chore(deps): bump the misc-runtime group across 1 directory with 14 updates by dependabot[bot] · Pull Request #122 · orangeboyChen/codebuddy2api

dependabot · 2026-09-13T19:05:46Z

Bumps the misc-runtime group with 14 updates in the / directory:

Package	From	To
@lobehub/icons	`5.16.0`	`5.18.0`
@lobehub/ui	`5.35.0`	`5.47.1`
@simplewebauthn/browser	`13.3.0`	`14.0.0`
@simplewebauthn/server	`13.3.3`	`14.0.2`
antd	`6.6.2`	`6.6.4`
jotai	`2.20.3`	`3.0.0`
lucide-react	`1.35.0`	`1.45.0`
motion	`12.42.2`	`13.2.0`
next-intl	`4.14.1`	`4.14.4`
zod	`4.5.2`	`4.6.5`
@next/eslint-plugin-next	`16.3.3`	`16.3.5`
lint-staged	`17.4.1`	`17.5.1`
postcss	`8.5.26`	`8.5.28`
sass	`1.103.1`	`1.104.1`

Updates @lobehub/icons from 5.16.0 to 5.18.0

Commits

See full diff in compare view

Updates @lobehub/ui from 5.35.0 to 5.47.1

Commits

See full diff in compare view

Updates @simplewebauthn/browser from 13.3.0 to 14.0.0

Release notes

Sourced from @simplewebauthn/browser's releases.

v14.0.0 - The one after they go quantum

The headlining feature of this release is @simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info 🚀

Setting our sites on the browser, @simplewebauthn/browser picks up a new sendSignal() method as a single method to call all of the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info 🛜

As for breaking changes, the minimum supported version of Node has been raised to Node LTS 22.x and higher, and Deno v2.4.x and higher. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on the Node.js Releases page, and aim to support Deno minor releases for up to one year after their release

That's not all, though. Continue reading for the full list of changes in this release! 🎉

Changes:

[server] The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as passkey public key algorithms when the runtime supports them. In runtimes that support these PQC algorithms, generateRegistrationOptions() will include ML-DSA-44 as the most preferred public key algorithm during registration. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info (#785, #794)

[browser] The new sendSignal() method offers a simple way to invoke the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info (#778)

[browser] The new browserSupportsPasskeys() helper method performs more robust WebAuthn support detection by also checking for typical passkey-related WebAuthn features. See https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys for more info (#761)

[browser] The new getBrowserCapabilities() helper method wraps WebAuthn's getClientCapabilities() with additional feature detection checks when possible. See https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities for more info (#761)

[server] verifyAuthenticationResponse() accepts an optional new expectedTopOrigin argument that supports cross-origin authentication verification. See https://simplewebauthn.dev/docs/advanced/server/cross-origin-support for more info (#773, h/t @agektmr)

[server] MetadataService.initialize() accepts an optional new logger argument that can be used to capture MetadataService status output in a project-specific manner. See https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging for more info (#765)

[server] The typing of transports in excludeCredentials when calling generateRegistrationOptions(), and allowCredentials when calling generateAuthenticationOptions(), has been updated to string[] to make it easier to call these methods (#776)

[server] "tpm" attestation verification is now more tolerant of variable casing in the TPM manufacturer IDs (#772)

[server] generateRegistrationOptions() and verifyRegistrationResponse() now use the same default list of allowed public key algorithms for supportedAlgorithmIDs (#791)

[server] The validateCertificatePath() helper now supports x5c arrays containing cross-signed certificates (#796)

Breaking Changes

[browser] [server] The minimum supported runtime versions have been increased to Node LTS 22.x and higher, and Deno v2.4.x and higher (#763)

v13.3.3

Changes:

[server] Updated MDS blob signature verification to support more algorithms (#788)

[server] Updated MetadataService to know about the new FIDO MDS blob trust anchor certificate (#789)

v13.3.2

This update fixes a CVSS v4 Low (2.0) security vulnerability identified in @simplewebauthn/server. See the security advisory linked below for more information.

Changes:

[server] Fixed an issue with verifyRegistrationResponse() allowing a maliciously-crafted attestation statement's x5c to contain a self-signed "root certificate" instead of chaining back to an RP-specified trust anchor (GHSA-6hxq-p678-4hr2)

v13.3.1

Changes:

... (truncated)

Changelog

Sourced from @simplewebauthn/browser's changelog.

v14.0.0 - The one after they go quantum

The headlining feature of this release is @simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info 🚀

Setting our sites on the browser, @simplewebauthn/browser picks up a new sendSignal() method as a single method to call all of the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info 🛜

As for breaking changes, the minimum supported version of Node has been raised to Node LTS 22.x and higher, and Deno v2.4.x and higher. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on the Node.js Releases page, and aim to support Deno minor releases for up to one year after their release

That's not all, though. Continue reading for the full list of changes in this release! 🎉

Changes:

[server] The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as passkey public key algorithms when the runtime supports them. In runtimes that support these PQC algorithms, generateRegistrationOptions() will include ML-DSA-44 as the most preferred public key algorithm during registration. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info (#785, #794)

[browser] The new sendSignal() method offers a simple way to invoke the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info (#778)

[browser] The new browserSupportsPasskeys() helper method performs more robust WebAuthn support detection by also checking for typical passkey-related WebAuthn features. See https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys for more info (#761)

[browser] The new getBrowserCapabilities() helper method wraps WebAuthn's getClientCapabilities() with additional feature detection checks when possible. See https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities for more info (#761)

[server] verifyAuthenticationResponse() accepts an optional new expectedTopOrigin argument that supports cross-origin authentication verification. See https://simplewebauthn.dev/docs/advanced/server/cross-origin-support for more info (#773)

[server] MetadataService.initialize() accepts an optional new logger argument that can be used to capture MetadataService status output in a project-specific manner. See https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging for more info

... (truncated)

Commits

3e2dc0c Update version to v14.0.0
618c0e9 Merge v14.0.0 milestone to master (#792)
See full diff in compare view

Updates @simplewebauthn/server from 13.3.3 to 14.0.2

Release notes

Sourced from @simplewebauthn/server's releases.

v14.0.2

This update fixes a CVSS v3 Moderate (5.4) security vulnerability identified in @simplewebauthn/server. See the security advisory linked below for more information.

Changes:

[server] Revamped certificate revocation logic to only cryptographically verify and process CRLs from certificates that chained back to an RP-chosen trust anchor (GHSA-2g3p-m8c9-hhwh)

v14.0.1

[server] Attestation statements using PQC algorithms can now be verified (#800)

v14.0.0 - The one after they go quantum

The headlining feature of this release is @simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info 🚀

Setting our sites on the browser, @simplewebauthn/browser picks up a new sendSignal() method as a single method to call all of the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info 🛜

As for breaking changes, the minimum supported version of Node has been raised to Node LTS 22.x and higher, and Deno v2.4.x and higher. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on the Node.js Releases page, and aim to support Deno minor releases for up to one year after their release

That's not all, though. Continue reading for the full list of changes in this release! 🎉

Changes:

[server] The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as passkey public key algorithms when the runtime supports them. In runtimes that support these PQC algorithms, generateRegistrationOptions() will include ML-DSA-44 as the most preferred public key algorithm during registration. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info (#785, #794)

[browser] The new sendSignal() method offers a simple way to invoke the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info (#778)

[browser] The new browserSupportsPasskeys() helper method performs more robust WebAuthn support detection by also checking for typical passkey-related WebAuthn features. See https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys for more info (#761)

[browser] The new getBrowserCapabilities() helper method wraps WebAuthn's getClientCapabilities() with additional feature detection checks when possible. See https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities for more info (#761)

[server] verifyAuthenticationResponse() accepts an optional new expectedTopOrigin argument that supports cross-origin authentication verification. See https://simplewebauthn.dev/docs/advanced/server/cross-origin-support for more info (#773, h/t @agektmr)

[server] MetadataService.initialize() accepts an optional new logger argument that can be used to capture MetadataService status output in a project-specific manner. See https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging for more info (#765)

[server] The typing of transports in excludeCredentials when calling generateRegistrationOptions(), and allowCredentials when calling generateAuthenticationOptions(), has been updated to string[] to make it easier to call these methods (#776)

[server] "tpm" attestation verification is now more tolerant of variable casing in the TPM manufacturer IDs (#772)

[server] generateRegistrationOptions() and verifyRegistrationResponse() now use the same default list of allowed public key algorithms for supportedAlgorithmIDs (#791)

[server] The validateCertificatePath() helper now supports x5c arrays containing cross-signed certificates (#796)

Breaking Changes

[browser] [server] The minimum supported runtime versions have been increased to Node LTS 22.x and higher, and Deno v2.4.x and higher (#763)

Changelog

Sourced from @simplewebauthn/server's changelog.

v14.0.2

This update fixes a CVSS v3 Moderate (5.4 / 10) and a CVSS v3 Moderate (6.3 / 10) security vulnerabilities identified in @simplewebauthn/server. See the security advisory linked below for more information.

Changes:

[server] Revamped certificate revocation logic to only cryptographically verify and process CRLs from certificates that chained back to an RP-chosen trust anchor (GHSA-2g3p-m8c9-hhwh, GHSA-j3h4-m3m2-7p7j)

v14.0.1

Changes:

[server] Attestation statements using PQC algorithms can now be verified (#800)

v14.0.0 - The one after they go quantum

The headlining feature of this release is @simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info 🚀

Setting our sites on the browser, @simplewebauthn/browser picks up a new sendSignal() method as a single method to call all of the WebAuthn Signal APIs. See https://simplewebauthn.dev/docs/packages/browser#sendsignal for more info 🛜

As for breaking changes, the minimum supported version of Node has been raised to Node LTS 22.x and higher, and Deno v2.4.x and higher. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on the Node.js Releases page, and aim to support Deno minor releases for up to one year after their release

That's not all, though. Continue reading for the full list of changes in this release! 🎉

Changes:

[server] The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as passkey public key algorithms when the runtime supports them. In runtimes that support these PQC algorithms, generateRegistrationOptions() will include ML-DSA-44 as the most preferred public key algorithm during registration. See https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support for more info (#785,

... (truncated)

Commits

21f99a2 Update server version to v14.0.2
f03758a Merge commit from fork
0bfdc3b Update server version to v14.0.1
4831ce2 Fix X.509 parsing to support PQC use in attestation statements (#800)
3e2dc0c Update version to v14.0.0
618c0e9 Merge v14.0.0 milestone to master (#792)
See full diff in compare view

Updates antd from 6.6.2 to 6.6.4

Release notes

Sourced from antd's releases.

6.6.4

🗑 Deprecate legacy Avatar GroupProps, BackTop and FloatButton BackTopProps, Input GroupProps, Mentions OptionProps, and Select OptionProps types in favor of GetProps or option-derived types. #58949 @li-jia-nan

🐞 Fix AutoComplete missing classNames.clear and styles.clear semantic customizations for the clear button. #59245 @lazerg

Table

🐞 Fix Table filteredValue being ignored when responsive columns are hidden. #59198 @QDyanbing

🐞 Fix Table ignoring pagination.classNames and pagination.styles semantic customizations. #59267 @QDyanbing

🐞 Fix Table virtual cell content not being vertically centered. #59260 @QDyanbing

Modal

🐞 Fix Modal okText and cancelText falling back to default text for falsy ReactNode values. #59254 @QDyanbing

🐞 Fix Modal not triggering onCancel when cancelButtonProps.onClick is provided. #59255 @QDyanbing

ColorPicker

🐞 Fix ColorPicker clear control remaining interactive and showing hover styles when disabled. #59164 @dogledogle

🐞 Fix ColorPicker modifying presets and crashing when preset items are frozen. #59272 @QDyanbing

🐞 Fix Splitter panel sizes exceeding their min and max constraints when the container resizes. #59084 @QDyanbing

🐞 Fix Segmented selected item text color lagging behind the thumb animation when custom itemSelectedBg and itemSelectedColor tokens are used. #59046 @EmilyyyLiu

🐞 Fix Transfer restoring stale selections after dataSource item key types change. #59166 @QDyanbing

🐞 Fix FloatButton.Group menu flickering when moving the pointer from the trigger to the menu with trigger="hover". #59246 @QDyanbing

🐞 Fix Form vertical Form.Item controls shrinking inside horizontal layouts. #59263 @QDyanbing

🐞 Fix Tabs more dropdown ignoring styles.popup.root. #59221 @giaBaoJS

🐞 Fix ConfigProvider failing to inherit zeroRuntime in nested themes when inherit is false. #59250 @QDyanbing

🗑 废弃 Avatar GroupProps、BackTop 和 FloatButton BackTopProps、Input GroupProps、Mentions OptionProps 与 Select OptionProps 旧类型，建议改用 GetProps 或从选项推导的类型。#58949 @li-jia-nan

🐞 修复 AutoComplete 缺失清除按钮 classNames.clear 和 styles.clear 语义化配置的问题。#59245 @lazerg

Table

🐞 修复 Table 响应式列隐藏后 filteredValue 失效的问题。#59198 @QDyanbing

🐞 修复 Table 忽略 pagination.classNames 和 pagination.styles 语义化配置的问题。#59267 @QDyanbing

🐞 修复 Table 虚拟滚动单元格内容未垂直居中的问题。#59260 @QDyanbing

Modal

🐞 修复 Modal 的 okText 和 cancelText 为假值 ReactNode 时被默认文案覆盖的问题。#59254 @QDyanbing

🐞 修复 Modal 配置 cancelButtonProps.onClick 时不触发 onCancel 的问题。#59255 @QDyanbing

ColorPicker

🐞 修复 ColorPicker 禁用时清除控件仍可交互并显示悬浮样式的问题。#59164 @dogledogle

🐞 修复 ColorPicker 修改 presets 并在预设项被冻结时崩溃的问题。#59272 @QDyanbing

🐞 修复 Splitter 容器尺寸变化时面板尺寸超出 min 和 max 约束的问题。#59084 @QDyanbing

🐞 修复 Segmented 使用自定义 itemSelectedBg 和 itemSelectedColor Token 时，选中项文字颜色滞后于滑块动画的问题。#59046 @EmilyyyLiu

🐞 修复 Transfer 的 dataSource 项 key 类型变化后恢复旧选中状态的问题。#59166 @QDyanbing

🐞 修复 FloatButton.Group 使用 trigger="hover" 时鼠标从触发按钮移向菜单出现闪烁的问题。#59246 @QDyanbing

🐞 修复 Form 在水平布局中嵌套的垂直 Form.Item 控件高度被压缩的问题。#59263 @QDyanbing

🐞 修复 Tabs 折叠下拉菜单未应用 styles.popup.root 的问题。#59221 @giaBaoJS

🐞 修复 ConfigProvider 在嵌套主题中 inherit 为 false 时未继承 zeroRuntime 的问题。#59250 @QDyanbing

6.6.3

🐞 Fix DatePicker and TimePicker rendering issues when prefix, suffixIcon, allowClear.clearIcon, or the value returned by renderExtraFooter is 0. #59212 react-component/picker#1009 @github-actions @QDyanbing

🐞 Fix Modal and Drawer mask click closing behavior when reusing a mask configuration object. #59233 @giaBaoJS

🤖 Fix Select, AutoComplete, Cascader, and TreeSelect popupRender types to accept ReactElement and return ReactNode. #59207 @QDyanbing

DatePicker

🇩🇪 Fix DatePicker using incorrect default date and date-time formats with the German locale, using DD.MM.YYYY and DD.MM.YYYY HH:mm:ss respectively. #59151 @nrps9909

🐞 Fix DatePicker popup closing unexpectedly when navigating to the month boundary set by minDate or maxDate. #59212 react-component/picker#1012 @github-actions @zombieJ

🐞 Fix DatePicker.RangePicker losing the pending date selection highlight when hovering over another date with showTime enabled. #59212 react-component/picker#1010 @github-actions @zombieJ

🌐 Add missing DatePicker year, quarter, month, week, and range placeholders in 32 locales. #59219 @stop1love1

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.4

2026-09-14

🗑 Deprecate legacy Avatar GroupProps, BackTop and FloatButton BackTopProps, Input GroupProps, Mentions OptionProps, and Select OptionProps types in favor of GetProps or option-derived types. #58949 @li-jia-nan

🐞 Fix AutoComplete missing classNames.clear and styles.clear semantic customizations for the clear button. #59245 @lazerg

Table

🐞 Fix Table filteredValue being ignored when responsive columns are hidden. #59198 @QDyanbing

🐞 Fix Table ignoring pagination.classNames and pagination.styles semantic customizations. #59267 @QDyanbing

🐞 Fix Table virtual cell content not being vertically centered. #59260 @QDyanbing

Modal

🐞 Fix Modal okText and cancelText falling back to default text for falsy ReactNode values. #59254 @QDyanbing

🐞 Fix Modal not triggering onCancel when cancelButtonProps.onClick is provided. #59255 @QDyanbing

ColorPicker

🐞 Fix ColorPicker clear control remaining interactive and showing hover styles when disabled. #59164 @dogledogle

🐞 Fix ColorPicker modifying presets and crashing when preset items are frozen. #59272 @QDyanbing

🐞 Fix Splitter panel sizes exceeding their min and max constraints when the container resizes. #59084 @QDyanbing

🐞 Fix Segmented selected item text color lagging behind the thumb animation when custom itemSelectedBg and itemSelectedColor tokens are used. #59046 @EmilyyyLiu

🐞 Fix Transfer restoring stale selections after dataSource item key types change. #59166 @QDyanbing

🐞 Fix FloatButton.Group menu flickering when moving the pointer from the trigger to the menu with trigger="hover". #59246 @QDyanbing

🐞 Fix Form vertical Form.Item controls shrinking inside horizontal layouts. #59263 @QDyanbing

🐞 Fix Tabs more dropdown ignoring styles.popup.root. #59221 @giaBaoJS

🐞 Fix ConfigProvider failing to inherit zeroRuntime in nested themes when inherit is false. #59250 @QDyanbing

6.6.3

2026-09-07

🐞 Fix DatePicker and TimePicker rendering issues when prefix, suffixIcon, allowClear.clearIcon, or the value returned by renderExtraFooter is 0. #59212 react-component/picker#1009 @github-actions @QDyanbing

🐞 Fix Modal and Drawer mask click closing behavior when reusing a mask configuration object. #59233 @giaBaoJS

🤖 Fix Select, AutoComplete, Cascader, and TreeSelect popupRender types to accept ReactElement and return ReactNode. #59207 @QDyanbing

DatePicker

🇩🇪 Fix DatePicker using incorrect default date and date-time formats with the German locale, using DD.MM.YYYY and DD.MM.YYYY HH:mm:ss respectively. #59151 @nrps9909

🐞 Fix DatePicker popup closing unexpectedly when navigating to the month boundary set by minDate or maxDate. #59212 react-component/picker#1012 @github-actions @zombieJ

🐞 Fix DatePicker.RangePicker losing the pending date selection highlight when hovering over another date with showTime enabled. #59212 react-component/picker#1010 @github-actions @zombieJ

🌐 Add missing DatePicker year, quarter, month, week, and range placeholders in 32 locales. #59219 @stop1love1

🌐 Correct Traditional Chinese (Taiwan) text for the DatePicker confirmation button and ColorPicker gradient color. #59129 @nrps9909

Icon

🆕 Add MetaFilled and NetflixFilled brand icons to Icon. #59178 ant-design-icons#755 @github-actions @mohamedkhaled4053

🐞 Fix Icon XFilled rendering as a solid square. #59178 ant-design-icons#758 @github-actions @QDyanbing

🐞 Fix Icon failing to render when bundled with Bun. #59178 ant-design-icons#768 @github-actions @zombieJ

🐞 Fix Icon crashing the page when an icon definition is invalid. #59178 ant-design-icons#762 @github-actions @nrps9909

Input

🐞 Fix Input.Password ignoring controlled visibility when activating the visibility toggle. #59168 @QDyanbing

⌨️ Fix Input.Password repeatedly toggling password visibility when holding down Enter or Space. #59135 @nrps9909

🐞 Fix Input.Search not calling the custom enterButton onMouseDown handler. #59180 @QDyanbing

🐞 Fix Dropdown throwing errors when popupRender returns null, arrays, or numbers. #59207 @QDyanbing

🐞 Fix Checkbox.Group losing default selections and failing to update selections when value is undefined. #59217 @dogledogle

🐞 Fix Radio.Group not updating its selection when value is undefined. #59162 @dogledogle

🐞 Fix Layout.Sider not collapsing when clicking its trigger with collapsed set to undefined. #59175 @dogledogle

... (truncated)

Commits

db0488c docs: add changelog for 6.6.4 (#59287)
49163c0 site: show the clear element in Select semantic preview (#59245)
d30c7ad chore(deps): update nearform-actions/github-action-notify-twitter digest to 2...
6a642e3 type: deprecate prop types and add aliases (#58949)
d0776d0 chore(deps): update dependency mermaid to v12 (#59280)
ceb0d56 fix(ColorPicker): disable interactions when disabled (#59164)
46d905e site: normalize locale-aware links in Chinese docs (#59277)
c7f4441 docs: align Chinese component docs with English content (#59276)
a9b1ab4 fix(Splitter): respect size limits when container resizes (#59084)
9c0758a fix(Table): preserve pagination semantic classNames and styles (#59267)
Additional commits viewable in compare view

Updates jotai from 2.20.3 to 3.0.0

Release notes

Sourced from jotai's releases.

v3.0.0

👻 Jotai v3 is here! 🎉

This is a mostly backward-compatible update, dropping some legacy support and deprecated APIs.

Migration Guide

https://github.com/pmndrs/jotai/blob/main/docs/guides/migrating-to-v3.mdx

What's Changed

v3 by @dai-shi in pmndrs/jotai#3337

chore(deps): update dev dependencies (breaking for v3: drop node 20) by @dai-shi in pmndrs/jotai#3367

Full Changelog: pmndrs/jotai@v2.20.3...v3.0.0

v3.0.0-alpha.1

Includes v2.20.3 changes.

What's Changed

fix(unwrap): prevent infinite microtask loop on rejected source recompute by @dai-shi with @Copilot in pmndrs/jotai#3363

New Contributors

@dai-shi with @Copilot made their first contribution in pmndrs/jotai#3363

Full Changelog: pmndrs/jotai@v3.0.0-alpha.0...v3.0.0-alpha.1

v3.0.0-alpha.0

https://github.com/pmndrs/jotai/blob/v3/docs/guides/migrating-to-v3.mdx

What's Changed

[v3] drop old TS by @dai-shi in pmndrs/jotai#3336

[v3] drop UMD and SystemJS builds by @dai-shi in pmndrs/jotai#3338

[v3] drop old node by @dai-shi in pmndrs/jotai#3339

[v3] module-first package by @dai-shi in pmndrs/jotai#3340

[v3] drop CJS by @dai-shi in pmndrs/jotai#3341

[v3] use NODE_ENV directly by @dai-shi in pmndrs/jotai#3342

[v3] drop rollup by @dai-shi in pmndrs/jotai#3344

[v3] drop old React by @dai-shi in pmndrs/jotai#3345

[v3] es2020 target by @dai-shi in pmndrs/jotai#3346

[v3] drop atomFamily by @dai-shi in pmndrs/jotai#3347

[v3] drop loadable by @dai-shi in pmndrs/jotai#3348

[v3] drop jotai/babel by @dai-shi in pmndrs/jotai#3349

[v3] drop setSelf by @dai-shi in pmndrs/jotai#3350

[v3] useAtomValueRaw & useAtomValueRawSync by @dai-shi in pmndrs/jotai#3351

[v3] redesign buildingBlocks by @dai-shi in pmndrs/jotai#3358

[v3] migration guide by @dai-shi in pmndrs/jotai#3359

Full Changelog: pmndrs/jotai@v2.20.2...v3.0.0-alpha.0

Commits

89d4fdd v3.0.0
a52e426 chore(deps): update dev dependencies (breaking for v3: drop node 20) (#3367)
0adc6c6 v3 (#3337)
8d5724b Clarify that effects run after the triggering write completes. (#3365)
See full diff in compare view

Updates lucide-react from 1.35.0 to 1.45.0

Release notes

Sourced from lucide-react's releases.

Version 1.45.0

What's Changed

feat(icons): added calendar-chevrons-right icon by @AlexandrePhilibert in lucide-icons/lucide#3565

feat(icons): added building-complex-plus icon by @tylerkade in lucide-icons/lucide#4758

feat(icons): add hourglass-cog icon by @lazerg in lucide-icons/lucide#4635

feat(icons): added mouth & mouth-off by @karsa-mistmere in lucide-icons/lucide#4787

feat(icons): added iv-bag icon by @karsa-mistmere in lucide-icons/lucide#4821

fix(icons): changed lectern icon by @UsamaKhan in lucide-icons/lucide#2925

feat(icons): add layout-arrow-right and layout-arrow-down by @samuelalake in lucide-icons/lucide#4541

feat(icons): added park icon by @skajosborn in lucide-icons/lucide#3177

fix(icons): changed album, book-marked, folder-bookmark icons by @karsa-mistmere in lucide-icons/lucide#3043

fix(icons): correct misspelled tags by @decknamec in lucide-icons/lucide#4836

feat(icons): added houses icon by @danielbayley in lucide-icons/lucide#3241

feat(icons): added notebook-dot icon by @elenakovelskikh in lucide-icons/lucide#3228

feat(icons): add messages-circle icon by @Mirazstudio-offical in lucide-icons/lucide#4754

feat(icons): added plant-pot icon by @vqh2602 in lucide-icons/lucide#3122

fix(icons): changed cookie icon by @karsa-mistmere in lucide-icons/lucide#4815

fix(icons): remove duplicate use-cases prop from cookie.json by @karsa-mistmere in lucide-icons/lucide#4838

fix(site): fix home card icons by @karsa-mistmere in lucide-icons/lucide#4839

feat(docs): added "How to use Lucide icons" section to resources by @karsa-mistmere in lucide-icons/lucide#4829

fix(packages/vue): fix generated icon declaration types for @lucide/vue by @karsa-mistmere in lucide-icons/lucide#4841

chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 by @dependabot[bot] in lucide-icons/lucide#4845

chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 in /integrations/lucide-react/vite by @dependabot[bot] in lucide-icons/lucide#4844

ci(ci.yml): Add dispatch post release by @ericfennis in lucide-icons/lucide#4847

feat(icons): added globe-code icon by Description has been truncated

codecov · 2026-09-13T19:07:11Z

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

orangeboyChen · 2026-09-17T09:05:34Z

@dependabot recreate

…pdates Bumps the misc-runtime group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@lobehub/icons](https://github.com/lobehub/lobe-icons) | `5.16.0` | `5.18.0` | | [@lobehub/ui](https://github.com/lobehub/lobe-ui) | `5.35.0` | `5.47.1` | | [@simplewebauthn/browser](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser) | `13.3.0` | `14.0.0` | | [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.3` | `14.0.2` | | [antd](https://github.com/ant-design/ant-design) | `6.6.2` | `6.6.4` | | [jotai](https://github.com/pmndrs/jotai) | `2.20.3` | `3.0.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.35.0` | `1.45.0` | | [motion](https://github.com/motiondivision/motion) | `12.42.2` | `13.2.0` | | [next-intl](https://github.com/amannn/next-intl) | `4.14.1` | `4.14.4` | | [zod](https://github.com/colinhacks/zod) | `4.5.2` | `4.6.5` | | [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) | `16.3.3` | `16.3.5` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.5.1` | | [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` | | [sass](https://github.com/sass/dart-sass) | `1.103.1` | `1.104.1` | Updates `@lobehub/icons` from 5.16.0 to 5.18.0 - [Commits](https://github.com/lobehub/lobe-icons/commits) Updates `@lobehub/ui` from 5.35.0 to 5.47.1 - [Commits](https://github.com/lobehub/lobe-ui/commits) Updates `@simplewebauthn/browser` from 13.3.0 to 14.0.0 - [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases) - [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md) - [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.0/packages/browser) Updates `@simplewebauthn/server` from 13.3.3 to 14.0.2 - [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases) - [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md) - [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.2/packages/server) Updates `antd` from 6.6.2 to 6.6.4 - [Release notes](https://github.com/ant-design/ant-design/releases) - [Changelog](https://github.com/ant-design/ant-design/blob/master/CHANGELOG.en-US.md) - [Commits](ant-design/ant-design@6.6.2...6.6.4) Updates `jotai` from 2.20.3 to 3.0.0 - [Release notes](https://github.com/pmndrs/jotai/releases) - [Commits](pmndrs/jotai@v2.20.3...v3.0.0) Updates `lucide-react` from 1.35.0 to 1.45.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.45.0/packages/lucide-react) Updates `motion` from 12.42.2 to 13.2.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.42.2...v13.2.0) Updates `next-intl` from 4.14.1 to 4.14.4 - [Release notes](https://github.com/amannn/next-intl/releases) - [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md) - [Commits](amannn/next-intl@v4.14.1...v4.14.4) Updates `zod` from 4.5.2 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.5.2...v4.6.5) Updates `@next/eslint-plugin-next` from 16.3.3 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/eslint-plugin-next) Updates `lint-staged` from 17.4.1 to 17.5.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.4.1...v17.5.1) Updates `postcss` from 8.5.26 to 8.5.28 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.26...8.5.28) Updates `sass` from 1.103.1 to 1.104.1 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.103.1...1.104.1) --- updated-dependencies: - dependency-name: "@lobehub/icons" dependency-version: 5.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: misc-runtime - dependency-name: "@lobehub/ui" dependency-version: 5.42.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: misc-runtime - dependency-name: "@next/eslint-plugin-next" dependency-version: 16.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc-runtime - dependency-name: "@simplewebauthn/browser" dependency-version: 14.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: misc-runtime - dependency-name: "@simplewebauthn/server" dependency-version: 14.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: misc-runtime - dependency-name: antd dependency-version: 6.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-runtime - dependency-name: jotai dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: misc-runtime - dependency-name: lint-staged dependency-version: 17.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: misc-runtime - dependency-name: lucide-react dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: misc-runtime - dependency-name: motion dependency-version: 13.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: misc-runtime - dependency-name: next-intl dependency-version: 4.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-runtime - dependency-name: postcss dependency-version: 8.5.28 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc-runtime - dependency-name: sass dependency-version: 1.104.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: misc-runtime - dependency-name: zod dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: misc-runtime ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-17T12:55:25Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 13, 2026

dependabot Bot force-pushed the dependabot/bun/misc-runtime-b8aee3be47 branch 3 times, most recently from cfa4fd0 to cdb8789 Compare September 15, 2026 06:16

orangeboyChen enabled auto-merge (squash) September 17, 2026 09:05

dependabot Bot force-pushed the dependabot/bun/misc-runtime-b8aee3be47 branch from cdb8789 to 0b8d0cc Compare September 17, 2026 09:07

orangeboyChen mentioned this pull request Sep 17, 2026

chore(deps): bump the testing and misc-runtime groups #161

Merged

orangeboyChen closed this in #161 Sep 17, 2026

auto-merge was automatically disabled September 17, 2026 12:55
Pull request was closed

dependabot Bot deleted the dependabot/bun/misc-runtime-b8aee3be47 branch September 17, 2026 12:55

Navigation Menu

chore(deps): bump the misc-runtime group across 1 directory with 14 updates - #122

chore(deps): bump the misc-runtime group across 1 directory with 14 updates#122
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/misc-runtime-b8aee3be47

dependabot Bot commented on behalf of github Sep 13, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Sep 13, 2026

Uh oh!

orangeboyChen commented Sep 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v14.0.0 - The one after they go quantum

Breaking Changes

v13.3.3

v13.3.2

v13.3.1

v14.0.0 - The one after they go quantum

v14.0.2

v14.0.1

v14.0.0 - The one after they go quantum

Breaking Changes

v14.0.2

v14.0.1

v14.0.0 - The one after they go quantum

6.6.4

6.6.3

6.6.4

6.6.3

v3.0.0

👻 Jotai v3 is here! 🎉

Migration Guide

What's Changed

v3.0.0-alpha.1

What's Changed

New Contributors

v3.0.0-alpha.0

What's Changed

Version 1.45.0

What's Changed

Uh oh!

codecov Bot commented Sep 13, 2026

⚠️ JUnit XML file not found

Uh oh!

orangeboyChen commented Sep 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 13, 2026 •

edited

Loading