Deps: Bump the production group across 1 directory with 3 updates

[dependabot]

Bumps the production group with 3 updates in the / directory: jose, openid-client and @vitejs/plugin-react.

Updates jose from 6.2.8 to 6.2.9

Release notes

Sourced from jose's releases.

v6.2.9

Fixes

• reject a JWE whose generated Key Management Parameters collide (6ed19a6)
• types: undeprecate PBES2 p2c parameter (33bf832)

Changelog

Sourced from jose's changelog.

6.2.9 (2026-08-15)

Fixes

• reject a JWE whose generated Key Management Parameters collide (6ed19a6)
• types: undeprecate PBES2 p2c parameter (33bf832)

Commits

• f3a3c78 chore(release): 6.2.9
• 33bf832 fix(types): undeprecate PBES2 p2c parameter
• 6ed19a6 fix: reject a JWE whose generated Key Management Parameters collide
• 944840d ci: use shared release workflows
• 05bccf2 chore: bump packages
• f7392d1 test: account for workerd nodejs_compat flag default changes
• 4e944be ci: drop the wait-for-npm machinery
• 4285b6f chore(deps-dev): bump undici
• cb114ec chore: cleanup after release
• See full diff in compare view

Updates openid-client from 6.8.5 to 6.8.7

Release notes

Sourced from openid-client's releases.

v6.8.7

Fixes

• allow destructuring the claims helper (38bd8c0), references #887

v6.8.6

Fixes

• avoid undefined user-agent in fetchProtectedResource (492c3c3), references #885

Changelog

Sourced from openid-client's changelog.

6.8.7 (2026-08-20)

Fixes

• allow destructuring the claims helper (38bd8c0), references #887

6.8.6 (2026-08-18)

Fixes

• avoid undefined user-agent in fetchProtectedResource (492c3c3), references #885

Commits

• daa81c1 chore(release): 6.8.7
• 38bd8c0 fix: allow destructuring the claims helper
• 2f12d9a chore: cleanup after release
• 4b2a7ab chore(release): 6.8.6
• 492c3c3 fix: avoid undefined user-agent in fetchProtectedResource
• 0e0539b ci: update conformance runs outputs
• b7ac789 chore: cleanup after release
• See full diff in compare view

Updates @vitejs/plugin-react from 6.0.5 to 6.1.0

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react

import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react

import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Commits

• 39b3173 release: plugin-react@6.1.0 (#1428)
• f1340b0 feat(react): add native React Compiler support (#1419)
• 9ab698e fix(deps): update all non-major dependencies (#1375)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions