Skip to content

chore(deps): Bump the production-dependencies group across 1 directory with 11 updates - #125

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-56baf60959
Open

chore(deps): Bump the production-dependencies group across 1 directory with 11 updates#125
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-56baf60959

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 11 updates in the / directory:

Package From To
@lucide/svelte 1.51.0 1.61.0
@prisma/adapter-pg 7.10.0 7.10.1
@vercel/blob 2.8.0 2.8.2
@vercel/functions 3.9.11 3.10.3
dotenv 18.0.6 18.0.9
marked 18.0.14 18.1.1
nanoid 6.0.1 6.0.2
nodemailer 10.0.16 10.2.1
openai 7.27.0 7.43.0
stripe 23.0.0 23.0.1
swagger-ui-dist 5.33.1 5.34.0

Updates @lucide/svelte from 1.51.0 to 1.61.0

Release notes

Sourced from @​lucide/svelte's releases.

Version 1.61.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

Version 1.60.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

Version 1.59.0

What's Changed

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

... (truncated)

Commits
  • 02eb916 feat(svelte): export __iconData and __iconNode across per-icon modules (#4936...
  • 27f0870 chore(deps-dev): bump the svelte-deps group across 1 directory with 2 updates...
  • af485d5 chore(deps-dev): bump the svelte-deps group with 2 updates (#4996)
  • See full diff in compare view

Updates @prisma/adapter-pg from 7.10.0 to 7.10.1

Release notes

Sourced from @​prisma/adapter-pg's releases.

7.10.1

Prisma ORM 7.10.1 is a patch release. It fixes a bug where a nested interactive transaction could make later, unrelated transactions run inside the wrong transaction. It also updates dependencies that had security advisories.

Fixes

Prisma Client: nested $transaction no longer changes the options object you pass in

If you passed the same options object to a nested tx.$transaction(...) and later to a top-level prisma.$transaction(...), the nested call wrote the outer transaction's id into that object. Every later top-level transaction that used the object was then treated as nested inside that old transaction:

  • if the old transaction had committed, the new one failed with P2028;
  • if the old transaction was still open, the new one silently ran as a savepoint inside another request's transaction.
const TX_OPTIONS = { timeout: 30_000, maxWait: 10_000 }
await prisma.$transaction(async (tx) => {
await tx.$transaction(async (inner) => { /* ... */ }, TX_OPTIONS)
})
// Before 7.10.1, this call could fail with P2028 or join another transaction.
await prisma.$transaction(async (tx) => { /* ... */ }, TX_OPTIONS)

Prisma Client no longer modifies the options object. (prisma/orm#30368, thanks @​lazerg)

Prisma Migrate: refuse a shadow database that is the main database

Prisma Migrate now refuses to run with error P3025 when the shadow database URL points at the same database as the main database URL. Before, prisma migrate diff --from-migrations with that setup dropped the real schema, rebuilt it from the migrations, and reported an empty diff. (prisma/prisma-engines#5851)

MariaDB adapter: updated to mariadb 3.5.4

@prisma/adapter-mariadb now depends on mariadb 3.5.4, which fixes several security advisories in 3.5.3. The adapter no longer rewrites IPv6 hosts in connection strings, because mariadb 3.5.4 accepts them as written. IPv6 connection strings keep working without changes. (prisma/orm#30668)

Dependency updates

Dependencies with security advisories were updated: mysql2, fast-uri, deepmerge-ts, mariadb and source-map-js. (prisma/orm#30314, prisma/orm#30189, prisma/orm#30668)

Commits

Updates @vercel/blob from 2.8.0 to 2.8.2

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.8.2

Patch Changes

  • f11f653: Send blob API version 13, where the server reads keys containing . or .. path segments exactly as they were written instead of resolving them away. Fixes head, copy, rename, del and list on blobs whose pathname has a dot segment.

@​vercel/blob@​2.8.1

Patch Changes

  • 59be092: Allow get() to fetch blob URLs from a VERCEL_BLOB_API_URL origin. get() only accepted URLs on *.blob.vercel-storage.com, which blocked local emulators like emulate, since they serve blob content from their own host. When VERCEL_BLOB_API_URL (or NEXT_PUBLIC_VERCEL_BLOB_API_URL) is set, URLs on that same origin are now accepted as well. With no override set the behavior is unchanged, so arbitrary hosts are still rejected in production.
Changelog

Sourced from @​vercel/blob's changelog.

2.8.2

Patch Changes

  • f11f653: Send blob API version 13, where the server reads keys containing . or .. path segments exactly as they were written instead of resolving them away. Fixes head, copy, rename, del and list on blobs whose pathname has a dot segment.

2.8.1

Patch Changes

  • 59be092: Allow get() to fetch blob URLs from a VERCEL_BLOB_API_URL origin. get() only accepted URLs on *.blob.vercel-storage.com, which blocked local emulators like emulate, since they serve blob content from their own host. When VERCEL_BLOB_API_URL (or NEXT_PUBLIC_VERCEL_BLOB_API_URL) is set, URLs on that same origin are now accepted as well. With no override set the behavior is unchanged, so arbitrary hosts are still rejected in production.
Commits

Updates @vercel/functions from 3.9.11 to 3.10.3

Commits

Updates dotenv from 18.0.6 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

  • Permit DOTENV_PATH being empty string with the CLI (#1076)

18.0.8 (2026-10-14)

Changed

  • Fast parser should strip appended extra quotes (#1073)
  • Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)
Commits
  • 8d1ab85 18.0.9
  • 59a40ce changelog
  • 88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
  • bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
  • 6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
  • 10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
  • e2fe95e 18.0.8
  • 7aa712a type detail improvement
  • 53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
  • 0b4843a changelog
  • Additional commits viewable in compare view

Updates marked from 18.0.14 to 18.1.1

Release notes

Sourced from marked's releases.

v18.1.1

18.1.1 (2026-10-12)

Bug Fixes

  • cli: honor an explicitly empty string input (#4113) (ec3a4e5)
  • end blockquote before a lazy line after a heading, hr or html block (#4115) (9e64a6a)
  • keep a backslash in a code span from hiding emphasis (#4117) (6a57018)
  • keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112
  • let indented and type 3-5 html blocks interrupt a paragraph (#4124) (eaa1fff)
  • make walkTokens linear by appending values in place (#4121) (627d9ae), closes #4120
  • match pre, script, style and textarea as whole tag names (#4114) (0db74cb)
  • preserve enclosing link state after parsing images (#4123) (cc07bb9)
  • respect tab stops in list continuation indentation (#4119) (4bd2528)

Performance Improvements

  • avoid repeated raw string copies in nested lists (#4082) (7e8754d)

v18.1.0

18.1.0 (2026-10-05)

Bug Fixes

  • avoid cubic backtracking on unicode whitespace in a link destination (#4106) (0d20220)
  • load CLI configs with top-level await (#4100) (c61543e)
  • reject unbalanced parentheses in link destinations (#4107) (3363c99)

Features

  • add linkParenPossible to lexer state to fail fast for link token generation (#4070) (4ee44f7)
Commits
  • cdbdc01 chore(release): 18.1.1 [skip ci]
  • 2134976 docs: add AGENTS.md (#4125)
  • 699a969 chore(deps-dev): bump handlebars from 4.7.9 to 4.7.10 (#4133)
  • 6a57018 fix: keep a backslash in a code span from hiding emphasis (#4117)
  • eaa1fff fix: let indented and type 3-5 html blocks interrupt a paragraph (#4124)
  • 7e8754d perf: avoid repeated raw string copies in nested lists (#4082)
  • cc07bb9 fix: preserve enclosing link state after parsing images (#4123)
  • 627d9ae fix: make walkTokens linear by appending values in place (#4121)
  • 4bd2528 fix: respect tab stops in list continuation indentation (#4119)
  • 9e64a6a fix: end blockquote before a lazy line after a heading, hr or html block (#4115)
  • Additional commits viewable in compare view

Updates nanoid from 6.0.1 to 6.0.2

Release notes

Sourced from nanoid's releases.

6.0.2

Changelog

Sourced from nanoid's changelog.

6.0.2

Commits

Updates nodemailer from 10.0.16 to 10.2.1

Release notes

Sourced from nodemailer's releases.

v10.2.1

10.2.1 (2026-10-22)

Bug Fixes

  • drop the comments of a Content-Type or Content-Disposition value with the stripComments option (b3052b7)

v10.2.0

10.2.0 (2026-10-21)

Features

  • add info.serverMessageId from the final 250 reply (108dddd)
  • add pendingCount() to the SMTP pool (6cffb70)
  • make header value encoding public with MimeNode encodeHeaderValue() (3b048c7)
  • mark SMTP errors as permanent or transient with err.permanent (6a20e2a)

Bug Fixes

  • label an ASCII message/rfc822 attachment 7bit instead of 8bit (ad66fa1)
  • report the recipients an LMTP server refuses after DATA in rejectedErrors (dd64eb3)

v10.1.7

10.1.7 (2026-10-18)

Bug Fixes

  • mime-funcs: encode parameter values that look like encoded words (651d79b)

v10.1.6

10.1.6 (2026-10-18)

Bug Fixes

  • addressparser: read groups in the same pass as the rest of the list (ddf0de1)

v10.1.5

10.1.5 (2026-10-18)

Bug Fixes

  • addressparser: handle an address list without copying it per address (6bd09b3)
  • addressparser: tokenize into offsets instead of an object per token (3fd3f50)

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.2.1 (2026-10-22)

Bug Fixes

  • drop the comments of a Content-Type or Content-Disposition value with the stripComments option (b3052b7)

10.2.0 (2026-10-21)

Features

  • add info.serverMessageId from the final 250 reply (108dddd)
  • add pendingCount() to the SMTP pool (6cffb70)
  • make header value encoding public with MimeNode encodeHeaderValue() (3b048c7)
  • mark SMTP errors as permanent or transient with err.permanent (6a20e2a)

Bug Fixes

  • label an ASCII message/rfc822 attachment 7bit instead of 8bit (ad66fa1)
  • report the recipients an LMTP server refuses after DATA in rejectedErrors (dd64eb3)

10.1.7 (2026-10-18)

Bug Fixes

  • mime-funcs: encode parameter values that look like encoded words (651d79b)

10.1.6 (2026-10-18)

Bug Fixes

  • addressparser: read groups in the same pass as the rest of the list (ddf0de1)

10.1.5 (2026-10-18)

Bug Fixes

  • addressparser: handle an address list without copying it per address (6bd09b3)
  • addressparser: tokenize into offsets instead of an object per token (3fd3f50)

10.1.4 (2026-10-18)

Bug Fixes

... (truncated)

Commits
  • 8dbff1d Merge pull request #1902 from nodemailer/release-please--branches--master--co...
  • 6fe37ea test: import mailauth only on a Node.js it supports
  • 9f02395 chore(master): release 10.2.1
  • 5c80d84 chore: update dependencies
  • b3052b7 fix: drop the comments of a Content-Type or Content-Disposition value with th...
  • f656674 Merge pull request #1901 from nodemailer/release-please--branches--master--co...
  • 7931774 chore(master): release 10.2.0
  • ad66fa1 fix: label an ASCII message/rfc822 attachment 7bit instead of 8bit
  • 108dddd feat: add info.serverMessageId from the final 250 reply
  • 6a20e2a feat: mark SMTP errors as permanent or transient with err.permanent
  • Additional commits viewable in compare view

Updates openai from 7.27.0 to 7.43.0

Release notes

Sourced from openai's releases.

v7.43.0

7.43.0 (2026-10-22)

Features

  • api: Breaking change in a minor release. A Live response's Decisions question instructions can now be a string or an array of text, image, or JSON parts. Code such as question.instructions.trim() can fail when it receives an array; check typeof question.instructions === 'string' and handle the array case. Decisions request inputs also accept new message roles and tool-history items, so update code that assumes it knows every input type. DecisionInputMessage is now a union: code that extends or implements the old interface must use DecisionInputMessage.DecisionInputUserMessage instead. Existing string instructions and user-message inputs still work. (21a056d)

Bug Fixes

  • deps-dev: bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-tests/vercel-edge (#2998) (1c69ab8)
  • deps-dev: bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/ts-browser-webpack (#2997) (0e1bedc)
  • deps: bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge (#3021) (482f73e)

Chores

v7.42.0

7.42.0 (2026-10-22)

Features

Bug Fixes

  • agents: avoid repeated ancestor-path hashing (#3010) (e352050)
  • api: avoid excessive work when redacting long log values (#3012) (e310fe0)

Chores

  • api: clarify service-account API key deletion (#3015) (ab6d626)
  • api: preserve file helpers and resource exports (#3007) (94c0c1b)

v7.41.0

7.41.0 (2026-10-21)

Features

  • add Vertex AI support for the Responses API (#3005) (04b1ac4)

v7.40.0

... (truncated)

Changelog

Sourced from openai's changelog.

7.43.0 (2026-10-22)

Features

  • api: Breaking change in a minor release. A Live response's Decisions question instructions can now be a string or an array of text, image, or JSON parts. Code such as question.instructions.trim() can fail when it receives an array; check typeof question.instructions === 'string' and handle the array case. Decisions request inputs also accept new message roles and tool-history items, so update code that assumes it knows every input type. DecisionInputMessage is now a union: code that extends or implements the old interface must use DecisionInputMessage.DecisionInputUserMessage instead. Existing string instructions and user-message inputs still work. (21a056d)

Bug Fixes

  • deps-dev: bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-tests/vercel-edge (#2998) (1c69ab8)
  • deps-dev: bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/ts-browser-webpack (#2997) (0e1bedc)
  • deps: bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge (#3021) (482f73e)

Chores

7.42.0 (2026-10-22)

Features

Bug Fixes

  • agents: avoid repeated ancestor-path hashing (#3010) (e352050)
  • api: avoid excessive work when redacting long log values (#3012) (e310fe0)

Chores

  • api: clarify service-account API key deletion (#3015) (ab6d626)
  • api: preserve file helpers and resource exports (#3007) (94c0c1b)

7.41.0 (2026-10-21)

Features

  • add Vertex AI support for the Responses API (#3005) (04b1ac4)

7.40.0 (2026-10-21)

Features

... (truncated)

Commits
  • d02d4de release: 7.43.0 (#3020)
  • e17e0d4 ci: retire unused next status bridge (#3023)
  • 21a056d feat(api): expand Decisions input and question types (#3018)
  • 482f73e fix(deps): bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge ...
  • 17e0f08 chore(api): preserve client and helper compatibility (#3016)
  • f3403f4 ci: validate next candidates from trusted main (#2999)
  • 0e1bedc fix(deps-dev): bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/t...
  • 1c69ab8 fix(deps-dev): bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-test...
  • 7a970a7 chore: refresh trusted next policy tooling (#3017)
  • 802a323 release: 7.42.0 (#3008)
  • Additional commits viewable in compare view

Updates stripe from 23.0.0 to 23.0.1

Release notes

Sourced from stripe's releases.

v23.0.1

See the changelog for the full release notes.

Changelog

Sourced from stripe's changelog.

23.0.1 - 2026-10-22

  • #2885 Reject ASCII-whitespace-only webhook secrets

    • Reject webhook signing secrets made entirely of ASCII whitespace instead of using them as HMAC keys.

  • #2884 Add API v2 Search support

    Adds V2SearchResult<T> and support for auto pagination of search results.

  • #2895 Fix notification handling and discarded fetch retries

    • Fix EventNotificationHandler.handle() to verify signatures asynchronously, so it works with async crypto providers (e.g. the web platform).
    • Fall back to the full EventNotification union type for on() callbacks when a specific notification type can't be narrowed, instead of resolving to never.
    • Dispose discarded fetch responses before retrying a request, aborting the fetch and closing the unread body.

  • Fix lastResponse.statusCode for fetch responses

    • Populate lastResponse.statusCode with the HTTP status for successful JSON responses when using the fetch HTTP client.
Commits

Updates swagger-ui-dist from 5.33.1 to 5.34.0

Release notes

Sourced from swagger-ui-dist's releases.

v5.34.0

5.34.0 (2026-10-19)

Features

v5.33.3

5.33.3 (2026-10-15)

Bug Fixes

v5.33.2

5.33.2 (2026-10-12)

Bug Fixes

  • deps: bump dompurify from 3.4.13 to 3.4.16 (#11076) (3beee55)
  • json-schema-5: move early return after useCallback in models (#11082) (7f26236)
Commits
  • a3d333d chore(release): cut the 5.34.0 release
  • fa20f4d feat(filter): support searching operations by path (#11095)
  • 2f91b75 feat(oas32): add support for additionalOperations (#11090)
  • 38ca10e chore(release): cut the 5.33.3 release
  • f170383 fix(deps): bump swagger-client to v3.38.3 (#11096)
  • e89a91f chore(release): cut the 5.33.2 release
  • 7f26236 fix(json-schema-5): move early return after useCallback in models (#11082)
  • cfd955e chore(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 (#11083)
  • 553cf09 chore(deps-dev): bump joi from 17.13.7 to 17.13.8 (#11087)
  • d19e961 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#11085)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the production-dependencies group across 1 director…
034b671 
…y with 11 updates

Bumps the production-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@lucide/svelte](https://github.com/lucide-icons/lucide/tree/HEAD/packages/svelte) | `1.51.0` | `1.61.0` |
| [@prisma/adapter-pg](https://github.com/prisma/orm/tree/HEAD/packages/adapter-pg) | `7.10.0` | `7.10.1` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.8.0` | `2.8.2` |
| [@vercel/functions](https://github.com/vercel/vercel/tree/HEAD/packages/functions) | `3.9.11` | `3.10.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.6` | `18.0.9` |
| [marked](https://github.com/markedjs/marked) | `18.0.14` | `18.1.1` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.1` | `6.0.2` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.16` | `10.2.1` |
| [openai](https://github.com/openai/openai-node) | `7.27.0` | `7.43.0` |
| [stripe](https://github.com/stripe/stripe-node) | `23.0.0` | `23.0.1` |
| [swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.33.1` | `5.34.0` |



Updates `@lucide/svelte` from 1.51.0 to 1.61.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/svelte)

Updates `@prisma/adapter-pg` from 7.10.0 to 7.10.1
- [Release notes](https://github.com/prisma/orm/releases)
- [Commits](https://github.com/prisma/orm/commits/7.10.1/packages/adapter-pg)

Updates `@vercel/blob` from 2.8.0 to 2.8.2
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.8.2/packages/blob)

Updates `@vercel/functions` from 3.9.11 to 3.10.3
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/functions/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/HEAD/packages/functions)

Updates `dotenv` from 18.0.6 to 18.0.9
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.6...v18.0.9)

Updates `marked` from 18.0.14 to 18.1.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.14...v18.1.1)

Updates `nanoid` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.1...6.0.2)

Updates `nodemailer` from 10.0.16 to 10.2.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.16...v10.2.1)

Updates `openai` from 7.27.0 to 7.43.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.27.0...v7.43.0)

Updates `stripe` from 23.0.0 to 23.0.1
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v23.0.0...v23.0.1)

Updates `swagger-ui-dist` from 5.33.1 to 5.34.0
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.33.1...v5.34.0)

---
updated-dependencies:
- dependency-name: "@lucide/svelte"
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@prisma/adapter-pg"
  dependency-version: 7.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@vercel/blob"
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@vercel/functions"
  dependency-version: 3.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 18.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: nanoid
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: nodemailer
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 7.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: stripe
  dependency-version: 23.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: swagger-ui-dist
  dependency-version: 5.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
qa-studio Ready Ready Preview Oct 26, 2026 9:29am UTC

Request Review

@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai

coderabbitai Bot commented Oct 26, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch was successfully deployed

1 active deployment
Preview — 034b6717 Deployed Oct 26, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants