build(deps): bump the production-dependencies group across 1 directory with 24 updates by dependabot[bot] · Pull Request #122 · fintrack-team/FinTrack

dependabot · 2026-07-26T15:13:45Z

Bumps the production-dependencies group with 24 updates in the / directory:

Package	From	To
next	`16.2.9`	`16.2.12`
@rolldown/binding-linux-x64-gnu	`1.1.1`	`1.2.0`
@rolldown/binding-linux-x64-musl	`1.1.1`	`1.2.0`
@rollup/rollup-linux-x64-gnu	`4.62.2`	`4.62.3`
@tailwindcss/oxide-linux-x64-gnu	`4.3.1`	`4.3.3`
lightningcss-linux-x64-gnu	`1.32.0`	`1.33.0`
express-rate-limit	`8.5.2`	`8.6.0`
google-auth-library	`10.9.0`	`10.9.1`
helmet	`8.2.0`	`8.3.0`
mongoose	`9.7.2`	`9.8.0`
openai	`6.45.0`	`6.49.0`
stripe	`22.3.0`	`22.3.2`
grammy	`1.44.0`	`1.45.1`
@auth/prisma-adapter	`2.11.2`	`2.11.3`
@tanstack/react-query	`5.101.2`	`5.101.4`
@tanstack/react-query-devtools	`5.101.2`	`5.101.4`
i18next	`26.3.4`	`26.3.6`
next-auth	`4.24.14`	`4.24.15`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
react-i18next	`17.0.8`	`17.0.11`
tailwindcss	`4.3.1`	`4.3.3`
@tailwindcss/oxide-linux-x64-musl	`4.3.1`	`4.3.3`
lightningcss-linux-x64-musl	`1.32.0`	`1.33.0`

Updates next from 16.2.9 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Backport/docs fixes 16.2 - July round by @icyJoseph in vercel/next.js#96031

[Backport] Fixes to support TypeScript 7 by @lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

Commits

2234717 v16.2.12
957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
b56eb16 Backport/docs fixes 16.2 - July round (#96031)
9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
Additional commits viewable in compare view

Updates @rolldown/binding-linux-x64-gnu from 1.1.1 to 1.2.0

Release notes

Sourced from @rolldown/binding-linux-x64-gnu's releases.

v1.2.0

[1.2.0] - 2026-07-15

🚀 Features

dev: skip shipping factories for newly imported top-level modules (#10223) by @h-a-n-a

dev: per-client ship map for HMR patch sizing (#10208) by @h-a-n-a

dev: client-side HMR (#10164) by @h-a-n-a

dev: send a full-reload update to clients when a tsconfig changes (#10262) by @shulaoda

treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as side-effect free (#10267) by @sapphi-red

rewrite import.meta['url'] (#10251) by @sapphi-red

add FILE_NOT_FOUND error (#10220) by @sapphi-red

treat import.meta.ROLLUP_FILE_URL_* as side-effect free (#10217) by @sapphi-red

🐛 Bug Fixes

sourcemap: preserve unmapped boundaries during composition (#10254) by @hyfdev

[format] in *FileNames option for ESM format should be es instead of esm (#10214) by @sapphi-red

sourcemap: preserve coarse mappings during composition (#10249) by @hyfdev

rolldown_plugin_vite_import_glob: support tsconfig paths with import.meta.glob (#10167) by @sapphi-red

dev: clear tsconfig caches for bare full builds (#10276) by @shulaoda

dev: force a full rebuild when a tsconfig changes (#10261) by @shulaoda

treat rooted drive-less module ids as absolute in preserveModules naming (#10235) by @IWANABETHATGUY

watch: rebuild when tsconfig files change (#10258) by @shulaoda

watch: drop tsconfig-merged transform options on each rebuild (#10257) by @shulaoda

incorrect EMPTY_IMPORT_META warning for import.meta.ROLLUP_FILE_URL_* for CJS output (#10221) by @sapphi-red

deconflict: rename CJS locals shadowing wrapped-ESM namespace objects (#9970) by @IWANABETHATGUY

rolldown: drop the unused runtime module after entry-level external flattening (#10237) by @IWANABETHATGUY

rolldown: re-propagate has_dynamic_exports to transitive star importers (#10239) by @IWANABETHATGUY

tree-shaking: tree-shake destructured dynamic import namespace bindings (#10213) by @logaretm

s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix (#10211) by @satyamg1620

🚜 Refactor

dev: move full-reload to client side (#10207) by @h-a-n-a

readability follow-ups to the ReplaceWith migration (#10286) by @IWANABETHATGUY

replace take_in-then-write-back with ReplaceWith and by-value moves (#10285) by @Boshen

share the main resolver's cache with the transformer's tsconfig lookups (#10205) by @shulaoda

rolldown: extract the ns star-external __reExport emission rule into LinkingMetadata (#10238) by @IWANABETHATGUY

rolldown: unify link/generate diagnostics into a Diagnostics accumulator (#10234) by @IWANABETHATGUY

sourcemap_filenames: drop dead sourcemap-filename plumbing (#10189) by @IWANABETHATGUY

extract external import symbol merging into a method (#10224) by @IWANABETHATGUY

rolldown: skip CJS namespace merging under strict execution order (#10203) by @hyfdev

resolve the manual tsconfig per file instead of once at startup (#10200) by @shulaoda

rolldown: route interop ESM init emission through a shared init-target view (#10202) by @hyfdev

rolldown: collapse vestigial wrap-kind state and share chunk sort helper (#10201) by @hyfdev

📚 Documentation

show plugin kinds in JSDoc and each hook's description (#10218) by @sapphi-red

... (truncated)

Changelog

Sourced from @rolldown/binding-linux-x64-gnu's changelog.

[1.2.0] - 2026-07-15

🚀 Features

dev: skip shipping factories for newly imported top-level modules (#10223) by @h-a-n-a

dev: per-client ship map for HMR patch sizing (#10208) by @h-a-n-a

dev: client-side HMR (#10164) by @h-a-n-a

dev: send a full-reload update to clients when a tsconfig changes (#10262) by @shulaoda

treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as side-effect free (#10267) by @sapphi-red

rewrite import.meta['url'] (#10251) by @sapphi-red

add FILE_NOT_FOUND error (#10220) by @sapphi-red

treat import.meta.ROLLUP_FILE_URL_* as side-effect free (#10217) by @sapphi-red

🐛 Bug Fixes

sourcemap: preserve unmapped boundaries during composition (#10254) by @hyfdev

[format] in *FileNames option for ESM format should be es instead of esm (#10214) by @sapphi-red

sourcemap: preserve coarse mappings during composition (#10249) by @hyfdev

rolldown_plugin_vite_import_glob: support tsconfig paths with import.meta.glob (#10167) by @sapphi-red

dev: clear tsconfig caches for bare full builds (#10276) by @shulaoda

dev: force a full rebuild when a tsconfig changes (#10261) by @shulaoda

treat rooted drive-less module ids as absolute in preserveModules naming (#10235) by @IWANABETHATGUY

watch: rebuild when tsconfig files change (#10258) by @shulaoda

watch: drop tsconfig-merged transform options on each rebuild (#10257) by @shulaoda

incorrect EMPTY_IMPORT_META warning for import.meta.ROLLUP_FILE_URL_* for CJS output (#10221) by @sapphi-red

deconflict: rename CJS locals shadowing wrapped-ESM namespace objects (#9970) by @IWANABETHATGUY

rolldown: drop the unused runtime module after entry-level external flattening (#10237) by @IWANABETHATGUY

rolldown: re-propagate has_dynamic_exports to transitive star importers (#10239) by @IWANABETHATGUY

tree-shaking: tree-shake destructured dynamic import namespace bindings (#10213) by @logaretm

s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix (#10211) by @satyamg1620

🚜 Refactor

dev: move full-reload to client side (#10207) by @h-a-n-a

readability follow-ups to the ReplaceWith migration (#10286) by @IWANABETHATGUY

replace take_in-then-write-back with ReplaceWith and by-value moves (#10285) by @Boshen

share the main resolver's cache with the transformer's tsconfig lookups (#10205) by @shulaoda

rolldown: extract the ns star-external __reExport emission rule into LinkingMetadata (#10238) by @IWANABETHATGUY

rolldown: unify link/generate diagnostics into a Diagnostics accumulator (#10234) by @IWANABETHATGUY

sourcemap_filenames: drop dead sourcemap-filename plumbing (#10189) by @IWANABETHATGUY

extract external import symbol merging into a method (#10224) by @IWANABETHATGUY

rolldown: skip CJS namespace merging under strict execution order (#10203) by @hyfdev

resolve the manual tsconfig per file instead of once at startup (#10200) by @shulaoda

rolldown: route interop ESM init emission through a shared init-target view (#10202) by @hyfdev

rolldown: collapse vestigial wrap-kind state and share chunk sort helper (#10201) by @hyfdev

📚 Documentation

show plugin kinds in JSDoc and each hook's description (#10218) by @sapphi-red

add an explanation about removing imports from external modules without any messages (#10215) by @sapphi-red

... (truncated)

Commits

03e1e34 release: v1.2.0 (#10292)
f49ebe4 fix(sourcemap): preserve unmapped boundaries during composition (#10254)
1d3fb15 feat(dev): skip shipping factories for newly imported top-level modules (#10223)
3bd65ff refactor(dev): move full-reload to client side (#10207)
ab584a3 fix(sourcemap): preserve coarse mappings during composition (#10249)
84afd72 feat(dev): client-side HMR (#10164)
152ff69 fix(rolldown_plugin_vite_import_glob): support tsconfig paths with `import.me...
bb96d64 fix: treat rooted drive-less module ids as absolute in preserveModules naming...
fd6a0d0 fix(watch): rebuild when tsconfig files change (#10258)
fd15520 feat: treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as si...
Additional commits viewable in compare view

Updates @rolldown/binding-linux-x64-musl from 1.1.1 to 1.2.0

Release notes

Sourced from @rolldown/binding-linux-x64-musl's releases.

v1.2.0

[1.2.0] - 2026-07-15

🚀 Features

dev: skip shipping factories for newly imported top-level modules (#10223) by @h-a-n-a

dev: per-client ship map for HMR patch sizing (#10208) by @h-a-n-a

dev: client-side HMR (#10164) by @h-a-n-a

dev: send a full-reload update to clients when a tsconfig changes (#10262) by @shulaoda

treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as side-effect free (#10267) by @sapphi-red

rewrite import.meta['url'] (#10251) by @sapphi-red

add FILE_NOT_FOUND error (#10220) by @sapphi-red

treat import.meta.ROLLUP_FILE_URL_* as side-effect free (#10217) by @sapphi-red

🐛 Bug Fixes

sourcemap: preserve unmapped boundaries during composition (#10254) by @hyfdev

[format] in *FileNames option for ESM format should be es instead of esm (#10214) by @sapphi-red

sourcemap: preserve coarse mappings during composition (#10249) by @hyfdev

rolldown_plugin_vite_import_glob: support tsconfig paths with import.meta.glob (#10167) by @sapphi-red

dev: clear tsconfig caches for bare full builds (#10276) by @shulaoda

dev: force a full rebuild when a tsconfig changes (#10261) by @shulaoda

treat rooted drive-less module ids as absolute in preserveModules naming (#10235) by @IWANABETHATGUY

watch: rebuild when tsconfig files change (#10258) by @shulaoda

watch: drop tsconfig-merged transform options on each rebuild (#10257) by @shulaoda

incorrect EMPTY_IMPORT_META warning for import.meta.ROLLUP_FILE_URL_* for CJS output (#10221) by @sapphi-red

deconflict: rename CJS locals shadowing wrapped-ESM namespace objects (#9970) by @IWANABETHATGUY

rolldown: drop the unused runtime module after entry-level external flattening (#10237) by @IWANABETHATGUY

rolldown: re-propagate has_dynamic_exports to transitive star importers (#10239) by @IWANABETHATGUY

tree-shaking: tree-shake destructured dynamic import namespace bindings (#10213) by @logaretm

s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix (#10211) by @satyamg1620

🚜 Refactor

dev: move full-reload to client side (#10207) by @h-a-n-a

readability follow-ups to the ReplaceWith migration (#10286) by @IWANABETHATGUY

replace take_in-then-write-back with ReplaceWith and by-value moves (#10285) by @Boshen

share the main resolver's cache with the transformer's tsconfig lookups (#10205) by @shulaoda

rolldown: extract the ns star-external __reExport emission rule into LinkingMetadata (#10238) by @IWANABETHATGUY

rolldown: unify link/generate diagnostics into a Diagnostics accumulator (#10234) by @IWANABETHATGUY

sourcemap_filenames: drop dead sourcemap-filename plumbing (#10189) by @IWANABETHATGUY

extract external import symbol merging into a method (#10224) by @IWANABETHATGUY

rolldown: skip CJS namespace merging under strict execution order (#10203) by @hyfdev

resolve the manual tsconfig per file instead of once at startup (#10200) by @shulaoda

rolldown: route interop ESM init emission through a shared init-target view (#10202) by @hyfdev

rolldown: collapse vestigial wrap-kind state and share chunk sort helper (#10201) by @hyfdev

📚 Documentation

show plugin kinds in JSDoc and each hook's description (#10218) by @sapphi-red

... (truncated)

Changelog

Sourced from @rolldown/binding-linux-x64-musl's changelog.

[1.2.0] - 2026-07-15

🚀 Features

dev: skip shipping factories for newly imported top-level modules (#10223) by @h-a-n-a

dev: per-client ship map for HMR patch sizing (#10208) by @h-a-n-a

dev: client-side HMR (#10164) by @h-a-n-a

dev: send a full-reload update to clients when a tsconfig changes (#10262) by @shulaoda

treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as side-effect free (#10267) by @sapphi-red

rewrite import.meta['url'] (#10251) by @sapphi-red

add FILE_NOT_FOUND error (#10220) by @sapphi-red

treat import.meta.ROLLUP_FILE_URL_* as side-effect free (#10217) by @sapphi-red

🐛 Bug Fixes

sourcemap: preserve unmapped boundaries during composition (#10254) by @hyfdev

[format] in *FileNames option for ESM format should be es instead of esm (#10214) by @sapphi-red

sourcemap: preserve coarse mappings during composition (#10249) by @hyfdev

rolldown_plugin_vite_import_glob: support tsconfig paths with import.meta.glob (#10167) by @sapphi-red

dev: clear tsconfig caches for bare full builds (#10276) by @shulaoda

dev: force a full rebuild when a tsconfig changes (#10261) by @shulaoda

treat rooted drive-less module ids as absolute in preserveModules naming (#10235) by @IWANABETHATGUY

watch: rebuild when tsconfig files change (#10258) by @shulaoda

watch: drop tsconfig-merged transform options on each rebuild (#10257) by @shulaoda

incorrect EMPTY_IMPORT_META warning for import.meta.ROLLUP_FILE_URL_* for CJS output (#10221) by @sapphi-red

deconflict: rename CJS locals shadowing wrapped-ESM namespace objects (#9970) by @IWANABETHATGUY

rolldown: drop the unused runtime module after entry-level external flattening (#10237) by @IWANABETHATGUY

rolldown: re-propagate has_dynamic_exports to transitive star importers (#10239) by @IWANABETHATGUY

tree-shaking: tree-shake destructured dynamic import namespace bindings (#10213) by @logaretm

s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix (#10211) by @satyamg1620

🚜 Refactor

dev: move full-reload to client side (#10207) by @h-a-n-a

readability follow-ups to the ReplaceWith migration (#10286) by @IWANABETHATGUY

replace take_in-then-write-back with ReplaceWith and by-value moves (#10285) by @Boshen

share the main resolver's cache with the transformer's tsconfig lookups (#10205) by @shulaoda

rolldown: extract the ns star-external __reExport emission rule into LinkingMetadata (#10238) by @IWANABETHATGUY

rolldown: unify link/generate diagnostics into a Diagnostics accumulator (#10234) by @IWANABETHATGUY

sourcemap_filenames: drop dead sourcemap-filename plumbing (#10189) by @IWANABETHATGUY

extract external import symbol merging into a method (#10224) by @IWANABETHATGUY

rolldown: skip CJS namespace merging under strict execution order (#10203) by @hyfdev

resolve the manual tsconfig per file instead of once at startup (#10200) by @shulaoda

rolldown: route interop ESM init emission through a shared init-target view (#10202) by @hyfdev

rolldown: collapse vestigial wrap-kind state and share chunk sort helper (#10201) by @hyfdev

📚 Documentation

show plugin kinds in JSDoc and each hook's description (#10218) by @sapphi-red

add an explanation about removing imports from external modules without any messages (#10215) by @sapphi-red

... (truncated)

Commits

03e1e34 release: v1.2.0 (#10292)
f49ebe4 fix(sourcemap): preserve unmapped boundaries during composition (#10254)
1d3fb15 feat(dev): skip shipping factories for newly imported top-level modules (#10223)
3bd65ff refactor(dev): move full-reload to client side (#10207)
ab584a3 fix(sourcemap): preserve coarse mappings during composition (#10249)
84afd72 feat(dev): client-side HMR (#10164)
152ff69 fix(rolldown_plugin_vite_import_glob): support tsconfig paths with `import.me...
bb96d64 fix: treat rooted drive-less module ids as absolute in preserveModules naming...
fd6a0d0 fix(watch): rebuild when tsconfig files change (#10258)
fd15520 feat: treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as si...
Additional commits viewable in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.62.2 to 4.62.3

Release notes

Sourced from @rollup/rollup-linux-x64-gnu's releases.

v4.62.3

4.62.3

2026-07-26

Bug Fixes

Sanitize illegal characters preserved modules input base (#6439)

Pull Requests

#6421: docs: update x_google_ignoreList link to canonical URL (@DucMinhNe, @lukastaegert)

#6422: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6423: chore(deps): update actions/checkout action to v7 (@renovate[bot])

#6424: chore(deps): update dependency eslint-plugin-unicorn to v68 (@renovate[bot], @lukastaegert)

#6425: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6426: chore(deps): lock file maintenance (@renovate[bot])

#6432: fix: make isLegal idempotent by not using a global-flag regex (@spokodev, @lukastaegert)

#6433: docs: clarify sideEffects and moduleSideEffects (@ishaanlabs-gg, @lukastaegert)

#6434: chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (@renovate[bot], @lukastaegert)

#6435: fix(deps): update minor/patch updates (@renovate[bot])

#6436: chore(deps): update actions/cache action to v6 (@renovate[bot])

#6438: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6439: Sanitize input base before computing preserved module chunk names (@MahinAnowar, @lukastaegert)

#6443: chore(deps): update dependency eslint-plugin-unicorn to v71 (@renovate[bot], @lukastaegert)

#6444: fix(deps): update rust crate swc_compiler_base to v60 (@renovate[bot])

#6446: chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (@renovate[bot])

#6447: fix(deps): update minor/patch updates (@renovate[bot])

#6448: chore(deps): update actions/setup-node action to v7 (@renovate[bot])

#6449: chore(deps): update dependency eslint-plugin-unicorn to v72 (@renovate[bot])

#6450: chore(deps): update dependency pinia to v4 (@renovate[bot], @lukastaegert)

#6451: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6455: docs: fix broken commonjs namedExports link in troubleshooting (@Hashim1999164, @lukastaegert)

#6456: fix(deps): update minor/patch updates (@renovate[bot])

#6457: chore(deps): update dependency magic-string to v1 (@renovate[bot], @lukastaegert)

#6458: fix(deps): update swc monorepo (major) (@renovate[bot])

#6459: chore(deps): lock file maintenance (@renovate[bot])

#6460: Fix build:docs after rollup update (@lukastaegert)

Changelog

Sourced from @rollup/rollup-linux-x64-gnu's changelog.

4.62.3

2026-07-26

Bug Fixes

Sanitize illegal characters preserved modules input base (#6439)

Pull Requests

#6421: docs: update x_google_ignoreList link to canonical URL (@DucMinhNe, @lukastaegert)

#6422: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6423: chore(deps): update actions/checkout action to v7 (@renovate[bot])

#6424: chore(deps): update dependency eslint-plugin-unicorn to v68 (@renovate[bot], @lukastaegert)

#6425: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6426: chore(deps): lock file maintenance (@renovate[bot])

#6432: fix: make isLegal idempotent by not using a global-flag regex (@spokodev, @lukastaegert)

#6433: docs: clarify sideEffects and moduleSideEffects (@ishaanlabs-gg, @lukastaegert)

#6434: chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (@renovate[bot], @lukastaegert)

#6435: fix(deps): update minor/patch updates (@renovate[bot])

#6436: chore(deps): update actions/cache action to v6 (@renovate[bot])

#6438: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6439: Sanitize input base before computing preserved module chunk names (@MahinAnowar, @lukastaegert)

#6443: chore(deps): update dependency eslint-plugin-unicorn to v71 (@renovate[bot], @lukastaegert)

#6444: fix(deps): update rust crate swc_compiler_base to v60 (@renovate[bot])

#6446: chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (@renovate[bot])

#6447: fix(deps): update minor/patch updates (@renovate[bot])

#6448: chore(deps): update actions/setup-node action to v7 (@renovate[bot])

#6449: chore(deps): update dependency eslint-plugin-unicorn to v72 (@renovate[bot])

#6450: chore(deps): update dependency pinia to v4 (@renovate[bot], @lukastaegert)

#6451: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6455: docs: fix broken commonjs namedExports link in troubleshooting (@Hashim1999164, @lukastaegert)

#6456: fix(deps): update minor/patch updates (@renovate[bot])

#6457: chore(deps): update dependency magic-string to v1 (@renovate[bot], @lukastaegert)

#6458: fix(deps): update swc monorepo (major) (@renovate[bot])

#6459: chore(deps): lock file maintenance (@renovate[bot])

#6460: Fix build:docs after rollup update (@lukastaegert)

Commits

a80a197 4.62.3
e87e19b Update audit resolve

…y with 24 updates Bumps the production-dependencies group with 24 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `16.2.9` | `16.2.12` | | [@rolldown/binding-linux-x64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.1.1` | `1.2.0` | | [@rolldown/binding-linux-x64-musl](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.1.1` | `1.2.0` | | [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.62.2` | `4.62.3` | | [@tailwindcss/oxide-linux-x64-gnu](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/crates/node/npm/linux-x64-gnu) | `4.3.1` | `4.3.3` | | [lightningcss-linux-x64-gnu](https://github.com/parcel-bundler/lightningcss) | `1.32.0` | `1.33.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.2` | `8.6.0` | | [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.9.0` | `10.9.1` | | [helmet](https://github.com/helmetjs/helmet) | `8.2.0` | `8.3.0` | | [mongoose](https://github.com/Automattic/mongoose) | `9.7.2` | `9.8.0` | | [openai](https://github.com/openai/openai-node) | `6.45.0` | `6.49.0` | | [stripe](https://github.com/stripe/stripe-node) | `22.3.0` | `22.3.2` | | [grammy](https://github.com/grammyjs/grammY) | `1.44.0` | `1.45.1` | | [@auth/prisma-adapter](https://github.com/nextauthjs/next-auth) | `2.11.2` | `2.11.3` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.2` | `5.101.4` | | [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.101.2` | `5.101.4` | | [i18next](https://github.com/i18next/i18next) | `26.3.4` | `26.3.6` | | [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.14` | `4.24.15` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.8` | `17.0.11` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.1` | `4.3.3` | | [@tailwindcss/oxide-linux-x64-musl](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/crates/node/npm/linux-x64-musl) | `4.3.1` | `4.3.3` | | [lightningcss-linux-x64-musl](https://github.com/parcel-bundler/lightningcss) | `1.32.0` | `1.33.0` | Updates `next` from 16.2.9 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.9...v16.2.12) Updates `@rolldown/binding-linux-x64-gnu` from 1.1.1 to 1.2.0 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.0/packages/rolldown) Updates `@rolldown/binding-linux-x64-musl` from 1.1.1 to 1.2.0 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.0/packages/rolldown) Updates `@rollup/rollup-linux-x64-gnu` from 4.62.2 to 4.62.3 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.62.2...v4.62.3) Updates `@tailwindcss/oxide-linux-x64-gnu` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/crates/node/npm/linux-x64-gnu) Updates `lightningcss-linux-x64-gnu` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `express-rate-limit` from 8.5.2 to 8.6.0 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.6.0) Updates `google-auth-library` from 10.9.0 to 10.9.1 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v10.9.1/core/packages/google-auth-library-nodejs) Updates `helmet` from 8.2.0 to 8.3.0 - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v8.2.0...v8.3.0) Updates `mongoose` from 9.7.2 to 9.8.0 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.7.2...9.8.0) Updates `openai` from 6.45.0 to 6.49.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v6.45.0...v6.49.0) Updates `stripe` from 22.3.0 to 22.3.2 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.3.0...v22.3.2) Updates `grammy` from 1.44.0 to 1.45.1 - [Release notes](https://github.com/grammyjs/grammY/releases) - [Commits](grammyjs/grammY@v1.44.0...v1.45.1) Updates `@auth/prisma-adapter` from 2.11.2 to 2.11.3 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/@auth/prisma-adapter@2.11.2...@auth/prisma-adapter@2.11.3) Updates `@tanstack/react-query` from 5.101.2 to 5.101.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query) Updates `@tanstack/react-query-devtools` from 5.101.2 to 5.101.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.101.4/packages/react-query-devtools) Updates `i18next` from 26.3.4 to 26.3.6 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v26.3.4...v26.3.6) Updates `next-auth` from 4.24.14 to 4.24.15 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.14...next-auth@4.24.15) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `react-i18next` from 17.0.8 to 17.0.11 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v17.0.8...v17.0.11) Updates `tailwindcss` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) Updates `@tailwindcss/oxide-linux-x64-musl` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/crates/node/npm/linux-x64-musl) Updates `lightningcss-linux-x64-musl` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) --- updated-dependencies: - dependency-name: next dependency-version: 16.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@rolldown/binding-linux-x64-gnu" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@rolldown/binding-linux-x64-musl" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.62.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tailwindcss/oxide-linux-x64-gnu" dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lightningcss-linux-x64-gnu dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-version: 8.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: google-auth-library dependency-version: 10.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: helmet dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: mongoose dependency-version: 9.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: openai dependency-version: 6.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: stripe dependency-version: 22.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: grammy dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@auth/prisma-adapter" dependency-version: 2.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tanstack/react-query" dependency-version: 5.101.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tanstack/react-query-devtools" dependency-version: 5.101.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: i18next dependency-version: 26.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: next-auth dependency-version: 4.24.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-i18next dependency-version: 17.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tailwindcss/oxide-linux-x64-musl" dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lightningcss-linux-x64-musl dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-07-26T15:13:52Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
fintrack-web	Ready	Preview, Comment	Jul 26, 2026 3:15pm

dependabot · 2026-08-02T15:12:48Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026

vercel Bot deployed to Preview – fintrack-web July 26, 2026 15:15 View deployment

dependabot Bot closed this Aug 2, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-55e4013911 branch August 2, 2026 15:12

Navigation Menu

Uh oh!

build(deps): bump the production-dependencies group across 1 directory with 24 updates - #122

build(deps): bump the production-dependencies group across 1 directory with 24 updates#122
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-55e4013911

dependabot Bot commented on behalf of github Jul 26, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jul 26, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v16.2.12

What's Changed

v16.2.11

v16.2.10

v1.2.0

[1.2.0] - 2026-07-15

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

[1.2.0] - 2026-07-15

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

v1.2.0

[1.2.0] - 2026-07-15

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

[1.2.0] - 2026-07-15

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

v4.62.3

4.62.3

Bug Fixes

Pull Requests

4.62.3

Bug Fixes

Pull Requests

Uh oh!

vercel Bot commented Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Aug 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 26, 2026 •

edited

Loading

vercel Bot commented Jul 26, 2026 •

edited

Loading