Repository navigation
chore(deps): bump the production-minor-patch group across 1 directory with 7 updates - #273
Merged
Musiker15 merged 2 commits intoOct 6, 2026
Conversation
![graphify-labs[bot]](https://avatars.githubusercontent.com/in/4356270?s=60&v=4){kind=small}
There was a problem hiding this comment.
Graphify reviewed this change.
Looks safe to merge — no coupling regressions and no blocking issues, checked against the code graph (not a self-assessment).
Graphify review — findings
Bumps patch/minor dependencies across the monorepo: next to 16.3.8, @aws-sdk/client-s3 to 3.1145.0, @tabler/icons-react to 3.48.0, and nodemailer and sharp in the web app. Also moves pg to 8.23.1 in realtime and db, plus ws and @types/ws in realtime. The lockfile follows, including the transitive AWS SDK packages and a shift to @types/node 26.6.4 for vite, prisma and next peers.
Review partial — this diff was larger than one review pass covers, so later files were not reviewed; some findings may be missing.
Analysis details — impact, health, verification
Impact & health
Graphify review
Impact — 144 functions depend on the 144 functions this change touches.
Health — grade A; no new coupling hotspots.
Verification — 144 functions in the blast radius were not formally verified this run (proofs are advisory here).
Gate & verification
graphify gate
PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.
Advisory (not blocking):
- verification_scope: 144 function(s) in the blast radius were not formally verified this run
Member
|
@dependabot rebase |
… with 7 updates Bumps the production-minor-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.23.0` | `8.23.1` | | [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1132.0` | `3.1145.0` | | [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) | `3.46.0` | `3.48.0` | | [next](https://github.com/vercel/next.js) | `16.3.5` | `16.3.8` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.10` | `10.0.13` | | [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` | Updates `pg` from 8.23.0 to 8.23.1 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg) Updates `ws` from 8.21.3 to 8.22.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.3...8.22.0) Updates `@aws-sdk/client-s3` from 3.1132.0 to 3.1145.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1145.0/clients/client-s3) Updates `@tabler/icons-react` from 3.46.0 to 3.48.0 - [Release notes](https://github.com/tabler/tabler-icons/releases) - [Changelog](https://github.com/tabler/tabler-icons/blob/main/packages/icons-react/CHANGELOG.md) - [Commits](https://github.com/tabler/tabler-icons/commits/v3.48.0/packages/icons-react) Updates `next` from 16.3.5 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.5...v16.3.8) Updates `nodemailer` from 10.0.10 to 10.0.13 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v10.0.10...v10.0.13) Updates `sharp` from 0.35.4 to 0.35.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.35.4...v0.35.5) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1145.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@tabler/icons-react" dependency-version: 3.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: nodemailer dependency-version: 10.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: pg dependency-version: 8.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: sharp dependency-version: 0.35.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: ws dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/production-minor-patch-ce71112baf
branch
from
October 5, 2026 17:42
0e114ae to
d9076b4
Compare
…2baf Resolve conflicts: keep next ^16.3.8 from this PR over main's ^16.3.6 and regenerate pnpm-lock.yaml. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013PFFqaQmGt6UGbESddu5sz
Musiker15
deleted the
dependabot/npm_and_yarn/production-minor-patch-ce71112baf
branch
October 6, 2026 15:20
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-minor-patch group with 7 updates in the / directory:
8.23.08.23.18.21.38.22.03.1132.03.1145.03.46.03.48.016.3.516.3.810.0.1010.0.130.35.40.35.5Updates
pgfrom 8.23.0 to 8.23.1Changelog
Sourced from pg's changelog.
Commits
0980cefPublish2759b2cfix(pg): run a named statement with an empty text more than once (#3781)7feb7dffix(pg): expose detail and hint on errors from the native client (#3780)9683053fix(pg): do not treat Sync as connection ending (#3772)4589038fix: validate server certificate against host when connecting to an IP addres...9808955cleanup: Fix typo in comment2b02f64fix: avoid mutating query config (#3720)0cef6afReject portal based queries in pipeline mode instead of misrouting rows (#3737)2991480Deprecate serializing invalidDates (#3731)c940d7cFail pipelined queries when the connection dies instead of hanging (#3736)Updates
wsfrom 8.21.3 to 8.22.0Release notes
Sourced from ws's releases.
Commits
297202c[dist] 8.22.08b918b0[feature] Introduce theprotocolsoption73e03eb[ci] Update actions/setup-node action to v7d9b8954[fix] Change the ready state after validating the arguments (#2337)Updates
@aws-sdk/client-s3from 3.1132.0 to 3.1145.0Release notes
Sourced from @aws-sdk/client-s3's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/client-s3's changelog.
... (truncated)
Commits
0199117Publish v3.1145.0ce26281Publish v3.1144.082bbbdcfeat(client-s3): Amazon S3 adds a new optional S3 Inventory field, Intelligen...81afad0Publish v3.1143.0c935fddPublish v3.1142.05bc8d9aPublish v3.1141.06050a38Publish v3.1140.003d54a8Publish v3.1139.0c68e50ePublish v3.1138.09a10476chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...Updates
@tabler/icons-reactfrom 3.46.0 to 3.48.0Release notes
Sourced from @tabler/icons-react's releases.
... (truncated)
Commits
0239805Release 3.48.087e7c39Release 3.47.0bbb9bdbRun tests in CI, fix ReactSVG type rot, add type and RSC guards (#1579)45a7ca8Remove trailing space from the icon class attribute (#1582)55f87a7Refresh package READMEs: fix wrong props, broken links and inconsistent struc...Updates
nextfrom 16.3.5 to 16.3.8Release notes
Sourced from next's releases.
Commits
b0fad0dv16.3.8719e4c6[lts-active] Scope response cache keys to their source route (#218)e92db45[lts-active] Fix metadata propagation for deduplicated nested caches (#223)40c2ba9[lts-active] Match Next data paths case-sensitively (#196)2d9f50a[lts-active] Fix MCP middleware DNS rebinding (#213)bd9214f[lts-active] Fix draft mode leaks through cross-request'use cache'dedupli...8db4a62[lts-active][webpack] EnsuredynamicParamsis respected in `opengraph-image...e002ad6[lts-active] fix(next/image): Pin DNS resolution when fetching external image...4c20699v16.3.72521aec[backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...Updates
nodemailerfrom 10.0.10 to 10.0.13Release notes
Sourced from nodemailer's releases.
Changelog
Sourced from nodemailer's changelog.
Commits
4641de8chore(master): release 10.0.13 (#1879)a502247fix: strip comments inside an angle-addr before it becomes the addressb5a896ffix: read the advertised SASL methods without backtracking regexes4093fd4chore(deps): update dependencies30e4cfdMerge pull request #1878 from nodemailer/release-please--branches--master--co...962f6eachore(master): release 10.0.1257de6b6chore(deps): update dependencies63ccd66fix: settle every send on a connection error, back off pool requeues, turn a ...6a06914chore(master): release 10.0.11 (#1877)5652a5atest(fetch): assert the error name of an unencodable form value, not its messageUpdates
sharpfrom 0.35.4 to 0.35.5Release notes
Sourced from sharp's releases.
... (truncated)
Commits
51a990fRelease v0.35.596de105Upgrade to sharp-libvips v1.3.43a61390CI: Configure Dependabot with all package.json locations4940c50Improve gain map support for rotate/flip/flop ops20654aaPrerelease v0.35.5-rc.1ef4f934CI: Upgrade to Ubuntu 26.04358df95Upgrade to libvips v8.18.749f4903Improve gain map support for rotate-then-extract #46060e2e55eSilence a couple of compiler/static analysis warningscef3b8cImprove gain map support for extract operation #4606