chore(deps)(deps): bump the production-dependencies group across 1 directory with 9 updates by dependabot[bot] · Pull Request #926 · objectstack-ai/spec

dependabot · 2026-03-17T06:18:10Z

Bumps the production-dependencies group with 9 updates in the / directory:

Package	From	To
@oclif/core	`4.8.3`	`4.9.0`
msw	`2.12.10`	`2.12.12`
better-auth	`1.5.4`	`1.5.5`
hono	`4.12.5`	`4.12.8`
next	`16.1.6`	`16.1.7`
fumadocs-core	`16.6.12`	`16.6.17`
fumadocs-mdx	`14.2.9`	`14.2.10`
fumadocs-ui	`16.6.12`	`16.6.17`
react-resizable-panels	`4.7.2`	`4.7.3`

Updates @oclif/core from 4.8.3 to 4.9.0

Release notes

Sourced from @oclif/core's releases.

4.9.0

Features

warn on hidden, deprecated aliases (af47f67)

4.8.4

Bug Fixes

--flags-dir works on 3rd party plugins @W-21178947@ (8bd57c0)

Changelog

Sourced from @oclif/core's changelog.

4.9.0 (2026-03-12)

Features

warn on hidden, deprecated aliases (af47f67)

4.8.4 (2026-03-09)

Bug Fixes

--flags-dir works on 3rd party plugins @W-21178947@ (8bd57c0)

Commits

5670148 chore(release): 4.9.0 [skip ci]
ee6f7e3 Merge pull request #1555 from rexxars/fix/warn-on-hidden-deprecated
af47f67 feat: warn on hidden, deprecated aliases
5216f20 chore(release): 4.8.4 [skip ci]
9da9748 Merge pull request #1553 from oclif/d/W-21178947-b
8bd57c0 fix: --flags-dir works on 3rd party plugins @W-21178947@
5228df4 Merge pull request #1550 from oclif/dependabot-npm_and_yarn-eslint-config-ocl...
feddba7 chore(dev-deps): bump eslint-config-oclif from 6.0.144 to 6.0.146
50614b8 Merge pull request #1551 from oclif/dependabot-npm_and_yarn-eslint-9.39.4
5d99f49 chore(dev-deps): bump eslint from 9.39.3 to 9.39.4
Additional commits viewable in compare view

Updates msw from 2.12.10 to 2.12.12

Release notes

Sourced from msw's releases.

v2.12.12 (2026-03-17)

Bug Fixes

minor improvements (#2672) (cd528734805ac233f727f3256a5086ed57b6c644) @kettanaito

handle special characters in postinstall script (#2649) (b79d7aeff41bcea2f8125b5cda718c246d69b5d1) @aloisklink @kettanaito

replace barrel exports with granular exports (#2671) (83bc40ebd7207fbf208dd44735f115996d9ff1fa) @kettanaito

v2.12.11 (2026-03-15)

Bug Fixes

node: avoid open handles for infinite delays (#2669) (3ccc8a3c6c6f9e1e1d685a2b6a68135843abf700) @FelmonFekadu @kettanaito

Commits

e6a7f81 chore(release): v2.12.12
51e920e chore: fix flaky tests (#2673)
cd52873 fix: minor improvements (#2672)
b79d7ae fix: handle special characters in postinstall script (#2649)
83bc40e fix: replace barrel exports with granular exports (#2671)
52a0697 chore(release): v2.12.11
3ccc8a3 fix(node): avoid open handles for infinite delays (#2669)
5ab5857 test: add axios timeout regression tests (#2662)
See full diff in compare view

Updates better-auth from 1.5.4 to 1.5.5

Release notes

Sourced from better-auth's releases.

v1.5.5

   🚀 Features

oauth-provider: Pairwise subject identifiers (OIDC Core §8) - by @gustavovalverde and @himself65 in better-auth/better-auth#8292 (6c09f)

   🐞 Bug Fixes

Pass user field through idToken sign-in body for Apple name support - by @bytaesu and Copilot in better-auth/better-auth#8417 (d364e)

Add missing SubpageItem properties for docs-sidebar compatibility - by @bytaesu (6bcd7)

Add icon prop to SubpageLink component - by @bytaesu (95538)

Correct sign-in link to dash.better-auth.com - by @bytaesu (058bb)

Restore features.tsx and align import with canary - by @bytaesu (e5ebb)

Add suppressHydrationWarning to video elements - by @bytaesu (8e0e5)

Preserve custom session fields on focus refresh - by @jslno in better-auth/better-auth#8354 (2bd99)

Throw on duplicate email when autoSignIn: false without requireEmailVerification - by @himself65 in better-auth/better-auth#8521 (e3e66)

Add origin check middleware to password reset request - by @jslno in better-auth/better-auth#8392 (497b1)

adapters: Restore deprecated createAdapter and type exports for backcompat - by @himself65 in better-auth/better-auth#8461 (eb848)

blog: Fix RSS feed link path, image path and blog date - by @0-Sandy in better-auth/better-auth#8483 (67c6d)

cli: Resolve path aliases from extended tsconfig files - by @himself65 in better-auth/better-auth#8520 (11ef0)

client: Preserve stale session data on network or server errors - by @bytaesu in better-auth/better-auth#8437 (9a229)

db: Use CREATE INDEX for postgres migration - by @himself65 in better-auth/better-auth#8538 (b9e54)

oauth-provider: Avoid fetch redirect CORS after login - by @GautamBytes in better-auth/better-auth#8519 (c0366)

oidc-provider: Validate redirect_uri for prompt=none - by @jslno in better-auth/better-auth#8398 (ff352)

organization: Handle multi-role users in invite and member removal checks - by @himself65 and Copilot Autofix powered by AI in better-auth/better-auth#8442 (23f18)

prisma-adapter: Fall back to updateMany for non-unique updates - by @himself65 in better-auth/better-auth#8524 (3f16e)

sso: Handle bare domains in domain verification - by @himself65 in better-auth/better-auth#8369 (fb7a0)

telemetry: Use conditional exports to replace dynamic import hacks - by @himself65 in better-auth/better-auth#8458 (3ecd2)

two-factor: Wire twoFactorTable option to schema modelName - by @himself65 in better-auth/better-auth#8443 (f4604)

    View changes on GitHub

Commits

db5a444 chore: release v1.5.5
497b1db fix: add origin check middleware to password reset request (#8392)
ff352c6 fix(oidc-provider): validate redirect_uri for prompt=none (#8398)
b9e54c9 fix(db): use CREATE INDEX for postgres migration (#8538)
c03666a fix(oauth-provider): avoid fetch redirect CORS after login (#8519)
e3e6664 fix: throw on duplicate email when autoSignIn: false without `requireEmailV...
b6222b2 chore(client): re-export necessary types (#8497)
2bd994b fix: preserve custom session fields on focus refresh (#8354)
eb848c4 fix(adapters): restore deprecated createAdapter and type exports for backcomp...
1221a2b docs(2fa): fix OTP server API method names (#8477)
Additional commits viewable in compare view

Updates hono from 4.12.5 to 4.12.8

Release notes

Sourced from hono's releases.

v4.12.8

What's Changed

fix(utils/mime): Normalize input extension to lowercase before MIME check by @TheEssem in honojs/hono#4800

fix(bearer-auth): escape regex metacharacters in bearer auth prefix option by @otoneko1102 in honojs/hono#4750

New Contributors

@TheEssem made their first contribution in honojs/hono#4800

Full Changelog: honojs/hono@v4.12.7...v4.12.8

v4.12.7

Security hardening

Ignore __proto__ path segments in parseBody({ dot: true }) to prevent potential prototype pollution when merged with unsafe patterns.

Full Changelog: honojs/hono@v4.12.6...v4.12.7

v4.12.6

What's Changed

fix(accept): replace regex split to mitigate ReDoS by @EdamAme-x in honojs/hono#4758

fix(jsx): align link hoisting and dedupe with React 19 by @usualoma in honojs/hono#4792

chore(builld): tsconfig project references by @BarryThePenguin in honojs/hono#4797

chore: add tsconfig.spec.json by @yusukebe in honojs/hono#4798

feat(jsx-renderer): support function-based options by @3w36zj6 in honojs/hono#4780

fix(lambda-edge): avoid callback handler deprecation on NODEJS_24_X by @t0waxx in honojs/hono#4782

New Contributors

@t0waxx made their first contribution in honojs/hono#4782

Full Changelog: honojs/hono@v4.12.5...v4.12.6

Commits

fe689ec 4.12.8
0c0bf8d fix(bearer-auth): escape regex metacharacters in bearer auth prefix option (#...
488ea6a fix(utils/mime): Normalize input extension to lowercase before MIME check (#4...
b0aba5b 4.12.7
1be3a53 ci: apply automated fixes
ef90225 Merge commit from fork
3f88636 4.12.6
53b66ae fix(lambda-edge): avoid callback handler deprecation on NODEJS_24_X (#4782)
58825a7 feat(jsx-renderer): support function-based options (#4780)
0e80acb chore: add tsconfig.spec.json (#4798)
Additional commits viewable in compare view

Updates next from 16.1.6 to 16.1.7

Release notes

Sourced from next's releases.

v16.1.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[Cache Components] Prevent streaming fetch calls from hanging in dev (#89194)

Apply server actions transform to node_modules in route handlers (#89380)

ensure maxPostponedStateSize is always respected (See: CVE-2026-27979)

feat(next/image): add lru disk cache and images.maximumDiskCacheSize (See: CVE-2026-27980)

Allow blocking cross-site dev-only websocket connections from privacy-sensitive origins (See: CVE-2026-27977)

Disallow Server Action submissions from privacy-sensitive contexts by default (See: CVE-2026-27978)

fix: patch http-proxy to prevent request smuggling in rewrites (See: CVE-2026-29057)

Credits

Huge thanks to @unstubbable, @styfle, @eps1lon, and @ztanner for helping!

Commits

bdf3e35 v16.1.7
dc98c04 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
9023c0a [backport] Disallow Server Action submissions from privacy-sensitive contexts...
36a97b9 Allow blocking cross-site dev-only websocket connections from privacy-sensiti...
93c3993 [backport]: feat(next/image): add lru disk cache and `images.maximumDiskCache...
c68d62d Backport documentation fixes for 16.1.x (#90655)
5214ac1 [backport]: ensure maxPostponedStateSize is always respected (#90060) (#90471)
c95e357 Backport/docs fixes 16.1.x (#90125)
cba6144 [backport] Apply server actions transform to node_modules in route handlers...
3db9063 [backport] [Cache Components] Prevent streaming fetch calls from hanging in d...
Additional commits viewable in compare view

Updates fumadocs-core from 16.6.12 to 16.6.17

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.6.17

Patch Changes

c2678c0: Improve llms.txt generation via remark-llms plugin

417f07a: Expose Markdown stringifier

bb07706: Include root items only once in Breadcrumb.

Previously, when includeRoot was set to true, the root item was added twice to breadcrumbs.

f065406: Support fuma-content integration

fumadocs-core@16.6.16

Patch Changes

054da73: Implement limit option on search servers

fumadocs-core@16.6.15

No release notes provided.

fumadocs-core@16.6.14

Patch Changes

8382363: [Remark Image] set placeholder to none by default

fumadocs-core@16.6.13

No release notes provided.

Commits

89b7750 Version Packages (#3102)
9c56f6d Base UI: fix types
c2678c0 MDX: Improve llms.txt generation via remark-llms plugin
c3a723e UI: fix codeblock RSC highlighting
c8a7612 format
04bd349 Chore: Migrate to Vite 8
8b3179f Content: output as collection pack
417f07a Core: Expose Markdown stringifier
f065406 Core & Content: support fuma-content integration
14ab30e Chore: Update sponsors page
Additional commits viewable in compare view

Updates fumadocs-mdx from 14.2.9 to 14.2.10

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@14.2.10

Patch Changes

c2678c0: Improve llms.txt generation via remark-llms plugin

Updated dependencies [c2678c0]

Updated dependencies [417f07a]

Updated dependencies [bb07706]

Updated dependencies [f065406]

fumadocs-core@16.6.17

Commits

89b7750 Version Packages (#3102)
9c56f6d Base UI: fix types
c2678c0 MDX: Improve llms.txt generation via remark-llms plugin
c3a723e UI: fix codeblock RSC highlighting
c8a7612 format
04bd349 Chore: Migrate to Vite 8
8b3179f Content: output as collection pack
417f07a Core: Expose Markdown stringifier
f065406 Core & Content: support fuma-content integration
14ab30e Chore: Update sponsors page
Additional commits viewable in compare view

Updates fumadocs-ui from 16.6.12 to 16.6.17

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.6.17

Patch Changes

c3a723e: fix codeblock RSC highlighting

Updated dependencies [c2678c0]

Updated dependencies [417f07a]

Updated dependencies [bb07706]

Updated dependencies [f065406]

fumadocs-core@16.6.17

fumadocs-ui@16.6.16

Patch Changes

Updated dependencies [054da73]

fumadocs-core@16.6.16

fumadocs-ui@16.6.15

Patch Changes

86d3abb: fix broken tsdown CSS logic

fumadocs-core@16.6.15

fumadocs-ui@16.6.14

Patch Changes

a02048c: UI: override MDX types by default

02201df: Simplify i18n setup

Updated dependencies [8382363]

fumadocs-core@16.6.14

fumadocs-ui@16.6.13

Patch Changes

2702b28: Bundle page actions into UI

fumadocs-core@16.6.13

Commits

89b7750 Version Packages (#3102)
9c56f6d Base UI: fix types
c2678c0 MDX: Improve llms.txt generation via remark-llms plugin
c3a723e UI: fix codeblock RSC highlighting
c8a7612 format
04bd349 Chore: Migrate to Vite 8
8b3179f Content: output as collection pack
417f07a Core: Expose Markdown stringifier
f065406 Core & Content: support fuma-content integration
14ab30e Chore: Update sponsors page
Additional commits viewable in compare view

Updates react-resizable-panels from 4.7.2 to 4.7.3

Release notes

Sourced from react-resizable-panels's releases.

4.7.3

690: Imperative Panel API supports non-percentage sizes

Changelog

Sourced from react-resizable-panels's changelog.

4.7.3

690: Imperative Panel API supports non-percentage sizes

Commits

08cfd6f 4.7.2 -> 4.7.3
e8dd430 Panel imperative API resize() accepts all size units (#690)
5521119 Tweaked e2e separtor style
5c13ebd Site search (#685)
55e538a Wording tweak
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

vercel · 2026-03-17T06:18:15Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectstack-play	Ready	Preview, Comment	Mar 18, 2026 9:45am
spec	Ready	Preview, Comment	Mar 18, 2026 9:45am

…rectory with 9 updates Bumps the production-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@oclif/core](https://github.com/oclif/core) | `4.8.3` | `4.9.0` | | [msw](https://github.com/mswjs/msw) | `2.12.10` | `2.12.12` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.5.4` | `1.5.5` | | [hono](https://github.com/honojs/hono) | `4.12.5` | `4.12.8` | | [next](https://github.com/vercel/next.js) | `16.1.6` | `16.1.7` | | [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.6.12` | `16.6.17` | | [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `14.2.9` | `14.2.10` | | [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.6.12` | `16.6.17` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.7.2` | `4.7.3` | Updates `@oclif/core` from 4.8.3 to 4.9.0 - [Release notes](https://github.com/oclif/core/releases) - [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md) - [Commits](oclif/core@4.8.3...4.9.0) Updates `msw` from 2.12.10 to 2.12.12 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.12.10...v2.12.12) Updates `better-auth` from 1.5.4 to 1.5.5 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Commits](https://github.com/better-auth/better-auth/commits/v1.5.5/packages/better-auth) Updates `hono` from 4.12.5 to 4.12.8 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.5...v4.12.8) Updates `next` from 16.1.6 to 16.1.7 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.1.6...v16.1.7) Updates `fumadocs-core` from 16.6.12 to 16.6.17 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-core@16.6.12...fumadocs-core@16.6.17) Updates `fumadocs-mdx` from 14.2.9 to 14.2.10 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@14.2.9...fumadocs-mdx@14.2.10) Updates `fumadocs-ui` from 16.6.12 to 16.6.17 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@16.6.12...fumadocs-ui@16.6.17) Updates `react-resizable-panels` from 4.7.2 to 4.7.3 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.7.2...4.7.3) --- updated-dependencies: - dependency-name: "@oclif/core" dependency-version: 4.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: msw dependency-version: 2.12.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: better-auth dependency-version: 1.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.12.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: next dependency-version: 16.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-core dependency-version: 16.6.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-mdx dependency-version: 14.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-ui dependency-version: 16.6.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-resizable-panels dependency-version: 4.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 17, 2026

github-actions bot added documentation Improvements or additions to documentation size/s labels Mar 17, 2026

vercel bot deployed to Preview – objectstack-play March 17, 2026 06:20 View deployment

vercel bot deployed to Preview – spec March 17, 2026 06:23 View deployment

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-c9abd36020 branch from 6781955 to 9eb43fd Compare March 18, 2026 09:26

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-c9abd36020 branch from 9eb43fd to b2f61be Compare March 18, 2026 09:33

vercel bot deployed to Preview – spec March 18, 2026 09:43 View deployment

vercel bot had a problem deploying to Preview – objectstack-play March 18, 2026 09:45 Failure

hotlong merged commit d38adcf into main Mar 18, 2026
10 of 14 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-c9abd36020 branch March 18, 2026 10:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps): bump the production-dependencies group across 1 directory with 9 updates#926

chore(deps)(deps): bump the production-dependencies group across 1 directory with 9 updates#926
hotlong merged 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-c9abd36020

dependabot bot commented on behalf of github Mar 17, 2026 •

edited

Loading

Uh oh!

vercel bot commented Mar 17, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.9.0

Features

4.8.4

Bug Fixes

4.9.0 (2026-03-12)

Features

4.8.4 (2026-03-09)

Bug Fixes

v2.12.12 (2026-03-17)

Bug Fixes

v2.12.11 (2026-03-15)

Bug Fixes

v1.5.5

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v4.12.8

What's Changed

New Contributors

v4.12.7

Security hardening

v4.12.6

What's Changed

New Contributors

v16.1.7

Core Changes

Credits

fumadocs-core@16.6.17

Patch Changes

fumadocs-core@16.6.16

Patch Changes

fumadocs-core@16.6.15

fumadocs-core@16.6.14

Patch Changes

fumadocs-core@16.6.13

fumadocs-mdx@14.2.10

Patch Changes

fumadocs-ui@16.6.17

Patch Changes

fumadocs-ui@16.6.16

Patch Changes

fumadocs-ui@16.6.15

Patch Changes

fumadocs-ui@16.6.14

Patch Changes

fumadocs-ui@16.6.13

Patch Changes

4.7.3

4.7.3

Uh oh!

vercel bot commented Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Mar 17, 2026 •

edited

Loading

vercel bot commented Mar 17, 2026 •

edited

Loading