[bun](deps): Bump the prod-deps group across 1 directory with 7 updates

[dependabot]

Bumps the prod-deps group with 7 updates in the /react directory:

Package	From	To
@radix-ui/react-accordion	1.2.11	1.2.12
@radix-ui/react-dialog	1.1.14	1.1.15
@radix-ui/react-dropdown-menu	2.1.15	2.1.16
@radix-ui/react-navigation-menu	1.2.13	1.2.14
lucide-react	0.539.0	0.540.0
react-router	7.8.0	7.8.1
supertokens-auth-react	0.49.1	0.50.0

Updates @radix-ui/react-accordion from 1.2.11 to 1.2.12

Commits

• See full diff in compare view

Updates @radix-ui/react-dialog from 1.1.14 to 1.1.15

Commits

• See full diff in compare view

Updates @radix-ui/react-dropdown-menu from 2.1.15 to 2.1.16

Commits

• See full diff in compare view

Updates @radix-ui/react-navigation-menu from 1.2.13 to 1.2.14

Commits

• See full diff in compare view

Updates lucide-react from 0.539.0 to 0.540.0

Release notes

Sourced from lucide-react's releases.

Version 0.540.0

What's Changed

• fix(license): add full text of Feather license by @​jguddas in lucide-icons/lucide#3530
• fix(icons): changed umbrella icon by @​karsa-mistmere in lucide-icons/lucide#3490
• docs(site): added official statement on brand logos in Lucide by @​karsa-mistmere in lucide-icons/lucide#3541
• fix(icons): changed camera icon by @​karsa-mistmere in lucide-icons/lucide#3539
• feat(icons): added rose icon by @​jguddas in lucide-icons/lucide#1972

Full Changelog: lucide-icons/lucide@0.539.0...0.540.0

Commits

• See full diff in compare view

Updates react-router from 7.8.0 to 7.8.1

Release notes

Sourced from react-router's releases.

v7.8.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v781

Changelog

Sourced from react-router's changelog.

7.8.1

Patch Changes

• Fix usage of optional path segments in nested routes defined using absolute paths (#14135)
• Bubble client pre-next middleware error to the shallowest ancestor that needs to load, not strictly the shallowest ancestor with a loader (#14150)
• Fix optional static segment matching in matchPath (#11813)
• Fix prerendering when a basename is set with ssr:false (#13791)
• Provide isRouteErrorResponse utility in react-server environments (#14166)
• Propagate non-redirect Responses thrown from middleware to the error boundary on document/data requests (#14182)
• Handle meta and links Route Exports in RSC Data Mode (#14136)
• Properly convert returned/thrown data() values to Response instances via Response.json() in resource routes and middleware (#14159, #14181)

Commits

• fd17d66 chore: Update version for release (#14185)
• 68f3bfc chore: Update version for release (pre) (#14184)
• 869e168 Propagate middleware thrown non-redirect responses to the boundary (#14182)
• c819c77 Update logic for data->Response conversion to use Response.json (#14181)
• bd38001 chore: Update version for release (pre) (#14178)
• 6cce04f Merge branch 'main' into release-next
• be95911 docs(api/hooks/useNavigate): add some extra reference links (#14170)
• 1f06a5e Make missing loaderData conditional in Route.MetaArgs (#14173)
• a9b539b Provide isRouteErrorResponse in react-server environments (#14166)
• 3aee660 Properly handle data() values returned/thrown from resource routes (#14159)
• Additional commits viewable in compare view

Updates supertokens-auth-react from 0.49.1 to 0.50.0

Changelog

Sourced from supertokens-auth-react's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning

[unreleased]

[0.50] - 2025-08-15

• Add WebAuthn credential management methods: listCredentials, removeCredential
• Added createAndRegisterCredentialWithUser method that creates and registers a credential with a user
• Adds dev/release GHA pipelines
• Add webauthn as a secondary factor in MFA
• Adds experimental support for plugins

Breaking changes

• The registerCredential method has been renamed to createCredential. This was done to better represent the creation of a credential and not the actual registration of it with the backend API. The new registerCredential implementation now calls the backend API.

Commits

• b337b23 doc: update docs for v0.50.0 tag
• 8beb99a fix: fix when we show the back button on mfa webauthn screens
• 7e83dc2 doc: update docs for v0.50.0 tag
• 08473fb chore: update date in changelog
• 6510c0a fix: webauthn mfa back button visibility and add missing logout button (#914)
• 21acdb9 doc: update docs for v0.50.0 tag
• eaecdf4 chore: update size limits and web-js dep version
• fbce71d feat: Add support for WebAuthn in MFA [v0.50.0] (#906)
• e9b2990 feat: Experimental plugin support [v0.50.0] (#909)
• 4571189 test: update unit tests to match new web-js version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud