Skip to content

chore(deps): bump the production-minor-patch group across 1 directory with 7 updates - #46

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-minor-patch-f629c625b9
Open

chore(deps): bump the production-minor-patch group across 1 directory with 7 updates#46
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-minor-patch-f629c625b9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown

Bumps the production-minor-patch group with 7 updates in the / directory:

Package From To
@clerk/nextjs 7.6.1 7.6.4
@google/genai 2.13.0 2.15.0
lucide-react 1.27.0 1.28.0
mongoose 9.8.0 9.9.0
shadcn 4.15.0 4.16.1
@clerk/backend 3.8.2 3.15.0
express-rate-limit 8.6.0 8.6.1

Updates @clerk/nextjs from 7.6.1 to 7.6.4

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.6.4

Patch Changes

@​clerk/nextjs@​7.6.3

Patch Changes

@​clerk/nextjs@​7.6.2

Patch Changes

  • Updated dependencies [6f5fde9]:
    • @​clerk/backend@​3.13.2
    • @​clerk/react@​6.12.8
Changelog

Sourced from @​clerk/nextjs's changelog.

7.6.4

Patch Changes

7.6.3

Patch Changes

7.6.2

Patch Changes

  • Updated dependencies [6f5fde9]:
    • @​clerk/backend@​3.13.2
    • @​clerk/react@​6.12.8
Commits

Updates @google/genai from 2.13.0 to 2.15.0

Release notes

Sourced from @​google/genai's releases.

v2.15.0

2.15.0 (2026-07-30)

Features

  • add environment resource (2c911be)
  • Support GoogleMaps Tool grounding_types places and routing (52655c1)
  • Support per-request retryOptions in the JS GenAI SDK API Client (124b606)
  • Wire environment service into genai sdk (70d7938)

v2.14.0

2.14.0 (2026-07-28)

Features

  • [GenerateContentConfig] Add GenerationConfig.audio_transcription_config and Part.audio_transcription. (4b2e67a)
  • Add flat language_codes field to AudioTranscriptionConfig. (cc808eb)
  • Allow api key + proj/location for enterprise mode (9c0540a)

Bug Fixes

  • add deprecation warnings to Imagen generate_images, edit_images, generate_videos (if using prompt/text/image args), LiveConnectConfig.GenerationConfig which will be removed in the next major version (bb66101)
Changelog

Sourced from @​google/genai's changelog.

2.15.0 (2026-07-30)

Features

  • add environment resource (2c911be)
  • Support GoogleMaps Tool grounding_types places and routing (52655c1)
  • Support per-request retryOptions in the JS GenAI SDK API Client (124b606)
  • Wire environment service into genai sdk (70d7938)

2.14.0 (2026-07-28)

Features

  • [GenerateContentConfig] Add GenerationConfig.audio_transcription_config and Part.audio_transcription. (4b2e67a)
  • Add flat language_codes field to AudioTranscriptionConfig. (cc808eb)
  • Allow api key + proj/location for enterprise mode (9c0540a)

Bug Fixes

  • add deprecation warnings to Imagen generate_images, edit_images, generate_videos (if using prompt/text/image args), LiveConnectConfig.GenerationConfig which will be removed in the next major version (bb66101)
Commits
  • a76a3ea chore(main): release 2.15.0 (#1815)
  • 124b606 feat: Support per-request retryOptions in the JS GenAI SDK API Client
  • 52655c1 feat: Support GoogleMaps Tool grounding_types places and routing
  • 70d7938 feat: Wire environment service into genai sdk
  • 2c911be feat: add environment resource
  • 1895d57 docs: Communicate on upcoming updates in the next major version
  • ebeba1c chore(main): release 2.14.0 (#1799)
  • cc808eb feat: Add flat language_codes field to AudioTranscriptionConfig.
  • 9c0540a feat: Allow api key + proj/location for enterprise mode
  • d221cf3 chore: internal update
  • Additional commits viewable in compare view

Updates lucide-react from 1.27.0 to 1.28.0

Release notes

Sourced from lucide-react's releases.

Version 1.28.0

What's Changed

Full Changelog: lucide-icons/lucide@1.27.0...1.28.0

Commits

Updates mongoose from 9.8.0 to 9.9.0

Release notes

Sourced from mongoose's releases.

9.9.0 / 2026-07-30

  • perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
  • perf(model): improve insertMany() performance and general change tracking performance #16370
  • perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
  • perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
  • types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

9.8.1 / 2026-07-27

  • perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
  • perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
  • fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
  • perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
  • types: respect the _id option when inferring StandardSchema types #16402
  • types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
  • docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir
Changelog

Sourced from mongoose's changelog.

9.9.0 / 2026-07-30

  • perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
  • perf(model): improve insertMany() performance and general change tracking performance #16370
  • perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
  • perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
  • types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

8.24.2 / 2026-07-27

9.8.1 / 2026-07-27

  • perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
  • perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
  • fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
  • perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
  • types: respect the _id option when inferring StandardSchema types #16402
  • types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
  • docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir
Commits
  • 650c286 chore: release 9.9.0
  • 0b4ef8a test: improve flakey test
  • 2ccf221 Merge pull request #16412 from Automattic/vkarpov15/gh-16045-3
  • 2d7256b fix lint
  • 5f998c8 types: handle required discriminator keys when inferring embedded discriminat...
  • 8b59eea types: allow base discriminator to have nullish discriminator key for backwar...
  • a37bfc6 types: add explicit discriminator key to embedded discriminator subtypes
  • a8aee7c test: add test case coverage for #16045
  • 911d31d Merge pull request #16408 from Automattic/vkarpov15/gh-14394-2
  • 2477550 Merge pull request #16411 from Automattic/vkarpov15/upsert-createdat
  • Additional commits viewable in compare view

Updates shadcn from 4.15.0 to 4.16.1

Release notes

Sourced from shadcn's releases.

shadcn@4.16.1

Patch Changes

shadcn@4.16.0

Minor Changes

Changelog

Sourced from shadcn's changelog.

4.16.1

Patch Changes

4.16.0

Minor Changes

Commits

Updates @clerk/backend from 3.8.2 to 3.15.0

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​3.15.0

Minor Changes

  • Update fields for BillingSubscription and BillingSubscriptionItem (#9196) by @​dstaley

Patch Changes

  • Return a TokenVerificationError from decodeJwt and verifyToken for tokens whose header, payload, or signature cannot be decoded. (#9268) by @​wobsoriano

  • Updated dependencies [aaea141]:

    • @​clerk/shared@​4.25.10

@​clerk/backend@​3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @​manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@​clerk/backend@​3.13.2

Patch Changes

  • Correct two Dashboard labels referenced in the instance restrictions documentation. blockDisposableEmailDomains bolded "Block sign-ups that use disposable email domains", but the toggle in the Clerk Dashboard is "Block sign-ups that use disposable email addresses". ignoreDotsForGmailAddresses bolded "Ignore dots for Gmail addresses" as a Dashboard toggle, but no such control exists — the wording now matches the equivalent comment on UpdateRestrictionsParams. Property names are unchanged. (#9253) by @​manovotny

@​clerk/backend@​3.13.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8
Changelog

Sourced from @​clerk/backend's changelog.

3.15.0

Minor Changes

  • Update fields for BillingSubscription and BillingSubscriptionItem (#9196) by @​dstaley

Patch Changes

  • Return a TokenVerificationError from decodeJwt and verifyToken for tokens whose header, payload, or signature cannot be decoded. (#9268) by @​wobsoriano

  • Updated dependencies [aaea141]:

    • @​clerk/shared@​4.25.10

3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @​manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

3.13.2

Patch Changes

  • Correct two Dashboard labels referenced in the instance restrictions documentation. blockDisposableEmailDomains bolded "Block sign-ups that use disposable email domains", but the toggle in the Clerk Dashboard is "Block sign-ups that use disposable email addresses". ignoreDotsForGmailAddresses bolded "Ignore dots for Gmail addresses" as a Dashboard toggle, but no such control exists — the wording now matches the equivalent comment on UpdateRestrictionsParams. Property names are unchanged. (#9253) by @​manovotny

3.13.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8

3.13.0

Minor Changes

  • Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

... (truncated)

Commits
  • 38f347c ci(repo): Version packages (#9289)
  • fe6ee54 fix(backend): Update Subscription and SubscriptionItem resources (#9196)
  • 9c51d74 fix(backend): Return TokenVerificationError from decodeJwt for undecodable to...
  • c86b4bc ci(repo): Version packages (#9262)
  • 23071bd fix(backend): Align EnterpriseConnection resource with the Backend API respon...
  • 8c9d061 ci(repo): Version packages (#9251)
  • 6f5fde9 docs(backend): Correct Dashboard labels in instance restrictions (#9253)
  • 9081534 ci(repo): Version packages (#9240)
  • acef8a1 ci(repo): Version packages (#9219)
  • 848eefe feat(backend): support configurable Frontend API proxy URLs (#9223)
  • Additional commits viewable in compare view

Updates express-rate-limit from 8.6.0 to 8.6.1

Release notes

Sourced from express-rate-limit's releases.

v8.6.1

You can view the changelog here.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-minor-patch group across 1 directory…
c4962bf 
… with 7 updates

Bumps the production-minor-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.6.1` | `7.6.4` |
| [@google/genai](https://github.com/googleapis/js-genai) | `2.13.0` | `2.15.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.27.0` | `1.28.0` |
| [mongoose](https://github.com/Automattic/mongoose) | `9.8.0` | `9.9.0` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.15.0` | `4.16.1` |
| [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) | `3.8.2` | `3.15.0` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.6.0` | `8.6.1` |



Updates `@clerk/nextjs` from 7.6.1 to 7.6.4
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.6.4/packages/nextjs)

Updates `@google/genai` from 2.13.0 to 2.15.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v2.13.0...v2.15.0)

Updates `lucide-react` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react)

Updates `mongoose` from 9.8.0 to 9.9.0
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@9.8.0...9.9.0)

Updates `shadcn` from 4.15.0 to 4.16.1
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.16.1/packages/shadcn)

Updates `@clerk/backend` from 3.8.2 to 3.15.0
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@3.15.0/packages/backend)

Updates `express-rate-limit` from 8.6.0 to 8.6.1
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.6.0...v8.6.1)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@google/genai"
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: mongoose
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: shadcn
  dependency-version: 4.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@clerk/backend"
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: express-rate-limit
  dependency-version: 8.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from bighnesh0007 as a code owner August 3, 2026 17:17
@vercel

vercel Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
dwcbackend Error Error Aug 3, 2026 5:19pm
dwcode Ready Ready Preview Aug 3, 2026 5:19pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bighnesh0007 bighnesh0007 Awaiting requested review from bighnesh0007 bighnesh0007 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants