chore(deps): bump the lab-third-parties group across 1 directory with 7 updates #5056

dependabot · 2025-09-18T11:19:20Z

Bumps the lab-third-parties group with 7 updates in the /apps/laboratory directory:

Package	From	To
@chakra-ui/react	`2.10.7`	`2.10.9`
@sentry/browser	`7.120.3`	`7.120.4`
@sentry/react	`7.120.3`	`7.120.4`
@tanstack/react-query	`5.75.5`	`5.89.0`
next	`15.5.2`	`15.5.3`
rpc-websockets	`7.11.0`	`7.11.2`
webauthn-p256	`0.0.2`	`0.0.10`

Updates @chakra-ui/react from 2.10.7 to 2.10.9

Commits

See full diff in compare view

Updates @sentry/browser from 7.120.3 to 7.120.4

Release notes

Sourced from @sentry/browser's releases.

7.120.4

fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)

7.120.4-alpha.1

No user-facing changes, only internal changes.

Changelog

Sourced from @sentry/browser's changelog.

7.120.4

fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)

7.120.4-alpha.1

No user-facing changes, only internal changes.

7.120.4-alpha.0

fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)

Commits

0469cab release: 7.120.4
0077b5b meta(changelog): Update changelog for 7.120.4 (#17210)
125d870 Merge branch 'release/7.120.4-alpha.1' into v7
a55701f release: 7.120.4-alpha.1
a42e7e7 meta(changelog): Update changelog for 7.120.4-alpha.1 (#17205)
347da0a ci(v7/craft): Remove commit-on-git-repository for deno (#17201)
9412e75 test(v7/metrics): Delete metrics test (#17202)
1852e61 meta(changelog): Update changelog for 7.120.4-alpha.0 (#17198)
cb499a6 fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)
bc8bbb6 ci(v7): Bump to ubuntu-24.04 (#17083)
Additional commits viewable in compare view

Updates @sentry/react from 7.120.3 to 7.120.4

Release notes

Sourced from @sentry/react's releases.

7.120.4

fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)

7.120.4-alpha.1

No user-facing changes, only internal changes.

Changelog

Sourced from @sentry/react's changelog.

7.120.4

fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)

7.120.4-alpha.1

No user-facing changes, only internal changes.

7.120.4-alpha.0

fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)

Commits

0469cab release: 7.120.4
0077b5b meta(changelog): Update changelog for 7.120.4 (#17210)
125d870 Merge branch 'release/7.120.4-alpha.1' into v7
a55701f release: 7.120.4-alpha.1
a42e7e7 meta(changelog): Update changelog for 7.120.4-alpha.1 (#17205)
347da0a ci(v7/craft): Remove commit-on-git-repository for deno (#17201)
9412e75 test(v7/metrics): Delete metrics test (#17202)
1852e61 meta(changelog): Update changelog for 7.120.4-alpha.0 (#17198)
cb499a6 fix(v7/cdn): Stop using Object.assign to be ES5 compatible (#17080)
bc8bbb6 ci(v7): Bump to ubuntu-24.04 (#17083)
Additional commits viewable in compare view

Updates @tanstack/react-query from 5.75.5 to 5.89.0

Release notes

Sourced from @tanstack/react-query's releases.

v5.89.0

Version 5.89.0 - 9/16/25, 8:27 AM

Changes

Feat

query-core: add context to mutationfn & mutation callbacks (#9615) (a2151d2) by Josh

Chore

deps: update marocchino/sticky-pull-request-comment digest to a071bc9 (#9627) (0e99327) by renovate[bot]

Packages

@tanstack/eslint-plugin-query@5.89.0

@tanstack/query-core@5.89.0

@tanstack/react-query@5.89.0

@tanstack/solid-query@5.89.0

@tanstack/svelte-query@5.89.0

@tanstack/vue-query@5.89.0

@tanstack/angular-query-experimental@5.89.0

@tanstack/query-async-storage-persister@5.89.0

@tanstack/query-broadcast-client-experimental@5.89.0

@tanstack/query-persist-client-core@5.89.0

@tanstack/query-sync-storage-persister@5.89.0

@tanstack/react-query-devtools@5.89.0

@tanstack/react-query-persist-client@5.89.0

@tanstack/react-query-next-experimental@5.89.0

@tanstack/solid-query-devtools@5.89.0

@tanstack/solid-query-persist-client@5.89.0

@tanstack/svelte-query-devtools@5.89.0

@tanstack/svelte-query-persist-client@5.89.0

@tanstack/vue-query-devtools@5.89.0

v5.88.0

Version 5.88.0 - 9/15/25, 10:12 PM

Changes

Feat

angular-query: move devtools to conditional sub-paths (#9270) (e75a5f9) by Arnoud

Packages

@tanstack/angular-query-experimental@5.88.0

v5.87.5

Version 5.87.5 - 9/15/25, 12:35 AM

... (truncated)

Commits

2a00fb6 release: v5.89.0
a2151d2 feat(query-core): add context to mutationfn & mutation callbacks (#9615)
230435d release: v5.87.4
19445a0 fix(query-core): infinite re-renders in useQueries (#9639)
bc2c87f release: v5.87.1
b43af57 release: v5.87.0
1599bb4 release: v5.86.0
43049c5 test(react-query/useMutationState): clarify assertions and improve code forma...
7306474 chore(tsconfig.json): simplify 'include' patterns by consolidating file exten...
0a35234 release: v5.85.9
Additional commits viewable in compare view

Updates next from 15.5.2 to 15.5.3

Release notes

Sourced from next's releases.

v15.5.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

fix: validation return types of pages API routes (#83069)

fix: relative paths in dev in validator.ts (#83073)

fix: remove satisfies keyword from type validation to preserve old TS compatibility (#83071)

Credits

Huge thanks to @bgub for helping!

Commits

07d1cbc v15.5.3
db56d77 [backport] fix: validation return types of pages API routes (#83069) (#83580)
7a80623 [backport] fix: relative paths in dev in validator.ts (#83073) (#83190)
fddaeb8 [backport] fix: remove satisfies keyword from type validation to preserve o...
See full diff in compare view

Updates rpc-websockets from 7.11.0 to 7.11.2

Commits

See full diff in compare view

Updates webauthn-p256 from 0.0.2 to 0.0.10

Commits

b034904 chore: version packages (#23)
54bd0dc chore: changeset
6dcfca9 chore: format
6f07991 feat: adds raw credential to return of sign function (#22)
b54286c chore: format
d5352d0 chore: version packages (#19)
11ee43e chore: changeset
dadad7b chore: format
c376c45 feat: add userVerifcation argument to sign function (#18)
89f24f2 chore: format
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 7 updates Bumps the lab-third-parties group with 7 updates in the /apps/laboratory directory: | Package | From | To | | --- | --- | --- | | [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) | `2.10.7` | `2.10.9` | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `7.120.3` | `7.120.4` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `7.120.3` | `7.120.4` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.75.5` | `5.89.0` | | [next](https://github.com/vercel/next.js) | `15.5.2` | `15.5.3` | | [rpc-websockets](https://github.com/elpheria/rpc-websockets) | `7.11.0` | `7.11.2` | | [webauthn-p256](https://github.com/wevm/webauthn-p256) | `0.0.2` | `0.0.10` | Updates `@chakra-ui/react` from 2.10.7 to 2.10.9 - [Release notes](https://github.com/chakra-ui/chakra-ui/releases) - [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/[email protected]/packages/react) Updates `@sentry/browser` from 7.120.3 to 7.120.4 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.4/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.120.3...7.120.4) Updates `@sentry/react` from 7.120.3 to 7.120.4 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.4/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.120.3...7.120.4) Updates `@tanstack/react-query` from 5.75.5 to 5.89.0 - [Release notes](https://github.com/TanStack/query/releases) - [Commits](https://github.com/TanStack/query/commits/v5.89.0/packages/react-query) Updates `next` from 15.5.2 to 15.5.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.5.2...v15.5.3) Updates `rpc-websockets` from 7.11.0 to 7.11.2 - [Release notes](https://github.com/elpheria/rpc-websockets/releases) - [Commits](https://github.com/elpheria/rpc-websockets/commits/v7.11.2) Updates `webauthn-p256` from 0.0.2 to 0.0.10 - [Release notes](https://github.com/wevm/webauthn-p256/releases) - [Commits](https://github.com/wevm/webauthn-p256/compare/[email protected]@0.0.10) --- updated-dependencies: - dependency-name: "@chakra-ui/react" dependency-version: 2.10.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: lab-third-parties - dependency-name: "@sentry/browser" dependency-version: 7.120.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: lab-third-parties - dependency-name: "@sentry/react" dependency-version: 7.120.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: lab-third-parties - dependency-name: "@tanstack/react-query" dependency-version: 5.89.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: lab-third-parties - dependency-name: next dependency-version: 15.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: lab-third-parties - dependency-name: rpc-websockets dependency-version: 7.11.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: lab-third-parties - dependency-name: webauthn-p256 dependency-version: 0.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: lab-third-parties ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-09-18T11:19:21Z

Labels

The following labels could not be found: chore: update third party dependencies for AppKit Lab. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2025-09-18T11:19:25Z

Deployment failed with the following error:

Too many requests - try again in 3 minutes (more than 120, code: "api-deployments-flood-pro").

Learn More: https://vercel.com/docs/limits#rate-limits

changeset-bot · 2025-09-18T11:19:25Z

⚠️ No Changeset found

Latest commit: bbf576d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2025-09-18T11:20:13Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	process@0.11.10
	stream-browserify@3.0.0
	clsx@2.1.1
	buffer@6.0.3
	classnames@2.5.1
	eventemitter3@5.0.1
	globals@13.24.0
	semver@7.7.2
	dayjs@1.11.13
	prettier@3.5.3
	dotenv@16.4.7

View full report

socket-security · 2025-09-18T11:20:15Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		`[email protected]` has Obfuscated code. Confidence: 0.94 Location: Package overview From: pnpm-lock.yaml → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the lab-third-parties group across 1 directory with 7 updates #5056

chore(deps): bump the lab-third-parties group across 1 directory with 7 updates #5056

Uh oh!

dependabot bot commented on behalf of github Sep 18, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 18, 2025

Uh oh!

vercel bot commented Sep 18, 2025

Uh oh!

changeset-bot bot commented Sep 18, 2025

Uh oh!

socket-security bot commented Sep 18, 2025

Uh oh!

socket-security bot commented Sep 18, 2025

Uh oh!

Uh oh!

chore(deps): bump the lab-third-parties group across 1 directory with 7 updates #5056

Are you sure you want to change the base?

chore(deps): bump the lab-third-parties group across 1 directory with 7 updates #5056

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 18, 2025

7.120.4

7.120.4-alpha.1

7.120.4

7.120.4-alpha.1

7.120.4-alpha.0

7.120.4

7.120.4-alpha.1

7.120.4

7.120.4-alpha.1

7.120.4-alpha.0

v5.89.0

Changes

Feat

Chore

Packages

v5.88.0

Changes

Feat

Packages

v5.87.5

v15.5.3

Core Changes

Credits

Uh oh!

dependabot bot commented on behalf of github Sep 18, 2025

Labels

Uh oh!

vercel bot commented Sep 18, 2025

Uh oh!

changeset-bot bot commented Sep 18, 2025

⚠️ No Changeset found

Uh oh!

socket-security bot commented Sep 18, 2025

Uh oh!

socket-security bot commented Sep 18, 2025

Uh oh!

Uh oh!