chore(deps)(deps): bump the production-dependencies group with 7 updates #557

dependabot · 2026-02-09T02:21:55Z

Bumps the production-dependencies group with 7 updates:

Package	From	To
lucide-react	`0.562.0`	`0.563.0`
msw	`2.12.7`	`2.12.9`
hono	`4.11.4`	`4.11.9`
fumadocs-core	`16.4.7`	`16.5.2`
fumadocs-mdx	`14.2.5`	`14.2.7`
fumadocs-ui	`16.4.7`	`16.5.2`
react-resizable-panels	`4.6.1`	`4.6.2`

Updates lucide-react from 0.562.0 to 0.563.0

Release notes

Sourced from lucide-react's releases.

Version 0.563.0

What's Changed

aria-hidden is by default added to icons components in all packages. This was already added to lucide-react before. Making icons accessible, you can add an aria-label or a title. See docs about accessibility.

All changes

chore(dev): Enable ligatures in font build configuration by @dcxo in lucide-icons/lucide#3876

chore(repo): add Android to brand stopwords by @karsa-mistmere in lucide-icons/lucide#3895

fix(site): add missing titles and a title template by @taimar in lucide-icons/lucide#3920

fix(site): unify and improve the styling of input fields by @taimar in lucide-icons/lucide#3919

fix(icons): changed star-off icon by @jguddas in lucide-icons/lucide#3952

fix(icons): changed tickets-plane icon by @jguddas in lucide-icons/lucide#3928

fix(icons): changed monitor-off icon by @jguddas in lucide-icons/lucide#3962

fix(icons): changed lasso icon by @jguddas in lucide-icons/lucide#3961

fix(icons): changed cloud-off icon by @jguddas in lucide-icons/lucide#3942

docs(site): added lucide-web-components third-party package by @midesweb in lucide-icons/lucide#3948

chore(deps-dev): bump preact from 10.27.2 to 10.27.3 by @dependabot[bot] in lucide-icons/lucide#3955

feat(icon): add globe-x icon with metadata by @Muhammad-Aqib-Bashir in lucide-icons/lucide#3827

fix(icons): changed waypoints icon by @karsa-mistmere in lucide-icons/lucide#3990

fix(icons): changed bookmark icon by @jguddas in lucide-icons/lucide#2906

fix(icons): changed message-square-dashed icon by @jguddas in lucide-icons/lucide#3959

fix(icons): changed cloudy icon by @jguddas in lucide-icons/lucide#3966

fix(github-actions): resolved spelling mistake in gh issue close command by @jguddas in lucide-icons/lucide#4000

Update LICENSE by @alxgraphy in lucide-icons/lucide#4009

feat(packages): Added aria-hidden fallback for decorative icons to all packages by @ericfennis in lucide-icons/lucide#3604

chore(deps): bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in lucide-icons/lucide#4020

chore(deps): bump lodash-es from 4.17.21 to 4.17.23 by @dependabot[bot] in lucide-icons/lucide#4019

Suggest anchoring to a specific lucide version when using a cdn by @drago1520 in lucide-icons/lucide#3727

feat(docs): upgraded backers block by @karsa-mistmere in lucide-icons/lucide#4014

fix(site): hide native search input clear "X" icon by @epifaniofrancisco in lucide-icons/lucide#3933

feat(icons): added printer-x icon by @lt25106 in lucide-icons/lucide#3941

New Contributors

@dcxo made their first contribution in lucide-icons/lucide#3876

@midesweb made their first contribution in lucide-icons/lucide#3948

@alxgraphy made their first contribution in lucide-icons/lucide#4009

@drago1520 made their first contribution in lucide-icons/lucide#3727

@lt25106 made their first contribution in lucide-icons/lucide#3941

Full Changelog: lucide-icons/lucide@0.562.0...0.563.0

Commits

67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
See full diff in compare view

Updates msw from 2.12.7 to 2.12.9

Release notes

Sourced from msw's releases.

v2.12.9 (2026-02-06)

Bug Fixes

ws: support relative urls in ws.link (#2661) (2f1d23c1c4392638a7dfbc95d00ede6062aeae6c) @kettanaito

v2.12.8 (2026-02-03)

Bug Fixes

update @mswjs/interceptors to fix a memory leak (#2659) (e5e905f60c4ad8dd621e720cde26390c84104362) @kettanaito

update rettime (#2657) (3a7b4510138bc6e7ab5078f53e623d6a25cfd9ac) @kettanaito

Commits

4859e41 chore(release): v2.12.9
2f1d23c fix(ws): support relative urls in ws.link (#2661)
9a82137 chore(release): v2.12.8
d2dd270 chore: fetch correct depth for release
4cfccff chore: update pnpm version everywhere
4de516b chore: set pnpm to 9.15.0 in package.json
7538501 chore: split release job into two (#2660)
9886892 chore: update @ossjs/release
e5e905f fix: update @mswjs/interceptors to fix a memory leak (#2659)
3a7b451 fix: update rettime (#2657)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for msw since your current version.

Updates hono from 4.11.4 to 4.11.9

Release notes

Sourced from hono's releases.

v4.11.9

What's Changed

fix(url): ignore fragment identifiers in getPath() by @sano-suguru in honojs/hono#4627

fix: determine if rendered or not by node.vC[0] instead of referring to node.pP by @usualoma in honojs/hono#4663

Full Changelog: honojs/hono@v4.11.8...v4.11.9

v4.11.8

What's Changed

fix(jsx): preserve context when using await before html helper by @kaigritun in honojs/hono#4662

fix(bearer-auth): make auth-scheme case-insensitive by @bytaesu in honojs/hono#4659

New Contributors

@kaigritun made their first contribution in honojs/hono#4662

Full Changelog: honojs/hono@v4.11.7...v4.11.8

v4.11.7

Security Release

This release includes security fixes for multiple vulnerabilities in Hono and related middleware. We recommend upgrading if you are using any of the affected components.

Components

IP Restriction Middleware

Fixed an IPv4 address validation bypass that could allow IP-based access control to be bypassed under certain configurations.

Cache Middleware

Fixed an issue where responses marked with Cache-Control: private or no-store could be cached, potentially leading to information disclosure on some runtimes.

Serve Static Middleware (Cloudflare Workers adapter)

Fixed an issue that could allow unintended access to internal asset keys when serving static files with user-controlled paths.

hono/jsx ErrorBoundary

Fixed a reflected Cross-Site Scripting (XSS) issue in the ErrorBoundary component that could occur when untrusted strings were rendered without proper escaping.

Recommendation

Users are encouraged to upgrade to this release, especially if they:

Use IP Restriction Middleware

Use Cache Middleware on Deno, Bun, or Node.js

Use Serve Static Middleware with user-controlled paths on Cloudflare Workers

Render untrusted data inside ErrorBoundary components

... (truncated)

Commits

69ad885 4.11.9
3d536ff fix: determine if rendered or not by node.vC[0] instead of referring to `no...
0c1d4c7 fix(url): ignore fragment identifiers in getPath() (#4627)
5ca5c3e 4.11.8
3aa2f9a fix(bearer-auth): make auth-scheme case-insensitive (#4659)
cea7b7b fix(jsx): preserve context when using await before html helper (#4662)
f7d272a 4.11.7
2cf6004 Merge commit from fork
cf9a78d Merge commit from fork
edbf6ee Merge commit from fork
Additional commits viewable in compare view

Updates fumadocs-core from 16.4.7 to 16.5.2

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.5.0

Minor Changes

9ba1250: Support Universal Shiki configuration

fumadocs-core@16.4.11

Patch Changes

a75a84d: fix duplicated transformer execution for fallback trees

fumadocs-core@16.4.10

Patch Changes

099fde7: [Page Tree] Extract index page from folder

6fd7e63: handle circular reference in page tree

fumadocs-core@16.4.9

Patch Changes

48dd0c2: fix incorrect page tree output

Commits

See full diff in compare view

Updates fumadocs-mdx from 14.2.5 to 14.2.7

Commits

See full diff in compare view

Updates fumadocs-ui from 16.4.7 to 16.5.2

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.5.0

Minor Changes

9ba1250: Support Universal Shiki configuration

Patch Changes

Updated dependencies [85cc22f]

Updated dependencies [9ba1250]

@fumadocs/ui@16.5.0

fumadocs-core@16.5.0

fumadocs-ui@16.4.11

Patch Changes

Updated dependencies [a75a84d]

fumadocs-core@16.4.11

@fumadocs/ui@16.4.11

fumadocs-ui@16.4.10

Patch Changes

430a5f1: support on on docs layout

Updated dependencies [099fde7]

Updated dependencies [6fd7e63]

fumadocs-core@16.4.10

@fumadocs/ui@16.4.10

fumadocs-ui@16.4.9

Patch Changes

Updated dependencies [48dd0c2]

fumadocs-core@16.4.9

@fumadocs/ui@16.4.9

Commits

See full diff in compare view

Updates react-resizable-panels from 4.6.1 to 4.6.2

Release notes

Sourced from react-resizable-panels's releases.

4.6.2

660: Group guards against layouts with mis-ordered Panel id keys

Changelog

Sourced from react-resizable-panels's changelog.

4.6.2

660: Group guards against layouts with mis-ordered Panel id keys

Commits

b4ece6f 4.6.1 -> 4.6.2
cabb73b Group guards against layouts with mis-ordered Panel id keys (#660)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

vercel · 2026-02-09T02:22:00Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectstack-studio	Ready	Preview, Comment	Feb 9, 2026 0:22am
spec	Ready	Preview, Comment	Feb 9, 2026 0:22am

Bumps the production-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.562.0` | `0.563.0` | | [msw](https://github.com/mswjs/msw) | `2.12.7` | `2.12.9` | | [hono](https://github.com/honojs/hono) | `4.11.4` | `4.11.9` | | [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.4.7` | `16.5.2` | | [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `14.2.5` | `14.2.7` | | [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.4.7` | `16.5.2` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.6.1` | `4.6.2` | Updates `lucide-react` from 0.562.0 to 0.563.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.563.0/packages/lucide-react) Updates `msw` from 2.12.7 to 2.12.9 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.12.7...v2.12.9) Updates `hono` from 4.11.4 to 4.11.9 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.11.4...v4.11.9) Updates `fumadocs-core` from 16.4.7 to 16.5.2 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/commits) Updates `fumadocs-mdx` from 14.2.5 to 14.2.7 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/commits) Updates `fumadocs-ui` from 16.4.7 to 16.5.2 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/commits) Updates `react-resizable-panels` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.6.1...4.6.2) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 0.563.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: msw dependency-version: 2.12.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.11.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-core dependency-version: 16.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: fumadocs-mdx dependency-version: 14.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-ui dependency-version: 16.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-resizable-panels dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 9, 2026

github-actions bot added documentation Improvements or additions to documentation size/s labels Feb 9, 2026

vercel bot deployed to Preview – spec February 9, 2026 02:24 View deployment

vercel bot had a problem deploying to Preview – objectstack-studio February 9, 2026 02:24 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-e85c1ba047 branch 2 times, most recently from 2f20178 to f31bb8a Compare February 9, 2026 03:51

vercel bot deployed to Preview – spec February 9, 2026 03:54 View deployment

vercel bot deployed to Preview – objectstack-studio February 9, 2026 03:55 View deployment

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-e85c1ba047 branch from f31bb8a to daf7507 Compare February 9, 2026 04:12

vercel bot deployed to Preview – spec February 9, 2026 04:14 View deployment

vercel bot deployed to Preview – objectstack-studio February 9, 2026 04:15 View deployment

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-e85c1ba047 branch 3 times, most recently from 057d0e2 to 28fe478 Compare February 9, 2026 06:44

vercel bot deployed to Preview – spec February 9, 2026 07:01 View deployment

vercel bot deployed to Preview – objectstack-studio February 9, 2026 07:02 View deployment

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-e85c1ba047 branch from 28fe478 to 1dc3508 Compare February 9, 2026 11:53

vercel bot deployed to Preview – objectstack-studio February 9, 2026 12:04 View deployment

vercel bot deployed to Preview – spec February 9, 2026 12:07 View deployment

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-e85c1ba047 branch from 1dc3508 to dbcf059 Compare February 9, 2026 12:09

vercel bot deployed to Preview – spec February 9, 2026 12:21 View deployment

vercel bot deployed to Preview – objectstack-studio February 9, 2026 12:22 View deployment

hotlong merged commit 510d26e into main Feb 9, 2026
14 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-e85c1ba047 branch February 9, 2026 14:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps): bump the production-dependencies group with 7 updates #557

chore(deps)(deps): bump the production-dependencies group with 7 updates #557

Uh oh!

dependabot bot commented on behalf of github Feb 9, 2026 •

edited

Loading

Uh oh!

vercel bot commented Feb 9, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps)(deps): bump the production-dependencies group with 7 updates #557

chore(deps)(deps): bump the production-dependencies group with 7 updates #557

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 0.563.0

What's Changed

All changes

New Contributors

v2.12.9 (2026-02-06)

Bug Fixes

v2.12.8 (2026-02-03)

Bug Fixes

v4.11.9

What's Changed

v4.11.8

What's Changed

New Contributors

v4.11.7

Security Release

Components

IP Restriction Middleware

Cache Middleware

Serve Static Middleware (Cloudflare Workers adapter)

hono/jsx ErrorBoundary

Recommendation

fumadocs-core@16.5.0

Minor Changes

fumadocs-core@16.4.11

Patch Changes

fumadocs-core@16.4.10

Patch Changes

fumadocs-core@16.4.9

Patch Changes

fumadocs-ui@16.5.0

Minor Changes

Patch Changes

fumadocs-ui@16.4.11

Patch Changes

fumadocs-ui@16.4.10

Patch Changes

fumadocs-ui@16.4.9

Patch Changes

4.6.2

4.6.2

Uh oh!

vercel bot commented Feb 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Feb 9, 2026 •

edited

Loading

hono/jsx `ErrorBoundary`

vercel bot commented Feb 9, 2026 •

edited

Loading