Bump the npm-patch-updates group across 1 directory with 8 updates by dependabot[bot] · Pull Request #40 · devforai-creator/rebel-ai

dependabot · 2026-07-07T00:07:40Z

Bumps the npm-patch-updates group with 7 updates in the / directory:

Package	From	To
react	`19.2.5`	`19.2.7`
@types/react	`19.2.14`	`19.2.17`
react-dom	`19.2.5`	`19.2.7`
swr	`2.4.1`	`2.4.2`
@next/bundle-analyzer	`16.2.3`	`16.2.10`
@vitest/coverage-v8	`4.1.9`	`4.1.10`
postcss	`8.5.15`	`8.5.16`

Updates react from 19.2.5 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

Commits

6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 19.2.14 to 19.2.17

Commits

See full diff in compare view

Updates react-dom from 19.2.5 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

Commits

6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates swr from 2.4.1 to 2.4.2

Release notes

Sourced from swr's releases.

v2.4.2

Patches

fix: guard against double-unsubscribe removing wrong subscriber in cache.ts by @tomohiro86 in vercel/swr#4252

Prevent resolved promise to suspend due to missing status by @devjiwonchoi in vercel/swr#4271

Chores

Update axios versions in the examples by @lukesandberg in vercel/swr#4243

ci: switch npm publish to OIDC trusted publishing by @huozhi in vercel/swr#4274

ci: remove registry url by @huozhi in vercel/swr#4277

ci: update release job by @huozhi in vercel/swr#4278

2.4.2 by @huozhi in vercel/swr#4279

chore: pin pnpm 10.33.0 by @styfle in vercel/swr#4258

ci: update GitHub Actions for Node 24 by @promer94 in vercel/swr#4254

chore: remove the axios examples by @huozhi in vercel/swr#4263

New Contributors

@lukesandberg made their first contribution in vercel/swr#4243

@tomohiro86 made their first contribution in vercel/swr#4252

Full Changelog: vercel/swr@v2.4.1...v2.4.2

Commits

f1c1fd8 2.4.2 (#4279)
10b6b65 ci: update release job (#4278)
95592f3 ci: remove registry url (#4277)
11bbc8f ci: switch npm publish to OIDC trusted publishing (#4274)
a89bbe7 Prevent resolved promise to suspend due to missing status (#4271)
f8d4995 chore: remove the axios examples (#4263)
e384af7 ci: update GitHub Actions for Node 24 (#4254)
a376f88 chore: pin pnpm 10.33.0 (#4258)
c39d701 fix: guard against double-unsubscribe removing wrong subscriber in cache.ts (...
46f3954 Security: Update axios versions in the examples (#4243)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for swr since your current version.

Updates @next/bundle-analyzer from 16.2.3 to 16.2.10

Release notes

Sourced from @next/bundle-analyzer's releases.

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

GHSA-8h8q-6873-q5fj: Denial of Service with Server Components

GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components

GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection

GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades

GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

... (truncated)

Commits

9dadfd6 v16.2.10
6e1a94d [16.2.x][ci]: fix release script to not strip newlines (#94640)
f37fad9 v16.2.9
6f16804 v16.2.8
411c455 v16.2.7
ee6e79b v16.2.6
766148f v16.2.5
2275bd8 v16.2.4
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @next/bundle-analyzer since your current version.

Updates @types/react from 19.2.14 to 19.2.17

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
See full diff in compare view

Updates postcss from 8.5.15 to 8.5.16

Release notes

Sourced from postcss's releases.

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

Changelog

Sourced from postcss's changelog.

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

Commits

92ccc93 Release 8.5.16 version
818bdd6 Update formatting
46e4510 Fix Input#origin() returning incorrect position (#2036)
34942ce Fix tests
d4feed6 Don't clone root-less child nodes in container constructor (#2097)
da323fc Revert version update to fix old Node.js on CI
8863369 Update dependencies
3828982 Preserve node raws when rehydrating a JSON AST (#2100)
d1e80b8 Fix Node#rangeBy() ignoring index 0 (#2091)
b91e4a6 Fix Node.js 26 tests
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
See full diff in compare view

vercel · 2026-07-07T00:07:45Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
rebel-ai	Ready	Preview, Comment	Jul 8, 2026 12:09am

Bumps the npm-patch-updates group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.5` | `19.2.7` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.17` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.2.7` | | [swr](https://github.com/vercel/swr) | `2.4.1` | `2.4.2` | | [@next/bundle-analyzer](https://github.com/vercel/next.js/tree/HEAD/packages/next-bundle-analyzer) | `16.2.3` | `16.2.10` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` | | [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.16` | Updates `react` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `@types/react` from 19.2.14 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `swr` from 2.4.1 to 2.4.2 - [Release notes](https://github.com/vercel/swr/releases) - [Commits](vercel/swr@v2.4.1...v2.4.2) Updates `@next/bundle-analyzer` from 16.2.3 to 16.2.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.2.10/packages/next-bundle-analyzer) Updates `@types/react` from 19.2.14 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `postcss` from 8.5.15 to 8.5.16 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.15...8.5.16) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: "@next/bundle-analyzer" dependency-version: 16.2.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch-updates - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch-updates - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch-updates - dependency-name: postcss dependency-version: 8.5.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch-updates - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch-updates - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch-updates - dependency-name: swr dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch-updates - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 7, 2026

dependabot Bot mentioned this pull request Jul 7, 2026

Bump vitest from 4.0.18 to 4.1.4 #19

Closed

vercel Bot deployed to Preview – rebel-ai July 7, 2026 00:09 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-patch-updates-e7942c6217 branch from 6b4bd04 to 8525a14 Compare July 7, 2026 10:51

vercel Bot deployed to Preview – rebel-ai July 7, 2026 10:52 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-patch-updates-e7942c6217 branch from 8525a14 to adc5961 Compare July 8, 2026 00:07

vercel Bot deployed to Preview – rebel-ai July 8, 2026 00:09 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm-patch-updates group across 1 directory with 8 updates#40

Bump the npm-patch-updates group across 1 directory with 8 updates#40
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-patch-updates-e7942c6217

dependabot Bot commented on behalf of github Jul 7, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jul 7, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

v2.4.2

Patches

Chores

New Contributors

v16.2.10

v16.2.9

v16.2.8

v16.2.7

Core Changes

Credits

v16.2.6

Security Fixes

v4.1.10

🐞 Bug Fixes

View changes on GitHub

8.5.16

8.5.16

v4.1.10

🐞 Bug Fixes

View changes on GitHub

Uh oh!

vercel Bot commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 7, 2026 •

edited

Loading

vercel Bot commented Jul 7, 2026 •

edited

Loading