Skip to content

[bun](deps): Bump the prod-deps group in /react with 6 updates - #675

Closed
dependabot[bot] wants to merge 1 commit into
react-rewritefrom
dependabot/bun/react/react-rewrite/prod-deps-a0f04a8076
Closed

dependabot[bot] wants to merge 1 commit into
react-rewritefrom
dependabot/bun/react/react-rewrite/prod-deps-a0f04a8076

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2025 •

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group in /react with 6 updates:

Package From To
@radix-ui/react-accordion 1.2.11 1.2.12
@radix-ui/react-dialog 1.1.14 1.1.15
@radix-ui/react-dropdown-menu 2.1.15 2.1.16
@radix-ui/react-navigation-menu 1.2.13 1.2.14
react-router 7.8.0 7.8.1
supertokens-auth-react 0.49.1 0.50.0

Updates @radix-ui/react-accordion from 1.2.11 to 1.2.12

Commits

Updates @radix-ui/react-dialog from 1.1.14 to 1.1.15

Commits

Updates @radix-ui/react-dropdown-menu from 2.1.15 to 2.1.16

Commits

Updates @radix-ui/react-navigation-menu from 1.2.13 to 1.2.14

Commits

Updates react-router from 7.8.0 to 7.8.1

Release notes

Sourced from react-router's releases.

v7.8.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v781

Changelog

Sourced from react-router's changelog.

7.8.1

Patch Changes

  • Fix usage of optional path segments in nested routes defined using absolute paths (#14135)
  • Bubble client pre-next middleware error to the shallowest ancestor that needs to load, not strictly the shallowest ancestor with a loader (#14150)
  • Fix optional static segment matching in matchPath (#11813)
  • Fix prerendering when a basename is set with ssr:false (#13791)
  • Provide isRouteErrorResponse utility in react-server environments (#14166)
  • Propagate non-redirect Responses thrown from middleware to the error boundary on document/data requests (#14182)
  • Handle meta and links Route Exports in RSC Data Mode (#14136)
  • Properly convert returned/thrown data() values to Response instances via Response.json() in resource routes and middleware (#14159, #14181)
Commits
  • fd17d66 chore: Update version for release (#14185)
  • 68f3bfc chore: Update version for release (pre) (#14184)
  • 869e168 Propagate middleware thrown non-redirect responses to the boundary (#14182)
  • c819c77 Update logic for data->Response conversion to use Response.json (#14181)
  • bd38001 chore: Update version for release (pre) (#14178)
  • 6cce04f Merge branch 'main' into release-next
  • be95911 docs(api/hooks/useNavigate): add some extra reference links (#14170)
  • 1f06a5e Make missing loaderData conditional in Route.MetaArgs (#14173)
  • a9b539b Provide isRouteErrorResponse in react-server environments (#14166)
  • 3aee660 Properly handle data() values returned/thrown from resource routes (#14159)
  • Additional commits viewable in compare view

Updates supertokens-auth-react from 0.49.1 to 0.50.0

Changelog

Sourced from supertokens-auth-react's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning

[unreleased]

[0.50] - 2025-08-15

  • Add WebAuthn credential management methods: listCredentials, removeCredential
  • Added createAndRegisterCredentialWithUser method that creates and registers a credential with a user
  • Adds dev/release GHA pipelines
  • Add webauthn as a secondary factor in MFA
  • Adds experimental support for plugins

Breaking changes

  • The registerCredential method has been renamed to createCredential. This was done to better represent the creation of a credential and not the actual registration of it with the backend API. The new registerCredential implementation now calls the backend API.
Commits
  • b337b23 doc: update docs for v0.50.0 tag
  • 8beb99a fix: fix when we show the back button on mfa webauthn screens
  • 7e83dc2 doc: update docs for v0.50.0 tag
  • 08473fb chore: update date in changelog
  • 6510c0a fix: webauthn mfa back button visibility and add missing logout button (#914)
  • 21acdb9 doc: update docs for v0.50.0 tag
  • eaecdf4 chore: update size limits and web-js dep version
  • fbce71d feat: Add support for WebAuthn in MFA [v0.50.0] (#906)
  • e9b2990 feat: Experimental plugin support [v0.50.0] (#909)
  • 4571189 test: update unit tests to match new web-js version
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group in /react with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@radix-ui/react-accordion](https://github.com/radix-ui/primitives) | `1.2.11` | `1.2.12` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives) | `1.1.14` | `1.1.15` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives) | `2.1.15` | `2.1.16` |
| [@radix-ui/react-navigation-menu](https://github.com/radix-ui/primitives) | `1.2.13` | `1.2.14` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.8.0` | `7.8.1` |
| [supertokens-auth-react](https://github.com/supertokens/supertokens-auth-react) | `0.49.1` | `0.50.0` |


Updates `@radix-ui/react-accordion` from 1.2.11 to 1.2.12
- [Changelog](https://github.com/radix-ui/primitives/blob/main/release-process.md)
- [Commits](https://github.com/radix-ui/primitives/commits)

Updates `@radix-ui/react-dialog` from 1.1.14 to 1.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/release-process.md)
- [Commits](https://github.com/radix-ui/primitives/commits)

Updates `@radix-ui/react-dropdown-menu` from 2.1.15 to 2.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/release-process.md)
- [Commits](https://github.com/radix-ui/primitives/commits)

Updates `@radix-ui/react-navigation-menu` from 1.2.13 to 1.2.14
- [Changelog](https://github.com/radix-ui/primitives/blob/main/release-process.md)
- [Commits](https://github.com/radix-ui/primitives/commits)

Updates `react-router` from 7.8.0 to 7.8.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.8.1/packages/react-router)

Updates `supertokens-auth-react` from 0.49.1 to 0.50.0
- [Release notes](https://github.com/supertokens/supertokens-auth-react/releases)
- [Changelog](https://github.com/supertokens/supertokens-auth-react/blob/master/CHANGELOG.md)
- [Commits](supertokens/supertokens-auth-react@v0.49.1...v0.50.0)

---
updated-dependencies:
- dependency-name: "@radix-ui/react-accordion"
  dependency-version: 1.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@radix-ui/react-dropdown-menu"
  dependency-version: 2.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@radix-ui/react-navigation-menu"
  dependency-version: 1.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: react-router
  dependency-version: 7.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: supertokens-auth-react
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Aug 18, 2025
@github-actions
github-actions Bot enabled auto-merge (squash) August 18, 2025 13:50
@sonarqubecloud

Copy link
Copy Markdown

@No767

No767 commented Aug 19, 2025

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 19, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 19, 2025
auto-merge was automatically disabled August 19, 2025 03:16

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/bun/react/react-rewrite/prod-deps-a0f04a8076 branch August 19, 2025 03:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant