Skip to content

chore(deps): bump the minor-and-patch group in /src/dashboard with 5 updates - #254

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/dashboard/minor-and-patch-555fdd58ab
Open

chore(deps): bump the minor-and-patch group in /src/dashboard with 5 updates#254
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/dashboard/minor-and-patch-555fdd58ab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /src/dashboard with 5 updates:

Package From To
lucide-react 1.28.0 1.29.0
posthog-js 1.409.5 1.413.3
globals 17.8.0 17.9.0
knip 6.31.0 6.32.0
vite 8.2.0 8.2.1

Updates lucide-react from 1.28.0 to 1.29.0

Release notes

Sourced from lucide-react's releases.

Version 1.29.0

What's Changed

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

Commits

Updates posthog-js from 1.409.5 to 1.413.3

Release notes

Sourced from posthog-js's releases.

posthog-js@1.413.3

1.413.3

Patch Changes

  • #4414 1b88c2f Thanks @​marandaneto! - Clear properties registered for a session when the PostHog session rotates. (2026-08-06)

  • #4374 b39b577 Thanks @​dustinbyrne! - Persist in-place object and array mutations when properties are re-registered. (2026-08-06)

  • #4434 75fb719 Thanks @​arnohillen! - Make the session replay attribute masking options mutually exclusive: when both maskAllElementAttributes and maskAttributeFn are set, the coarse option wins and the callback is ignored (with a console warning), so a callback can no longer accidentally unmask what maskAllElementAttributes hides. (2026-08-06)

  • Updated dependencies [64ba193, 75fb719]:

    • @​posthog/core@​1.46.9
    • @​posthog/types@​1.402.2

posthog-js@1.413.2

1.413.2

Patch Changes

  • #4425 ee7fab0 Thanks @​posthog! - Fix a benign network failure (e.g. TypeError: Failed to fetch) in the async native-gzip request path surfacing as an unhandled promise rejection, which exception autocapture would otherwise pick up (2026-08-05)

posthog-js@1.413.1

1.413.1

Patch Changes

  • #4390 1160403 Thanks @​posthog! - Contain and log recorder-owned callback failures while preserving exceptions from patched native host APIs. Keep recording mutations from adopted cross-realm nodes. (2026-08-05)

  • #4286 d108d66 Thanks @​posthog! - fix(replay): preserve privacy masking for initial network metadata

    Initial navigation and performance-timing entries are now passed through maskCapturedNetworkRequestFn, including when they have no method. URL rewrites are respected. When the callback returns nullish for an initial entry, replay-required timing metadata is retained without its URL, headers, or body so method-gated callbacks do not drop the metadata or expose deliberately filtered customer data. Derived server-timing entries are also suppressed when this strict fallback is used. Enforced PostHog filtering and payload cleaning still run first. (2026-08-05)

  • Updated dependencies [d108d66]:

    • @​posthog/types@​1.402.1

posthog-js@1.413.0

1.413.0

Minor Changes

  • #4376 2da12b8 Thanks @​posthog! - Add attribute-level masking to session replay: maskAttributeFn provides per-attribute control over the final serialized value, while maskAllElementAttributes masks all source DOM string attributes (including rendering attributes and synthesized form values) at the cost of replay fidelity. (2026-08-05)

Patch Changes

... (truncated)

Commits
  • 886ef7b chore: update versions and lockfile [version bump]
  • 2831de1 fix(ai): report cache-write tokens for OpenAI-compatible providers (#4189)
  • 7322893 feat(mcp): anchor $session_id to the agent's conversation_id (#4428)
  • c514a34 fix(mcp): deliver the session handle on errors and capability gaps (#4433)
  • 955df8d feat(mcp): mirror the session handle into structuredContent (#4431)
  • e6d9295 feat(mcp): declare _mcp_instructions on tool output schemas (#4430)
  • d36a421 fix(ai): preserve Anthropic cache-write TTL breakdowns (#4236)
  • d0933e1 test(browser): snapshot enriched events and wire requests (#4437)
  • c5edaf3 fix(ci): sign the commits these workflows create (#4420)
  • 1b88c2f fix(browser): clear session properties when sessions rotate (#4414)
  • Additional commits viewable in compare view

Updates globals from 17.8.0 to 17.9.0

Release notes

Sourced from globals's releases.

v17.9.0

  • Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

Commits

Updates knip from 6.31.0 to 6.32.0

Release notes

Sourced from knip's releases.

Release 6.32.0

  • fix: attribute wildcard subpath-import aliases as dependency usage (#1918) (4890a2ad5317b9e3f0ab844631ad0f0592802c3e) - thanks @​jsmecham!
  • Add Borp plugin (5eb9ad4cfb2ccb7770eac49f6109459d30590211)
  • Add tsd plugin (bd4ae7041f3fc6aef27b027644f80daefc432aca)
  • Resolve Rollup --config argument as plugin configuration (8111f97981406f4327d5e6a655c13308a9dc4426)
  • Resolve babel-jest configFile from Jest transform options (24794ccecb80fdaecfe4d46a26faff46c30d9015)
  • Add pre-commit plugin (ac726b0918cb931a6d538797e342484812a6752e)
  • Thread script words through resolvers to preserve quoting (89f9ada6ca81229bf8f7293439998acc5f87d457)
  • Resolve entries from Mocha script arguments (353f860f8e32f05f7c87dc5501071befc0e5a293)
  • Detect Node test runner through c8 (fa44be722aa35c6e8b441cd8cd0f4cf644027c22)
  • Update dependencies (non-major) (#1922) (6b1e6f3cbb1749776e3798f46eb2b99cd95ed56a) - thanks @​renovate[bot]!
  • fix(playwright): match config files with .cjs, .cts and .mts extensions (#1919) (1c1073a1817fdb3bcd3dc00eda2b1d858e444156) - thanks @​davidpavlovschi!
  • Restart VS Code language server process (resolve #1923) (d48eac5a2447567a33e835ce3e1648bf3f4ffb2b)
  • Classify built-ins from module specifiers (resolve #1925) (3528c5d0f808b7b2155f69a1f98493ee0e3e06c1)
  • Don't turn absolute-path script tokens into entries (resolve #1928) (e5608e77b434145c8dd5c2c2872bfb90ae622ce7)
  • Update sponsors data (025884bb53eede041732723197ac0415a1a50f71)
  • Update dependencies (d2c0a07c09cea70ab2cae5f97d12da272a6e43e6)
Commits
  • f21bcbb Release knip@6.32.0
  • d2c0a07 Update dependencies
  • e5608e7 Don't turn absolute-path script tokens into entries (resolve #1928)
  • 3528c5d Classify built-ins from module specifiers (resolve #1925)
  • 1c1073a fix(playwright): match config files with .cjs, .cts and .mts extensions (#1919)
  • fa44be7 Detect Node test runner through c8
  • 353f860 Resolve entries from Mocha script arguments
  • 89f9ada Thread script words through resolvers to preserve quoting
  • ac726b0 Add pre-commit plugin
  • 24794cc Resolve babel-jest configFile from Jest transform options
  • Additional commits viewable in compare view

Updates vite from 8.2.0 to 8.2.1

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.1 (2026-08-06)

Bug Fixes

  • build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
  • bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)
  • css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)
  • deps: update all non-major dependencies (#23136) (14454fd)
  • deps: update rolldown-related dependencies (#23070) (7ac6f7f)
  • don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)
  • handle shebang ending with uncommon line terminators (#23038) (17f7b2f)
  • server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

Documentation

  • build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

  • deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)
  • deps: update dependency strip-literal to v4 (#23140) (9db65ce)

Code Refactoring

  • bundled-dev: avoid injecting server values in the bundle (#22967) (23b8a08)
  • bundled-dev: remove rolldown lazy stub module workaround (#23129) (e72036e)

Tests

Commits
  • 4216158 release: v8.2.1
  • fddf4ea fix(server): use a random port when port is 0 (#23158)
  • de041a7 fix(css): don't re-run lightningcss visitor during minify (fix #23146) (#23147)
  • 15f0307 fix(build): make client chunkImportMap work with sharedPlugins: true (#23184)
  • c2155fe test(bundled-dev): enable sourcemap playgrounds (#23080)
  • ef02435 docs(build): fix incomplete @default for build.minify (#23177)
  • eac0cc8 fix(bundled-dev): inject client script tag before chunk scripts (#23161)
  • 23b8a08 refactor(bundled-dev): avoid injecting server values in the bundle (#22967)
  • e72036e refactor(bundled-dev): remove rolldown lazy stub module workaround (#23129)
  • 14454fd fix(deps): update all non-major dependencies (#23136)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group in /src/dashboard with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.29.0` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.409.5` | `1.413.3` |
| [globals](https://github.com/sindresorhus/globals) | `17.8.0` | `17.9.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.31.0` | `6.32.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.2.1` |


Updates `lucide-react` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.29.0/packages/lucide-react)

Updates `posthog-js` from 1.409.5 to 1.413.3
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.409.5...posthog-js@1.413.3)

Updates `globals` from 17.8.0 to 17.9.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.8.0...v17.9.0)

Updates `knip` from 6.31.0 to 6.32.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.0/packages/knip)

Updates `vite` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: posthog-js
  dependency-version: 1.413.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: globals
  dependency-version: 17.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: knip
  dependency-version: 6.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm Pull requests that update npm code labels Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file npm Pull requests that update npm code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants