Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 18, 2025

Bumps the npm_and_yarn group with 4 updates in the /react-app directory: ai, next, @supabase/auth-js and brace-expansion.

Updates ai from 3.4.33 to 5.0.52

Commits
  • 63d5f66 Version Packages (#8895)
  • 930399b Backport: fix(ai): download files when intermediate file cannot be downloaded...
  • 7ca78f1 Backport: feat(provider/gateway): Add new Qwen models to Gateway model string...
  • 1cfc209 Backport: feat(provider/openai): OpenAILanguageModelOptions type (#8858)
  • 347b7ec ci: rename v5.0 branch to release-v*
  • 85909a9 Backport: chore(ai): update test message (#8875)
  • c56822d Backport: fix(ai): update uiMessageChunkSchema to satisfy the `UIMessageChu...
  • 1461adf Backport: chore(examples): remove redundant OpenAI reasoning examples (#8871)
  • 6bd07df Version Packages (#8853)
  • a45d61a ci(release): remove incorrect changeset bump for @ai-sdk/baseten
  • Additional commits viewable in compare view

Updates next from 14.2.28 to 14.2.33

Release notes

Sourced from next's releases.

v14.2.33

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • omit searchParam data from FlightRouterState before transport (#80734)

Credits

Huge thanks to @​ztanner for helping!

Commits
  • 5a97b40 v14.2.33
  • cb88824 backport(v14): omit searchParam data from FlightRouterState before transport ...
  • 89ee561 v14.2.32
  • 6a974ad [backport v14]: fix router handling when setting a location response header (...
  • 55f7662 v14.2.31
  • 5dd68a5 [backport v14]: fix(next/image): improve and simplify detect-content-type (#8...
  • bcc7c65 [backport v14]: fix(next/image): fix image-optimizer.ts headers (#82114) (#82...
  • 243072b v14.2.30
  • f523d4a [backport]: config.allowedDevOrigins (#80410)
  • ca92115 v14.2.29
  • Additional commits viewable in compare view

Updates @supabase/auth-js from 2.64.4 to 2.81.1

Release notes

Sourced from @​supabase/auth-js's releases.

v2.81.1

2.81.1 (2025-11-11)

🩹 Fixes

  • auth: use Symbols for callback IDs to resolve Next.js 16 compatibility (#1847)
  • auth: add automatic browser redirect to signInWithSSO (#1849)
  • realtime: setAuth not required on custom jwt token (#1826)

❤️ Thank You

v2.81.1-canary.1

2.81.1-canary.1 (2025-11-11)

🩹 Fixes

  • realtime: setAuth not required on custom jwt token (#1826)

❤️ Thank You

v2.81.1-canary.0

2.81.1-canary.0 (2025-11-11)

🩹 Fixes

  • auth: use Symbols for callback IDs to resolve Next.js 16 compatibility (#1847)
  • auth: add automatic browser redirect to signInWithSSO (#1849)

❤️ Thank You

v2.81.0

2.81.0 (2025-11-10)

🚀 Features

  • realtime: implement V2 serializer (#1829)

🩹 Fixes

  • auth: make webauthn param optional and move register params to webauthn (#1765)
  • auth: add providers type to UserAppMetadata interface (#1760)
  • auth: use direct attestation for registration/authentication (#1764)
  • functions: add configurable timeout and normalize abort/timeout errors as FunctionsFetchError (#1837)

... (truncated)

Changelog

Sourced from @​supabase/auth-js's changelog.

2.81.1 (2025-11-11)

🩹 Fixes

  • auth: add automatic browser redirect to signInWithSSO (#1849)
  • auth: use Symbols for callback IDs to resolve Next.js 16 compatibility (#1847)

❤️ Thank You

2.81.0 (2025-11-10)

🩹 Fixes

  • auth: use direct attestation for registration/authentication (#1764)
  • auth: add providers type to UserAppMetadata interface (#1760)
  • auth: make webauthn param optional and move register params to webauthn (#1765)

❤️ Thank You

2.80.0 (2025-11-06)

🚀 Features

  • auth: add TypeScript types for documented JWT claims fields (#1802)

🩹 Fixes

  • auth: only warn if multiple clients share a storage-key (#1767)

❤️ Thank You

2.79.0 (2025-11-04)

🚀 Features

  • repo: remove node-fetch dependency, require Node.js 20+ (#1830)
  • auth: support throwing errors instead of returning them (#1766)

❤️ Thank You

2.78.0 (2025-10-30)

... (truncated)

Commits
  • 01e1948 fix(auth): add automatic browser redirect to signInWithSSO (#1849)
  • e9e44a3 fix(auth): use Symbols for callback IDs to resolve Next.js 16 compatibility (...
  • 0379c98 chore(repo): update and consolidate gitignore files (#1842)
  • 03406bd chore(release): version 2.81.0 changelogs (#1843)
  • d1ba7d9 fix(auth): use direct attestation for registration/authentication (#1764)
  • 2d862a1 fix(auth): add providers type to UserAppMetadata interface (#1760)
  • f7705b5 fix(auth): make webauthn param optional and move register params to webauthn ...
  • 9e08cc3 chore(release): version 2.80.0 changelogs (#1836)
  • d5f54f0 fix(auth): only warn if multiple clients share a storage-key (#1767)
  • 2981692 feat(auth): add TypeScript types for documented JWT claims fields (#1802)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​supabase/auth-js since your current version.


Updates brace-expansion from 1.1.11 to 1.1.12

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates

Bumps the npm_and_yarn group with 4 updates in the /react-app directory: [ai](https://github.com/vercel/ai), [next](https://github.com/vercel/next.js), [@supabase/auth-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/auth-js) and [brace-expansion](https://github.com/juliangruber/brace-expansion).


Updates `ai` from 3.4.33 to 5.0.52
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@3.4.33...ai@5.0.52)

Updates `next` from 14.2.28 to 14.2.33
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.28...v14.2.33)

Updates `@supabase/auth-js` from 2.64.4 to 2.81.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/auth-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.81.1/packages/core/auth-js)

Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 5.0.52
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 14.2.33
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@supabase/auth-js"
  dependency-version: 2.81.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant