Skip to content

chore(deps): bump the prod-minor-and-patch group across 1 directory with 7 updates - #387

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/prod-minor-and-patch-f4c0fabdeb
Open

chore(deps): bump the prod-minor-and-patch group across 1 directory with 7 updates#387
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/prod-minor-and-patch-f4c0fabdeb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the prod-minor-and-patch group with 7 updates in the / directory:

Package From To
@clerk/nextjs 7.5.20 7.6.3
convex 1.42.1 1.42.3
lucide-react 1.24.0 1.28.0
next 16.2.10 16.2.12
posthog-js 1.399.2 1.409.4
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8

Updates @clerk/nextjs from 7.5.20 to 7.6.3

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.6.3

Patch Changes

@​clerk/nextjs@​7.6.2

Patch Changes

  • Updated dependencies [6f5fde9]:
    • @​clerk/backend@​3.13.2
    • @​clerk/react@​6.12.8

@​clerk/nextjs@​7.6.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8
    • @​clerk/react@​6.12.8
    • @​clerk/backend@​3.13.1

@​clerk/nextjs@​7.6.0

Minor Changes

  • Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

7.6.3

Patch Changes

7.6.2

Patch Changes

  • Updated dependencies [6f5fde9]:
    • @​clerk/backend@​3.13.2
    • @​clerk/react@​6.12.8

7.6.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8
    • @​clerk/react@​6.12.8
    • @​clerk/backend@​3.13.1

7.6.0

Minor Changes

  • Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

7.5.22

Patch Changes

  • Remove the redundant https://*.client.protect.clerk.com source from CSP headers generated by clerkMiddleware(). (#9207) by @​mwickett

7.5.21

Patch Changes

  • Allow Clerk abuse and fraud protection resources in CSP headers generated by clerkMiddleware(). (#9199) by @​mwickett

... (truncated)

Commits

Updates convex from 1.42.1 to 1.42.3

Changelog

Sourced from convex's changelog.

1.42.3

  • Fixed a bug where the codegen would not sort module paths in an order consistent with other platforms when running on Windows. This completes a fix that was only partially applied in 1.42.2.

1.42.2

  • Mutations and actions can now read the raw authentication token used in the request by accessing authToken in ctx.meta.getRequestMetadata().
  • Fixed a circular import in convex/browser that caused issues when using the ConvexHttpClient in some JavaScript environments.
  • Fixed a bug in ConvexProviderWithClerk that caused the Convex client to ignore session changes in some situations.
  • Fixed a bug where the codegen would not sort module paths in an order consistent with other platforms when running on Windows.
  • When running npx convex dev outside a Convex project, the CLI now returns an error message immediately instead of first asking the user to select a project and then failing later.
Commits

Updates lucide-react from 1.24.0 to 1.28.0

Release notes

Sourced from lucide-react's releases.

Version 1.28.0

What's Changed

Full Changelog: lucide-icons/lucide@1.27.0...1.28.0

Version 1.27.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.26.0...1.27.0

Version 1.26.0

What's Changed

... (truncated)

Commits

Updates next from 16.2.10 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Moderate:

Commits
  • 2234717 v16.2.12
  • 957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
  • b56eb16 Backport/docs fixes 16.2 - July round (#96031)
  • 9beca08 v16.2.11
  • 3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
  • ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
  • 9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
  • b512063 [16.x] Set correct origin for internal redirects in custom server
  • d303326 [16.x] Ensure exotic rewrite param values are properly encoded
  • 73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
  • Additional commits viewable in compare view

Updates posthog-js from 1.399.2 to 1.409.4

Release notes

Sourced from posthog-js's releases.

posthog-js@1.409.4

1.409.4

Patch Changes

  • #4338 c458807 Thanks @​turnipdabeets! - Fix canvases staying blank after seeking in session replay by re-sending one frame per canvas after each full snapshot (2026-07-31)

posthog-js@1.409.3

1.409.3

Patch Changes

  • #4312 4729871 Thanks @​darkopia! - Fix hosted (external) surveys with URL prefill: the auto-submitted response now includes caller-provided event properties (extra URL query params), and a later manual submit no longer clears the prefilled answer from the partial-response merge. (2026-07-31)

posthog-js@1.409.2

1.409.2

Patch Changes

  • #4340 4b8867c Thanks @​marandaneto! - Avoid redacting session replay network bodies when timestamps or UUID fragments resemble social security or credit card numbers. (2026-07-31)
  • Updated dependencies [4b8867c]:
    • @​posthog/browser-common@​0.3.1

posthog-js@1.409.1

1.409.1

Patch Changes

  • #4301 4b36c44 Thanks @​dustinbyrne! - Add the browser-v1 client adapter for shared extensions, including analytics, request, persistence, replayed remote-config outcomes, and synchronous best-effort cleanup. (2026-07-31)
  • Updated dependencies [6b48a59]:
    • @​posthog/browser-common@​0.3.0

posthog-js@1.409.0

1.409.0

Minor Changes

  • #4308 6e7f3ae Thanks @​ablaszkiewicz! - Emit the release id that posthog-cli injects into your bundle as $release_id on $exception events, so PostHog can attach exceptions to a release without joining through symbol sets. Adds getInjectedReleaseId() to @posthog/core. The property is only attached when an injected release id can be read. (2026-07-30)

Patch Changes

  • Updated dependencies [6e7f3ae]:
    • @​posthog/core@​1.46.0

posthog-js@1.408.3

... (truncated)

Commits
  • 29f8218 chore: update versions and lockfile [version bump]
  • c458807 fix(replay): re-emit one frame per canvas after each full snapshot (#4338)
  • a51566c chore: update versions and lockfile [version bump]
  • 4729871 fix(surveys): keep hosted-survey prefill metadata and prevent thumbs loss (#4...
  • 46ea0a3 chore: update versions and lockfile [version bump]
  • 4b8867c fix(replay): avoid false-positive network body redaction (#4340)
  • 3b90833 chore: update versions and lockfile [version bump]
  • 4b36c44 feat(browser): add shared extension client adapter (#4301)
  • 6b48a59 feat(browser-common): stream remote config outcomes (#4300)
  • 2aae788 chore: update versions and lockfile [version bump]
  • Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm/pnpm ecosystem dependency updates labels Jul 27, 2026
@dependabot
chore(deps): bump the prod-minor-and-patch group across 1 directory w…
59a7226 
…ith 7 updates

Bumps the prod-minor-and-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.5.20` | `7.6.3` |
| [convex](https://github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex) | `1.42.1` | `1.42.3` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.24.0` | `1.28.0` |
| [next](https://github.com/vercel/next.js) | `16.2.10` | `16.2.12` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.399.2` | `1.409.4` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |



Updates `@clerk/nextjs` from 7.5.20 to 7.6.3
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.6.3/packages/nextjs)

Updates `convex` from 1.42.1 to 1.42.3
- [Release notes](https://github.com/get-convex/convex-backend/releases)
- [Changelog](https://github.com/get-convex/convex-backend/blob/main/npm-packages/convex/CHANGELOG.md)
- [Commits](https://github.com/get-convex/convex-backend/commits/HEAD/npm-packages/convex)

Updates `lucide-react` from 1.24.0 to 1.28.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react)

Updates `next` from 16.2.10 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.10...v16.2.12)

Updates `posthog-js` from 1.399.2 to 1.409.4
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.399.2...posthog-js@1.409.4)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-and-patch
- dependency-name: convex
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-and-patch
- dependency-name: next
  dependency-version: 16.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-and-patch
- dependency-name: posthog-js
  dependency-version: 1.407.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-and-patch
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-minor-and-patch-f4c0fabdeb branch from f4066cb to 59a7226 Compare August 3, 2026 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file npm npm/pnpm ecosystem dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants