fix(deps): bump the production-deps group with 10 updates by dependabot[bot] · Pull Request #116 · ipsec-dev/Article30

dependabot · 2026-07-27T22:51:45Z

Bumps the production-deps group with 10 updates:

Package	From	To
@aws-sdk/client-s3	`3.1090.0`	`3.1095.0`
@prisma/adapter-pg	`7.8.0`	`7.9.0`
@prisma/client	`7.8.0`	`7.9.0`
prisma	`7.8.0`	`7.9.0`
lucide-react	`1.25.0`	`1.26.0`
next	`16.2.10`	`16.2.11`
radix-ui	`1.6.2`	`1.6.6`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
react-hook-form	`7.81.0`	`7.82.0`

Updates @aws-sdk/client-s3 from 3.1090.0 to 3.1095.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores

codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)

core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)

Documentation Changes

client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)

New Features

clients: update client endpoints as of 2026-07-24 (f84113a7)

client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)

client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)

client-dynamodb: Endpoint test standardizations (2e9ccdb4)

client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)

client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)

client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)

core: update clock skew detection threshold and configs (#8189) (a2773d56)

Bug Fixes

core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)

Tests

core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features

client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)

client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)

client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)

client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)

client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)

client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)

client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)

client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)

client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @aws-sdk/client-s3

3.1094.0 (2026-07-23)

Note: Version bump only for package @aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @aws-sdk/client-s3

3.1092.0 (2026-07-21)

Note: Version bump only for package @aws-sdk/client-s3

3.1091.0 (2026-07-20)

Note: Version bump only for package @aws-sdk/client-s3

Commits

753d651 Publish v3.1095.0
bb564e5 chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...
c379112 Publish v3.1094.0
0f79b6a Publish v3.1093.0
80f0df5 Publish v3.1092.0
a1269f7 Publish v3.1091.0
See full diff in compare view

Updates @prisma/adapter-pg from 7.8.0 to 7.9.0

Release notes

Sourced from @prisma/adapter-pg's releases.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
npx prisma@latest init
A safer default around destructive commands (#29684, #29691, #29713)

... (truncated)

Commits

35003fd chore(adapter-pg): remove duplicate values parameter (#29650)
d6d9fc9 chore: remove parameterization from sqlcommenter-query-insights (#29518)
See full diff in compare view

Updates @prisma/client from 7.8.0 to 7.9.0

Release notes

Sourced from @prisma/client's releases.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
npx prisma@latest init
A safer default around destructive commands (#29684, #29691, #29713)

... (truncated)

Commits

b829850 ci: upgrade pnpm to 11 to restore pnpm audit (#29725)
280fd56 fix(client): mask each quoted string in maskQuery independently (#29723)
4da3774 fix(client): reject invalid raw dates (#29697)
a7cec97 chore(deps): update engines to 7.9.0-1.e922089b7d7502aff4249d5da3420f6fa55fc6...
58f8439 fix(client): pin pg-protocol in prisma-client-imports-postgres e2e test (#29687)
918cf5d fix(client): improve adapter-related Prisma 7 error messages (#29624)
93da6ea ci(e2e): shard client e2e suite across 3 jobs to fix chronic timeouts (#29619)
3937779 fix: remove duplicate 'the the' in test comments (#29610)
fda8fbc chore(deps): bump @prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
0036baf fix(client-engine-runtime): surface unmapped driver errors as user-facing P20...
See full diff in compare view

Updates prisma from 7.8.0 to 7.9.0

Release notes

Sourced from prisma's releases.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
npx prisma@latest init
A safer default around destructive commands (#29684, #29691, #29713)

... (truncated)

Commits

537583c feat(cli): add @bomb.sh/tab completions (#28351)
bf7c40f fix(cli): update Studio to 0.33.0 and suppress aborted response errors (#29720)
9acd8dc feat(cli): install Prisma agent skills during prisma init (#29689)
aef8cb5 fix(cli): remove the migrate-reset tool from the MCP server (#29691)
cdca333 chore(deps): update @prisma/dev to 0.24.14 (#29686)
fda8fbc chore(deps): bump @prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
See full diff in compare view

Updates lucide-react from 1.25.0 to 1.26.0

Release notes

Sourced from lucide-react's releases.

Version 1.26.0

What's Changed

fix(docs): fix home page package links & accessible labels by @karsa-mistmere in lucide-icons/lucide#4540

fix(icons): changed columns-3-cog icon by @kamilasw in lucide-icons/lucide#4578

fix(icons): extended metadata of ad icon by @karsa-mistmere in lucide-icons/lucide#4579

fix(icons): changed book-open icons by @karsa-mistmere in lucide-icons/lucide#4565

feat(icons): added shield-keyhole icon by @karsa-mistmere in lucide-icons/lucide#4580

New Contributors

@kamilasw made their first contribution in lucide-icons/lucide#4578

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Commits

See full diff in compare view

Updates next from 16.2.10 to 16.2.11

Release notes

Sourced from next's releases.

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

Commits

9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
bf9d17f [16.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
fe28768 [16.x] fix(next/image): improve performance of detectContentType()
d8afb8d [16.x] Performance improvements when decoding React Server function payloads
Additional commits viewable in compare view

Updates radix-ui from 1.6.2 to 1.6.6

Changelog

Sourced from radix-ui's changelog.

1.6.6, 1.6.7

Reverted breaking changes that caused compatibility issues with React Server Components.

1.6.5

Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.

1.6.4

Fixed a regression where importing primitives from the root radix-ui entry point erased every primitive's types to any.

1.6.3

Dialog

Fixed broken ARIA references in Dialogs where title or description elements are not rendered.

Slider

Fixed a bug where onValueCommit was not called when a slider thumb was dragged across another thumb.

Toast

Fixed Toast removing non-focused toasts when pressing Escape.

Tooltip

Fixed a bug where Tooltip.Content children were mounted to the DOM twice.

Other updates

Fixed overriding inline animation style in Popper.Content.

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Widened virtualRef prop type to allow RefObject<Measurable | null> in popover components.

Fixed dev-only checks with conditional exports to drop dev-warnings from production builds.

Added per-primitive subpath entry points so each primitive can be imported directly, eg. import { Accordion } from 'radix-ui/accordion' or import * as Accordion from 'radix-ui/accordion'. This mirrors the namespaced exports available from the root radix-ui entry point.

Fixed a bug where updating a Checkbox, Switch, or RadioGroup value programmatically (eg. a "select all" control) while inside a <form> would dispatch a click event from the hidden bubble input that propagated to ancestor onClick handlers.

Commits

See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-hook-form from 7.81.0 to 7.82.0

Release notes

Sourced from react-hook-form's releases.

Version 7.82.0

🚀 feat: add opt-in delayError option for setValue (#13337)
setValue("firstName", "Bill", {
  delayError: 500, // delay validation error updates by 500ms
  shouldValidate: true
});
⚡ perf: improve getDirtyFields performance (#13590)

Improved dirty field calculation, especially for larger forms and deeply nested values.

🐞 fix: expose resetDefaultValues through form context (#13598)
const { resetDefaultValues } = useFormContext();
resetDefaultValues();
🐞 fix: setValue with shouldDirty now correctly updates dirty state when the form is disabled (#13594) 🐞 fix: preserve dirtyFields boolean values for registered array fields (#13586) 🐞 fix: restore FieldArray component export (#13596) 🧪 test: migrate test suite to Playwright and improve delayError test reliability (#13589)

thanks to @candymask0712, @wanxiankai, @a-y-ibrahim, @ankit1324 & @abnud11

Changelog

Sourced from react-hook-form's changelog.

[7.82.0] - 2026-07-18

Added

Opt-in delayError option for setValue to delay validation error updates

Fixed

Expose resetDefaultValues through form context

setValue with shouldDirty not updating dirty state correctly when the form is disabled

Preserve dirtyFields boolean values for registered array fields

Restore FieldArray component export

Performance

Improve getDirtyFields performance, especially for larger forms and deeply nested values

Commits

553d290 7.82.0
2791e4f 🐞 fix: prevent stale _setValid() calls from overwriting isValid/isValidating ...
521adfc 🤦🏻‍♂️ fix: expose resetDefaultValues through form context (#13598)
2f7c1c5 🤧 fix FieldArray component export (#13596)
9378288 🐞 fix #13592 setValue with shouldDirty not marking dirty state when form is d...
65599cc 🚗 perf: improve get dirty fields (#13590)
142f299 🖲️ chore: upgrade pnpm to v11 (#13587)
673aae4 🤖 build(deps-dev): bump vite from 5.4.11 to 6.4.3 in /app (#13534)
11bd6df 🥗 migrate to playwright & fix delay error feature (#13589)
95da27a ⏳ feat: add opt-in delayError option for setValue (#13337)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-deps group with 10 updates: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1090.0` | `3.1095.0` | | [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.8.0` | `7.9.0` | | [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.8.0` | `7.9.0` | | [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `7.8.0` | `7.9.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.26.0` | | [next](https://github.com/vercel/next.js) | `16.2.10` | `16.2.11` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.2` | `1.6.6` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.81.0` | `7.82.0` | Updates `@aws-sdk/client-s3` from 3.1090.0 to 3.1095.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-s3) Updates `@prisma/adapter-pg` from 7.8.0 to 7.9.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/adapter-pg) Updates `@prisma/client` from 7.8.0 to 7.9.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/client) Updates `prisma` from 7.8.0 to 7.9.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/cli) Updates `lucide-react` from 1.25.0 to 1.26.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.26.0/packages/lucide-react) Updates `next` from 16.2.10 to 16.2.11 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.10...v16.2.11) Updates `radix-ui` from 1.6.2 to 1.6.6 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `react-hook-form` from 7.81.0 to 7.82.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.81.0...v7.82.0) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1095.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: "@prisma/adapter-pg" dependency-version: 7.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: "@prisma/client" dependency-version: 7.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: prisma dependency-version: 7.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: lucide-react dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: next dependency-version: 16.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: radix-ui dependency-version: 1.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: react-hook-form dependency-version: 7.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency npm npm dependency updates labels Jul 27, 2026

github-actions Bot approved these changes Jul 27, 2026

View reviewed changes

github-actions Bot enabled auto-merge (squash) July 27, 2026 22:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): bump the production-deps group with 10 updates - #116

fix(deps): bump the production-deps group with 10 updates#116
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-159dc68461

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

v3.1095.0

3.1095.0(2026-07-24)

Chores

Documentation Changes

New Features

Bug Fixes

Tests

v3.1094.0

3.1094.0(2026-07-23)

New Features

3.1095.0 (2026-07-24)

3.1094.0 (2026-07-23)

3.1093.0 (2026-07-22)

3.1092.0 (2026-07-21)

3.1091.0 (2026-07-20)

7.9.0

Highlights

ORM

Tab completions for the Prisma CLI

Prisma ORM, ready for AI agents

7.9.0

Highlights

ORM

Tab completions for the Prisma CLI

Prisma ORM, ready for AI agents

7.9.0

Highlights

ORM

Tab completions for the Prisma CLI

Prisma ORM, ready for AI agents

Version 1.26.0

What's Changed

New Contributors

v16.2.11

1.6.6, 1.6.7

1.6.5

1.6.4

1.6.3

Dialog

Slider

Toast

Tooltip

Other updates

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

Version 7.82.0

[7.82.0] - 2026-07-18

Added

Fixed

Performance

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants