Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 29, 2025

Bumps the prod-deps group with 6 updates in the / directory:

Package From To
@next/third-parties 16.0.7 16.1.1
fabric 6.9.1 7.0.0
lucide-react 0.556.0 0.562.0
next 16.0.7 16.1.1
react 19.2.1 19.2.3
react-dom 19.2.1 19.2.3

Updates @next/third-parties from 16.0.7 to 16.1.1

Release notes

Sourced from @​next/third-parties's releases.

v16.1.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Turbopack: Create junction points instead of symlinks on Windows (#87606)

Credits

Huge thanks to @​sokra and @​ztanner for helping!

v16.1.1-canary.8

Core Changes

  • [strict-route-types] Add experimental.strictRouteTypes config: #87378

Credits

Huge thanks to @​eps1lon for helping!

v16.1.1-canary.7

Core Changes

  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257

Credits

Huge thanks to @​ijjk and @​eps1lon for helping!

v16.1.1-canary.6

Misc Changes

  • [test] Move off of as much url.parse as possible: #87286

Credits

Huge thanks to @​eps1lon for helping!

v16.1.1-canary.5

Example Changes

  • fix: Change Dockerfile.bun to use group/useradd instead of addgroup/user: #87443
  • fix(examples): resolve hydration mismatch in blog-starter: #87703

Credits

Huge thanks to @​pji2918 and @​nathannewyen for helping!

... (truncated)

Commits

Updates fabric from 6.9.1 to 7.0.0

Release notes

Sourced from fabric's releases.

Version 7.0.0

No code changes compared to 7.0.0 - rc1

Changelog

Sourced from fabric's changelog.

[7.0.0]

  • fix(): Fix toDataUrl writing on contextTop #10820
  • feat(): Multi touch gesture support with module westures #10813
  • fix(): Fix the situation where undefined + char exists when calculating couple #10816
  • feat(): Add configuration parameter for patternQuality in node #10804
  • fix(): BREAKING Fix text positioning #10803
  • fix(AligningGuidelines): Guidelines features updates #10120 (fabricjs/fabric.js#10120)
  • chore(deps-dev): bump inquirer from 12.9.6 to 12.10.0 #10789
  • chore(deps-dev): bump @​types/micromatch from 4.0.9 to 4.0.10 #10788
  • chore(): update major version of vitest #10786
  • fix(): Prototype pollution risk on text char cache #10782
  • fix(): fix rendering of text when line height is set to 0 #10785
  • chore(): update playwright #10780
  • chore(deps-dev): bump es-toolkit from 1.39.10 to 1.40.0 #10777
  • BREAKING chore(): Deprecate originX and originY and change their default to center/center #10715
  • chore(deps-dev): bump @​types/node from 24.7.0 to 24.7.2 #10778
  • chore(deps-dev): bump @​rollup/plugin-babel from 6.0.4 to 6.1.0 #10776
  • chore(): up dev deps #10773
  • chore(): up deps #10771
  • chore(): remove moment dev dependency #10770
  • ci(): Move firefox to headless: false to see if improves passing rate. Renamed config because of deprecation warning #10769
  • chore(): remove fs-extra dev dependency #10767
  • chore(deps-dev): bump @​playwright/test from 1.55.0 to 1.55.1 #10761
  • test(): Add new e2e import test for svg preserve aspect ratio #10766
  • chore() Revisit and reduce contribution guidelines, try to streamline things #10759
  • chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates #10734
  • chore(deps-dev): bump @​babel/core from 7.28.3 to 7.28.4 #10753
  • chore(): remove chalk #10758
  • chore(deps-dev): bump commander from 14.0.0 to 14.0.1 #10754
  • chore(deps-dev): bump chalk from 5.6.0 to 5.6.2 #10752
  • fix(): Fix some weaknesses in the changelog-update action ( various CWE ) #10747
  • fix(): CWE-1333 CWE-400 CWE-730 Simplify some regexes in order to avoid slowness with craft bad string #10746
  • fix(): CWE-1333 CWE-400 CWE-730 in Text.ts regex #10745
  • ci(): fix CWE-829 in action build-stats #10744
  • ci(): Fix CWE-829 in the coverage report action #10743
  • ci(): Foked the action find-create-update-comment in order to pin sha(s) #10742
  • fix(): After executing loadFromJSON, it unexpectedly adds an objects property to the canvas.
  • fix(): Incorrect sha for commenting action
  • fix(IText): A form field element has neither an id nor a name attribute. #10172
  • docs(): change CN comment to EN #10727
  • chore(): Remove paths for codeQL let it scan all the repo #10738
  • chore(): Pin all GitHub Actions to commit SHAs for security compliance #10739
  • chore(deps-dev): bump es-toolkit from 1.39.7 to 1.39.10 #10731
  • chore(deps-dev): bump serve from 14.2.4 to 14.2.5 #10730
  • Update license to include 2016–2025 Fabric.js contributors #10726
  • chore(deps-dev): bump @​eslint/js from 9.34.0 to 9.35.0 #10729
  • chore(): Format dependabot.yml with Prettier to ensure consistent code style #10733
  • doc: Repair broken link in docs by targeting all demo and samples pages in old fabric docs. #10723
  • Clarify MIT License #10725

... (truncated)

Commits

Updates lucide-react from 0.556.0 to 0.562.0

Release notes

Sourced from lucide-react's releases.

Version 0.562.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.561.0...0.562.0

Version 0.561.0

What's Changed

Full Changelog: lucide-icons/lucide@0.560.0...0.561.0

Version 0.560.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.559.0...0.560.0

Version 0.559.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.558.0...0.559.0

Version 0.558.0

What's Changed

Full Changelog: lucide-icons/lucide@0.557.0...0.558.0

Version 0.557.0

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lucide-react since your current version.


Updates next from 16.0.7 to 16.1.1

Release notes

Sourced from next's releases.

v16.1.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Turbopack: Create junction points instead of symlinks on Windows (#87606)

Credits

Huge thanks to @​sokra and @​ztanner for helping!

v16.1.1-canary.8

Core Changes

  • [strict-route-types] Add experimental.strictRouteTypes config: #87378

Credits

Huge thanks to @​eps1lon for helping!

v16.1.1-canary.7

Core Changes

  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257

Credits

Huge thanks to @​ijjk and @​eps1lon for helping!

v16.1.1-canary.6

Misc Changes

  • [test] Move off of as much url.parse as possible: #87286

Credits

Huge thanks to @​eps1lon for helping!

v16.1.1-canary.5

Example Changes

  • fix: Change Dockerfile.bun to use group/useradd instead of addgroup/user: #87443
  • fix(examples): resolve hydration mismatch in blog-starter: #87703

Credits

Huge thanks to @​pji2918 and @​nathannewyen for helping!

... (truncated)

Commits

Updates react from 19.2.1 to 19.2.3

Release notes

Sourced from react's releases.

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

Commits

Updates react-dom from 19.2.1 to 19.2.3

Release notes

Sourced from react-dom's releases.

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the prod-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties) | `16.0.7` | `16.1.1` |
| [fabric](https://github.com/fabricjs/fabric.js) | `6.9.1` | `7.0.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.556.0` | `0.562.0` |
| [next](https://github.com/vercel/next.js) | `16.0.7` | `16.1.1` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.1` | `19.2.3` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.1` | `19.2.3` |



Updates `@next/third-parties` from 16.0.7 to 16.1.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.1.1/packages/third-parties)

Updates `fabric` from 6.9.1 to 7.0.0
- [Release notes](https://github.com/fabricjs/fabric.js/releases)
- [Changelog](https://github.com/fabricjs/fabric.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/fabricjs/fabric.js/commits)

Updates `lucide-react` from 0.556.0 to 0.562.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.562.0/packages/lucide-react)

Updates `next` from 16.0.7 to 16.1.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.0.7...v16.1.1)

Updates `react` from 19.2.1 to 19.2.3
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react)

Updates `react-dom` from 19.2.1 to 19.2.3
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react-dom)

---
updated-dependencies:
- dependency-name: "@next/third-parties"
  dependency-version: 16.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: fabric
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: lucide-react
  dependency-version: 0.562.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: next
  dependency-version: 16.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: react
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: react-dom
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 29, 2025
@changeset-bot
Copy link

changeset-bot bot commented Dec 29, 2025

⚠️ No Changeset found

Latest commit: d7a5961

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant