove phase from message types, prompt_cache_key param in responses (088fca6)

Chores

  • internal: codegen related update (6a0aa9e)
  • internal: codegen related update (b2a4299)
  • internal: move stringifyQuery implementation to internal function (f9f4660)
  • internal: reduce warnings (7e19492)
Changelog

Sourced from openai's changelog.

6.27.0 (2026-03-05)

Full Changelog: v6.26.0...v6.27.0

Features

  • api: The GA ComputerTool now uses the CompuerTool class. The 'computer_use_preview' tool is moved to ComputerUsePreview (0206188)

Chores

  • internal: improve import alias names (9cc2478)

6.26.0 (2026-03-05)

Full Changelog: v6.25.0...v6.26.0

Features

  • api: gpt-5.4, tool search tool, and new computer tool (1d1e5a9)

Bug Fixes

  • api: internal schema fixes (6b401ad)
  • api: manual updates (2b54919)
  • api: readd phase (4a0cf29)
  • api: remove phase from message types, prompt_cache_key param in responses (088fca6)

Chores

  • internal: codegen related update (6a0aa9e)
  • internal: codegen related update (b2a4299)
  • internal: move stringifyQuery implementation to internal function (f9f4660)
  • internal: reduce warnings (7e19492)
Commits
  • 09de6c0 release: 6.27.0
  • 0aeb1b5 feat(api): The GA ComputerTool now uses the CompuerTool class. The 'computer_...
  • 3cf5bc2 chore(internal): improve import alias names
  • 6a89ced release: 6.26.0
  • e2b122f feat(api): gpt-5.4, tool search tool, and new computer tool
  • 583240f chore(internal): codegen related update
  • e53097f chore(internal): reduce warnings
  • 1da125d chore(internal): codegen related update
  • 67137ac codegen metadata
  • 8605a10 fix(api): internal schema fixes
  • Additional commits viewable in compare view

Updates puppeteer from 24.37.5 to 24.38.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.38.0

24.38.0 (2026-03-04)

🎉 Features

🛠️ Fixes

  • consider browsingContext.navigationCommitted to dispose an existing navigation (#14724) (b4e92c6)
  • disable PartitionAllocSchedulerLoopQuarantineTaskControlledPurge (#14744) (e6c7425)
  • roll to Chrome 145.0.7632.117 (#14719) (1d407e1)

puppeteer: v24.38.0

24.38.0 (2026-03-04)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.37.5 to 24.38.0
Changelog

Sourced from puppeteer's changelog.

24.38.0 (2026-03-04)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.37.5 to 24.38.0

🛠️ Fixes

  • consider browsingContext.navigationCommitted to dispose an existing navigation (#14724) (b4e92c6)
  • disable PartitionAllocSchedulerLoopQuarantineTaskControlledPurge (#14744) (e6c7425)
  • roll to Chrome 145.0.7632.117 (#14719) (1d407e1)
Commits
  • d3356fa chore: release main (#14720)
  • e6c7425 fix: disable PartitionAllocSchedulerLoopQuarantineTaskControlledPurge (#14744)
  • e24f432 chore(deps-dev): bump the dev-dependencies group across 1 directory with 7 up...
  • b12fca9 test: update tests and add diagnostics (#14741)
  • 627eb5e feat: roll to Chrome 146.0.7680.31 (#14729)
  • e0e3e89 chore: enable blank issues in issue template configuration (#14739)
  • ba19944 chore(deps-dev): bump rollup from 4.22.4 to 4.59.0 in /examples/puppeteer-in-...
  • b4e92c6 fix: consider browsingContext.navigationCommitted to dispose an existing navi...
  • 57b40c0 chore(deps): bump typed-query-selector from 2.12.0 to 2.12.1 in the dependenc...
  • eca8ca4 chore(deps): bump the all group in /website with 2 updates (#14732)
  • Additional commits viewable in compare view

Updates @types/node from 25.3.3 to 25.3.5

Commits

Updates postcss from 8.5.6 to 8.5.8

Release notes

Sourced from postcss's releases.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Changelog

Sourced from postcss's changelog.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.98.0` | `2.99.0` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.34.4` | `12.35.2` |
| [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `3.0.0` | `3.1.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.576.0` | `0.577.0` |
| [openai](https://github.com/openai/openai-node) | `6.25.0` | `6.27.0` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.37.5` | `24.38.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.3.5` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.8` |


Updates `@supabase/supabase-js` from 2.98.0 to 2.99.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.99.0/packages/core/supabase-js)

Updates `framer-motion` from 12.34.4 to 12.35.2
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.34.4...v12.35.2)

Updates `isomorphic-dompurify` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@3.0.0...3.1.0)

Updates `lucide-react` from 0.576.0 to 0.577.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react)

Updates `openai` from 6.25.0 to 6.27.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.25.0...v6.27.0)

Updates `puppeteer` from 24.37.5 to 24.38.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.37.5...puppeteer-v24.38.0)

Updates `@types/node` from 25.3.3 to 25.3.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `postcss` from 8.5.6 to 8.5.8
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.8)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: framer-motion
  dependency-version: 12.35.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: isomorphic-dompurify
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 0.577.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openai
  dependency-version: 6.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: puppeteer
  dependency-version: 24.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 9, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedopenai@​6.25.0 ⏵ 6.27.074 +1100100 +1100100
Updated@​types/​node@​25.3.3 ⏵ 25.3.5100 +110081 +196100
Updatedpostcss@​8.5.6 ⏵ 8.5.8991008290100
Updatedpuppeteer@​24.37.5 ⏵ 24.38.0921008997100
Updatedisomorphic-dompurify@​3.0.0 ⏵ 3.1.0100100100 +295100
Updatedlucide-react@​0.576.0 ⏵ 0.577.0100 +110097 +196 +1100
Updated@​supabase/​supabase-js@​2.98.0 ⏵ 2.99.0100 +13100100100 +1100
Updatedframer-motion@​12.34.4 ⏵ 12.35.2100 +4100100 +1100 +1100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants