chore(deps): bump the production-deps group across 1 directory with 10 updates by dependabot[bot] · Pull Request #155 · dbwg2009/Noted

dependabot · 2026-07-27T05:11:31Z

Bumps the production-deps group with 10 updates in the / directory:

Package	From	To
@auth/drizzle-adapter	`1.11.2`	`1.11.3`
@sentry/nextjs	`10.52.0`	`10.68.0`
bcryptjs	`2.4.3`	`3.0.3`
next	`15.5.18`	`16.2.12`
next-auth	`5.0.0-beta.31`	`5.0.0-beta.32`
react	`19.0.0`	`19.2.8`
react-dom	`19.0.0`	`19.2.8`
resend	`4.8.0`	`6.18.0`
tailwind-merge	`2.6.1`	`3.6.0`
zod	`3.25.76`	`4.4.3`

Updates @auth/drizzle-adapter from 1.11.2 to 1.11.3

Release notes

Sourced from @auth/drizzle-adapter's releases.

@auth/drizzle-adapter@1.11.3

Other

@auth/core: dependency update (8a933f95)

Commits

5af7357 chore(release): bump package version(s) [skip ci]
8a933f9 fix(core): document that getToken returns null for malformed authorization he...
5b1aa47 chore(ci): pin surrealdb test server to the v2 image for the 1.3 client (#13468)
1116034 Chore/nodemailer 8 peer deps (#13434)
7b35fc3 fix(docs): repair docs build broken by floating TypeScript resolution (#13450)
b24abfa fix(proxy): override Vercel build command so it doesn't run turbo (#13448)
a99514b chore(deps): resolve remaining Dependabot alerts via cross-major dependency u...
d008b9b Merge commit from fork
af42d8f chore: lint (#13446)
e707770 Merge commit from fork
Additional commits viewable in compare view

Updates @sentry/nextjs from 10.52.0 to 10.68.0

Release notes

Sourced from @sentry/nextjs's releases.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @sentry/nextjs's changelog.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

10.67.0

... (truncated)

Commits

b4396c3 release: 10.68.0
be21e8c meta(changelog): Update changelog for 10.68.0 (#22566)
fb0987f feat(v10): Add http.route attribute to http.server spans with parameteriz...
f7bd901 feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
ed3a8c8 feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
20227f9 feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
3e5625e feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
d924551 test(v10/cloudflare): Add Vite-build support to the integration-test runner (...
11fed03 feat(v10/cloudflare): Read wrangler config and resolve the Sentry options mod...
a540764 feat(v10): Add url.full and url.path to http.server spans (#22533)
Additional commits viewable in compare view

Updates bcryptjs from 2.4.3 to 3.0.3

Release notes

Sourced from bcryptjs's releases.

v3.0.3

Bug fixes

Always yield to event loop before nextTick for async versions (#164) (1211e9a2213e0b3ee232a204b3ce899beebce31a)

v3.0.2

Bug fixes

Use upstream fix to emit interop helpers (28e510389374f5736c447395443d4a6687325048)

v3.0.1

Bug fixes

Separate ESM and UMD type definitions (e7055caf0c723cbcf8bc3f0784b8c30ee332380f)

v3.0.0

Breaking changes

Modernize project structure (2f45985738604c743c4b8cc8464e3e7d3e04c73d) The project now exports an ECMAScript module by default, albeit with an UMD fallback, ships with types, the dist/ directory no longer exists in version control, and Closure Compiler externs have been removed.

Generate 2b hashes by default (d36bfb42fa642b6d6986a84ce106a7110e5824db) This library was not affected by the bug that led to incrementing the bcrypt version from 2a to 2b, but nowadays most implementations use 2b, including the native bcrypt binding, so this change aligns with them. Existing hashes will continue to work, but test logic that generates hashes and compares them literally might need to be updated to account for the new default.

Features

Add helper to check for password input length (d5656b39e2e368c87724a312e4e454456a4e5d1b)

Other

Update publish workflow (2a9bea9e276e6be04dbd403f9695937788b3b10a)

Add note on using the ESM variant in the browser (e09eb9afb14170069aaea19631b763307ee7b480)

Update types (58333a1533dd53838e2697628f84b98d54a5c079)

Merge lint and test workflows (2e3b17659e8856696acfe3015631ce2989eb3084)

Fix tests (ec02e8a0ada7a8f6c71a91df164db8c25bbbb7b4)

Update legacy fallback to handle crypto dependency (9db275fa10b1b40da4a6844480d7f8ae8df27fb8)

Update lint workflow title (ac70ac57c2f99ad5639eddf54578e5fdd07b9c4c)

Adapt crypto module usage for ESM environments (574d690d4972bcebbd5ca07880a62abab9ae3c0b)

Format with prettier (e7465479282d8155852ce88d6407eccb14adc106)

Rename default branch to 'main' (548559d032d7dd5ac3e4e16d7afd87b36ebe96ca)

Update description to mention TypeScript support (4977df0849eaf8cad5b0d0b543fe452432a2d761)

Add stale action for issues and PRs (a84d4e45487df0972d8781feafa477d5db4c1dbd)

Fix typo (c8c9c01799bbc13092fcbb20cfab4d9015d14c61)

Fix Node.js version in CI (1b54cc48d4120b50e1d9058e5a67f326102fd744)

Backlog from v2

Added externs to .npmignore (#124) (7e2e93af99df2952253f9cf32db29aefa8f272f7) The npm package does not need externs as it is needed only for closure compiler. Added it in .npmignore since bcryptjs overrides global module and process in WebStorm IDE.

Make sure the bin script uses LF (684fac6814a81d974c805a15e22fd69922c7ca6e)

Post-merge; Clean up a bit (b09f7f266a7015456b7b36deeb026dc636f64542)

... (truncated)

Commits

1211e9a fix: Always yield to event loop before nextTick for async versions (#164)
28e5103 fix: Use upstream fix to emit interop helpers
e7055ca fix: Separate ESM and UMD type definitions
2a9bea9 Update publish workflow
d5656b3 Add helper to check for password input length
e09eb9a Add note on using the ESM variant in the browser
58333a1 Update types
2e3b176 Merge lint and test workflows
ec02e8a Fix tests
9db275f Update legacy fallback to handle crypto dependency
Additional commits viewable in compare view

Updates next from 15.5.18 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Backport/docs fixes 16.2 - July round by @icyJoseph in vercel/next.js#96031

[Backport] Fixes to support TypeScript 7 by @lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

... (truncated)

Commits

2234717 v16.2.12
957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
b56eb16 Backport/docs fixes 16.2 - July round (#96031)
9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
Additional commits viewable in compare view

Updates next-auth from 5.0.0-beta.31 to 5.0.0-beta.32

Release notes

Sourced from next-auth's releases.

next-auth@5.0.0-beta.32

Beta release for the v5 line.

Picks up the @auth/core@0.41.3 security fixes (malformed Bearer token handling in getToken, provider-bound OAuth check cookies, and NFKC email normalization).

Fixes auth checks failing open on provider configuration errors: a non-OK session response now yields no session instead of an error object, so checks like !!auth fail closed.

Commits

e293b37 chore(release): next-auth@5.0.0-beta.32 [skip ci]
b690d91 chore: add npm bugs metadata and fix repository field format (#13452)
5af7357 chore(release): bump package version(s) [skip ci]
8a933f9 fix(core): document that getToken returns null for malformed authorization he...
5b1aa47 chore(ci): pin surrealdb test server to the v2 image for the 1.3 client (#13468)
1116034 Chore/nodemailer 8 peer deps (#13434)
7b35fc3 fix(docs): repair docs build broken by floating TypeScript resolution (#13450)
b24abfa fix(proxy): override Vercel build command so it doesn't run turbo (#13448)
a99514b chore(deps): resolve remaining Dependabot alerts via cross-major dependency u...
d008b9b Merge commit from fork
Additional commits viewable in compare view

Updates react from 19.0.0 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (@gnoff, @lubieowoce, @sebmarkbage, @unstubbable #35632)

19.2.3 (Dec 11, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (Dec 11, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon #35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
23f4f9f 19.2.5
90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
5667a41 Bump next prerelease version numbers (#34639)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates react-dom from 19.0.0 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (@gnoff, @lubieowoce, @sebmarkbage, @unstubbable #35632)

19.2.3 (Dec 11, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (Dec 11, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon #35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
23f4f9f 19.2.5
90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
8618113 Bump scheduler version (#34671)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates resend from 4.8.0 to 6.18.0

Release notes

Sourced from resend's releases.

v6.18.0

Support tags and scheduledAt in batch email options (d8ffa8b)

#1022 feat(batch): support tags and scheduledAt in batch email options by @cpenned

Add resend.suppressions with add, get, list, remove, and batch add/remove methods for managing suppression list entries (877fa56)

#1008 feat: add suppression list endpoints by @CarolinaMoraes

v6.18.0-canary.0

Add resend.suppressions with add, get, list, remove, and batch add/remove methods for managing suppression list entries (877fa56)

#1008 feat: add suppression list endpoints by @CarolinaMoraes

v6.17.2

fix response types for removing contacts out of segments and removing api keys (90d18da)

#1003 fix: response types for removing an api key, and removing a contact from a segment by @gabrielmfern

v6.17.1

remove resource field, it was a dead field (0572834)

#1000 chore(oauth-grants): drop dead resource field by @gabrielmfern

v6.17.0

... (truncated)

Changelog

Sourced from resend's changelog.

resend@6.18.0

Support tags and scheduledAt in batch email options

Add resend.suppressions with add, get, list, remove, and batch add/remove methods for managing suppression list entries

resend@6.18.0-canary.0 (canary)

Add resend.suppressions with add, get, list, remove, and batch add/remove methods for managing suppression list entries

resend@6.17.2

fix response types for removing contacts out of segments and removing api keys

resend@6.17.1

remove resource field, it was a dead field

Commits

f51b6d4 chore: release 6.18.0 (#1023)
0761d9f chore: exit canary release (#1026)
d8ffa8b feat(batch): support tags and scheduledAt in batch email options (#1022)
d8cadcf chore(deps): update actions/checkout action to v7 (#1013)
75ca970 chore(deps): update actions/create-github-app-token action to v3 (#1014)
5b78f6f chore: release 6.18.0-canary.0 (#1012)
530feb3 chore(deps): update dependency @types/node to v24.13.3 (#953)
cbc93e6 fix(deps): update dependency next to v16.2.10 (#975)
401b8f8 chore(deps): update dependency @biomejs/biome to v2.5.3 (#955)
cb60b04 fix(deps): update dependency postal-mime to v2.7.5 (#989)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for resend since your current version.

Updates tailwind-merge from 2.6.1 to 3.6.0

Release notes

Sourced from tailwind-merge's releases.

v3.6.0

New Features

Add support for Tailwind CSS v4.3 by @dcastil in dcastil/tailwind-merge#677

Add postfixLookupClassGroups option to config to support Tailwind utilities where a slash is part of the full class name, like named container queries

Add support for readonly array values by @unional in dcastil/tailwind-merge#652

Documentation

Fix broken links in README by @maurer2 in dcastil/tailwind-merge#662

Other

Harden internal CI pipeline security by omitting git checkout by @dcastil, suggested by @kyletaylored in dcastil/tailwind-merge@6b2499c

Full Changelog: dcastil/tailwind-merge@v3.5.0...v3.6.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @block, @openclaw, @sourcegraph, @mike-healy and more via @thnxdev for sponsoring tailwind-merge! ❤️

v3.5.0

New Features

Add support for Tailwind CSS v4.2 by @dcastil in dcastil/tailwind-merge#651

Full Changelog: dcastil/tailwind-merge@v3.4.1...v3.5.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @block, @openclaw, @sourcegraph<...
Description has been truncated

…0 updates Bumps the production-deps group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@auth/drizzle-adapter](https://github.com/nextauthjs/next-auth) | `1.11.2` | `1.11.3` | | [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.52.0` | `10.68.0` | | [bcryptjs](https://github.com/dcodeIO/bcrypt.js) | `2.4.3` | `3.0.3` | | [next](https://github.com/vercel/next.js) | `15.5.18` | `16.2.12` | | [next-auth](https://github.com/nextauthjs/next-auth) | `5.0.0-beta.31` | `5.0.0-beta.32` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.0.0` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.0.0` | `19.2.8` | | [resend](https://github.com/resend/resend-node) | `4.8.0` | `6.18.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `2.6.1` | `3.6.0` | | [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` | Updates `@auth/drizzle-adapter` from 1.11.2 to 1.11.3 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/@auth/drizzle-adapter@1.11.2...@auth/drizzle-adapter@1.11.3) Updates `@sentry/nextjs` from 10.52.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.52.0...10.68.0) Updates `bcryptjs` from 2.4.3 to 3.0.3 - [Release notes](https://github.com/dcodeIO/bcrypt.js/releases) - [Commits](dcodeIO/bcrypt.js@2.4.3...v3.0.3) Updates `next` from 15.5.18 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.5.18...v16.2.12) Updates `next-auth` from 5.0.0-beta.31 to 5.0.0-beta.32 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@5.0.0-beta.31...next-auth@5.0.0-beta.32) Updates `react` from 19.0.0 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.0.0 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `resend` from 4.8.0 to 6.18.0 - [Release notes](https://github.com/resend/resend-node/releases) - [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md) - [Commits](resend/resend-node@v4.8.0...v6.18.0) Updates `tailwind-merge` from 2.6.1 to 3.6.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v2.6.1...v3.6.0) Updates `zod` from 3.25.76 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.4.3) --- updated-dependencies: - dependency-name: "@auth/drizzle-adapter" dependency-version: 1.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@sentry/nextjs" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: bcryptjs dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: next dependency-version: 16.2.12 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: next-auth dependency-version: 5.0.0-beta.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: resend dependency-version: 6.18.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-27T05:12:42Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
@types/bcryptjs@2.4.6 ⏵ 3.0.0			^-31	^-29
next@15.5.18 ⏵ 16.2.12	^-1	⁺³¹	^-12
next-auth@5.0.0-beta.31 ⏵ 5.0.0-beta.32		⁺⁷⁵
@types/react@19.2.14 ⏵ 19.2.17
bcryptjs@2.4.3 ⏵ 3.0.3	⁺¹				⁺²⁰
@auth/drizzle-adapter@1.11.2 ⏵ 1.11.3	⁺¹			⁺⁶
react@19.0.0 ⏵ 19.2.8
tailwind-merge@2.6.1 ⏵ 3.6.0			⁺¹
zod@3.25.76 ⏵ 4.4.3
@sentry/nextjs@10.52.0 ⏵ 10.68.0	^-2			⁺¹
react-dom@19.0.0 ⏵ 19.2.8	⁺¹		⁺¹
resend@4.8.0 ⏵ 6.18.0	^-1			⁺¹

View full report

socket-security · 2026-07-27T05:12:44Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@auth/core` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → `npm/@auth/drizzle-adapter@1.11.3` → `npm/next-auth@5.0.0-beta.32` → `npm/@auth/core@0.41.3` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@auth/core@0.41.3`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@sentry/node-core` is 60.0% likely obfuscated Confidence: 0.60 Location: Package overview From: package-lock.json → `npm/@sentry/nextjs@10.68.0` → `npm/@sentry/node-core@10.68.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@sentry/node-core@10.68.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `webpack` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → `npm/@sentry/nextjs@10.68.0` → `npm/webpack@5.109.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/webpack@5.109.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

codacy-production · 2026-07-27T05:14:18Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

dependabot Bot added the chore Version bumps, config, dependencies label Jul 27, 2026

dependabot Bot requested a review from dbwg2009 as a code owner July 27, 2026 05:11

dependabot Bot added the chore Version bumps, config, dependencies label Jul 27, 2026

github-actions Bot added chore Version bumps, config, dependencies and removed chore Version bumps, config, dependencies labels Jul 27, 2026

github-actions Bot added chore Version bumps, config, dependencies and removed chore Version bumps, config, dependencies labels Aug 3, 2026

Navigation Menu

chore(deps): bump the production-deps group across 1 directory with 10 updates - #155

chore(deps): bump the production-deps group across 1 directory with 10 updates#155
dependabot[bot] wants to merge 1 commit into
Developmentfrom
dependabot/npm_and_yarn/Development/production-deps-f578269237

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

codacy-production Bot commented Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​auth/drizzle-adapter@​1.11.3

Other

10.68.0

Bundle size 📦

10.68.0

10.67.0

v3.0.3

Bug fixes

v3.0.2

Bug fixes

v3.0.1

Bug fixes

v3.0.0

Breaking changes

Features

Other

Backlog from v2

v16.2.12

What's Changed

v16.2.11

v16.2.10

v16.2.9

v16.2.8

v16.2.7

Core Changes

next-auth@5.0.0-beta.32

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

New React Features

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

19.2.3 (Dec 11, 2025)

React Server Components

19.2.2 (Dec 11, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

New React Features

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

`@auth/drizzle-adapter@1`.11.3

Add `resend.suppressions` with `add`, `get`, `list`, `remove`, and batch `add`/`remove` methods for managing suppression list entries (877fa56)

Add `resend.suppressions` with `add`, `get`, `list`, `remove`, and batch `add`/`remove` methods for managing suppression list entries (877fa56)

Add `resend.suppressions` with `add`, `get`, `list`, `remove`, and batch `add`/`remove` methods for managing suppression list entries

Add `resend.suppressions` with `add`, `get`, `list`, `remove`, and batch `add`/`remove` methods for managing suppression list entries