build(deps): bump the production-dependencies group across 1 directory with 25 updates by dependabot[bot] · Pull Request #127 · fintrack-team/FinTrack

dependabot · 2026-08-02T15:14:05Z

Bumps the production-dependencies group with 25 updates in the / directory:

Package	From	To
next	`16.2.9`	`16.2.12`
@rolldown/binding-linux-x64-gnu	`1.1.1`	`1.2.1`
@rolldown/binding-linux-x64-musl	`1.1.1`	`1.2.1`
@rollup/rollup-linux-x64-gnu	`4.62.2`	`4.62.3`
@tailwindcss/oxide-linux-x64-gnu	`4.3.1`	`4.3.3`
lightningcss-linux-x64-gnu	`1.32.0`	`1.33.0`
express-rate-limit	`8.5.2`	`8.6.1`
google-auth-library	`10.9.0`	`10.9.1`
helmet	`8.2.0`	`8.3.0`
mongoose	`9.7.2`	`9.9.0`
stripe	`22.3.0`	`22.4.0`
grammy	`1.44.0`	`1.45.1`
@auth/prisma-adapter	`2.11.2`	`2.11.3`
@tanstack/react-query	`5.101.2`	`5.101.4`
@tanstack/react-query-devtools	`5.101.2`	`5.101.4`
axios	`1.18.1`	`1.19.0`
framer-motion	`12.42.2`	`12.43.0`
i18next	`26.3.4`	`26.3.6`
next-auth	`4.24.14`	`4.24.15`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
react-i18next	`17.0.8`	`17.0.11`
tailwindcss	`4.3.1`	`4.3.3`
@tailwindcss/oxide-linux-x64-musl	`4.3.1`	`4.3.3`
lightningcss-linux-x64-musl	`1.32.0`	`1.33.0`

Updates next from 16.2.9 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Backport/docs fixes 16.2 - July round by @icyJoseph in vercel/next.js#96031

[Backport] Fixes to support TypeScript 7 by @lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

Commits

2234717 v16.2.12
957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
b56eb16 Backport/docs fixes 16.2 - July round (#96031)
9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
Additional commits viewable in compare view

Updates @rolldown/binding-linux-x64-gnu from 1.1.1 to 1.2.1

Release notes

Sourced from @rolldown/binding-linux-x64-gnu's releases.

v1.2.1

[1.2.1] - 2026-07-29

🚀 Features

dev: support hotUpdate hook (#10305) by @h-a-n-a

dev: expose disableWatcher through the dev engine bindings (#10474) by @shulaoda

plugin: surface output-option callbacks in [PLUGIN_TIMINGS] (#10411) by @IWANABETHATGUY

import.meta.ROLLDOWN_FILE_URL_<referenceId>_<urlId> support to pass context to resolveFileUrl hook (#10297) by @sapphi-red

dev: skip the HMR update when a module's rebuilt output is unchanged (#10333) by @h-a-n-a

code-splitting: wrap strict execution order modules on demand (#10104) by @hyfdev

support import.meta.ROLLDOWN_FILE_URL_* (#10296) by @sapphi-red

implement resolveFileUrl plugin hook (#10291) by @sapphi-red

magic-string: support storeName on overwrite/update (#10312) by @IWANABETHATGUY

🐛 Bug Fixes

external: keep __toESM when the importing module is tree-shaken (#10516) by @IWANABETHATGUY

dev: resolve re-exports from externals through a real import (#10489) by @tbvjaos510

code-splitting: route CJS barrel initialization per consumer (#10488) by @hyfdev

error: align filename-pattern diagnostics with Rollup's wording (#10501) by @IWANABETHATGUY

plugin: validate emitted prebuilt-chunk file names (#10399) by @IWANABETHATGUY

code-splitting: point a two-argument dynamic import at the chunk that holds the module (#10479) by @hyfdev

common: align is_path_fragment with Rollup's isPathFragment (#10398) by @IWANABETHATGUY

code-splitting: never name an internal chunk export then (#10480) by @hyfdev

code-splitting: avoid creating call-site-triggered entry facades (#10485) by @hyfdev

code-splitting: collect top-level eager order reasons in every strict build (#10463) by @hyfdev

code-splitting: let a cross-chunk dynamic importer carry the order trigger (#10456) by @hyfdev

code-splitting: avoid the dynamic-entry facade when the same-chunk collapse carries the trigger (#10433) by @hyfdev

binding: forward resolveId options.kind to callable builtin plugins (#10440) by @martijnwalraven

dev: keep the export name of export * as ns from (#10476) by @tbvjaos510

code-splitting: only split an entry facade when something else can load its chunk (#10441) by @hyfdev

code-splitting: fold the runtime chunk back after order lowering (#10414) by @hyfdev

runtime: don't leave default undefined for cjs that fakes __esModule (#10453) by @IWANABETHATGUY

import-glob: escape generated string literals (#10438) by @shantanuraj

preserve-modules: don't assume every chunk mirrors a module (#10442) by @hyfdev

filter: treat missing hook inputs as non-matches, not panics (#10443) by @IWANABETHATGUY

code-splitting: keep CommonJS modules wrapped under strict execution order (#10405) by @hyfdev

code-splitting: align dynamicImports metadata with the rewritten import() specifier (#10430) by @hyfdev

dev: skip user plugin hooks for ?rolldown-lazy proxy modules (#10426) by @unknownjedi

treeshake: preserve side-effect-free spread arguments in manual-pure chains (#10432) by @IWANABETHATGUY

treeshake: preserve eagerly evaluated child effects of manual pure chains (#10427) by @Nic-Polumeyv

code-splitting: initialize pure definers behind star re-export barrels under strict execution order (#10409) by @hyfdev

resolveId: reject string id filters (must be a RegExp) (#10412) by @IWANABETHATGUY

code-splitting: collect eager order reasons for on-demand wrapping (#10387) by @hyfdev

rolldown: apply output.paths to CJS export-star of external modules (#10406) by @IWANABETHATGUY

dev: sourcemaps of lazily compiled chunks (#10386) by @tbvjaos510

plugin: validate emitted file names at emitFile time (#10377) by @Nic-Polumeyv

guarantee tokio runtime release when close rejects (#10381) by @shulaoda

code-splitting: make strict transitive init registration deterministic and constant-time (#10320) by @hyfdev

... (truncated)

Changelog

Sourced from @rolldown/binding-linux-x64-gnu's changelog.

[1.2.1] - 2026-07-29

🚀 Features

dev: support hotUpdate hook (#10305) by @h-a-n-a

dev: expose disableWatcher through the dev engine bindings (#10474) by @shulaoda

plugin: surface output-option callbacks in [PLUGIN_TIMINGS] (#10411) by @IWANABETHATGUY

import.meta.ROLLDOWN_FILE_URL_<referenceId>_<urlId> support to pass context to resolveFileUrl hook (#10297) by @sapphi-red

dev: skip the HMR update when a module's rebuilt output is unchanged (#10333) by @h-a-n-a

code-splitting: wrap strict execution order modules on demand (#10104) by @hyfdev

support import.meta.ROLLDOWN_FILE_URL_* (#10296) by @sapphi-red

implement resolveFileUrl plugin hook (#10291) by @sapphi-red

magic-string: support storeName on overwrite/update (#10312) by @IWANABETHATGUY

🐛 Bug Fixes

external: keep __toESM when the importing module is tree-shaken (#10516) by @IWANABETHATGUY

dev: resolve re-exports from externals through a real import (#10489) by @tbvjaos510

code-splitting: route CJS barrel initialization per consumer (#10488) by @hyfdev

error: align filename-pattern diagnostics with Rollup's wording (#10501) by @IWANABETHATGUY

plugin: validate emitted prebuilt-chunk file names (#10399) by @IWANABETHATGUY

code-splitting: point a two-argument dynamic import at the chunk that holds the module (#10479) by @hyfdev

common: align is_path_fragment with Rollup's isPathFragment (#10398) by @IWANABETHATGUY

code-splitting: never name an internal chunk export then (#10480) by @hyfdev

code-splitting: avoid creating call-site-triggered entry facades (#10485) by @hyfdev

code-splitting: collect top-level eager order reasons in every strict build (#10463) by @hyfdev

code-splitting: let a cross-chunk dynamic importer carry the order trigger (#10456) by @hyfdev

code-splitting: avoid the dynamic-entry facade when the same-chunk collapse carries the trigger (#10433) by @hyfdev

binding: forward resolveId options.kind to callable builtin plugins (#10440) by @martijnwalraven

dev: keep the export name of export * as ns from (#10476) by @tbvjaos510

code-splitting: only split an entry facade when something else can load its chunk (#10441) by @hyfdev

code-splitting: fold the runtime chunk back after order lowering (#10414) by @hyfdev

runtime: don't leave default undefined for cjs that fakes __esModule (#10453) by @IWANABETHATGUY

import-glob: escape generated string literals (#10438) by @shantanuraj

preserve-modules: don't assume every chunk mirrors a module (#10442) by @hyfdev

filter: treat missing hook inputs as non-matches, not panics (#10443) by @IWANABETHATGUY

code-splitting: keep CommonJS modules wrapped under strict execution order (#10405) by @hyfdev

code-splitting: align dynamicImports metadata with the rewritten import() specifier (#10430) by @hyfdev

dev: skip user plugin hooks for ?rolldown-lazy proxy modules (#10426) by @unknownjedi

treeshake: preserve side-effect-free spread arguments in manual-pure chains (#10432) by @IWANABETHATGUY

treeshake: preserve eagerly evaluated child effects of manual pure chains (#10427) by @Nic-Polumeyv

code-splitting: initialize pure definers behind star re-export barrels under strict execution order (#10409) by @hyfdev

resolveId: reject string id filters (must be a RegExp) (#10412) by @IWANABETHATGUY

code-splitting: collect eager order reasons for on-demand wrapping (#10387) by @hyfdev

rolldown: apply output.paths to CJS export-star of external modules (#10406) by @IWANABETHATGUY

dev: sourcemaps of lazily compiled chunks (#10386) by @tbvjaos510

plugin: validate emitted file names at emitFile time (#10377) by @Nic-Polumeyv

guarantee tokio runtime release when close rejects (#10381) by @shulaoda

code-splitting: make strict transitive init registration deterministic and constant-time (#10320) by @hyfdev

pair tokio runtime acquire and release on wasm to prevent premature shutdown (#10363) by @shulaoda

... (truncated)

Commits

93c535d release: v1.2.1 (#10524)
5be6328 chore(deps): update napi (#10506)
8ff3e2e refactor(dev): make it easier to customize the runtime (#10338)
dfb19fb fix(dev): resolve re-exports from externals through a real import (#10489)
f5a5320 docs: clarify slash normalization for id hook filter (#10511)
109d6d4 fix(error): align filename-pattern diagnostics with Rollup's wording (#10501)
47552db test(plugin): cover chunk fileName, absolute chunk name, and Windows drive na...
da7e0ff fix(plugin): validate emitted prebuilt-chunk file names (#10399)
ddf4bcc fix(code-splitting): point a two-argument dynamic import at the chunk that ho...
0ce3ec7 fix(common): align is_path_fragment with Rollup's isPathFragment (#10398)
Additional commits viewable in compare view

Updates @rolldown/binding-linux-x64-musl from 1.1.1 to 1.2.1

Release notes

Sourced from @rolldown/binding-linux-x64-musl's releases.

v1.2.1

[1.2.1] - 2026-07-29

🚀 Features

dev: support hotUpdate hook (#10305) by @h-a-n-a

dev: expose disableWatcher through the dev engine bindings (#10474) by @shulaoda

plugin: surface output-option callbacks in [PLUGIN_TIMINGS] (#10411) by @IWANABETHATGUY

import.meta.ROLLDOWN_FILE_URL_<referenceId>_<urlId> support to pass context to resolveFileUrl hook (#10297) by @sapphi-red

dev: skip the HMR update when a module's rebuilt output is unchanged (#10333) by @h-a-n-a

code-splitting: wrap strict execution order modules on demand (#10104) by @hyfdev

support import.meta.ROLLDOWN_FILE_URL_* (#10296) by @sapphi-red

implement resolveFileUrl plugin hook (#10291) by @sapphi-red

magic-string: support storeName on overwrite/update (#10312) by @IWANABETHATGUY

🐛 Bug Fixes

external: keep __toESM when the importing module is tree-shaken (#10516) by @IWANABETHATGUY

dev: resolve re-exports from externals through a real import (#10489) by @tbvjaos510

code-splitting: route CJS barrel initialization per consumer (#10488) by @hyfdev

error: align filename-pattern diagnostics with Rollup's wording (#10501) by @IWANABETHATGUY

plugin: validate emitted prebuilt-chunk file names (#10399) by @IWANABETHATGUY

code-splitting: point a two-argument dynamic import at the chunk that holds the module (#10479) by @hyfdev

common: align is_path_fragment with Rollup's isPathFragment (#10398) by @IWANABETHATGUY

code-splitting: never name an internal chunk export then (#10480) by @hyfdev

code-splitting: avoid creating call-site-triggered entry facades (#10485) by @hyfdev

code-splitting: collect top-level eager order reasons in every strict build (#10463) by @hyfdev

code-splitting: let a cross-chunk dynamic importer carry the order trigger (#10456) by @hyfdev

code-splitting: avoid the dynamic-entry facade when the same-chunk collapse carries the trigger (#10433) by @hyfdev

binding: forward resolveId options.kind to callable builtin plugins (#10440) by @martijnwalraven

dev: keep the export name of export * as ns from (#10476) by @tbvjaos510

code-splitting: only split an entry facade when something else can load its chunk (#10441) by @hyfdev

code-splitting: fold the runtime chunk back after order lowering (#10414) by @hyfdev

runtime: don't leave default undefined for cjs that fakes __esModule (#10453) by @IWANABETHATGUY

import-glob: escape generated string literals (#10438) by @shantanuraj

preserve-modules: don't assume every chunk mirrors a module (#10442) by @hyfdev

filter: treat missing hook inputs as non-matches, not panics (#10443) by @IWANABETHATGUY

code-splitting: keep CommonJS modules wrapped under strict execution order (#10405) by @hyfdev

code-splitting: align dynamicImports metadata with the rewritten import() specifier (#10430) by @hyfdev

dev: skip user plugin hooks for ?rolldown-lazy proxy modules (#10426) by @unknownjedi

treeshake: preserve side-effect-free spread arguments in manual-pure chains (#10432) by @IWANABETHATGUY

treeshake: preserve eagerly evaluated child effects of manual pure chains (#10427) by @Nic-Polumeyv

code-splitting: initialize pure definers behind star re-export barrels under strict execution order (#10409) by @hyfdev

resolveId: reject string id filters (must be a RegExp) (#10412) by @IWANABETHATGUY

code-splitting: collect eager order reasons for on-demand wrapping (#10387) by @hyfdev

rolldown: apply output.paths to CJS export-star of external modules (#10406) by @IWANABETHATGUY

dev: sourcemaps of lazily compiled chunks (#10386) by @tbvjaos510

plugin: validate emitted file names at emitFile time (#10377) by @Nic-Polumeyv

guarantee tokio runtime release when close rejects (#10381) by @shulaoda

code-splitting: make strict transitive init registration deterministic and constant-time (#10320) by @hyfdev

... (truncated)

Changelog

Sourced from @rolldown/binding-linux-x64-musl's changelog.

[1.2.1] - 2026-07-29

🚀 Features

dev: support hotUpdate hook (#10305) by @h-a-n-a

dev: expose disableWatcher through the dev engine bindings (#10474) by @shulaoda

plugin: surface output-option callbacks in [PLUGIN_TIMINGS] (#10411) by @IWANABETHATGUY

import.meta.ROLLDOWN_FILE_URL_<referenceId>_<urlId> support to pass context to resolveFileUrl hook (#10297) by @sapphi-red

dev: skip the HMR update when a module's rebuilt output is unchanged (#10333) by @h-a-n-a

code-splitting: wrap strict execution order modules on demand (#10104) by @hyfdev

support import.meta.ROLLDOWN_FILE_URL_* (#10296) by @sapphi-red

implement resolveFileUrl plugin hook (#10291) by @sapphi-red

magic-string: support storeName on overwrite/update (#10312) by @IWANABETHATGUY

🐛 Bug Fixes

external: keep __toESM when the importing module is tree-shaken (#10516) by @IWANABETHATGUY

dev: resolve re-exports from externals through a real import (#10489) by @tbvjaos510

code-splitting: route CJS barrel initialization per consumer (#10488) by @hyfdev

error: align filename-pattern diagnostics with Rollup's wording (#10501) by @IWANABETHATGUY

plugin: validate emitted prebuilt-chunk file names (#10399) by @IWANABETHATGUY

code-splitting: point a two-argument dynamic import at the chunk that holds the module (#10479) by @hyfdev

common: align is_path_fragment with Rollup's isPathFragment (#10398) by @IWANABETHATGUY

code-splitting: never name an internal chunk export then (#10480) by @hyfdev

code-splitting: avoid creating call-site-triggered entry facades (#10485) by @hyfdev

code-splitting: collect top-level eager order reasons in every strict build (#10463) by @hyfdev

code-splitting: let a cross-chunk dynamic importer carry the order trigger (#10456) by @hyfdev

code-splitting: avoid the dynamic-entry facade when the same-chunk collapse carries the trigger (#10433) by @hyfdev

binding: forward resolveId options.kind to callable builtin plugins (#10440) by @martijnwalraven

dev: keep the export name of export * as ns from (#10476) by @tbvjaos510

code-splitting: only split an entry facade when something else can load its chunk (#10441) by @hyfdev

code-splitting: fold the runtime chunk back after order lowering (#10414) by @hyfdev

runtime: don't leave default undefined for cjs that fakes __esModule (#10453) by @IWANABETHATGUY

import-glob: escape generated string literals (#10438) by @shantanuraj

preserve-modules: don't assume every chunk mirrors a module (#10442) by @hyfdev

filter: treat missing hook inputs as non-matches, not panics (#10443) by @IWANABETHATGUY

code-splitting: keep CommonJS modules wrapped under strict execution order (#10405) by @hyfdev

code-splitting: align dynamicImports metadata with the rewritten import() specifier (#10430) by @hyfdev

dev: skip user plugin hooks for ?rolldown-lazy proxy modules (#10426) by @unknownjedi

treeshake: preserve side-effect-free spread arguments in manual-pure chains (#10432) by @IWANABETHATGUY

treeshake: preserve eagerly evaluated child effects of manual pure chains (#10427) by @Nic-Polumeyv

code-splitting: initialize pure definers behind star re-export barrels under strict execution order (#10409) by @hyfdev

resolveId: reject string id filters (must be a RegExp) (#10412) by @IWANABETHATGUY

code-splitting: collect eager order reasons for on-demand wrapping (#10387) by @hyfdev

rolldown: apply output.paths to CJS export-star of external modules (#10406) by @IWANABETHATGUY

dev: sourcemaps of lazily compiled chunks (#10386) by @tbvjaos510

plugin: validate emitted file names at emitFile time (#10377) by @Nic-Polumeyv

guarantee tokio runtime release when close rejects (#10381) by @shulaoda

code-splitting: make strict transitive init registration deterministic and constant-time (#10320) by @hyfdev

pair tokio runtime acquire and release on wasm to prevent premature shutdown (#10363) by @shulaoda

... (truncated)

Commits

93c535d release: v1.2.1 (#10524)
5be6328 chore(deps): update napi (#10506)
8ff3e2e refactor(dev): make it easier to customize the runtime (#10338)
dfb19fb fix(dev): resolve re-exports from externals through a real import (#10489)
f5a5320 docs: clarify slash normalization for id hook filter (#10511)
109d6d4 fix(error): align filename-pattern diagnostics with Rollup's wording (#10501)
47552db test(plugin): cover chunk fileName, absolute chunk name, and Windows drive na...
da7e0ff fix(plugin): validate emitted prebuilt-chunk file names (#10399)
ddf4bcc fix(code-splitting): point a two-argument dynamic import at the chunk that ho...
0ce3ec7 fix(common): align is_path_fragment with Rollup's isPathFragment (#10398)
Additional commits viewable in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.62.2 to 4.62.3

Release notes

Sourced from @rollup/rollup-linux-x64-gnu's releases.

v4.62.3

4.62.3

2026-07-26

Bug Fixes

Sanitize illegal characters preserved modules input base (#6439)

Pull Requests

#6421: docs: update x_google_ignoreList link to canonical URL (@DucMinhNe, @lukastaegert)

#6422: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6423: chore(deps): update actions/checkout action to v7 (@renovate[bot])

#6424: chore(deps): update dependency eslint-plugin-unicorn to v68 (@renovate[bot], @lukastaegert)

#6425: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6426: chore(deps): lock file maintenance (@renovate[bot])

#6432: fix: make isLegal idempotent by not using a global-flag regex (@spokodev, @lukastaegert)

#6433: docs: clarify sideEffects and moduleSideEffects (@ishaanlabs-gg, @lukastaegert)

#6434: chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (@renovate[bot], @lukastaegert)

#6435: fix(deps): update minor/patch updates (@renovate[bot])

#6436: chore(deps): update actions/cache action to v6 (@renovate[bot])

#6438: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6439: Sanitize input base before computing preserved module chunk names (@MahinAnowar, @lukastaegert)

#6443: chore(deps): update dependency eslint-plugin-unicorn to v71 (@renovate[bot], @lukastaegert)

#6444: fix(deps): update rust crate swc_compiler_base to v60 (@renovate[bot])

#6446: chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (@renovate[bot])

#6447: fix(deps): update minor/patch updates (@renovate[bot])

#6448: chore(deps): update actions/setup-node action to v7 (@renovate[bot])

#6449: chore(deps): update dependency eslint-plugin-unicorn to v72 (@renovate[bot])

#6450: chore(deps): update dependency pinia to v4 (@renovate[bot], @lukastaegert)

#6451: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6455: docs: fix broken commonjs namedExports link in troubleshooting (@Hashim1999164, @lukastaegert)

#6456: fix(deps): update minor/patch updates (@renovate[bot])

#6457: chore(deps): update dependency magic-string to v1 (@renovate[bot], @lukastaegert)

#6458: fix(deps): update swc monorepo (major) (@renovate[bot])

#6459: chore(deps): lock file maintenance (@renovate[bot])

#6460: Fix build:docs after rollup update (@lukastaegert)

Changelog

Sourced from @rollup/rollup-linux-x64-gnu's changelog.

4.62.3

2026-07-26

Bug Fixes

Sanitize illegal characters preserved modules input base (#6439)

Pull Requests

#6421: docs: update x_google_ignoreList link to canonical URL (@DucMinhNe, @lukastaegert)

#6422: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6423: chore(deps): update actions/checkout action to v7 (

…y with 25 updates Bumps the production-dependencies group with 25 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `16.2.9` | `16.2.12` | | [@rolldown/binding-linux-x64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.1.1` | `1.2.1` | | [@rolldown/binding-linux-x64-musl](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.1.1` | `1.2.1` | | [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.62.2` | `4.62.3` | | [@tailwindcss/oxide-linux-x64-gnu](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/crates/node/npm/linux-x64-gnu) | `4.3.1` | `4.3.3` | | [lightningcss-linux-x64-gnu](https://github.com/parcel-bundler/lightningcss) | `1.32.0` | `1.33.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.2` | `8.6.1` | | [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.9.0` | `10.9.1` | | [helmet](https://github.com/helmetjs/helmet) | `8.2.0` | `8.3.0` | | [mongoose](https://github.com/Automattic/mongoose) | `9.7.2` | `9.9.0` | | [stripe](https://github.com/stripe/stripe-node) | `22.3.0` | `22.4.0` | | [grammy](https://github.com/grammyjs/grammY) | `1.44.0` | `1.45.1` | | [@auth/prisma-adapter](https://github.com/nextauthjs/next-auth) | `2.11.2` | `2.11.3` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.2` | `5.101.4` | | [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.101.2` | `5.101.4` | | [axios](https://github.com/axios/axios) | `1.18.1` | `1.19.0` | | [framer-motion](https://github.com/motiondivision/motion) | `12.42.2` | `12.43.0` | | [i18next](https://github.com/i18next/i18next) | `26.3.4` | `26.3.6` | | [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.14` | `4.24.15` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.8` | `17.0.11` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.1` | `4.3.3` | | [@tailwindcss/oxide-linux-x64-musl](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/crates/node/npm/linux-x64-musl) | `4.3.1` | `4.3.3` | | [lightningcss-linux-x64-musl](https://github.com/parcel-bundler/lightningcss) | `1.32.0` | `1.33.0` | Updates `next` from 16.2.9 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.9...v16.2.12) Updates `@rolldown/binding-linux-x64-gnu` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.1/packages/rolldown) Updates `@rolldown/binding-linux-x64-musl` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.1/packages/rolldown) Updates `@rollup/rollup-linux-x64-gnu` from 4.62.2 to 4.62.3 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.62.2...v4.62.3) Updates `@tailwindcss/oxide-linux-x64-gnu` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/crates/node/npm/linux-x64-gnu) Updates `lightningcss-linux-x64-gnu` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `express-rate-limit` from 8.5.2 to 8.6.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.6.1) Updates `google-auth-library` from 10.9.0 to 10.9.1 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v10.9.1/core/packages/google-auth-library-nodejs) Updates `helmet` from 8.2.0 to 8.3.0 - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v8.2.0...v8.3.0) Updates `mongoose` from 9.7.2 to 9.9.0 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.7.2...9.9.0) Updates `stripe` from 22.3.0 to 22.4.0 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.3.0...v22.4.0) Updates `grammy` from 1.44.0 to 1.45.1 - [Release notes](https://github.com/grammyjs/grammY/releases) - [Commits](grammyjs/grammY@v1.44.0...v1.45.1) Updates `@auth/prisma-adapter` from 2.11.2 to 2.11.3 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/@auth/prisma-adapter@2.11.2...@auth/prisma-adapter@2.11.3) Updates `@tanstack/react-query` from 5.101.2 to 5.101.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query) Updates `@tanstack/react-query-devtools` from 5.101.2 to 5.101.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.101.4/packages/react-query-devtools) Updates `axios` from 1.18.1 to 1.19.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.1...v1.19.0) Updates `framer-motion` from 12.42.2 to 12.43.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.42.2...v12.43.0) Updates `i18next` from 26.3.4 to 26.3.6 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v26.3.4...v26.3.6) Updates `next-auth` from 4.24.14 to 4.24.15 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.14...next-auth@4.24.15) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `react-i18next` from 17.0.8 to 17.0.11 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v17.0.8...v17.0.11) Updates `tailwindcss` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) Updates `@tailwindcss/oxide-linux-x64-musl` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/crates/node/npm/linux-x64-musl) Updates `lightningcss-linux-x64-musl` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) --- updated-dependencies: - dependency-name: next dependency-version: 16.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@rolldown/binding-linux-x64-gnu" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@rolldown/binding-linux-x64-musl" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.62.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tailwindcss/oxide-linux-x64-gnu" dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lightningcss-linux-x64-gnu dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-version: 8.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: google-auth-library dependency-version: 10.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: helmet dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: mongoose dependency-version: 9.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: stripe dependency-version: 22.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: grammy dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@auth/prisma-adapter" dependency-version: 2.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tanstack/react-query" dependency-version: 5.101.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tanstack/react-query-devtools" dependency-version: 5.101.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: axios dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: framer-motion dependency-version: 12.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: i18next dependency-version: 26.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: next-auth dependency-version: 4.24.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-i18next dependency-version: 17.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tailwindcss/oxide-linux-x64-musl" dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lightningcss-linux-x64-musl dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-08-02T15:14:11Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
fintrack-web	Ready	Preview	Aug 2, 2026 3:15pm

dependabot · 2026-08-09T15:11:55Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 2, 2026

vercel Bot deployed to Preview – fintrack-web August 2, 2026 15:15 View deployment

dependabot Bot closed this Aug 9, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-c6be2e9ec7 branch August 9, 2026 15:11

Navigation Menu

Uh oh!

build(deps): bump the production-dependencies group across 1 directory with 25 updates - #127

build(deps): bump the production-dependencies group across 1 directory with 25 updates#127
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-c6be2e9ec7

dependabot Bot commented on behalf of github Aug 2, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v16.2.12

What's Changed

v16.2.11

v16.2.10

v1.2.1

[1.2.1] - 2026-07-29

🚀 Features

🐛 Bug Fixes

[1.2.1] - 2026-07-29

🚀 Features

🐛 Bug Fixes

v1.2.1

[1.2.1] - 2026-07-29

🚀 Features

🐛 Bug Fixes

[1.2.1] - 2026-07-29

🚀 Features

🐛 Bug Fixes

v4.62.3

4.62.3

Bug Fixes

Pull Requests

4.62.3

Bug Fixes

Pull Requests

Uh oh!

vercel Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Aug 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 2, 2026 •

edited

Loading

vercel Bot commented Aug 2, 2026 •

edited

Loading