deps: bump the production-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #75 · projectamazonph/amph-v2

dependabot · 2026-07-22T17:39:12Z

Bumps the production-dependencies group with 8 updates in the / directory:

Package	From	To
@prisma/adapter-pg	`7.8.0`	`7.9.1`
@prisma/client	`7.8.0`	`7.9.1`
@sentry/nextjs	`10.66.0`	`10.69.0`
jose	`6.2.3`	`6.2.5`
marked	`18.0.6`	`18.0.7`
next	`16.2.10`	`16.2.12`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`

Updates @prisma/adapter-pg from 7.8.0 to 7.9.1

Release notes

Sourced from @prisma/adapter-pg's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
</tr></table> 

... (truncated)

Commits

35003fd chore(adapter-pg): remove duplicate values parameter (#29650)
d6d9fc9 chore: remove parameterization from sqlcommenter-query-insights (#29518)
See full diff in compare view

Updates @prisma/client from 7.8.0 to 7.9.1

Release notes

Sourced from @prisma/client's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
</tr></table> 

... (truncated)

Commits

b829850 ci: upgrade pnpm to 11 to restore pnpm audit (#29725)
280fd56 fix(client): mask each quoted string in maskQuery independently (#29723)
4da3774 fix(client): reject invalid raw dates (#29697)
a7cec97 chore(deps): update engines to 7.9.0-1.e922089b7d7502aff4249d5da3420f6fa55fc6...
58f8439 fix(client): pin pg-protocol in prisma-client-imports-postgres e2e test (#29687)
918cf5d fix(client): improve adapter-related Prisma 7 error messages (#29624)
93da6ea ci(e2e): shard client e2e suite across 3 jobs to fix chronic timeouts (#29619)
3937779 fix: remove duplicate 'the the' in test comments (#29610)
fda8fbc chore(deps): bump @prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
0036baf fix(client-engine-runtime): surface unmapped driver errors as user-facing P20...
See full diff in compare view

Updates @sentry/nextjs from 10.66.0 to 10.69.0

Release notes

Sourced from @sentry/nextjs's releases.

10.69.0

Important Changes

feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)

feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)

feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)

feat(v10/cloudflare): Instrument Agents automatically (#22788)

feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)

fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)

fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#22767)

fix(v10/cloudflare): Prevent AI provider skips (#22771)

fix(v10/core): Summarize SQLite upserts so Durable Object cf_ spans stay filtered (#22766)

fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)

fix(v10/gatsby): Add React 19 to peer dependency range (#22675)

fix(v10/node): Unpin @apm-js-collab/code-transformer-bundler-plugins (#22678)

fix(v10/server-utils): Do not inject dc into client bundle (#22765)

test(v10/cloudflare): Pin mcp as agent depends on it (#22769)

Bundle size 📦

Path Size

@sentry/browser 27.11 KB

@sentry/browser - with treeshaking flags 25.59 KB

@sentry/browser (incl. Tracing) 45.51 KB

@sentry/browser (incl. Tracing + Span Streaming) 47.25 KB

@sentry/browser (incl. Tracing, Profiling) 50.15 KB

@sentry/browser (incl. Tracing, Replay) 83.84 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.71 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 88.44 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 100.79 KB

@sentry/browser (incl. Feedback) 43.88 KB

@sentry/browser (incl. sendFeedback) 31.79 KB

@sentry/browser (incl. FeedbackAsync) 36.8 KB

@sentry/browser (incl. Metrics) 28.17 KB

@sentry/browser (incl. Logs) 28.39 KB

@sentry/browser (incl. Metrics & Logs) 29.07 KB

@sentry/react 28.87 KB

... (truncated)

Changelog

Sourced from @sentry/nextjs's changelog.

10.69.0

Important Changes

feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)

feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)

feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)

feat(v10/cloudflare): Instrument Agents automatically (#22788)

feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)

fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)

fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#22767)

fix(v10/cloudflare): Prevent AI provider skips (#22771)

fix(v10/core): Summarize SQLite upserts so Durable Object cf_ spans stay filtered (#22766)

fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)

fix(v10/gatsby): Add React 19 to peer dependency range (#22675)

fix(v10/node): Unpin @apm-js-collab/code-transformer-bundler-plugins (#22678)

fix(v10/server-utils): Do not inject dc into client bundle (#22765)

test(v10/cloudflare): Pin mcp as agent depends on it (#22769)

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

... (truncated)

Commits

417af5d release: 10.69.0
e7cf605 meta(changelog): Update changelog for 10.69.0 (#22807)
7c5a00e fix(v10/effect): Set sentry.origin on logs from SentryEffectLogger (#22806)
df53214 feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)
e96e15e feat(v10/cloudflare): Add Spotlight integration for local dev event forwardin...
ea4a322 fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)
6a84103 feat(v10/cloudflare): Instrument Agents automatically (#22788)
f0c3569 feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)
0516355 feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#2...
d3a6e52 fix(v10/cloudflare): Filter CREATE INDEX spans on cf_-prefixed tables (#2...
Additional commits viewable in compare view

Updates jose from 6.2.3 to 6.2.5

Release notes

Sourced from jose's releases.

v6.2.5

Fixes

compare claim values for falsy validation options (eb86956)

forward key management parameters for a single JWE recipient (2d4f801)

handle a zero-length JWE additional authenticated data (16ca398)

reject a generateKeyPair crv option the algorithm does not imply (76364e9)

reject an unencoded payload in the JWS Compact Serialization (01d053f)

reject characters outside the Base64URL alphabet (0ebb971), references #879

reject duplicate "crit" values when producing (31d60e1)

reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)

reject truncated ASN.1 key data (7a16c66)

surface non-ASCII token segments as JOSE errors (194fe11)

types: correct JWK and CryptoKey types (62a196d)

types: correct key resolver and JWT header types (e95f8c4)

validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

correct subpaths and API documentation (2daec38)

document consumer-supplied type parameters (9e9f66c)

stop claiming the JWK "use" parameter is used during import (47a07b2)

update CHANGELOG.md (fc51bf5)

Refactor

assert key shape and type from the entry (971057e)

avoid 32-bit truncation of the AES-CBC-HMAC AAD bit length (1c8c6e9)

correct swapped JWE unprotected header type error messages (894c498)

describe each JWS algorithm once (7375028)

discriminate a key once (0b59a69)

fold single-consumer modules into their consumers (c2f0ca3)

generate and import keys from the entry (da69b68)

keep JWE out of the JWKS and embedded-JWK paths (241dd48)

keep JWS and JWE out of each other's bundles (2a98564)

parse a Protected Header in one place (30f72af)

resolve the content encryption algorithm once (98b50ab)

tighten key property checks (fe0dc3b)

types: add discriminated JOSE error types (f7f764e)

types: add JOSE identifier unions and JWK narrowing (2a20f49)

types: improve key and result inference (cb25e77)

types: trim published declaration comments (544f179)

unify base64 decode errors (3a91833)

validate each token once rather than once per layer (bbdae09)

write each algorithm identifier once (73d83b5)

v6.2.4

Documentation

update README.md and SECURITY.md to reflect passed EOL dates (2a84032)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.5 (2026-07-29)

Fixes

compare claim values for falsy validation options (eb86956)

forward key management parameters for a single JWE recipient (2d4f801)

handle a zero-length JWE additional authenticated data (16ca398)

reject a generateKeyPair crv option the algorithm does not imply (76364e9)

reject an unencoded payload in the JWS Compact Serialization (01d053f)

reject characters outside the Base64URL alphabet (0ebb971), references #879

reject duplicate "crit" values when producing (31d60e1)

reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)

reject truncated ASN.1 key data (7a16c66)

surface non-ASCII token segments as JOSE errors (194fe11)

types: correct JWK and CryptoKey types (62a196d)

types: correct key resolver and JWT header types (e95f8c4)

validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

correct subpaths and API documentation (2daec38)

document consumer-supplied type parameters (9e9f66c)

stop claiming the JWK "use" parameter is used during import (47a07b2)

update CHANGELOG.md (fc51bf5)

Refactor

assert key shape and type from the entry (971057e)

avoid 32-bit truncation of the AES-CBC-HMAC AAD bit length (1c8c6e9)

correct swapped JWE unprotected header type error messages (894c498)

describe each JWS algorithm once (7375028)

discriminate a key once (0b59a69)

fold single-consumer modules into their consumers (c2f0ca3)

generate and import keys from the entry (da69b68)

keep JWE out of the JWKS and embedded-JWK paths (241dd48)

keep JWS and JWE out of each other's bundles (2a98564)

parse a Protected Header in one place (30f72af)

resolve the content encryption algorithm once (98b50ab)

tighten key property checks (fe0dc3b)

types: add discriminated JOSE error types (f7f764e)

types: add JOSE identifier unions and JWK narrowing (2a20f49)

types: improve key and result inference (cb25e77)

types: trim published declaration comments (544f179)

unify base64 decode errors (3a91833)

validate each token once rather than once per layer (bbdae09)

write each algorithm identifier once (73d83b5)

6.2.4 (2026-07-21)

... (truncated)

Commits

3bac350 chore(release): 6.2.5
544f179 refactor(types): trim published declaration comments
ef6b73e ci: enforce the family split and check the built dist
c2f0ca3 refactor: fold single-consumer modules into their consumers
0b59a69 refactor: discriminate a key once
30f72af refactor: parse a Protected Header in one place
73d83b5 refactor: write each algorithm identifier once
da69b68 refactor: generate and import keys from the entry
971057e refactor: assert key shape and type from the entry
98b50ab refactor: resolve the content encryption algorithm once
Additional commits viewable in compare view

Updates marked from 18.0.6 to 18.0.7

Release notes

Sourced from marked's releases.

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991

Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)

keep empty list after blockquote as a sibling block (#4004) (3f144a0)

preserve code spans adjacent to tildes (#4012) (0de7188)

Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1

treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)

Commits

a8971a1 chore(release): 18.0.7 [skip ci]
d899c2e chore(deps): bump actions/setup-node from 6 to 7 (#4025)
7fbf82e chore(deps-dev): bump semantic-release from 25.0.7 to 25.0.8 (#4026)
738edf2 chore(deps-dev): bump brace-expansion from 5.0.2 to 5.0.6 (#4027)
9154f8f fix: Avoid O(n^2) masked source rebuild in inline tokenizer (#4017)
f945fc5 fix: Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexe...
3f144a0 fix: keep empty list after blockquote as a sibling block (#4004)
0de7188 fix: preserve code spans adjacent to tildes (#4012)
f056437 fix: Recognize setext headings whose first line starts with # (#4015)
12bfa94 chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.7 (#4020)
Additional commits viewable in compare view

Updates next from 16.2.10 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Backport/docs fixes 16.2 - July round by @icyJoseph in vercel/next.js#96031

[Backport] Fixes to support TypeScript 7 by @lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

Commits

2234717 v16.2.12
957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
b56eb16 Backport/docs fixes 16.2 - July round (#96031)
9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

dependabot · 2026-07-22T17:39:13Z

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…8 updates Bumps the production-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.8.0` | `7.9.1` | | [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.8.0` | `7.9.1` | | [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.66.0` | `10.69.0` | | [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.5` | | [marked](https://github.com/markedjs/marked) | `18.0.6` | `18.0.7` | | [next](https://github.com/vercel/next.js) | `16.2.10` | `16.2.12` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | Updates `@prisma/adapter-pg` from 7.8.0 to 7.9.1 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/adapter-pg) Updates `@prisma/client` from 7.8.0 to 7.9.1 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/client) Updates `@sentry/nextjs` from 10.66.0 to 10.69.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.69.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.66.0...10.69.0) Updates `jose` from 6.2.3 to 6.2.5 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.3...v6.2.5) Updates `marked` from 18.0.6 to 18.0.7 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.0.6...v18.0.7) Updates `next` from 16.2.10 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.10...v16.2.12) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) --- updated-dependencies: - dependency-name: "@prisma/adapter-pg" dependency-version: 7.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@prisma/client" dependency-version: 7.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/nextjs" dependency-version: 10.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: jose dependency-version: 6.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: marked dependency-version: 18.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: next dependency-version: 16.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-05T17:36:21Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-d521a33fb8 branch from 64e5c99 to dee11e5 Compare July 30, 2026 17:38

dependabot Bot closed this Aug 5, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-d521a33fb8 branch August 5, 2026 17:36

Navigation Menu

deps: bump the production-dependencies group across 1 directory with 8 updates - #75

deps: bump the production-dependencies group across 1 directory with 8 updates#75
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d521a33fb8

dependabot Bot commented on behalf of github Jul 22, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Path	Size
`@sentry/browser`	27.11 KB
`@sentry/browser` - with treeshaking flags	25.59 KB
`@sentry/browser` (incl. Tracing)	45.51 KB
`@sentry/browser` (incl. Tracing + Span Streaming)	47.25 KB
`@sentry/browser` (incl. Tracing, Profiling)	50.15 KB
`@sentry/browser` (incl. Tracing, Replay)	83.84 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	73.71 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	88.44 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	100.79 KB
`@sentry/browser` (incl. Feedback)	43.88 KB
`@sentry/browser` (incl. sendFeedback)	31.79 KB
`@sentry/browser` (incl. FeedbackAsync)	36.8 KB
`@sentry/browser` (incl. Metrics)	28.17 KB
`@sentry/browser` (incl. Logs)	28.39 KB
`@sentry/browser` (incl. Metrics & Logs)	29.07 KB
`@sentry/react`	28.87 KB

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

7.9.1

7.9.0

Highlights

ORM

Tab completions for the Prisma CLI

Prisma ORM, ready for AI agents

7.9.1

7.9.0

Highlights

ORM

Tab completions for the Prisma CLI

Prisma ORM, ready for AI agents

10.69.0

Important Changes

Other Changes

Bundle size 📦

10.69.0

Important Changes

Other Changes

10.68.0

v6.2.5

Fixes

Documentation

Refactor

v6.2.4

Documentation

6.2.5 (2026-07-29)

Fixes

Documentation

Refactor

6.2.4 (2026-07-21)

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

v16.2.12

What's Changed

v16.2.11

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

Uh oh!

dependabot Bot commented on behalf of github Jul 22, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Aug 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 22, 2026 •

edited

Loading