deps: bump the dependencies-minor group across 1 directory with 3 updates #319

dependabot · 2025-07-01T06:50:45Z

Bumps the dependencies-minor group with 3 updates in the / directory: lucide-react, react-hook-form and @playwright/test.

Updates lucide-react from 0.517.0 to 0.525.0

Release notes

Sourced from lucide-react's releases.

Version 0.525.0

What's Changed

fix(icons): Changed megaphone icon by @jamiemlaw in lucide-icons/lucide#2448

fix(icons): arcified shrub icon by @jguddas in lucide-icons/lucide#2292

fix(icons): changed sun-moon icon by @zishankadri in lucide-icons/lucide#3328

fix(icons): changed flag icon by @jamiemlaw in lucide-icons/lucide#3370

feat(icons): added tool-case icon by @AlexNaskida in lucide-icons/lucide#3333

New Contributors

@zishankadri made their first contribution in lucide-icons/lucide#3328

@AlexNaskida made their first contribution in lucide-icons/lucide#3333

Full Changelog: lucide-icons/lucide@0.524.0...0.525.0

Version 0.524.0

What's Changed

docs(packages/lucide-static): update docs for better clarity by @karsa-mistmere in lucide-icons/lucide#3225

fix(icons): changed dessert icon by @jguddas in lucide-icons/lucide#3362

fix(icons): changed ligature icon by @jamiemlaw in lucide-icons/lucide#3369

fix(icons): Updates to clock-related icons by @jamiemlaw in lucide-icons/lucide#2538

feat(icons): added vector-square icon by @chessurisme in lucide-icons/lucide#2531

Full Changelog: lucide-icons/lucide@0.523.0...0.524.0

Version 0.523.0

What's Changed

feat(icons): added bottle-wine icon by @jguddas in lucide-icons/lucide#3265

Full Changelog: lucide-icons/lucide@0.522.0...0.523.0

Version 0.522.0

What's Changed

fix(icons): changed shopping-bag icon by @jguddas in lucide-icons/lucide#2483

feat(icons): add line-squiggle icon by @chessurisme in lucide-icons/lucide#2393

Full Changelog: lucide-icons/lucide@0.521.0...0.522.0

Version 0.521.0

What's Changed

fix(icons): ensure shaft overlaps arrowhead in circle-arrow-left and circle-arrow-right by @cstayyab in lucide-icons/lucide#3269

feat(icons): added squircle-dashed icon by @aramsoneson in lucide-icons/lucide#3262

docs(design-guide): added bad examples for 2px rule by @jguddas in lucide-icons/lucide#2879

New Contributors

@cstayyab made their first contribution in lucide-icons/lucide#3269

@aramsoneson made their first contribution in lucide-icons/lucide#3262

... (truncated)

Commits

3e644fd chore(scripts): Refactor scripts to typescript (#3316)
See full diff in compare view

Updates react-hook-form from 7.58.1 to 7.59.0

Release notes

Sourced from react-hook-form's releases.

Version 7.59.0

🪱 feat: support deep equality checking with circular references (#12914) 🐞 fix #12900 issue with formData reference clone (#12906) 🐞 fix #12873 issue with undefined value for submit data (#12905) 🐞 fix case when useWatch accept object variable param (#12897) 🐞 fix: typo in UseFormSubscribe and missing event type for callback data in subscribe (#12904) Revert "⌨️ rename to UseFormResetFieldOptions for type consistency" (#12907)

thanks to @aspirisen @n8pjl @SKOLZ @pushys & @candymask0712

Commits

6116a68 7.59.0
9fdbe26 🪱 feat: support deep equality checking with circular references (#12914)
e84a9dd Revert "⌨️ rename to UseFormResetFieldOptions for type consistency" (#12907)
5b74123 🐞 fix #12900 issue with formData reference clone (#12906)
e297014 🐞 fix #12873 issue with undefined value for submit data (#12905)
6befe89 ❤️ chore: updated GraphCMS sponsor url to match the current brand name 'Hygra...
bbd92eb 📝 chore: update readme and remove funding.yml
c4e2d7c 🐞 fix: typo in UseFormSubscribe and missing event type for callback data in...
c9d3156 🐞 fix case when useWatch accept object variable param (#12897)
See full diff in compare view

Updates @playwright/test from 1.53.1 to 1.53.2

Release notes

Sourced from @playwright/test's releases.

v1.53.2

Highlights

microsoft/playwright#36317 - [Regression]: Merging pre-1.53 blob reports loses attachments microsoft/playwright#36357 - [Regression (Chromium)]: CDP missing trailing slash microsoft/playwright#36292 - [Bug (MSEdge)]: Edge fails to launch when using msRelaunchNoCompatLayer

Browser Versions

Chromium 138.0.7204.23

Mozilla Firefox 139.0

WebKit 18.5

This version was also tested against the following stable channels:

Google Chrome 137

Microsoft Edge 137

Commits

8c38de4 chore: mark v1.53.2 (#36502)
50d76d7 (#36462): fix(chromium): fix compatibility with Edge msRelaunchNoCompatLayer ...
48be646 cherry-pick(#36443): fix(blob): correctly type pre-1.53 onTestEnd event for a...
dc15556 cherry-pick(#36377): chore: follow-up to connectOverCDP fetch logic
4d0938c cherry-pick(#36357): fix: adding trialing slash detection logic back in urlTo...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the dependencies-minor group with 3 updates in the / directory: [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react), [react-hook-form](https://github.com/react-hook-form/react-hook-form) and [@playwright/test](https://github.com/microsoft/playwright). Updates `lucide-react` from 0.517.0 to 0.525.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.525.0/packages/lucide-react) Updates `react-hook-form` from 7.58.1 to 7.59.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.58.1...v7.59.0) Updates `@playwright/test` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.53.1...v1.53.2) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 0.525.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor - dependency-name: react-hook-form dependency-version: 7.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor - dependency-name: "@playwright/test" dependency-version: 1.53.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies-minor ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2025-07-01T06:50:48Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
arcjet-js-example	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jul 1, 2025 6:51am

socket-security · 2025-07-01T06:51:12Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@playwright/test@1.53.1 ⏵ 1.53.2
lucide-react@0.517.0 ⏵ 0.525.0	⁺¹	⁺¹	⁺¹
react-hook-form@7.58.1 ⏵ 7.59.0	⁺¹	⁺¹	⁺²

View full report

socket-security · 2025-07-01T06:51:14Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click for details)
Warn		`playwright@1.53.2` has a License Policy Violation. License: CC-BY-4.0 (package/ThirdPartyNotices.txt) License: CC-BY-4.0 (package/ThirdPartyNotices.txt) License: CC-BY-4.0 (package/ThirdPartyNotices.txt) License: CC-BY-4.0 (package/ThirdPartyNotices.txt) License: CC-BY-4.0 (package/ThirdPartyNotices.txt) From: package-lock.json → `npm/@playwright/test@1.53.2` → `npm/playwright@1.53.2` ℹ Read more on: This package \| This alert \| What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/playwright@1.53.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2025-07-03T03:46:54Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2025

dependabot bot requested a review from a team as a code owner July 1, 2025 06:50

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2025

vercel bot deployed to Preview July 1, 2025 06:51 View deployment

dependabot bot closed this Jul 3, 2025

dependabot bot deleted the dependabot/npm_and_yarn/dependencies-minor-1ecc7e17d8 branch July 3, 2025 03:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the dependencies-minor group across 1 directory with 3 updates #319

deps: bump the dependencies-minor group across 1 directory with 3 updates #319

Uh oh!

dependabot bot commented on behalf of github Jul 1, 2025 •

edited

Loading

Uh oh!

vercel bot commented Jul 1, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Jul 1, 2025

Uh oh!

socket-security bot commented Jul 1, 2025

Uh oh!

dependabot bot commented on behalf of github Jul 3, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

deps: bump the dependencies-minor group across 1 directory with 3 updates #319

deps: bump the dependencies-minor group across 1 directory with 3 updates #319

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 0.525.0

What's Changed

New Contributors

Version 0.524.0

What's Changed

Version 0.523.0

What's Changed

Version 0.522.0

What's Changed

Version 0.521.0

What's Changed

New Contributors

Version 7.59.0

v1.53.2

Highlights

Browser Versions

Uh oh!

vercel bot commented Jul 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Jul 1, 2025

Uh oh!

socket-security bot commented Jul 1, 2025

Uh oh!

dependabot bot commented on behalf of github Jul 3, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jul 1, 2025 •

edited

Loading

vercel bot commented Jul 1, 2025 •

edited

Loading