Skip to content

chore(deps): bump the workspace-minor-and-patch group across 1 directory with 5 updates - #71

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/workspace-minor-and-patch-cfbaf1c14b
Closed

chore(deps): bump the workspace-minor-and-patch group across 1 directory with 5 updates#71
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/workspace-minor-and-patch-cfbaf1c14b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the workspace-minor-and-patch group with 5 updates in the / directory:

Package From To
@biomejs/biome 2.5.2 2.5.5
@clerk/backend 3.11.6 3.13.1
@clerk/nextjs 7.5.19 7.6.1
@clerk/ui 1.25.4 1.26.0
@cloudflare/workers-types 5.20260716.1 5.20260726.1

Updates @biomejs/biome from 2.5.2 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

Updates @clerk/backend from 3.11.6 to 3.13.1

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​3.13.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8

@​clerk/backend@​3.13.0

Minor Changes

  • Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

  • Updated dependencies [097432d]:
    • @​clerk/shared@​4.25.7

@​clerk/backend@​3.12.0

Minor Changes

  • Fix a cross-origin handshake bypass where isKnownClerkReferrer() trusted overly broad referrer hosts as Clerk-owned: any accounts.* host (e.g. accounts.attacker.com), plus dev account-portal domains (*.accounts.dev and legacy suffixes) on production instances. These let unrelated origins skip the handshake and its session-freshness check. The referrer is now trusted only for the accounts portal derived from the instance's frontend API, plus dev account-portal domains on non-production instances. (#9145) by @​dominic-clerk

  • Add an optional orgId parameter to createSignInToken() for activating an Organization when the token is redeemed. (#9192) by @​swolfand

Patch Changes

  • Standardize JSDoc punctuation to always follow e.g. and i.e. with a comma (e.g., / i.e.,), matching the docs style guide. Comment-only change; no runtime behavior is affected. This keeps the generated Typedoc reference output consistent. (#9201) by @​SarahSoutoul

  • Add the required provider field to CreateEnterpriseConnectionParams. The Backend API has always required provider when creating an enterprise connection, so calls to createEnterpriseConnection() without it type-checked but failed at runtime. The field is typed to the supported provider values ('saml_custom', 'saml_okta', 'saml_google', 'saml_microsoft', 'oidc_custom', 'oidc_github_enterprise', 'oidc_gitlab'), so unsupported values are also caught at compile time. (#9155) by @​manovotny

  • Add the remaining optional enterprise connection parameters supported by the Backend API. CreateEnterpriseConnectionParams and UpdateEnterpriseConnectionParams now accept allowOrganizationAccountLinking, customAttributes, authenticatable, and disableJitProvisioning (update also accepts disableAdditionalIdentifications), and SAML params accept loginHint for configuring the login_hint sent to the IdP. (#9155) by @​manovotny

  • Align CreateEnterpriseConnectionParams and UpdateEnterpriseConnectionParams with the Backend API contract: (#9155) by @​manovotny

    • name and domains are now required on CreateEnterpriseConnectionParams. The Backend API already rejected requests missing either of them, so calls that omitted these fields failed at runtime; the types now surface this at compile time.
    • Deprecated syncUserAttributes on CreateEnterpriseConnectionParams. The Backend API ignores this parameter on create; use updateEnterpriseConnection() to set it.
    • Deprecated provider on UpdateEnterpriseConnectionParams. The Backend API ignores this parameter on update; the provider cannot be changed after creation.

  • Updated dependencies [858a689, c904fb4]:

    • @​clerk/shared@​4.25.6

@​clerk/backend@​3.11.7

Patch Changes

  • Reject machine tokens (M2M and OAuth JWTs) presented in the __session cookie. Previously such a token could pass session verification and produce a signed-in state with the machine identity as userId, defeating if (userId) authorization checks. The cookie path now mirrors the existing header-path guard and returns a signed-out state for these tokens. (#9168) by @​dominic-clerk

  • Updated dependencies [bcbdda6]:

    • @​clerk/shared@​4.25.5
Changelog

Sourced from @​clerk/backend's changelog.

3.13.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8

3.13.0

Minor Changes

  • Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

  • Updated dependencies [097432d]:
    • @​clerk/shared@​4.25.7

3.12.0

Minor Changes

  • Fix a cross-origin handshake bypass where isKnownClerkReferrer() trusted overly broad referrer hosts as Clerk-owned: any accounts.* host (e.g. accounts.attacker.com), plus dev account-portal domains (*.accounts.dev and legacy suffixes) on production instances. These let unrelated origins skip the handshake and its session-freshness check. The referrer is now trusted only for the accounts portal derived from the instance's frontend API, plus dev account-portal domains on non-production instances. (#9145) by @​dominic-clerk

  • Add an optional orgId parameter to createSignInToken() for activating an Organization when the token is redeemed. (#9192) by @​swolfand

Patch Changes

  • Standardize JSDoc punctuation to always follow e.g. and i.e. with a comma (e.g., / i.e.,), matching the docs style guide. Comment-only change; no runtime behavior is affected. This keeps the generated Typedoc reference output consistent. (#9201) by @​SarahSoutoul

  • Add the required provider field to CreateEnterpriseConnectionParams. The Backend API has always required provider when creating an enterprise connection, so calls to createEnterpriseConnection() without it type-checked but failed at runtime. The field is typed to the supported provider values ('saml_custom', 'saml_okta', 'saml_google', 'saml_microsoft', 'oidc_custom', 'oidc_github_enterprise', 'oidc_gitlab'), so unsupported values are also caught at compile time. (#9155) by @​manovotny

  • Add the remaining optional enterprise connection parameters supported by the Backend API. CreateEnterpriseConnectionParams and UpdateEnterpriseConnectionParams now accept allowOrganizationAccountLinking, customAttributes, authenticatable, and disableJitProvisioning (update also accepts disableAdditionalIdentifications), and SAML params accept loginHint for configuring the login_hint sent to the IdP. (#9155) by @​manovotny

  • Align CreateEnterpriseConnectionParams and UpdateEnterpriseConnectionParams with the Backend API contract: (#9155) by @​manovotny

    • name and domains are now required on CreateEnterpriseConnectionParams. The Backend API already rejected requests missing either of them, so calls that omitted these fields failed at runtime; the types now surface this at compile time.
    • Deprecated syncUserAttributes on CreateEnterpriseConnectionParams. The Backend API ignores this parameter on create; use updateEnterpriseConnection() to set it.
    • Deprecated provider on UpdateEnterpriseConnectionParams. The Backend API ignores this parameter on update; the provider cannot be changed after creation.

  • Updated dependencies [858a689, c904fb4]:

    • @​clerk/shared@​4.25.6

3.11.7

Patch Changes

  • Reject machine tokens (M2M and OAuth JWTs) presented in the __session cookie. Previously such a token could pass session verification and produce a signed-in state with the machine identity as userId, defeating if (userId) authorization checks. The cookie path now mirrors the existing header-path guard and returns a signed-out state for these tokens. (#9168) by @​dominic-clerk

  • Updated dependencies [bcbdda6]:

    • @​clerk/shared@​4.25.5
Commits
  • 9081534 ci(repo): Version packages (#9240)
  • acef8a1 ci(repo): Version packages (#9219)
  • 848eefe feat(backend): support configurable Frontend API proxy URLs (#9223)
  • 430ae23 ci(repo): Version packages (#9195)
  • 858a689 docs(repo): Add trailing comma after e.g. and i.e. in JSDoc (#9201)
  • a009d91 fix(backend): Align enterprise connection create and update params with the B...
  • ff5d991 fix(backend): Fix cross-origin handshake bypass (#9145)
  • 26530ce feat(backend): support organization-scoped sign-in tokens (#9192)
  • b37ba0d ci(repo): Version packages (#9175)
  • e657d99 fix(backend): reject machine JWTs presented as session tokens (#9168)
  • See full diff in compare view

Updates @clerk/nextjs from 7.5.19 to 7.6.1

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.6.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8
    • @​clerk/react@​6.12.8
    • @​clerk/backend@​3.13.1

@​clerk/nextjs@​7.6.0

Minor Changes

  • Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

@​clerk/nextjs@​7.5.21

Patch Changes

@​clerk/nextjs@​7.5.20

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

7.6.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8
    • @​clerk/react@​6.12.8
    • @​clerk/backend@​3.13.1

7.6.0

Minor Changes

  • Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

7.5.22

Patch Changes

  • Remove the redundant https://*.client.protect.clerk.com source from CSP headers generated by clerkMiddleware(). (#9207) by @​mwickett

7.5.21

Patch Changes

7.5.20

Patch Changes

Commits

Updates @clerk/ui from 1.25.4 to 1.26.0

Release notes

Sourced from @​clerk/ui's releases.

@​clerk/ui@​1.26.0

Minor Changes

  • Expose composable UserProfile and OrganizationProfile subcomponents from @clerk/ui/experimental (#9144) by @​alexcarpenter

Patch Changes

  • Fix OrganizationProfileGeneralPanel (from @clerk/ui/experimental) throwing "CardState not found" when opening the leave-organization or delete-organization confirmation in its default, no-children page mode. The panel now provides the same root CardStateProvider that a mounted <OrganizationProfile /> supplies. (#9243) by @​alexcarpenter

  • Updated dependencies [01f2c12]:

    • @​clerk/shared@​4.25.8
    • @​clerk/localizations@​4.13.8

@​clerk/ui@​1.25.8

Patch Changes

  • Use logical CSS properties for the organization members footer and the MFA setup task header, so both lay out correctly in right-to-left locales. (#9218) by @​alexcarpenter

  • Updated dependencies [097432d]:

    • @​clerk/shared@​4.25.7
    • @​clerk/localizations@​4.13.7

@​clerk/ui@​1.25.7

Patch Changes

  • Ensure the keyless prompt renders above application content by setting an explicit z-index. (#9211) by @​alexcarpenter

  • The OAuth consent screen now shows a recognizable brand mark for well-known OAuth clients (Claude, ChatGPT) when the requesting application has not uploaded its own logo. (#9158) by @​alexcarpenter

@​clerk/ui@​1.25.6

Patch Changes

  • Add an experimental oidcSelfServe option to enable the self-serve OIDC configuration flow in <ConfigureSSO />. (#9198) by @​NicolasLopes7

  • Updated dependencies [858a689, c904fb4]:

    • @​clerk/shared@​4.25.6
    • @​clerk/localizations@​4.13.6

@​clerk/ui@​1.25.5

Patch Changes

  • Fix pressing Escape while a Select is open inside a Drawer (for example the payment method picker in Checkout) dismissing the entire Drawer. Escape now closes only the open Select and leaves the Drawer open. The Select now wires up its floating interaction props so it handles Escape itself, and the Drawer roots a floating tree so nested floating elements are recognized as its children. (#9176) by @​alexcarpenter

  • Improve Select keyboard and screen reader support by routing navigation through floating-ui's interaction hooks. Pressing ArrowUp/ArrowDown on a focused, closed Select now opens the listbox, and the active option is announced via aria-activedescendant. The searchable variant (for example the PhoneInput country picker) now exposes a proper combobox: its input is marked role="combobox" with aria-controls, aria-autocomplete="list", and aria-activedescendant, while the plain variant keeps its listbox semantics. (#9179) by @​alexcarpenter

  • Updated dependencies [bcbdda6]:

    • @​clerk/shared@​4.25.5
    • @​clerk/localizations@​4.13.5
Changelog

Sourced from @​clerk/ui's changelog.

1.26.0

Minor Changes

  • Expose composable UserProfile and OrganizationProfile subcomponents from @clerk/ui/experimental (#9144) by @​alexcarpenter

Patch Changes

  • Fix OrganizationProfileGeneralPanel (from @clerk/ui/experimental) throwing "CardState not found" when opening the leave-organization or delete-organization confirmation in its default, no-children page mode. The panel now provides the same root CardStateProvider that a mounted <OrganizationProfile /> supplies. (#9243) by @​alexcarpenter

  • Updated dependencies [01f2c12]:

    • @​clerk/shared@​4.25.8
    • @​clerk/localizations@​4.13.8

1.25.8

Patch Changes

  • Use logical CSS properties for the organization members footer and the MFA setup task header, so both lay out correctly in right-to-left locales. (#9218) by @​alexcarpenter

  • Updated dependencies [097432d]:

    • @​clerk/shared@​4.25.7
    • @​clerk/localizations@​4.13.7

1.25.7

Patch Changes

  • Ensure the keyless prompt renders above application content by setting an explicit z-index. (#9211) by @​alexcarpenter

  • The OAuth consent screen now shows a recognizable brand mark for well-known OAuth clients (Claude, ChatGPT) when the requesting application has not uploaded its own logo. (#9158) by @​alexcarpenter

1.25.6

Patch Changes

  • Add an experimental oidcSelfServe option to enable the self-serve OIDC configuration flow in <ConfigureSSO />. (#9198) by @​NicolasLopes7

  • Updated dependencies [858a689, c904fb4]:

    • @​clerk/shared@​4.25.6
    • @​clerk/localizations@​4.13.6

1.25.5

Patch Changes

  • Fix pressing Escape while a Select is open inside a Drawer (for example the payment method picker in Checkout) dismissing the entire Drawer. Escape now closes only the open Select and leaves the Drawer open. The Select now wires up its floating interaction props so it handles Escape itself, and the Drawer roots a floating tree so nested floating elements are recognized as its children. (#9176) by @​alexcarpenter

  • Improve Select keyboard and screen reader support by routing navigation through floating-ui's interaction hooks. Pressing ArrowUp/ArrowDown on a focused, closed Select now opens the listbox, and the active option is announced via aria-activedescendant. The searchable variant (for example the PhoneInput country picker) now exposes a proper combobox: its input is marked role="combobox" with aria-controls, aria-autocomplete="list", and aria-activedescendant, while the plain variant keeps its listbox semantics. (#9179) by @​alexcarpenter

... (truncated)

Commits
  • 9081534 ci(repo): Version packages (#9240)
  • 41c323a fix(ui): provide CardState to composed OrganizationProfileGeneralPanel defaul...
  • dadebc2 chore(ui): fix eslint errors in composed and profile modules (#9242)
  • 01f2c12 feat(ui): Expose composed profile components (#9144)
  • acb1461 refactor(ui): rename Mosaic mergeProps to mergeStyleProps (#9236)
  • 17d1db1 feat(headless): add useRender hook alongside renderElement (#9231)
  • acef8a1 ci(repo): Version packages (#9219)
  • 68ae308 feat(ui): migrate Mosaic Button to StyleX (#9208)
  • 1c52591 chore(repo): re-enable eslint for @​clerk/ui (#9218)
  • 656b69b ci(repo): Version packages (#9213)
  • Additional commits viewable in compare view

Updates @cloudflare/workers-types from 5.20260716.1 to 5.20260726.1

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026
@dependabot
dependabot Bot requested a review from iamjr15 as a code owner July 26, 2026 07:49
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026
@dependabot
chore(deps): bump the workspace-minor-and-patch group across 1 direct…
50d34a6 
…ory with 5 updates

Bumps the workspace-minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.2` | `2.5.5` |
| [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) | `3.11.6` | `3.13.1` |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.5.19` | `7.6.1` |
| [@clerk/ui](https://github.com/clerk/javascript/tree/HEAD/packages/ui) | `1.25.4` | `1.26.0` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260716.1` | `5.20260726.1` |



Updates `@biomejs/biome` from 2.5.2 to 2.5.5
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.5/packages/@biomejs/biome)

Updates `@clerk/backend` from 3.11.6 to 3.13.1
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@3.13.1/packages/backend)

Updates `@clerk/nextjs` from 7.5.19 to 7.6.1
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.6.1/packages/nextjs)

Updates `@clerk/ui` from 1.25.4 to 1.26.0
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/ui/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/ui@1.26.0/packages/ui)

Updates `@cloudflare/workers-types` from 5.20260716.1 to 5.20260726.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workspace-minor-and-patch
- dependency-name: "@clerk/backend"
  dependency-version: 3.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-minor-and-patch
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-minor-and-patch
- dependency-name: "@clerk/ui"
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-minor-and-patch
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260726.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workspace-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/workspace-minor-and-patch-cfbaf1c14b branch from c004223 to 50d34a6 Compare July 26, 2026 10:09
@iamjr15

iamjr15 commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Closing this scheduled version-update PR as part of the Dependabot policy cleanup. Security updates remain enabled; future minor and patch version updates will be grouped monthly, and major upgrades will be planned explicitly.

@iamjr15 iamjr15 closed this Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/workspace-minor-and-patch-cfbaf1c14b branch July 27, 2026 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@iamjr15 iamjr15 Awaiting requested review from iamjr15 iamjr15 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@iamjr15