chore(deps): bump the app-production-minor-patch group across 1 directory with 21 updates by dependabot[bot] · Pull Request #99 · securebuildhq/securebuild

dependabot · 2026-05-11T18:00:19Z

Bumps the app-production-minor-patch group with 18 updates in the /securebuild-app directory:

Package	From	To
autoprefixer	`10.4.27`	`10.5.0`
cytoscape	`3.33.1`	`3.33.3`
cytoscape-euler	`1.2.3`	`1.2.4`
dd-trace	`5.93.0`	`5.102.0`
jotai	`2.19.0`	`2.20.0`
parse-duration	`2.1.5`	`2.1.6`
react	`19.2.4`	`19.2.6`
react-dom	`19.2.4`	`19.2.6`
react-hook-form	`7.72.0`	`7.75.0`
react-resizable-panels	`4.8.0`	`4.11.0`
semver	`7.7.4`	`7.8.0`
stripe	`22.0.0`	`22.1.1`
tar	`7.5.13`	`7.5.15`
tar-stream	`3.1.8`	`3.2.0`
zod	`4.3.6`	`4.4.3`
@tailwindcss/postcss	`4.2.2`	`4.3.0`
@testcontainers/postgresql	`11.13.0`	`11.14.0`
ts-jest	`29.4.6`	`29.4.9`

Updates autoprefixer from 10.4.27 to 10.5.0

Release notes

Sourced from autoprefixer's releases.

10.5.0 “Each Endeavouring, All Achieving”

Added mask-position-x and mask-position-y support (by @toporek).

Changelog

Sourced from autoprefixer's changelog.

10.5.0 “Each Endeavouring, All Achieving”

Added mask-position-x and mask-position-y support (by @toporek).

Commits

faf456a Release 10.5 version
b841fc5 Update dependencies
47d6e68 Update email
45cfc08 Replace ESLint and Prettier to oxlint and oxfmt
7e3ec7d Add prefixing support for mask-position-x and mask-position-y (#1548)
See full diff in compare view

Updates cytoscape from 3.33.1 to 3.33.3

Release notes

Sourced from cytoscape's releases.

v3.33.3

Release version v3.33.3

v3.33.2

Release version v3.33.2

Commits

19e3e38 3.33.3
1aa4199 Build 3.33.3
eb493ca Docs: Add 3.33.3 to versions.json
b6df1d3 Cherry-pick to master: Merge pull request #3448 from cytoscape/copilot/fix-ch...
4093efb Cherry-pick to master: Merge pull request #3453 from cytoscape/copilot/remove...
871968e Merge pull request #3451 from cytoscape/copilot/document-container-sizing-need
16524bc Merge pull request #3439 from cytoscape/copilot/refactor-github-actions-relea...
dbb4b61 Merge pull request #3444 from cytoscape/copilot/fix-typo-text-align-property
175c2c5 Remove dead phind.com badge
ed5c4da Cherry-pick to master: Merge pull request #3440 from cytoscape/copilot/fix-st...
Additional commits viewable in compare view

Updates cytoscape-euler from 1.2.3 to 1.2.4

Commits

1068ca1 1.2.4
1a30456 Build for release
7e2b87c Merge pull request #27 from osi-jehrlich/master
6dedb8b fix infinite loop when positions at (0,0) become (NaN,NaN) in update method
4a15c61 Merge pull request #26 from KonradHoeffner/pr-demo-large-chain
c5bfdd5 Add demo of a large chain of 5000 nodes with uninitialized position to check ...
See full diff in compare view

Updates dd-trace from 5.93.0 to 5.102.0

Release notes

Sourced from dd-trace's releases.

5.102.0

[3daff728b8] - (SEMVER-PATCH) fix: tolerate non-string span event names and whitespace-suffixed step functions JSON (Ruben Bridgewater) #8358

[130a30caf8] - (SEMVER-PATCH) chore(ci) update one-pipeline (gh-worker-campaigns-3e9aa4[bot]) #8342

[9001878b55] - (SEMVER-PATCH) refactor: dedupe redundant chars in regex character classes (Ruben Bridgewater) #8346

[6c7179306d] - (SEMVER-PATCH) refactor(appsec): convert WAF duration BigInt to Number, not via parseInt (Ruben Bridgewater) #8306

[14a0a822a3] - (SEMVER-PATCH) refactor: dedupe identical function bodies (Ruben Bridgewater) #8347

[0e7a8c7256] - (SEMVER-PATCH) refactor: activate three sonarjs test/loop rules (Ruben Bridgewater) #8349

[80076dd5af] - (SEMVER-PATCH) chore(eslint): activate n/hashbang and n/no-process-exit (Ruben Bridgewater) #8352

[46c61ffdd1] - (SEMVER-PATCH) refactor(prefer-rest-params): convert non-instrumentation wrappers (Ruben Bridgewater) #8353

[bb4f61acaa] - (SEMVER-PATCH) refactor(prefer-rest-params): convert instrumentations a-c (Ruben Bridgewater)

[a66a186421] - (SEMVER-PATCH) refactor(prefer-rest-params): convert instrumentations d-l (Ruben Bridgewater) #8355

[418179b183] - (SEMVER-PATCH) refactor(prefer-rest-params): convert instrumentations m-z (Ruben Bridgewater) #8356

[1afa83174a] - (SEMVER-PATCH) build(types): add index.d.v5.ts snapshot and v5-release swap script (Ruben Bridgewater) #8333

[66d49013dc] - (SEMVER-PATCH) update all slow benchmarks to run less iterations (Roch Devost) #8345

[16c4e16b60] - (SEMVER-PATCH) update llmobs encode unicode mixed benchmarks with less iterations (Roch Devost) #8344

[035fb236b2] - (SEMVER-PATCH) [test optimization] fix mocha EFD callback test arity (Juan Antonio Fernández de Alba) #8338

[5c7c227eb8] - (SEMVER-MINOR) feat(llmobs): enhance LLM Observability span processor span kind, embedding & retrieval input and output (Sam Brenner) #8299

[d422180bbc] - (SEMVER-PATCH) [test optimizaton] Use duration buckets for vitest EFD retries (Juan Antonio Fernández de Alba) #8288

[1764a646dc] - (SEMVER-PATCH) fix(index): Add truncate type to database plugin interfaces (Pablo Erhard) #8336

[ce8a754efa] - (SEMVER-PATCH) chore: add sonar linter (Ruben Bridgewater) #8150

[16016c6b5a] - (SEMVER-PATCH) perf(shimmer): drop assertNotClass toString call (Ruben Bridgewater) #8329

[4c45faa946] - (SEMVER-PATCH) fix(google-cloud-pubsub): honor DD_TRACE_REMOVE_INTEGRATION_SERVICE_NAMES_ENABLED on consumer and push spans (Crystal Luc-Magloire) #8125

[771253286d] - (SEMVER-PATCH) perf(appsec): trim per-request allocations in waf and reporter (Ruben Bridgewater) #8326

[2c8447bb13] - (SEMVER-PATCH) test: decouple request specs from nock 13 internals (Ruben Bridgewater) #8305

[8d64c6e392] - (SEMVER-PATCH) [test optimization] Use duration buckets for cucumber EFD retries (Juan Antonio Fernández de Alba) #8287

[8a10090138] - (SEMVER-PATCH) perf(aws-sdk): cache instrumentation handles and dedupe per-call work (Ruben Bridgewater) #8231

[6c0da23ceb] - (SEMVER-PATCH) [test optimization] Use duration buckets for mocha EFD retries (Juan Antonio Fernández de Alba) #8286

[baeb04586b] - (SEMVER-PATCH) fix(ci): approve pnpm package-manager builds (Juan Antonio Fernández de Alba) #8331

[a200dc4d96] - (SEMVER-PATCH) chore(iast): Improve stringifyWithRanges performance (Ugaitz Urien) #8271

[19ef5f86f2] - (SEMVER-PATCH) test(jest,vitest): split integration specs into parallel CI jobs via SPEC matrix (Roch Devost) #8311

[97853d2969] - (SEMVER-PATCH) ci: add fail-fast: false to jobs with matrix (Charles de Beauchesne) #8314

[0fdc801f66] - (SEMVER-PATCH) fix(test-optimization): edge cases when computing final_status tag on playwright (Sebastián Kay) #8249

[50aa02547e] - (SEMVER-PATCH) test: reuse azure function process to lower tests run time (Roch Devost) #8102

[fe9678ab94] - (SEMVER-PATCH) fix(net): restore Socket.emit after the connect handshake (Ruben Bridgewater) #8275

[5168c02d94] - (SEMVER-PATCH) perf(encode): drop the per-span filter Array allocations in the 0.4 e… (Ruben Bridgewater) #8233

[6bf78256b2] - (SEMVER-PATCH) ci(benchmarks): bump microbenchmark splits from 5 to 6 (Fayssal DEFAA) #8283

[ff0e435df9] - (SEMVER-PATCH) chore(ci): pin all Docker images to SHA digests (Roch Devost) #8298

[c54290e695] - (SEMVER-PATCH) test(kafkajs): wait for leaders on createTopics to fix DSM flakes (Eric Firth) #8300

5.101.0

[f121c4281f] - (SEMVER-PATCH) fix(scripts): harden mocha-parallel-files against crashes and silent … (Ruben Bridgewater) #8243

[fc60a84f47] - (SEMVER-PATCH) chore(deps): bump the test-versions group across 1 directory with 3 updates (dependabot[bot]) #8279

[0509edc11b] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 2 directories with 2 updates (dependabot[bot]) #8281

[6fc588e858] - (SEMVER-PATCH) Revert "ci(codeql): skip workflow for non-production file changes and merge queue (#8277)" (Ruben Bridgewater) #8291

[215ea598d4] - (SEMVER-PATCH) test(otel): scope post-finish no-op assertions to mutator keys (Ruben Bridgewater) #8285

[3616c45502] - (SEMVER-PATCH) ci: extract shared datadog-ci install action and replace coverage-upload-github-action (Roch Devost) #8278

[18c37b6d40] - (SEMVER-PATCH) refactor(config): extract git metadata loader out of Config (Ruben Bridgewater) #8238

[cbd06436a8] - (SEMVER-PATCH) fix(propagation): tighten W3C trace-context inject and extract correc… (Ruben Bridgewater) #8269

[388ae8171b] - (SEMVER-MINOR) fix(llmobs): add cost_tags to annotate and annotationContext (Xinyuan Guo) #8175

[e3a092a7d5] - (SEMVER-PATCH) perf(core): trim per-span allocations across id, span, and sampler (Ruben Bridgewater) #8235

... (truncated)

Commits

e36a8a6 v5.102.0
35e02b0 fix: tolerate non-string span event names and whitespace-suffixed step functi...
2d720c0 chore(ci) update one-pipeline (#8342)
d919189 refactor: dedupe redundant chars in regex character classes (#8346)
07c504c refactor(appsec): convert WAF duration BigInt to Number, not via parseInt (#8...
a89e751 refactor: dedupe identical function bodies (#8347)
400ba3e refactor: activate three sonarjs test/loop rules (#8349)
177be4e chore(eslint): activate n/hashbang and n/no-process-exit (#8352)
84d87fd refactor(prefer-rest-params): convert non-instrumentation wrappers (#8353)
009e1eb refactor(prefer-rest-params): convert instrumentations a-c (#8354)
Additional commits viewable in compare view

Updates jotai from 2.19.0 to 2.20.0

Release notes

Sourced from jotai's releases.

v2.20.0

This release improves performance in high-throughput scenarios. Huge kudos to @dmaskasky!

What's Changed

breaking(internals): avoid getInternalBuildingBlock function by @dai-shi in pmndrs/jotai#3293

refactor(internals): Rev3 type narrowing for onMount hooks by @dmaskasky in pmndrs/jotai#3311

fix(internals): guard atomOnInit hook with hasOnInit by @dmaskasky in pmndrs/jotai#3312

refactor(internals): lazy hooks in ensureAtomState for new atom state by @dmaskasky in pmndrs/jotai#3313

Full Changelog: pmndrs/jotai@v2.19.1...v2.20.0

v2.19.1

This release includes several small refactors to improve performance.

What's Changed

fix(vanilla/utils/atomWithObservable): use symbol index signature to avoid 'Symbol.observable' type reference by @sukvvon in pmndrs/jotai#3274

refactor(internals): replace nextDeps with prevDeps by @dmaskasky in pmndrs/jotai#3278

refactor(internals): reduce recomputeInvalidatedAtoms overhead (performance) by @dmaskasky in pmndrs/jotai#3284

refactor(internals): reduce flushPending overhead (performance) by @dmaskasky in pmndrs/jotai#3285

fix(internals): check if atom has dependencies before doing mountDependencies work (performance) by @dmaskasky in pmndrs/jotai#3290

fix(internals): check if atom has onMount property before queueing processOnMount callback (performance) by @dmaskasky in pmndrs/jotai#3291

refactor(types): prefer no-any by @dai-shi in pmndrs/jotai#3304

New Contributors

@aio39 made their first contribution in pmndrs/jotai#3277

Full Changelog: pmndrs/jotai@v2.19.0...v2.19.1

Commits

bdbc766 2.20.0
64181cc chore(deps): update dev dependencies (#3317)
e2aa859 refactor(internals): lazy hooks in ensureAtomState for new atom state (#3313)
26f3e9c fix(internals): guard atomOnInit hook with hasOnInit (#3312)
e923843 refactor(internals): Rev3 type narrowing for onMount hooks (#3311)
4b63111 breaking(internals): avoid getInternalBuildingBlock function (#3293)
1fae772 2.19.1
7924a8b chore(deps): update dev dependencies (#3306)
aa61ef5 test: add spec for #3296 (#3305)
91ffe6d refactor(types): prefer no-any (#3304)
Additional commits viewable in compare view

Updates parse-duration from 2.1.5 to 2.1.6

Commits

201bc57 v2.1.6
b0563da feat: add sideEffects false for tree-shaking
See full diff in compare view

Updates react from 19.2.4 to 19.2.6

Release notes

Sourced from react's releases.

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

eaf3e95 Version 19.2.6
23f4f9f 19.2.5
See full diff in compare view

Updates react-dom from 19.2.4 to 19.2.6

Release notes

Sourced from react-dom's releases.

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

eaf3e95 Version 19.2.6
23f4f9f 19.2.5
See full diff in compare view

Updates react-hook-form from 7.72.0 to 7.75.0

Release notes

Sourced from react-hook-form's releases.

Version 7.75.0

🦧 feat: improve get dirty fields prune empty fields (#13363)
+ dirtyFields: { test: [{ data: false }] }
- dirtyFields: {} // removed the empty node with false value
🎹 typescript 6.0 (#13330) 🌡️ chore: minor improvement on setValue & reset (#13366) 🐞 fix #13403: include setValues in FormProvider context value (#13404) 🐞 fix: recompute isDirty after re-registering a previously unregistered field (#13399) 🐞 fix: preserve watch updates on field array unmount fixes #13375 (#13385) 🐞 fix: prevent useWatch re-render when unrelated field validation is … (#13398)

thanks to @dfedoryshchev, @cyky & @gkarabelos

Version 7.74.0

🪇 feat: setValues (#13201)
setValues((data) => {
  return {
    ...data,
    name: 'test'
  }
})
setValues(formValues);
🐞 fix: preserve previous field value when useController name changes (#13395) 🐞 fix: handle null parent when unregistering nested field (#13396) 🐞 fix: treat NaN as empty when valueAsNumber is true in validateField (#13388) 🪢 fix build to exclude test files (#13387)

thanks to @Yihao-G & @mixelburg

Version 7.73.1

⚡perf: memoize submit (#13378) 🚉 perf: improve deepEqual performance (#13362) 👀 perf: skip re-render in setValue when value is unchanged (#13352) ✂️ remove unneeded flag check for shouldDirty 🚨 fix: safely access field._f during register (#13365) 🧹 close #13298: improve fieldState errors when resolver uses dot-notation string keys (#13350) 🐞 fix #13178: update state correctly in watch callback with Controller, trigger, and reset (#13180) 🐞 fix #13331: skip field array validation when mode is onBlur (#13333) 🐞 fix #13334 sDirty remains false after deletion an item with shouldDirty: true (#13357) 🐞 fix: handle nested field when parent defaultValue is null (#13348)

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.75.0] - 2026-05-02

Added

Improve getDirtyFields to prune empty fields

TypeScript 6.0 support

Fixed

Include setValues in FormProvider context value

Preserve watch updates on field array unmount

Prevent useWatch re-render when unrelated field validation occurs

Recompute isDirty after re-registering a previously unregistered field

[7.74.0] - 2026-04-26

Added

setValues API

Fixed

Preserve previous field value when useController name changes

Handle null parent when unregistering nested field

Treat NaN as empty when valueAsNumber is true in validateField

[7.73.1] - 2026-04-21

Fixed

Reverted setValues that was accidentally included in patch; fix build to exclude test files

[7.73.0] - 2026-04-18

Added

Improve subscribe API performance

Performance

Memoize submit handler

Improve deepEqual performance

Fixed

Safely access field._f during register

Improve fieldState errors when resolver uses dot-notation string keys

Update state correctly in watch callback with Controller, trigger, and reset

Skip field array validation when mode is onBlur

isDirty remains false after deleting an item with shouldDirty: true

... (truncated)

Commits

24bde23 7.75.0
aa6f795 🐞 fix #13403: include setValues in FormProvider context value (#13404)
c2b22f9 🥊 all ts-ignores removed
3165a52 🧸 fix more @ts-ignores
7c51590 🧸 fix more @ts-ignores
b16b4fa 🎹 typescript 6.0 (#13330)
4bace71 🐞 fix: preserve watch updates on field array unmount fixes #13375 (#13385)
2adb9c0 🐞 fix: prevent useWatch re-render when unrelated field validation is … (#13398)
f5a234d 🦧 feat: improve get dirty fields prune empty fields (#13363)
def8fd5 🐞 fix: recompute isDirty after re-registering a previously unregistered field...
Additional commits viewable in compare view

Updates react-resizable-panels from 4.8.0 to 4.11.0

Release notes

Sourced from react-resizable-panels's releases.

4.9.0

702: Add disableDoubleClick prop to Separator to enable turning off the double-click size reset behavior.

Changelog

Sourced from react-resizable-panels's changelog.

4.11.0

712: Separator supports :focus-visible pseudo-class

703: Fix: edge case scenarios when collapsing the last panel

711: Improve legacy browser support wrt global stylesheets

4.10.0

705: Add data-separator="focus" state for Separator elements for more consistent custom CSS styles.

4.9.0

702: Add disableDoubleClick prop to Separator to enable turning off the double-click size reset behavior.

Commits

85714d9 4.11.0
640b88d Fix typo on Min/max sizes doc page (#710)
e434898 Upgrade react-lib-tools to improve site-search
ab61ee9 Upgrade react-lib-tools to improve site-search
5985041 Update overflow style example
fa27133 4.9.0 -> 4.10.0
b58ed97 Add data-separator "focus" state (#706)
f4e5e08 Upgrade react-lib-tools to improve site-search
5cf89ea Made callouts on Common Questions more consistent
435f953 Upgrade react-lib-tools to improve site-search
Additional commits viewable in compare view

Updates semver from 7.7.4 to 7.8.0

Release notes

Sourced from semver's releases.

v7.8.0

7.8.0 (2026-05-08)

Features

0d0a0a2 #855 Add truncate function (#855) (@pjohnmeyer, @owlstronaut)

Bug Fixes

3905343 #859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)

Documentation

c368af6 #853 fix typos in documentation (#853) (@ankitkumar572005)

37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)

Chores

9542e09 #860 template-oss-apply (@owlstronaut)

937bc2c #860 template-oss-apply@5.0.0 (@owlstronaut)

6946fef #852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)

Changelog

Sourced from semver's changelog.

7.8.0 (2026-05-08)

Features

0d0a0a2 #855 Add truncate function (#855) (@pjohnmeyer, @owlstronaut)

Bug Fixes

3905343 #859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)

Documentation

c368af6 #853 fix typos in documentation (#853) (@ankitkumar572005)

37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)

Chores

9542e09 #860 template-oss-apply (@owlstronaut)

937bc2c #860 template-oss-apply@5.0.0 (@owlstronaut)

6946fef #852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)

Commits

efa4be6 chore: release 7.8.0 (#847)
9542e09 chore: template-oss-apply
937bc2c chore: template-oss-apply@5.0.0
3905343 fix: Warn when defaulting to --inc=patch in CLI
0d0a0a2 feat: Add truncate function (#855)
c368af6 docs: fix typos in documentation (#853)
6946fef chore: bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852)
37776c3 docs: fix BNF grammar to distinguish prerelease from build identifiers (#846)
See full diff in compare view

Updates stripe from 22.0.0 to 22.1.1

Release notes

Sourced from stripe's releases.

v22.1.1

#2703 Export Decimal type from Stripe namespace

Added Stripe.Decimal as a usable type in the Stripe namespace, enabling type annotations like function takesDecimal(d: Stripe.Decimal).

#2704 Fix file upload regression: restore multipart request data processor

Fixed file uploads failing with StripeInvalidRequestError on the /v1/files endpoint since v22.

See the changelog for more details.

v22.1.0

This release changes the pinned API version to 2026-04-22.dahlia.

#2639 Update generated code

Add support for app_distribution and sunbit_payments on Account.capabilities, AccountCreateParams.capabilities, and AccountUpdateParams.capabilities

Add support for balance_report and payout_reconciliation_report on AccountSession.components and AccountSessionCreateParams.components

⚠️ Add support for new values fee_credit_funding, inbound_transfer_reversal, and inbound_transfer on enum BalanceTransaction.type

Add support for sunbit on Charge.payment_method_details, ConfirmationToken.payment_method_preview, ConfirmationTokenCreateParams.testHelpers.payment_method_data, PaymentAttemptRecord.payment_method_details, PaymentIntentConfirmParams.payment_method_data, PaymentIntentCreateParams.payment_method_data, PaymentIntentUpdateParams.payment_method_data, PaymentMethodConfigurationCreateParams, PaymentMethodConfigurationUpdateParams, PaymentMethodConfiguration, PaymentMethodCreateParams, PaymentMethod, PaymentRecord.payment_method_details, SetupIntentConfirmParams.payment_method_data, SetupIntentCreateParams.payment_method_data, and SetupIntentUpdateParams.payment_method_data

⚠️ Add support for new values phantom_cash and usdt on enums Charge.payment_method_details.crypto.token_currency, PaymentAttemptRecord.payment_method_details.crypto.token_currency, and PaymentRecord.payment_method_details.crypto.token_currency

Add support for location and reader on Charge.payment_method_details.klarna, PaymentAttemptRecord.payment_method_details.klarna, and PaymentRecord.payment_method_details.klarna

Add support for mandate on Charge.payment_method_details.pix, PaymentAttemptRecord.payment_method_details.pix, and PaymentRecord.payment_method_details.pix

Add support for managed_payments on Checkout.SessionCreateParams, Checkout.Session, PaymentIntent, PaymentLinkCreateParams, PaymentLink, SetupIntent, and Subscription

Add support for new value sunbit on enums Checkout.SessionCreateParams.excluded_payment_method_types, PaymentIntentConfirmParams.excluded_payment_method_types, PaymentIntentCreateParams.excluded_payment_method_types, PaymentIntentUpdateParams.excluded_payment_method_types, SetupIntentCreateParams.excluded_payment_method_types, and SetupIntentUpdateParams.excluded_payment_method_types

Add support for mandate_options on Checkout.Session.payment_method_options.pix, Checkout.SessionCreateParams.payment_method_options.pix, PaymentIntent.payment_method_options.pix, PaymentIntentConfirmParams.payment_method_options.pix, PaymentIntentCreateParams.payment_method_options.pix, and PaymentIntentUpdateParams.payment_method_options.pix

Change type of Checkout.SessionCreateParams.payment_method_options.pix.setup_future_usage, PaymentIntentConfirmParams.payment_method_options.pix.setup_future_usage, PaymentIntentCreateParams.payment_method_options.pix.setup_future_usage, and PaymentIntentUpdateParams.payment_method_options.pix.setup_future_usage from literal('none') to enum('none'|'off_session')

Add support for new value sunbit on enum Checkout.SessionCreateParams.payment_method_types

⚠️ Add support for new values fo_vat, gi_tin, it_cf, and py_ruc on enums Checkout.Session.customer_details.tax_ids[].type, Invoice.customer_tax_ids[].type, Tax.Calculation.customer_details.tax_ids[].type, Tax.Transaction.customer_details.tax_ids[].type, and TaxId.type

⚠️ Change type of Checkout.Session.payment_method_options.pix.setup_future_usage and PaymentIntent.payment_method_options.pix.setup_future_usage from literal('none') to enum('none'|'off_session')

Add support for new value sunbit on enums ConfirmationTokenCreateParams.testHelpers.payment_method_data.type, PaymentIntentConfirmParams.payment_method_data.type, PaymentIntentCreateParams.payment_method_data.type, PaymentIntentUpdateParams.payment_method_data.type, SetupIntentConfirmParams.payment_method_data.type, SetupIntentCreateParams.payment_method_data.type, and SetupIntentUpdateParams.payment_method_data.type

⚠️ Add support for new value sunbit on enums ConfirmationToken.payment_method_preview.type and PaymentMethod.type

Add support for new values fo_vat, gi_tin, it_cf, and py_ruc on enums CustomerCreateParams.tax_id_data[].type, CustomerCreateTaxIdParams.type, InvoiceCreatePreviewParams.customer_details.tax_ids[].type, Tax.CalculationCreateParams.customer_details.tax_ids[].type, and TaxIdCreateParams.type

Add support for new value sunbit on enums CustomerListPaymentMethodsParams.type, PaymentMethodCreateParams.type, and PaymentMethodListParams.type

Add support for pix on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, Mandate.payment_method_details, SetupAttempt.payment_method_details, SetupIntent.payment_method_options, SetupIntentConfirmParams.payment_method_options, SetupIntentCreateParams.payment_method_options, SetupIntentUpdateParams.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_sett... Description has been truncated

…tory with 21 updates Bumps the app-production-minor-patch group with 18 updates in the /securebuild-app directory: | Package | From | To | | --- | --- | --- | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.27` | `10.5.0` | | [cytoscape](https://github.com/cytoscape/cytoscape.js) | `3.33.1` | `3.33.3` | | [cytoscape-euler](https://github.com/cytoscape/cytoscape.js-euler) | `1.2.3` | `1.2.4` | | [dd-trace](https://github.com/DataDog/dd-trace-js) | `5.93.0` | `5.102.0` | | [jotai](https://github.com/pmndrs/jotai) | `2.19.0` | `2.20.0` | | [parse-duration](https://github.com/jkroso/parse-duration) | `2.1.5` | `2.1.6` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.6` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.6` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.72.0` | `7.75.0` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.8.0` | `4.11.0` | | [semver](https://github.com/npm/node-semver) | `7.7.4` | `7.8.0` | | [stripe](https://github.com/stripe/stripe-node) | `22.0.0` | `22.1.1` | | [tar](https://github.com/isaacs/node-tar) | `7.5.13` | `7.5.15` | | [tar-stream](https://github.com/mafintosh/tar-stream) | `3.1.8` | `3.2.0` | | [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` | | [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.2.2` | `4.3.0` | | [@testcontainers/postgresql](https://github.com/testcontainers/testcontainers-node) | `11.13.0` | `11.14.0` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.6` | `29.4.9` | Updates `autoprefixer` from 10.4.27 to 10.5.0 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.27...10.5.0) Updates `cytoscape` from 3.33.1 to 3.33.3 - [Release notes](https://github.com/cytoscape/cytoscape.js/releases) - [Commits](cytoscape/cytoscape.js@v3.33.1...v3.33.3) Updates `cytoscape-euler` from 1.2.3 to 1.2.4 - [Release notes](https://github.com/cytoscape/cytoscape.js-euler/releases) - [Commits](cytoscape/cytoscape.js-euler@v1.2.3...v1.2.4) Updates `dd-trace` from 5.93.0 to 5.102.0 - [Release notes](https://github.com/DataDog/dd-trace-js/releases) - [Commits](DataDog/dd-trace-js@v5.93.0...v5.102.0) Updates `jotai` from 2.19.0 to 2.20.0 - [Release notes](https://github.com/pmndrs/jotai/releases) - [Commits](pmndrs/jotai@v2.19.0...v2.20.0) Updates `parse-duration` from 2.1.5 to 2.1.6 - [Release notes](https://github.com/jkroso/parse-duration/releases) - [Commits](jkroso/parse-duration@v2.1.5...v2.1.6) Updates `react` from 19.2.4 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react) Updates `react-dom` from 19.2.4 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom) Updates `react-hook-form` from 7.72.0 to 7.75.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.72.0...v7.75.0) Updates `react-resizable-panels` from 4.8.0 to 4.11.0 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.8.0...4.11.0) Updates `semver` from 7.7.4 to 7.8.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.7.4...v7.8.0) Updates `stripe` from 22.0.0 to 22.1.1 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.0.0...v22.1.1) Updates `tar` from 7.5.13 to 7.5.15 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.13...v7.5.15) Updates `tar-stream` from 3.1.8 to 3.2.0 - [Commits](mafintosh/tar-stream@v3.1.8...v3.2.0) Updates `zod` from 4.3.6 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.3.6...v4.4.3) Updates `@tailwindcss/postcss` from 4.2.2 to 4.3.0 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/@tailwindcss-postcss) Updates `@testcontainers/postgresql` from 11.13.0 to 11.14.0 - [Release notes](https://github.com/testcontainers/testcontainers-node/releases) - [Commits](testcontainers/testcontainers-node@v11.13.0...v11.14.0) Updates `tailwindcss` from 4.2.2 to 4.3.0 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/tailwindcss) Updates `testcontainers` from 11.13.0 to 11.14.0 - [Release notes](https://github.com/testcontainers/testcontainers-node/releases) - [Commits](testcontainers/testcontainers-node@v11.13.0...v11.14.0) Updates `ts-jest` from 29.4.6 to 29.4.9 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.6...v29.4.9) Updates `@tailwindcss/oxide-linux-x64-gnu` from 4.2.2 to 4.3.0 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/crates/node/npm/linux-x64-gnu) --- updated-dependencies: - dependency-name: autoprefixer dependency-version: 10.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: cytoscape dependency-version: 3.33.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: app-production-minor-patch - dependency-name: cytoscape-euler dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: app-production-minor-patch - dependency-name: dd-trace dependency-version: 5.102.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: jotai dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: parse-duration dependency-version: 2.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: app-production-minor-patch - dependency-name: react dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: app-production-minor-patch - dependency-name: react-dom dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: app-production-minor-patch - dependency-name: react-hook-form dependency-version: 7.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: react-resizable-panels dependency-version: 4.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: semver dependency-version: 7.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: stripe dependency-version: 22.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: tar dependency-version: 7.5.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: app-production-minor-patch - dependency-name: tar-stream dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: "@tailwindcss/postcss" dependency-version: 4.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: "@testcontainers/postgresql" dependency-version: 11.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: tailwindcss dependency-version: 4.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: testcontainers dependency-version: 11.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-production-minor-patch - dependency-name: ts-jest dependency-version: 29.4.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: app-production-minor-patch - dependency-name: "@tailwindcss/oxide-linux-x64-gnu" dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: app-production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-11T18:00:20Z

Labels

The following labels could not be found: dependencies, npm, securebuild-app. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from a team as a code owner May 11, 2026 18:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the app-production-minor-patch group across 1 directory with 21 updates#99

chore(deps): bump the app-production-minor-patch group across 1 directory with 21 updates#99
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/securebuild-app/app-production-minor-patch-40c8886c76

dependabot Bot commented on behalf of github May 11, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.5.0 “Each Endeavouring, All Achieving”

10.5.0 “Each Endeavouring, All Achieving”

v3.33.3

v3.33.2

5.102.0

5.101.0

v2.20.0

What's Changed

v2.19.1

What's Changed

New Contributors

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Version 7.75.0

Version 7.74.0

Version 7.73.1

[7.75.0] - 2026-05-02

Added

Fixed

[7.74.0] - 2026-04-26

Added

Fixed

[7.73.1] - 2026-04-21

Fixed

[7.73.0] - 2026-04-18

Added

Performance

Fixed

4.9.0

4.11.0

4.10.0

4.9.0

v7.8.0

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

v22.1.1

v22.1.0

Uh oh!

dependabot Bot commented on behalf of github May 11, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 11, 2026 •

edited

Loading